last executing test programs: 12.614866705s ago: executing program 3 (id=16355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) 12.324029958s ago: executing program 3 (id=16359): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, 0x0) 11.979131171s ago: executing program 3 (id=16366): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, 0x0, 0x0) 11.72424815s ago: executing program 3 (id=16370): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000720ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 11.446165185s ago: executing program 3 (id=16371): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 6.527832231s ago: executing program 4 (id=16409): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES8], 0xfd, 0x443c, &(0x7f0000008940)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FL3nJm+SRPKOmaVmpJbEthdJCxaAQ42aYtgNUpx3STo0LFnVH4srEhXFBNHHXFenCLf4JblziyiiJLNyYmBBrZuZOmXs7E0bSaYV8Pgk9vefXPZ3v3HPPXVxOnKjcWFzNLa7mCsu58vy11ZO5D8qltaViiPfIfp+fznQjTmK/fy6ePvvWlZMhfLPw3YOtra2tUNUbWhpp+v3XX27NN6cNcaZNtd/Wve2Wd0MIx3aMq6onhPDO1yFEIYTxJG8iSftDCEdCvezKrY+v5nZpNHfvF0/lH83e3hw9MbNxZ7P93x6F8Hnp3y9fX/r5fz2j37+4S6cHAAAAAAAAAAAAAAAAAOAZN3Xp4uU3h0fCvSj0bkQ739edStJ278du7Zr/dv+PBQAAAAAAAAAAAAAAAAAAgL+ox+//56KjLd7/n0zSsTbtt17v/hjpnuk3Lk6eGR5J9n+Pmkp++LG53sPxnjDYYt/37P7v45n+W+//Hu3a+F+J0ucdCFE8lDqO46GhEL5MNn4/Hh2MS+XVykvXymvLC7s2jGdWOv713ftT0Uk29O80/hOZ/ru///+/dnybqsdXd+8r9lxLx7+nbb2vPoo6iv/pTLu9iD9PLx3/3lpef3OFsfoEUI3/J71Pjv9kpv9uxf9ICCEXVceaS80A1TVMNb/deoW0dPz/VstLTZ3JB9nu+v8tE/8zmf73cv5PblW14/XsjYiW0vH/ey2vr170Uz15fP0Pxk++/s9m+t+P+391/Ovu/x1Jx/9APbM3VaX2SXY6/09l+u9W/C/HyTiPRKlvwEZUz2/3/9WRlo5/347yxvPVw/G4o/XfuUz7HfGPQlee/xrnbTz/Nab/F6L68x+tpePf37Zep9f/dKZdt+f/sdr6j6eVjv/BWl567TxQ+9lp/Gcy/Xcr/rVVSV8j/o/nk98P1PO/sP7rSDr+/6hnxs011ms/a+u/6Mnr//OZ/vdq/Ze6c8UhrMfdPevzIh3/Q23rVeP/bQf3/wuZdt2PfwjD1vpPLR3/w23r1a7/vpbxT117s5l23Y7//7vZOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAzYCJJB0IUD6WO43hoKITTyfHxcDCaKyzk50rl+fdXQ5hM8nPhaHS9VJ4rlPKLy+WFYr5QKpXnQziTlB8LfdFqqVzJLxVunt3uqz+6USysVOaKhUoIYSrJ/0843OhrbrGyVLgZQji3XfbPuLxy80ZhOb+wuPLa8PDwcJjeHsNgVPywUlyu1M9eLw1hZrvtQNQ0uFrx+e2xHIreK6+tLBdKtfwLTW1K5flCqanNbFL2aRiMKitry/OFSjFfKl9vnG8/jSXp5PSlty9dGNlRfjWqpxN7OywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qR7o69+FkLorR/FIYRclPwSJf9S7t4vnso/mr29OXpiZuPO5oNWdQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiDHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//2flIX0=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) 4.416089891s ago: executing program 4 (id=16427): prlimit64(0x0, 0xd, &(0x7f0000000580)={0x3, 0xfffffffffffffffb}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) 4.234131764s ago: executing program 2 (id=16429): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003700)={0x1c, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}, [@nested={0x7, 0x130, 0x0, 0x1, [@generic="97cf56"]}]}, 0x1c}}, 0x0) 3.9026506s ago: executing program 2 (id=16432): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a000001072414"], 0x0) 3.318867808s ago: executing program 4 (id=16438): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x1, &(0x7f00000001c0)) 3.018681547s ago: executing program 1 (id=16441): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002340), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002380)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x40000) 2.963533558s ago: executing program 4 (id=16442): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea0020904"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x10, &(0x7f0000000100)={0x20, 0x14, 0x1, '_'}, 0x0, 0x0}) 2.671770679s ago: executing program 1 (id=16445): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000280)={0x3}) 2.503567732s ago: executing program 1 (id=16448): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf2502"], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) 2.234886753s ago: executing program 1 (id=16451): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001"], 0x74}}, 0x0) 2.162687567s ago: executing program 2 (id=16452): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 1.83049558s ago: executing program 0 (id=16454): r0 = fsopen(&(0x7f0000000100)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 1.711790596s ago: executing program 1 (id=16455): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1.654798546s ago: executing program 0 (id=16456): r0 = syz_io_uring_setup(0x369e, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAKE={0x34, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x5}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.454249039s ago: executing program 5 (id=16457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.380368686s ago: executing program 0 (id=16458): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/52) 1.186428839s ago: executing program 5 (id=16459): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xff}, 0x1c) bind$l2tp6(r0, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20) 1.023704349s ago: executing program 5 (id=16460): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x3, 0x2, 0x0, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="130000004200816a"], 0x14}}, 0x0) 995.071798ms ago: executing program 0 (id=16461): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 819.50228ms ago: executing program 4 (id=16462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r0, 0x8910, 0x2) 816.234376ms ago: executing program 2 (id=16463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 804.220654ms ago: executing program 5 (id=16464): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000000d0a0103050000000900020073797a32000000000800044000000000090001"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 751.94392ms ago: executing program 3 (id=16465): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x423ff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0) 608.149093ms ago: executing program 0 (id=16466): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000007}) 471.109215ms ago: executing program 2 (id=16467): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) 406.878927ms ago: executing program 5 (id=16468): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r0], 0x68}}, 0x0) 399.273146ms ago: executing program 1 (id=16469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b201020201940524"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0) 237.767719ms ago: executing program 0 (id=16470): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, '\x00', 0x8, 0x33, 0x0, @local, @local, {[@routing={0x3a, 0x0, 0x1, 0x7}]}}}}}, 0x0) 230.681848ms ago: executing program 2 (id=16471): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 199.915942ms ago: executing program 4 (id=16472): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) 0s ago: executing program 5 (id=16473): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)={0x5, {{0xa, 0x4e20, 0x1, @mcast1, 0x5}}, 0x1}, 0x90) kernel console output (not intermixed with test programs): switch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 1355.937209][T25748] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1355.952205][T23276] MPI: mpi too large (107144 bits) [ 1356.133419][T25748] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1356.170778][T25748] usb 2-1: config index 0 descriptor too short (expected 198, got 134) [ 1356.201041][T25748] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.232713][T25748] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1356.277260][T25748] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1356.283240][T23292] netlink: 'syz.5.14610': attribute type 1 has an invalid length. [ 1356.308350][T23292] netlink: 756 bytes leftover after parsing attributes in process `syz.5.14610'. [ 1356.320560][T25748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.350140][T25748] usb 2-1: Product: syz [ 1356.369851][T25748] usb 2-1: Manufacturer: syz [ 1356.388638][T25748] usb 2-1: SerialNumber: syz [ 1356.430882][T25748] usb 2-1: 0:1 : does not exist [ 1356.680985][T23312] nftables ruleset with unbound chain [ 1356.871604][T25748] usb 2-1: unit 0 not found! [ 1356.902213][T23313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.977920][T23313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.141063][T25748] usb 2-1: USB disconnect, device number 86 [ 1357.354897][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1357.448817][T23313] veth1_macvtap: entered promiscuous mode [ 1357.503267][T23313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1357.518902][T23313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1357.540270][T23313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1357.586894][T23313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1357.665960][T23313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1357.790808][T23364] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2198483648 out of range (51000000..2150000000) [ 1357.821093][T23313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1357.847074][T23313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1357.971124][ T1351] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.992180][ T1351] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.020387][ T1351] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.126372][ T1351] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.151420][ T1345] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1358.164923][ T1345] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1358.178398][ T6015] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1358.592978][T23391] loop2: detected capacity change from 0 to 2048 [ 1358.644977][T23391] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1358.702870][T23397] loop4: detected capacity change from 0 to 512 [ 1358.744365][T23397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1358.793402][T23391] UDF-fs: unknown compression code (0) [ 1358.815262][T23397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1358.823376][T23391] UDF-fs: unknown compression code (0) [ 1358.968097][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1358.977859][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1359.020664][ T6037] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.224108][ T6015] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1359.304697][T25748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1359.356590][T23428] netlink: 'syz.1.14647': attribute type 2 has an invalid length. [ 1359.421494][T23433] netlink: 'syz.2.14646': attribute type 8 has an invalid length. [ 1359.479689][T23425] loop5: detected capacity change from 0 to 4096 [ 1359.583252][T23440] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1359.761427][T23444] ALSA: mixer_oss: invalid OSS volume '' [ 1359.790852][T23452] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14653'. [ 1359.840598][T23452] netlink: 'syz.1.14653': attribute type 1 has an invalid length. [ 1360.078660][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1360.085194][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1360.340350][T23462] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1360.369971][T23462] bond5 (unregistering): Released all slaves [ 1360.495196][ T6015] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1360.669797][ T6015] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1360.699369][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.743013][ T6015] usb 3-1: config 0 descriptor?? [ 1360.755986][T23567] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1360.790494][ T6015] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1360.818469][T23564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1360.867242][T23564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1361.229655][ T6015] gp8psk: usb in 138 operation failed. [ 1361.257218][ T6015] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1361.302103][T23587] xt_bpf: check failed: parse error [ 1361.310393][ T6015] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1361.353625][ T6015] usb 3-1: USB disconnect, device number 102 [ 1361.582566][T23601] netlink: 768 bytes leftover after parsing attributes in process `syz.5.14675'. [ 1361.641949][T23609] cgroup: name respecified [ 1361.900232][T23623] loop4: detected capacity change from 0 to 1024 [ 1361.926406][T27422] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1362.071621][T23634] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14685'. [ 1362.107681][T27422] usb 4-1: Using ep0 maxpacket: 32 [ 1362.127658][T27422] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7 [ 1362.174303][T27422] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1362.186944][T23638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14687'. [ 1362.192617][T27422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.241787][T27422] usb 4-1: Product: syz [ 1362.257860][T27422] usb 4-1: Manufacturer: syz [ 1362.275364][T27422] usb 4-1: SerialNumber: syz [ 1362.385473][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1362.574877][T27422] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1362.613439][T27422] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1362.800298][T27422] usb 4-1: USB disconnect, device number 100 [ 1363.028161][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1363.424907][T27337] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1363.513214][T23725] overlayfs: cannot append lower layer [ 1363.637659][T27337] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1363.673198][T27337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.724039][T27337] usb 1-1: config 0 descriptor?? [ 1363.755676][T27337] cp210x 1-1:0.0: cp210x converter detected [ 1364.202475][T27337] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1364.228601][T27337] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1364.277259][T27337] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1364.311543][T27337] usb 1-1: USB disconnect, device number 94 [ 1364.366700][T27337] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1364.399267][T27337] cp210x 1-1:0.0: device disconnected [ 1364.458529][T27419] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1364.649955][T27419] usb 5-1: Using ep0 maxpacket: 32 [ 1364.676714][T27419] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1364.726708][T27419] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1364.760860][T27419] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1364.797659][T27419] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1364.813846][T27419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.832761][T27419] usb 5-1: Product: syz [ 1364.847986][T27419] usb 5-1: Manufacturer: syz [ 1364.858802][T27419] usb 5-1: SerialNumber: syz [ 1364.881425][T23760] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1365.010222][T23802] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1365.068516][T23802] bond4 (unregistering): Released all slaves [ 1365.166694][T27419] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1365.198446][T27419] usb 5-1: MIDIStreaming interface descriptor not found [ 1365.368031][T23881] loop1: detected capacity change from 0 to 4096 [ 1365.412527][T23881] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1365.423645][T27419] usb 5-1: USB disconnect, device number 104 [ 1365.481365][T23907] netlink: 'syz.0.14732': attribute type 5 has an invalid length. [ 1365.605839][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1365.771097][ T6250] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1365.963915][ T6250] usb 4-1: Using ep0 maxpacket: 8 [ 1365.997226][ T6250] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1366.030166][ T6250] usb 4-1: config 2 has no interface number 0 [ 1366.057004][ T6250] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1366.104619][ T6250] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1366.142670][ T6250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.161612][ T6250] usb 4-1: Product: syz [ 1366.174020][ T6250] usb 4-1: Manufacturer: syz [ 1366.187331][ T6250] usb 4-1: SerialNumber: syz [ 1366.288745][T23952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14742'. [ 1366.707122][ T6250] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 1366.744293][T22529] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1366.758144][ T6250] usb 4-1: USB disconnect, device number 101 [ 1366.955459][T22529] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1366.978561][T22529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.999009][T22529] usb 5-1: Product: syz [ 1367.022635][T22529] usb 5-1: Manufacturer: syz [ 1367.039935][T22529] usb 5-1: SerialNumber: syz [ 1367.075895][T22529] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1367.115010][T27422] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1367.309698][T25748] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1367.491000][T25748] usb 1-1: Using ep0 maxpacket: 8 [ 1367.513605][T25748] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.553261][T25748] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=a1.8c [ 1367.596697][T25748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.652110][T25748] usb 1-1: config 0 descriptor?? [ 1367.798903][T25748] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1368.659819][T27419] usb 5-1: USB disconnect, device number 105 [ 1368.673519][T27422] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1368.691016][T25748] gspca_stv06xx: st6422 sensor detected [ 1368.696865][T27422] ath9k_htc: Failed to initialize the device [ 1368.710296][T27419] usb 5-1: ath9k_htc: USB layer deinitialized [ 1369.202798][T25748] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 1369.245981][T25748] usb 1-1: USB disconnect, device number 95 [ 1370.064049][T24111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14784'. [ 1370.318800][T24123] AppArmor: change_hat: Invalid input '0' [ 1370.788290][T24155] loop3: detected capacity change from 0 to 256 [ 1370.832749][T24159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14800'. [ 1370.879515][T24155] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1370.929808][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1370.940300][T27422] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1371.121478][T27422] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1371.132331][T24168] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1371.153833][T27422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.163054][T27422] usb 6-1: Product: syz [ 1371.168535][T27422] usb 6-1: Manufacturer: syz [ 1371.173874][T27422] usb 6-1: SerialNumber: syz [ 1371.189629][T27422] usb 6-1: config 0 descriptor?? [ 1371.212723][T27422] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1371.248710][T27422] dvb-usb: bulk message failed: -22 (4/0) [ 1371.278627][T27422] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1371.322473][T27422] dvb-usb: bulk message failed: -22 (5/0) [ 1371.348320][T27422] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1371.423353][T27422] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1371.452772][T24191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1371.533995][T27422] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 1371.621461][T27422] usb 6-1: USB disconnect, device number 104 [ 1372.579327][T24254] wlan0 speed is unknown, defaulting to 1000 [ 1372.595181][T24254] wlan0 speed is unknown, defaulting to 1000 [ 1372.657009][T24254] wlan0 speed is unknown, defaulting to 1000 [ 1372.680453][T24254] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1372.739878][T24254] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1372.773112][T24262] tmpfs: Bad value for 'nr_inodes' [ 1372.807937][T24254] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1372.857760][T24254] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1373.207242][T24254] wlan0 speed is unknown, defaulting to 1000 [ 1373.261266][T24254] wlan0 speed is unknown, defaulting to 1000 [ 1373.345574][T24254] wlan0 speed is unknown, defaulting to 1000 [ 1373.382691][T24254] wlan0 speed is unknown, defaulting to 1000 [ 1373.427324][T24254] wlan0 speed is unknown, defaulting to 1000 [ 1373.491803][T24303] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1373.564177][T24254] wlan0 speed is unknown, defaulting to 1000 [ 1373.582805][T27422] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1373.630185][T27422] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1373.666247][T24311] loop3: detected capacity change from 0 to 64 [ 1373.668437][T27422] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1373.707191][T27422] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1373.729713][T27422] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1373.752408][T27422] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1373.819822][T27422] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1373.837480][T27422] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1373.854928][T24320] loop2: detected capacity change from 0 to 256 [ 1373.857389][T27422] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1373.908764][T27422] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 1374.131718][T27422] hid-generic 0006:0008:0008.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 1374.309778][T24343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1374.800262][T24349] fido_id[24349]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1375.213682][T27422] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1375.410950][T27422] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1375.423916][T24392] trusted_key: encrypted_key: master key parameter is missing [ 1375.452254][T27422] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 1375.470768][T27422] usb 5-1: config 114 has no interface number 0 [ 1375.503662][T27422] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1375.546928][T27422] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1375.580788][T27422] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1375.623991][T27422] usb 5-1: config 114 interface 240 has no altsetting 0 [ 1375.654006][T27422] usb 5-1: string descriptor 0 read error: -22 [ 1375.672394][T27422] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1375.701742][T27422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.752006][T24373] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1375.768865][T27337] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1375.770097][T24373] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1375.815997][T24350] loop2: detected capacity change from 0 to 32768 [ 1375.822161][T27422] ir_usb 5-1:114.240: IR Dongle converter detected [ 1375.985052][T27337] usb 4-1: Using ep0 maxpacket: 32 [ 1376.016563][T27337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1376.048432][T27337] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1376.097764][T27337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1376.145648][T27337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1376.154710][T27422] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 1376.189162][T27337] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1376.236520][T27337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.277886][T27337] usb 4-1: Product: syz [ 1376.298186][T27337] usb 4-1: Manufacturer: syz [ 1376.320242][T27337] usb 4-1: SerialNumber: syz [ 1376.383785][T27337] usb 4-1: config 0 descriptor?? [ 1376.433155][T27337] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input108 [ 1376.465781][T27422] usb 5-1: USB disconnect, device number 106 [ 1376.530498][T27422] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1376.571681][T27422] ir_usb 5-1:114.240: device disconnected [ 1376.781195][T22529] usb 4-1: USB disconnect, device number 102 [ 1377.900709][T24519] loop4: detected capacity change from 0 to 256 [ 1377.946818][T24519] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1378.362596][T24482] loop5: detected capacity change from 0 to 32768 [ 1378.415180][T24482] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1378.531482][T24561] netlink: zone id is out of range [ 1378.562252][T24482] XFS (loop5): Ending clean mount [ 1378.735492][ T6053] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1380.473573][T24650] loop0: detected capacity change from 0 to 256 [ 1380.495754][T24657] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1380.622242][T24650] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1380.929547][T24674] loop2: detected capacity change from 0 to 2048 [ 1380.990127][T24674] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1381.462617][T24700] netlink: ct family unspecified [ 1381.508000][T24700] openvswitch: netlink: Actions may not be safe on all matching packets [ 1382.289830][T24752] block nbd0: not configured, cannot reconfigure [ 1382.808038][T24782] loop0: detected capacity change from 0 to 256 [ 1382.856023][T24782] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1382.943957][T24790] netlink: zone id is out of range [ 1383.064141][ T1351] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1383.199500][T24798] loop5: detected capacity change from 0 to 1764 [ 1383.224879][T24802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1383.320024][T24811] vivid-000: disconnect [ 1383.360229][T24808] vivid-000: reconnect [ 1383.429123][T24814] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1383.445246][T24798] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1383.922182][T24839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1383.993706][T24844] loop0: detected capacity change from 0 to 256 [ 1384.004650][T24844] exfat: Deprecated parameter 'namecase' [ 1384.034682][T24844] exfat: Deprecated parameter 'namecase' [ 1384.165113][T24844] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1384.577429][T24870] ubi0: attaching mtd0 [ 1384.584454][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14995'. [ 1384.728691][T24870] ubi0: scanning is finished [ 1384.757435][T24870] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1385.464878][T24870] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1386.448261][T24973] sit2: entered promiscuous mode [ 1386.652009][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1387.372332][T25023] block nbd0: NBD_DISCONNECT [ 1387.624005][T25042] comedi comedi3: dt2801: I/O base address or length out of range [ 1388.175468][T25073] netlink: 'syz.4.15061': attribute type 4 has an invalid length. [ 1388.214902][T25073] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15061'. [ 1388.300351][T25073] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1388.403332][T27422] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1388.434931][T25748] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1388.577632][T27422] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.601451][T27422] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1388.611136][T25748] usb 4-1: Using ep0 maxpacket: 8 [ 1388.635901][T25748] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1388.661945][T27422] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1388.672975][T25748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.684836][T27422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1388.693779][T25748] usb 4-1: Product: syz [ 1388.698621][T25748] usb 4-1: Manufacturer: syz [ 1388.709216][T27422] usb 2-1: SerialNumber: syz [ 1388.716526][T25748] usb 4-1: SerialNumber: syz [ 1388.753802][T27422] usb 2-1: 0:2 : does not exist [ 1389.210265][T25748] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1389.250959][T25748] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 1389.325576][T22529] usb 2-1: USB disconnect, device number 87 [ 1389.342968][T25748] usb 4-1: USB disconnect, device number 103 [ 1389.356248][T27337] wlan0 speed is unknown, defaulting to 1000 [ 1390.066666][T25195] xt_cgroup: path and classid specified [ 1390.236709][T25204] netlink: 'syz.5.15086': attribute type 4 has an invalid length. [ 1390.856704][T25248] No control pipe specified [ 1391.055964][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15096'. [ 1391.095450][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15096'. [ 1391.347328][T25275] loop5: detected capacity change from 0 to 2048 [ 1391.386595][T25275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1391.532337][T27337] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1391.734990][T27337] usb 4-1: Using ep0 maxpacket: 16 [ 1391.753911][T27337] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1391.787137][T27337] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1391.826322][T27337] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1391.857678][T27337] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1391.864809][T25300] ip6gre1: entered promiscuous mode [ 1391.889548][T27337] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1391.918725][T27337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.948541][T27337] usb 4-1: Product: syz [ 1391.962594][T27337] usb 4-1: Manufacturer: syz [ 1391.979116][T27337] usb 4-1: SerialNumber: syz [ 1392.017692][T27337] usb 4-1: config 0 descriptor?? [ 1392.307882][T25314] --map-set only usable from mangle table [ 1392.326714][T27337] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input110 [ 1392.371467][ T4969] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1392.423257][T25322] loop0: detected capacity change from 0 to 2048 [ 1392.434725][ T4969] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1392.476969][T25322] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1392.508237][ T4969] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1392.615884][T22529] usb 4-1: USB disconnect, device number 104 [ 1392.647003][ T4969] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1392.796909][T25286] loop1: detected capacity change from 0 to 32768 [ 1392.853593][T25286] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.15104 (25286) [ 1392.927258][T25286] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1392.967910][T25286] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 1392.983817][T25286] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1393.122463][T25286] BTRFS info (device loop1): rebuilding free space tree [ 1393.507225][T25286] BTRFS info (device loop1): disabling free space tree [ 1393.546952][T25286] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1393.620787][T25286] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1393.758809][T25404] netlink: 'syz.2.15129': attribute type 17 has an invalid length. [ 1393.805766][T25404] netlink: 148 bytes leftover after parsing attributes in process `syz.2.15129'. [ 1393.855435][T25286] BTRFS info (device loop1): setting nodatasum [ 1393.883424][T25286] BTRFS info (device loop1): allowing degraded mounts [ 1393.928321][T25286] BTRFS info (device loop1): turning on async discard [ 1393.931744][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15132'. [ 1393.955479][T25286] BTRFS info (device loop1): enabling disk space caching [ 1394.001103][T25286] BTRFS info (device loop1): force clearing of disk cache [ 1394.001259][T25413] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15132'. [ 1394.021232][T25286] BTRFS info (device loop1): force zlib compression, level 3 [ 1394.117830][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15132'. [ 1394.234315][T22529] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1394.263967][ T6026] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1394.416668][T22529] usb 6-1: Using ep0 maxpacket: 16 [ 1394.449841][T22529] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1394.490933][T22529] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1394.502659][T25435] netlink: 'syz.2.15139': attribute type 10 has an invalid length. [ 1394.567130][T22529] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1394.604639][T22529] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1394.633569][T25435] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1394.647488][T22529] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1394.706837][T22529] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1394.736966][T22529] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1394.784422][T22529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.865565][T22529] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1395.186029][T22529] scsi host1: usb-storage 6-1:1.0 [ 1395.436867][T22529] usb 6-1: USB disconnect, device number 105 [ 1395.708794][T25423] loop0: detected capacity change from 0 to 32768 [ 1396.340707][T25514] netlink: 'syz.4.15156': attribute type 9 has an invalid length. [ 1396.857060][T25545] netlink: 'syz.2.15167': attribute type 2 has an invalid length. [ 1396.889283][T25545] netlink: 'syz.2.15167': attribute type 1 has an invalid length. [ 1396.931124][T25545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15167'. [ 1397.142792][ T803] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1397.331518][ T803] usb 4-1: Using ep0 maxpacket: 8 [ 1397.355417][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.377724][ T803] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1397.388375][ T803] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1397.440025][ T803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1397.476216][ T803] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1397.513549][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.566391][ T803] usb 4-1: Product: syz [ 1397.575968][ T803] usb 4-1: Manufacturer: syz [ 1397.594103][ T803] usb 4-1: SerialNumber: syz [ 1397.637980][ T803] usb 4-1: config 0 descriptor?? [ 1397.685213][ T803] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1397.932148][ T803] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1397.968720][ T803] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1398.007734][ T803] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1398.246830][ T803] usb 4-1: USB disconnect, device number 105 [ 1398.987378][T25663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15199'. [ 1399.325831][T25686] netlink: 'syz.0.15205': attribute type 1 has an invalid length. [ 1399.358082][T25686] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15205'. [ 1400.457487][T25731] bond5 (unregistering): Released all slaves [ 1400.564707][ T30] audit: type=1326 audit(2000003578.201:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.4.15229" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1400.673412][ T30] audit: type=1326 audit(2000003578.201:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.4.15229" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1400.801701][ T30] audit: type=1326 audit(2000003578.238:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.4.15229" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1400.905456][ T30] audit: type=1326 audit(2000003578.238:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.4.15229" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1401.011608][ T30] audit: type=1326 audit(2000003578.238:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25795 comm="syz.4.15229" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1403.518691][T25955] bond6 (unregistering): Released all slaves [ 1403.525348][T26004] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15284'. [ 1403.553400][T26004] netlink: 'syz.4.15284': attribute type 1 has an invalid length. [ 1404.103046][ T803] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1404.316947][ T803] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 1404.316997][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.317035][ T803] usb 2-1: Product: syz [ 1404.317062][ T803] usb 2-1: Manufacturer: syz [ 1404.317090][ T803] usb 2-1: SerialNumber: syz [ 1404.333215][ T803] usb 2-1: config 0 descriptor?? [ 1404.596572][ T803] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 1404.831481][ T803] usb 2-1: USB disconnect, device number 88 [ 1405.384419][ T803] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1405.600028][ T803] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1405.638307][ T803] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1405.678636][ T803] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1405.716438][ T803] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1405.753960][ T803] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1405.769599][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1405.786701][ T803] usb 1-1: SerialNumber: syz [ 1405.840130][ T803] cdc_acm 1-1:1.0: invalid descriptor buffer length [ 1405.864610][ T803] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1405.899299][ T803] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 1405.918734][ T803] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 1406.197468][T22529] usb 1-1: USB disconnect, device number 96 [ 1406.350345][T26170] bond4 (unregistering): Released all slaves [ 1406.806383][ T6250] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1406.943925][T26285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15333'. [ 1406.995336][T26285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15333'. [ 1407.013524][ T6250] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1407.046132][ T6250] usb 5-1: config 1 has no interface number 0 [ 1407.075557][ T6250] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1407.115737][ T6250] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1407.144634][T26285] bond5: Removing last arp target with arp_interval on [ 1407.163041][T26285] bond5: entered allmulticast mode [ 1407.196879][ T6250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.214931][T26285] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1407.247224][ T6250] usb 5-1: Product: syz [ 1407.287762][ T6250] usb 5-1: Manufacturer: syz [ 1407.301949][ T6250] usb 5-1: SerialNumber: syz [ 1407.589914][ T6250] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 1407.668642][ T6250] usb 5-1: USB disconnect, device number 107 [ 1407.906742][ T803] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1407.914733][T26372] openvswitch: netlink: IP tunnel dst address not specified [ 1407.992574][T26375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1408.098868][ T803] usb 1-1: Using ep0 maxpacket: 16 [ 1408.135870][ T803] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1408.148591][ T803] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 1408.163418][ T803] usb 1-1: config 6 has no interface number 0 [ 1408.169087][T26383] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[6026] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[26383] [ 1408.181118][ T803] usb 1-1: config 6 interface 200 has no altsetting 0 [ 1408.218314][ T803] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=65.08 [ 1408.248593][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.283507][ T803] usb 1-1: Product: syz [ 1408.290282][ T803] usb 1-1: Manufacturer: syz [ 1408.295097][ T803] usb 1-1: SerialNumber: syz [ 1408.564350][ T803] bfusb 1-1:6.200: probe with driver bfusb failed with error -5 [ 1408.587173][ T803] usb 1-1: USB disconnect, device number 97 [ 1408.695423][ T6015] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1408.889972][ T6015] usb 5-1: config 0 has an invalid interface number: 252 but max is 0 [ 1408.915425][ T6015] usb 5-1: config 0 has no interface number 0 [ 1408.933501][ T6015] usb 5-1: config 0 interface 252 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1408.992587][ T6015] usb 5-1: config 0 interface 252 has no altsetting 0 [ 1409.017239][ T6015] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1409.037343][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.054406][T26437] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1409.055469][ T6015] usb 5-1: Product: syz [ 1409.081578][ T6015] usb 5-1: Manufacturer: syz [ 1409.102000][ T6015] usb 5-1: SerialNumber: syz [ 1409.115965][ T6015] usb 5-1: config 0 descriptor?? [ 1409.429790][T27422] usb 5-1: USB disconnect, device number 108 [ 1409.965170][T26487] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1410.233862][ T803] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1410.406719][ T803] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1410.432865][ T803] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1410.456701][ T803] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.479100][ T803] usb 6-1: config 220 has no interface number 2 [ 1410.497438][ T803] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1410.539732][ T803] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1410.561259][ T803] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1410.586049][ T803] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1410.623298][ T803] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1410.642439][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.666713][ T803] usb 6-1: Product: syz [ 1410.678430][ T803] usb 6-1: Manufacturer: syz [ 1410.689492][ T803] usb 6-1: SerialNumber: syz [ 1410.917374][ T6015] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1410.993463][ T803] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1411.003833][T27422] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1411.011789][ T803] uvcvideo 6-1:220.0: No valid video chain found. [ 1411.026449][ T803] usb 6-1: selecting invalid altsetting 0 [ 1411.073021][ T803] usb 6-1: selecting invalid altsetting 0 [ 1411.098570][ T6015] usb 2-1: Using ep0 maxpacket: 32 [ 1411.106500][ T803] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1411.121697][ T6015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 1411.139092][ T6015] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 1411.152232][ T803] usb 6-1: USB disconnect, device number 106 [ 1411.163638][ T6015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1411.182375][ T6015] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1411.193607][T27422] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1411.204040][ T6015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.242308][T27422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1411.245567][ T6015] usb 2-1: Product: syz [ 1411.292053][ T6015] usb 2-1: Manufacturer: syz [ 1411.292844][T27422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1411.307656][ T6015] usb 2-1: SerialNumber: syz [ 1411.342334][ T6015] usb 2-1: config 0 descriptor?? [ 1411.367472][T27422] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1411.382928][T27422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.415841][T27422] usb 1-1: Product: syz [ 1411.431667][T27422] usb 1-1: Manufacturer: syz [ 1411.450849][T27422] usb 1-1: SerialNumber: syz [ 1411.486924][T27422] usb 1-1: config 0 descriptor?? [ 1411.662943][T22529] usb 2-1: USB disconnect, device number 89 [ 1413.090019][T26577] syz.2.15400 (26577): drop_caches: 2 [ 1413.265520][T26644] ubi8: attaching mtd0 [ 1413.280728][T26644] ubi8 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 1415.490008][T27419] kernel write not supported for file /input/event2 (pid: 27419 comm: kworker/0:15) [ 1416.370665][T26772] loop2: detected capacity change from 0 to 256 [ 1417.049245][ T803] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1417.274930][ T803] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.291856][T26813] loop4: detected capacity change from 0 to 2048 [ 1417.326512][ T803] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1417.371965][T26813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1417.380078][ T803] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1417.410609][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1417.431831][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.480912][ T803] usb 6-1: Product: syz [ 1417.510603][ T803] usb 6-1: Manufacturer: syz [ 1417.692463][ T803] usb 6-1: SerialNumber: syz [ 1417.779677][ T803] usb 6-1: 0:2 : does not exist [ 1417.832169][ T803] usb 6-1: unit 9 not found! [ 1418.013458][ T803] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1418.063037][ T803] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4) [ 1418.090093][T26847] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1418.128709][ T803] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1418.363723][ T803] usb 6-1: USB disconnect, device number 107 [ 1418.591929][ T6512] udevd[6512]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1418.767224][T22529] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1418.934417][T22529] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1418.972391][T22529] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1419.002169][ T803] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1419.017603][T22529] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.068272][T22529] usb 5-1: config 220 has no interface number 2 [ 1419.084671][T22529] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1419.119456][T22529] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1419.137902][T22529] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1419.161002][T22529] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1419.186266][T22529] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1419.201476][T22529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.215529][ T803] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1419.235598][T22529] usb 5-1: Product: syz [ 1419.244735][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.256746][T22529] usb 5-1: Manufacturer: syz [ 1419.269704][ T803] usb 2-1: Product: syz [ 1419.269740][ T803] usb 2-1: Manufacturer: syz [ 1419.269770][ T803] usb 2-1: SerialNumber: syz [ 1419.277351][ T803] usb 2-1: config 0 descriptor?? [ 1419.280108][T22529] usb 5-1: SerialNumber: syz [ 1419.298221][ T803] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1419.574809][T22529] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1419.574968][T22529] uvcvideo 5-1:220.0: No valid video chain found. [ 1419.575041][T22529] usb 5-1: selecting invalid altsetting 0 [ 1419.637869][T22529] usb 5-1: selecting invalid altsetting 0 [ 1419.638012][T22529] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1419.669469][T22529] usb 5-1: USB disconnect, device number 109 [ 1419.756079][ T803] gspca_sunplus: reg_w_riv err -71 [ 1419.756187][ T803] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1419.793748][ T803] usb 2-1: USB disconnect, device number 90 [ 1420.343778][T27419] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1420.550947][T27419] usb 6-1: Using ep0 maxpacket: 8 [ 1420.551071][T26950] nvme_fabrics: missing parameter 'transport=%s' [ 1420.568200][T27419] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1420.570242][T27419] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 1420.593959][T26950] nvme_fabrics: missing parameter 'nqn=%s' [ 1420.600174][T27419] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.647765][T27419] usb 6-1: config 4 has no interface number 0 [ 1420.665053][T27419] usb 6-1: string descriptor 0 read error: -22 [ 1420.679489][T27419] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1420.721473][T27419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.800930][T27419] uvcvideo 6-1:4.147: Found multiple Units with ID 6 [ 1420.818782][T27419] uvcvideo 6-1:4.147: Found UVC 0.02 device (04f2:b746) [ 1420.844740][T27419] uvcvideo 6-1:4.147: No valid video chain found. [ 1421.103001][ T803] usb 6-1: USB disconnect, device number 108 [ 1421.342998][T27419] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1421.355437][T26997] loop1: detected capacity change from 0 to 2048 [ 1421.410485][T26997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1421.522718][T27419] usb 3-1: Using ep0 maxpacket: 8 [ 1421.548858][T27419] usb 3-1: config 162 has an invalid interface number: 218 but max is 1 [ 1421.581349][T27419] usb 3-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.632102][T27419] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 1421.675301][T27419] usb 3-1: config 162 has no interface number 0 [ 1421.711838][T27419] usb 3-1: config 162 interface 218 has no altsetting 0 [ 1421.755599][T27419] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 1421.789460][T27419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.815207][T27419] usb 3-1: Product: syz [ 1421.834470][T27419] usb 3-1: Manufacturer: syz [ 1421.858899][T27419] usb 3-1: SerialNumber: syz [ 1421.986907][T27020] loop3: detected capacity change from 0 to 1764 [ 1422.019903][T27020] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1422.255151][T27419] usb 3-1: USB disconnect, device number 103 [ 1422.886655][T27422] iguanair 1-1:0.0: failed to get version [ 1422.919365][T27422] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 1422.987368][T27422] usb 1-1: USB disconnect, device number 98 [ 1423.336410][T27102] loop1: detected capacity change from 0 to 256 [ 1423.361080][T27102] exfat: Deprecated parameter 'utf8' [ 1423.374597][T27102] exfat: Deprecated parameter 'namecase' [ 1423.393026][ T803] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1423.402506][T27102] exfat: Deprecated parameter 'namecase' [ 1423.412969][T27419] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1423.442832][T27102] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1423.541290][T27113] loop5: detected capacity change from 0 to 2048 [ 1423.595591][T27113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1423.613185][T27419] usb 3-1: Using ep0 maxpacket: 16 [ 1423.613994][ T803] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1423.640350][T27419] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1423.683693][T27419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.692183][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.719986][T27419] usb 3-1: Product: syz [ 1423.740768][T27419] usb 3-1: Manufacturer: syz [ 1423.749086][ T803] usb 4-1: config 0 descriptor?? [ 1423.762049][T27419] usb 3-1: SerialNumber: syz [ 1423.811646][T27419] usb 3-1: config 0 descriptor?? [ 1423.866619][T27419] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1423.873008][T27129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15544'. [ 1424.153392][T27142] netlink: 'syz.1.15548': attribute type 1 has an invalid length. [ 1424.162464][T27142] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15548'. [ 1424.257198][ T803] ath6kl: Failed to read usb control message: -71 [ 1424.283869][ T803] ath6kl: Unable to read the bmi data from the device: -71 [ 1424.316253][ T803] ath6kl: Unable to recv target info: -71 [ 1424.330621][T27419] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 1424.371187][T27419] usb 3-1: USB disconnect, device number 104 [ 1424.385886][ T803] ath6kl: Failed to init ath6kl core: -71 [ 1424.402936][ T803] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1424.423943][T22529] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1424.432102][T27422] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1424.479385][ T803] usb 4-1: USB disconnect, device number 106 [ 1424.624376][T22529] usb 6-1: too many configurations: 25, using maximum allowed: 8 [ 1424.640237][T27422] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1424.656949][T27422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.668241][T27422] usb 1-1: Product: syz [ 1424.681581][T27422] usb 1-1: Manufacturer: syz [ 1424.688030][T22529] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1424.699119][T27422] usb 1-1: SerialNumber: syz [ 1424.703838][T22529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.732247][T27422] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1424.743988][T22529] usb 6-1: config 0 descriptor?? [ 1424.784687][T27419] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1424.802892][T22529] pwc: Creative Labs Webcam Pro Ex detected. [ 1424.815245][T22529] pwc: Warning: more than 1 configuration available. [ 1424.847280][T11709] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1425.038229][T22529] pwc: Failed to set LED on/off time (-71) [ 1425.059287][T11709] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1425.082141][T22529] pwc: send_video_command error -71 [ 1425.101298][T11709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.111741][T22529] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1425.145609][T22529] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1425.155416][T11709] usb 5-1: Product: syz [ 1425.168642][T27202] loop1: detected capacity change from 0 to 64 [ 1425.175230][T11709] usb 5-1: Manufacturer: syz [ 1425.180254][T11709] usb 5-1: SerialNumber: syz [ 1425.203726][T22529] usb 6-1: USB disconnect, device number 109 [ 1425.227262][T11709] usb 5-1: config 0 descriptor?? [ 1425.273641][T11709] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1425.338067][T27202] Trying to free block not in datazone [ 1425.348553][ T803] usb 1-1: USB disconnect, device number 99 [ 1425.727983][T11709] gspca_sunplus: reg_w_riv err -71 [ 1425.746293][T11709] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1425.785693][T11709] usb 5-1: USB disconnect, device number 110 [ 1425.960961][T27419] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1425.999066][T27419] ath9k_htc: Failed to initialize the device [ 1426.024547][ T803] usb 1-1: ath9k_htc: USB layer deinitialized [ 1426.286110][T11709] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1426.484427][T11709] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1426.501399][T27277] loop0: detected capacity change from 0 to 1764 [ 1426.513264][T11709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.545730][T11709] usb 2-1: Product: syz [ 1426.560504][T11709] usb 2-1: Manufacturer: syz [ 1426.571406][T27277] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1426.579942][T11709] usb 2-1: SerialNumber: syz [ 1426.599584][T27294] netlink: 148 bytes leftover after parsing attributes in process `syz.4.15578'. [ 1426.645828][T27294] netlink: 56 bytes leftover after parsing attributes in process `syz.4.15578'. [ 1426.646391][T11709] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1426.665579][T27294] netlink: 'syz.4.15578': attribute type 1 has an invalid length. [ 1426.690650][T27419] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1426.700514][T27422] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1426.898766][T27422] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1426.932983][T27422] usb 4-1: config 0 has no interface number 0 [ 1426.950079][T27422] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1427.004884][T27422] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1427.062977][T27422] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1427.121367][T27298] loop2: detected capacity change from 0 to 8192 [ 1427.124798][T27422] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1427.155432][T27422] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1427.186136][T27422] usb 4-1: Product: syz [ 1427.201247][T27422] usb 4-1: SerialNumber: syz [ 1427.245445][ T803] usb 2-1: USB disconnect, device number 91 [ 1427.254853][T27422] usb 4-1: config 0 descriptor?? [ 1427.277197][T27422] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1427.315295][T27422] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input112 [ 1427.537705][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1427.774909][ T6015] usb 4-1: USB disconnect, device number 107 [ 1427.837405][T27419] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1427.873897][T27419] ath9k_htc: Failed to initialize the device [ 1427.875313][ T6015] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1427.888268][T27358] netlink: 'syz.0.15591': attribute type 1 has an invalid length. [ 1427.907553][T27358] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15591'. [ 1427.916308][ T803] usb 2-1: ath9k_htc: USB layer deinitialized [ 1428.148986][T27378] binder: 27377:27378 ioctl c0306201 0 returned -14 [ 1428.592233][T27398] netlink: 'syz.0.15602': attribute type 1 has an invalid length. [ 1428.631821][T27398] netlink: 'syz.0.15602': attribute type 3 has an invalid length. [ 1428.673770][T27398] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15602'. [ 1428.927738][T27416] binder: 27413:27416 ioctl c0306201 2000000001c0 returned -22 [ 1428.976980][T27423] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1429.021975][T27423] overlayfs: missing 'lowerdir' [ 1431.097278][T27531] bridge0: port 1(veth1) entered blocking state [ 1431.127889][T27531] bridge0: port 1(veth1) entered disabled state [ 1431.157520][T27531] veth1: entered allmulticast mode [ 1431.160720][T27524] loop1: detected capacity change from 0 to 4096 [ 1431.196880][T27531] veth1: entered promiscuous mode [ 1431.229662][T27531] bridge0: port 1(veth1) entered blocking state [ 1431.236200][T27531] bridge0: port 1(veth1) entered forwarding state [ 1431.270451][T27544] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1431.392043][ T6015] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1431.558261][T27552] dlm: no locking on control device [ 1431.610799][ T6015] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1431.630398][ T6015] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.640888][ T6015] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1431.652111][ T6015] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1431.663234][ T6015] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1431.676459][ T6015] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1431.686455][ T6015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.694935][ T6015] usb 6-1: Product: syz [ 1431.699277][ T6015] usb 6-1: Manufacturer: syz [ 1431.703974][ T6015] usb 6-1: SerialNumber: syz [ 1432.169522][ T6015] usb 6-1: USB disconnect, device number 110 [ 1432.284342][T27605] loop1: detected capacity change from 0 to 64 [ 1432.360247][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1432.462888][T27611] loop4: detected capacity change from 0 to 256 [ 1432.503246][T27611] exfat: Deprecated parameter 'utf8' [ 1432.514438][T27611] exfat: Deprecated parameter 'utf8' [ 1432.527818][T27611] exfat: Deprecated parameter 'utf8' [ 1432.544136][T27611] exfat: Deprecated parameter 'namecase' [ 1432.603099][T27611] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1433.065128][T27558] loop2: detected capacity change from 0 to 32768 [ 1433.165442][T27558] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1433.528176][T27558] XFS (loop2): Ending clean mount [ 1433.577533][T27669] netlink: 'syz.5.15668': attribute type 1 has an invalid length. [ 1433.604375][T27558] XFS (loop2): Quotacheck needed: Please wait. [ 1433.631060][T27669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15668'. [ 1434.058474][T27558] XFS (loop2): Quotacheck: Done. [ 1434.587613][ T6025] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1434.830637][T27724] deleting an unspecified loop device is not supported. [ 1435.224738][T27741] netlink: 'syz.3.15691': attribute type 41 has an invalid length. [ 1435.554334][T27753] loop1: detected capacity change from 0 to 64 [ 1435.636397][T27762] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1436.593097][T27815] xt_addrtype: ipv6 does not support BROADCAST matching [ 1436.629880][T27813] geneve3: entered promiscuous mode [ 1437.015921][T27833] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1437.374385][T27419] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1437.554642][T27419] usb 2-1: Using ep0 maxpacket: 8 [ 1437.560110][T27868] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1437.592729][T27419] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.627570][T27419] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1437.660110][T27419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1437.711536][T27419] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1437.736991][T27419] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1437.766052][T27419] usb 2-1: Product: syz [ 1437.780019][T27419] usb 2-1: Manufacturer: syz [ 1437.794226][T27419] usb 2-1: SerialNumber: syz [ 1437.829393][T27419] usb 2-1: config 0 descriptor?? [ 1437.994027][T27419] rc_core: IR keymap rc-imon-rsc not found [ 1438.022553][T27419] Registered IR keymap rc-empty [ 1438.075045][T27419] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1438.149063][T27419] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input113 [ 1438.225987][T27419] usb 2-1: USB disconnect, device number 92 [ 1438.702655][T27931] netlink: 'syz.3.15741': attribute type 7 has an invalid length. [ 1439.235161][ T6015] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1439.383445][T27419] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1439.444339][ T6015] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1439.491751][ T6015] usb 6-1: config 160 has an invalid interface number: 168 but max is 0 [ 1439.522796][ T6015] usb 6-1: config 160 has no interface number 0 [ 1439.546059][ T6015] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1439.574092][T27419] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1439.587289][T27985] openvswitch: netlink: Flow actions attr not present in new flow. [ 1439.600563][ T6015] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 1439.628500][T27419] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.633895][ T6015] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1439.649407][T27419] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1439.685585][ T6015] usb 6-1: config 160 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1439.693882][T27419] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1439.729104][T27419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.736892][ T6015] usb 6-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 1439.759647][T27419] usb 3-1: Product: syz [ 1439.776397][T27419] usb 3-1: Manufacturer: syz [ 1439.776909][ T6015] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1439.796997][T27419] usb 3-1: SerialNumber: syz [ 1439.821492][T11709] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1439.823577][ T6015] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 1439.861307][T27419] usb 3-1: selecting invalid altsetting 1 [ 1439.864250][ T6015] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 1439.878350][T27419] usb 3-1: unit 6 not found! [ 1439.896280][ T6015] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 1439.927607][ T6015] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 1439.951650][ T6015] usb 6-1: config 160 interface 168 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 1439.995923][ T6015] usb 6-1: config 160 interface 168 has no altsetting 0 [ 1440.016866][ T6015] usb 6-1: string descriptor 0 read error: -22 [ 1440.023602][T11709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.036211][ T6015] usb 6-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 1440.048717][T11709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1440.059653][ T6015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.102262][T11709] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1440.135443][T27419] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1440.136463][T27943] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1440.151773][T11709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.181031][T27419] usb 3-1: USB disconnect, device number 105 [ 1440.182709][T27943] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1440.199132][T11709] usb 2-1: config 0 descriptor?? [ 1440.242363][T27943] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1440.282089][T27943] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1440.317570][ T6015] io_edgeport 6-1:160.168: EPiC device converter detected [ 1440.342069][ T6015] usb 6-1: detected [ 1440.415739][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1440.637002][ T6015] usb 6-1: EPiC device converter now attached to ttyUSB0 [ 1440.684209][T11709] Bluetooth: Can't get version to change to load ram patch err [ 1440.702959][T11709] Bluetooth: Loading patch file failed [ 1440.718252][T11709] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 1440.741855][T11709] usb 2-1: USB disconnect, device number 93 [ 1441.075529][T11709] usb 6-1: USB disconnect, device number 111 [ 1441.075704][ C1] usb 6-1: edge_interrupt_callback - Error -19 submitting control urb [ 1441.213971][T11709] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 1441.263539][T11709] io_edgeport 6-1:160.168: device disconnected [ 1441.696541][T28103] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 1442.011150][T11709] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1442.207591][T11709] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.248360][T11709] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1442.284560][T11709] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1442.333671][T11709] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1442.370276][T11709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.440126][T11709] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1442.463486][T11709] usb 2-1: invalid MIDI in EP 0 [ 1442.888424][T11709] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1442.936029][T11709] usb 2-1: USB disconnect, device number 94 [ 1443.059245][ T6015] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1443.250320][ T6015] usb 1-1: Using ep0 maxpacket: 32 [ 1443.275436][ T6015] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1443.337822][ T6015] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1443.371779][ T6015] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1443.414945][ T6015] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1443.457197][ T6015] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1443.484316][ T6015] usb 1-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 1443.520414][ T6015] usb 1-1: Product: syz [ 1443.541538][ T6015] usb 1-1: Manufacturer: syz [ 1443.564363][ T6015] usb 1-1: SerialNumber: syz [ 1443.599897][T28178] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1443.650314][ T6015] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input114 [ 1443.838905][T27419] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1444.033336][T27419] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1444.071136][T27419] usb 6-1: config 0 has no interface number 0 [ 1444.112239][T27419] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1444.112450][ T6015] usb 1-1: USB disconnect, device number 100 [ 1444.155172][T28262] netlink: 'syz.4.15820': attribute type 1 has an invalid length. [ 1444.169992][T27419] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1444.204653][T27419] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1444.249666][T27419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.269525][T27419] usb 6-1: Product: syz [ 1444.280428][T27419] usb 6-1: Manufacturer: syz [ 1444.292120][ T6015] appletouch 1-1:1.0: input: appletouch disconnected [ 1444.296637][T27419] usb 6-1: SerialNumber: syz [ 1444.352805][T27419] usb 6-1: config 0 descriptor?? [ 1444.393994][T28228] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1444.420655][T27419] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1444.464869][T27419] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1444.794507][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1444.889028][ T6015] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1445.012080][T27337] usb 6-1: USB disconnect, device number 112 [ 1445.080259][ T6015] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.091420][T27337] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1445.115447][ T6015] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1445.131216][T27337] cyberjack 6-1:0.69: device disconnected [ 1445.154458][ T6015] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1445.198264][ T6015] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1445.218006][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.285506][ T6015] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1445.306448][ T6015] usb 5-1: invalid MIDI in EP 0 [ 1445.777380][ T6015] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1445.828942][ T6015] usb 5-1: USB disconnect, device number 111 [ 1445.840189][T28380] loop1: detected capacity change from 0 to 256 [ 1445.952611][T28393] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1445.970656][T28380] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1446.086316][T28380] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 1447.025300][T27419] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 1447.103565][ T30] audit: type=1326 audit(2000003621.771:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.3.15864" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c39de59 code=0x7ffc0000 [ 1447.196243][ T30] audit: type=1326 audit(2000003621.771:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.3.15864" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c39de59 code=0x7ffc0000 [ 1447.227474][T27419] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1447.260527][T27419] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.296812][T28460] loop0: detected capacity change from 0 to 16 [ 1447.305423][T27419] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1447.327631][ T30] audit: type=1326 audit(2000003621.780:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.3.15864" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f981c39de59 code=0x7ffc0000 [ 1447.335939][T28460] erofs (device loop0): mounted with root inode @ nid 36. [ 1447.362089][T27419] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 1447.381498][T27419] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1447.416492][T27419] usb 3-1: string descriptor 0 read error: -22 [ 1447.434174][T27419] usb 3-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40 [ 1447.464896][T27419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.474047][ T30] audit: type=1326 audit(2000003621.780:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.3.15864" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c39de59 code=0x7ffc0000 [ 1447.530114][T27419] usb 3-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8208); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1447.562408][T28475] netlink: 'syz.4.15870': attribute type 4 has an invalid length. [ 1447.575391][T27419] usb 3-1: Error initialising Clarett USB Mixer Driver: -22 [ 1447.815713][T27419] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1447.838879][T28495] openvswitch: netlink: IP tunnel TTL not specified. [ 1447.880818][T27419] usb 3-1: USB disconnect, device number 106 [ 1448.032500][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1448.329681][T28530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1448.377631][T28532] openvswitch: netlink: Message has 4 unknown bytes. [ 1448.429547][T28532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1449.045475][T28560] loop2: detected capacity change from 0 to 64 [ 1449.292899][ T1343] kworker/u8:5: attempt to access beyond end of device [ 1449.292899][ T1343] loop2: rw=1, sector=2320, nr_sectors = 1 limit=64 [ 1449.351623][ T1343] Buffer I/O error on dev loop2, logical block 2320, lost async page write [ 1449.392776][ T1343] kworker/u8:5: attempt to access beyond end of device [ 1449.392776][ T1343] loop2: rw=1, sector=2321, nr_sectors = 1 limit=64 [ 1449.410719][T28579] team0: entered promiscuous mode [ 1449.452532][T28579] team_slave_0: entered promiscuous mode [ 1449.452568][ T1343] Buffer I/O error on dev loop2, logical block 2321, lost async page write [ 1449.479252][T28579] team_slave_1: entered promiscuous mode [ 1449.517074][ T1343] kworker/u8:5: attempt to access beyond end of device [ 1449.517074][ T1343] loop2: rw=1, sector=2322, nr_sectors = 1 limit=64 [ 1449.578834][ T1343] Buffer I/O error on dev loop2, logical block 2322, lost async page write [ 1449.604103][ T1343] kworker/u8:5: attempt to access beyond end of device [ 1449.604103][ T1343] loop2: rw=1, sector=2323, nr_sectors = 1 limit=64 [ 1449.639829][ T1343] Buffer I/O error on dev loop2, logical block 2323, lost async page write [ 1449.689459][ T6333] kworker/u8:10: attempt to access beyond end of device [ 1449.689459][ T6333] loop2: rw=2049, sector=2320, nr_sectors = 1 limit=64 [ 1449.736427][ T6333] Buffer I/O error on dev loop2, logical block 2320, lost async page write [ 1449.772919][ T6333] kworker/u8:10: attempt to access beyond end of device [ 1449.772919][ T6333] loop2: rw=2049, sector=2321, nr_sectors = 1 limit=64 [ 1449.819318][ T6333] Buffer I/O error on dev loop2, logical block 2321, lost async page write [ 1449.853507][ T6333] kworker/u8:10: attempt to access beyond end of device [ 1449.853507][ T6333] loop2: rw=2049, sector=2322, nr_sectors = 1 limit=64 [ 1449.905816][ T6333] Buffer I/O error on dev loop2, logical block 2322, lost async page write [ 1449.944396][ T6333] kworker/u8:10: attempt to access beyond end of device [ 1449.944396][ T6333] loop2: rw=2049, sector=2323, nr_sectors = 1 limit=64 [ 1449.994117][ T6333] Buffer I/O error on dev loop2, logical block 2323, lost async page write [ 1450.840638][T28586] loop0: detected capacity change from 0 to 32768 [ 1450.900745][T28586] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1450.931858][T28659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15923'. [ 1451.356763][T28586] XFS (loop0): Ending clean mount [ 1451.422516][T28586] XFS (loop0): Quotacheck needed: Please wait. [ 1451.437499][T28689] netlink: 'syz.5.15928': attribute type 3 has an invalid length. [ 1451.511155][T28677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1451.664139][T28723] netlink: 'syz.3.15931': attribute type 1 has an invalid length. [ 1451.815292][T28586] XFS (loop0): Quotacheck: Done. [ 1451.920671][T28736] comedi comedi3: c6xdigio: I/O base address not correctly aligned [ 1452.187026][ T6024] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1453.411994][T22529] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1453.552942][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15962'. [ 1453.597304][T22529] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1453.632757][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15962'. [ 1453.652112][T22529] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1453.686240][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15962'. [ 1453.694461][T22529] usb 5-1: config 0 has no interface number 0 [ 1453.722775][T22529] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1453.749468][T22529] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1453.771915][T22529] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1453.789600][T22529] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1453.819065][T22529] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1453.819112][T22529] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1453.854283][T22529] usb 5-1: Product: syz [ 1453.858535][T22529] usb 5-1: SerialNumber: syz [ 1453.874222][T22529] usb 5-1: config 0 descriptor?? [ 1453.903602][ T6015] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1454.021015][T27419] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1454.097832][ T6015] usb 1-1: config 2 has an invalid interface number: 19 but max is 0 [ 1454.113776][ T6015] usb 1-1: config 2 has no interface number 0 [ 1454.129354][ T6015] usb 1-1: config 2 interface 19 has no altsetting 0 [ 1454.141738][T22529] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input116 [ 1454.159464][ T6015] usb 1-1: New USB device found, idVendor=05ac, idProduct=fdc3, bcdDevice=2f.a6 [ 1454.183996][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.202403][T27419] usb 3-1: Using ep0 maxpacket: 16 [ 1454.212160][ T6015] usb 1-1: Product: syz [ 1454.234038][ T6015] usb 1-1: Manufacturer: syz [ 1454.238453][T27419] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1454.255484][ T6015] usb 1-1: SerialNumber: syz [ 1454.273158][T27419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.316902][T27419] usb 3-1: config 0 descriptor?? [ 1454.336710][T27419] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1454.459408][T22529] usb 5-1: USB disconnect, device number 112 [ 1454.547655][ T6015] ipheth 1-1:2.19: Unable to find alternate settings interface [ 1454.625657][ T6015] usb 1-1: USB disconnect, device number 101 [ 1454.781982][T27419] gspca_sonixj: reg_r err -71 [ 1454.798774][T27419] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1454.837565][T27419] usb 3-1: USB disconnect, device number 107 [ 1455.679392][T28948] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.15988'. [ 1455.719824][T28948] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.15988'. [ 1456.596919][T27337] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1456.785897][T29007] netlink: 2056 bytes leftover after parsing attributes in process `syz.1.16006'. [ 1456.801286][T27337] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.838510][T27337] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1456.881295][T27337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.930635][T27337] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1458.041623][T29064] comedi comedi3: pcl818: I/O port conflict (0x100,16) [ 1458.103652][T27337] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1458.144861][T27337] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1458.179487][T27337] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1458.212316][T27337] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 1458.237225][T27337] usb 3-1: USB disconnect, device number 108 [ 1458.699564][T29105] autofs4:pid:29105:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 1458.722806][T29105] autofs4:pid:29105:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1458.875007][ T30] audit: type=1326 audit(2000003632.786:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29109 comm="syz.3.16037" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c39de59 code=0x7ffc0000 [ 1458.954319][ T30] audit: type=1326 audit(2000003632.795:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29109 comm="syz.3.16037" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c39de59 code=0x7ffc0000 [ 1459.056447][ T30] audit: type=1326 audit(2000003632.795:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29109 comm="syz.3.16037" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f981c39de59 code=0x7ffc0000 [ 1459.121882][ T30] audit: type=1326 audit(2000003632.795:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29109 comm="syz.3.16037" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c39de59 code=0x7ffc0000 [ 1459.188478][T29128] xt_hashlimit: overflow, rate too high: 0 [ 1459.203657][ T30] audit: type=1326 audit(2000003632.795:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29109 comm="syz.3.16037" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981c39de59 code=0x7ffc0000 [ 1459.310488][T27419] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1459.378087][T22529] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1459.480967][T27419] usb 5-1: Using ep0 maxpacket: 32 [ 1459.498187][T27419] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1459.521615][T27419] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1459.541825][T27419] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1459.554013][T22529] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1459.571439][T22529] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1459.585342][T27419] usb 5-1: Product: syz [ 1459.599662][T27419] usb 5-1: Manufacturer: syz [ 1459.604735][T22529] usb 3-1: config 0 has no interface number 0 [ 1459.620892][T27419] usb 5-1: SerialNumber: syz [ 1459.635839][T22529] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1459.661315][T27419] usb 5-1: config 0 descriptor?? [ 1459.673878][T27422] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1459.686958][T22529] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1459.702503][T29118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1459.718815][T22529] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1459.731713][T27419] hub 5-1:0.0: bad descriptor, ignoring hub [ 1459.750065][T27419] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1459.759515][T22529] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1459.788911][T22529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.828285][T22529] usb 3-1: config 0 descriptor?? [ 1459.836873][T29119] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1459.868414][T27422] usb 4-1: Using ep0 maxpacket: 16 [ 1459.888061][T27422] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1459.916109][T27422] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.928791][T27422] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1459.944666][T27422] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1459.988894][T27422] usb 4-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 1460.008279][T27422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.022523][T27422] usb 4-1: Product: syz [ 1460.028979][T27422] usb 4-1: Manufacturer: syz [ 1460.033697][T27422] usb 4-1: SerialNumber: syz [ 1460.057277][T27422] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 1460.073492][T27422] usb 4-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 1460.084289][T27422] usb 4-1: 1:1 : unsupported format bits 0xfffffffe [ 1460.091919][T27422] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1460.133187][T11709] usb 5-1: USB disconnect, device number 113 [ 1460.165004][T27419] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1460.176022][T27337] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1460.277163][T27422] usb 4-1: unit 3 not found! [ 1460.316564][T22529] usb 3-1: USB disconnect, device number 109 [ 1460.340699][T27419] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1460.356673][T27419] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1460.374625][T27337] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.389904][T27419] usb 2-1: config 0 has no interface number 0 [ 1460.404220][T27419] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1460.406847][T27337] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1460.422895][T27419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.436283][T27419] usb 2-1: Product: syz [ 1460.448263][T27337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1460.449722][T27419] usb 2-1: Manufacturer: syz [ 1460.470052][T27419] usb 2-1: SerialNumber: syz [ 1460.474856][T27337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1460.493277][T27422] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1460.500266][T27337] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1460.503605][T27419] usb 2-1: config 0 descriptor?? [ 1460.545608][T27337] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1460.562485][T27422] usb 4-1: USB disconnect, device number 108 [ 1460.586254][T27337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1460.624216][T27337] usb 1-1: Product: syz [ 1460.635509][T27337] usb 1-1: Manufacturer: syz [ 1460.641377][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.668502][T27337] usb 1-1: SerialNumber: syz [ 1460.681603][T27337] usb 1-1: config 0 descriptor?? [ 1460.824114][T29218] x_tables: unsorted underflow at hook 3 [ 1460.954887][T27337] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1460.977069][T27419] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1460.981592][T27337] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1460.995718][T27419] uvcvideo 2-1:0.64: No valid video chain found. [ 1461.036524][T27419] usb 2-1: USB disconnect, device number 95 [ 1461.187344][T27337] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1461.224805][T27337] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1461.263539][T27337] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 1461.321220][T27337] usb 1-1: USB disconnect, device number 102 [ 1461.589772][T28921] syz.5.15980 (28921): drop_caches: 3 [ 1461.833100][T27422] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1462.026910][T27422] usb 3-1: Using ep0 maxpacket: 32 [ 1462.045939][T27422] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1462.069170][T27422] usb 3-1: config 0 has no interface number 0 [ 1462.096897][T27422] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1462.130425][T27422] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1462.141701][T27337] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1462.174205][T27422] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1462.193758][T27422] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1462.220138][T27422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.245119][T27422] usb 3-1: Product: syz [ 1462.254212][T29245] loop3: detected capacity change from 0 to 32768 [ 1462.258305][T27422] usb 3-1: Manufacturer: syz [ 1462.285891][T27422] usb 3-1: SerialNumber: syz [ 1462.314933][T27422] usb 3-1: config 0 descriptor?? [ 1462.329849][T27337] usb 5-1: Using ep0 maxpacket: 16 [ 1462.344812][T29245] jfs_strtoUCS: char2uni returned -22. [ 1462.378684][T27337] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1462.398815][T29245] charset = cp1255, char = 0xfc [ 1462.409656][T27337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.435993][T27337] usb 5-1: Product: syz [ 1462.465226][T27337] usb 5-1: Manufacturer: syz [ 1462.484932][T27337] usb 5-1: SerialNumber: syz [ 1462.525756][T27337] usb 5-1: config 0 descriptor?? [ 1462.794592][T27337] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 1462.816192][T27422] appletouch 3-1:0.85: Failed to request geyser raw mode [ 1462.819888][T27337] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1462.850706][T27422] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1462.926790][T27422] usb 3-1: USB disconnect, device number 110 [ 1463.120108][T27337] usb 5-1: USB disconnect, device number 114 [ 1463.162117][T29338] netlink: 'syz.3.16076': attribute type 30 has an invalid length. [ 1463.190554][T29340] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1463.191625][T29338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16076'. [ 1463.351316][T29354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16078'. [ 1463.774615][T29391] xt_TCPMSS: Only works on TCP SYN packets [ 1463.931782][T29316] syz.1.16072 (29316): drop_caches: 3 [ 1464.993406][T29455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16101'. [ 1465.009705][T29455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16101'. [ 1465.191275][T27336] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1465.393455][T27336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1465.447637][T27336] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1465.482232][T27336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.521364][T27336] usb 5-1: Product: syz [ 1465.538125][T27336] usb 5-1: Manufacturer: syz [ 1465.554139][T27336] usb 5-1: SerialNumber: syz [ 1465.590005][T27336] usb 5-1: config 0 descriptor?? [ 1465.625831][T27336] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1465.712835][T29495] xt_TCPMSS: Only works on TCP SYN packets [ 1465.931992][T27336] usb 5-1: USB disconnect, device number 115 [ 1466.416276][ T6015] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1466.602628][ T6015] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1466.648518][ T6015] usb 3-1: config 0 has no interface number 0 [ 1466.696276][ T6015] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1466.761051][ T6015] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1466.818266][ T6015] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1466.851746][ T6015] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1466.882029][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.941141][ T6015] usb 3-1: config 0 descriptor?? [ 1466.974895][T29525] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1467.052614][ T6015] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input120 [ 1467.477273][T27419] usb 3-1: USB disconnect, device number 111 [ 1467.477313][ C1] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1467.677646][T27422] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1467.886726][T27422] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1467.936306][T27422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.981455][T27422] usb 4-1: config 0 descriptor?? [ 1467.996977][T27422] cp210x 4-1:0.0: cp210x converter detected [ 1468.073713][T29643] netlink: 'syz.4.16148': attribute type 12 has an invalid length. [ 1468.355574][T29656] netlink: 'syz.1.16153': attribute type 3 has an invalid length. [ 1468.389219][T29656] netlink: 'syz.1.16153': attribute type 1 has an invalid length. [ 1468.421264][T29656] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16153'. [ 1468.444929][T27422] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1468.459124][T29656] NCSI netlink: No device for ifindex 0 [ 1468.464927][T27422] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1468.473446][T27422] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1468.495097][T27422] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1468.551157][T27422] usb 4-1: USB disconnect, device number 109 [ 1468.621243][T27422] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1468.659438][T27422] cp210x 4-1:0.0: device disconnected [ 1469.034323][T29706] netlink: 'syz.5.16165': attribute type 1 has an invalid length. [ 1469.080080][T29708] netlink: 88 bytes leftover after parsing attributes in process `syz.1.16166'. [ 1469.594921][T29736] dlm: no locking on control device [ 1470.271517][T29785] dlm: plock device version mismatch: kernel (1.2.0), user (1.4194304.4294901762) [ 1470.671933][T29807] loop0: detected capacity change from 0 to 8 [ 1470.780069][T29816] kAFS: unable to lookup cell 'syz@' [ 1471.087012][T29868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16204'. [ 1471.121682][T29868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16204'. [ 1471.763369][T29905] loop5: detected capacity change from 0 to 64 [ 1471.802529][ T6015] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1471.823595][T27337] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1471.858829][T29905] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1472.020111][T27337] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1472.031373][ T6015] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1472.053355][T27337] usb 4-1: config 4 has an invalid interface number: 138 but max is 0 [ 1472.062015][ T6015] usb 5-1: config 0 has no interface number 0 [ 1472.074980][T27337] usb 4-1: config 4 has no interface number 0 [ 1472.081683][ T6015] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1472.095081][T27337] usb 4-1: config 4 interface 138 has no altsetting 0 [ 1472.095239][ T6015] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1472.095289][ T6015] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1472.095594][ T6015] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1472.095637][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.147755][ T6015] usb 5-1: config 0 descriptor?? [ 1472.155375][T29887] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1472.167304][T27337] usb 4-1: string descriptor 0 read error: -22 [ 1472.173674][T27337] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1472.190724][T27337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.243730][ T6015] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input122 [ 1472.461931][T27337] catc 4-1:4.138: Missing or invalid endpoints [ 1472.509482][T29947] netlink: 'syz.1.16226': attribute type 1 has an invalid length. [ 1472.687601][T27337] usb 5-1: USB disconnect, device number 116 [ 1472.693804][ C1] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1472.711016][ T6015] usb 4-1: USB disconnect, device number 110 [ 1472.810608][T29969] netlink: 'syz.0.16229': attribute type 4 has an invalid length. [ 1473.179950][T29994] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1473.543016][T22529] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1473.742939][T22529] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.787537][T22529] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1473.821345][T22529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.893254][T22529] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1474.664933][T27422] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1474.809870][T30094] Cannot find del_set index 4 as target [ 1474.857520][T27422] usb 4-1: Using ep0 maxpacket: 16 [ 1474.875980][T27422] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1474.904469][T27422] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1474.937428][T27422] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1474.978877][T27422] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1475.011889][T27422] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1475.037005][T27422] usb 4-1: config 0 has no interface number 0 [ 1475.059985][T27422] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1475.075425][T27422] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1475.091743][T27422] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1475.113315][T27422] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1475.146593][T27422] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1475.169703][T27422] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1475.185131][T27422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.226840][T27422] usb 4-1: Product: syz [ 1475.238311][T27422] usb 4-1: Manufacturer: syz [ 1475.248571][T22529] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1475.266027][T27422] usb 4-1: SerialNumber: syz [ 1475.272783][T22529] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1475.293717][T22529] stv0680 2-1:4.0: last error: 86, command = 0x78 [ 1475.298804][T30112] PKCS8: Unsupported PKCS#8 version [ 1475.301940][T27422] usb 4-1: config 0 descriptor?? [ 1475.336621][T22529] usb 2-1: USB disconnect, device number 96 [ 1475.599247][ T30] audit: type=1326 audit(2000003648.434:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30133 comm="syz.0.16273" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98c39de59 code=0x7ffc0000 [ 1475.633466][T30130] loop4: detected capacity change from 0 to 1764 [ 1475.678543][ T30] audit: type=1326 audit(2000003648.434:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30133 comm="syz.0.16273" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98c39de59 code=0x7ffc0000 [ 1475.759864][ T30] audit: type=1326 audit(2000003648.471:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30133 comm="syz.0.16273" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc98c39de59 code=0x7ffc0000 [ 1475.809011][ T30] audit: type=1326 audit(2000003648.471:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30133 comm="syz.0.16273" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98c39de59 code=0x7ffc0000 [ 1475.903475][T30150] netlink: 'syz.2.16276': attribute type 5 has an invalid length. [ 1475.942087][T27337] usb 4-1: USB disconnect, device number 111 [ 1476.191357][T30172] netlink: 'syz.4.16282': attribute type 4 has an invalid length. [ 1476.214473][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1476.227984][T30172] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16282'. [ 1476.268520][T30172] .`: renamed from bond0 (while UP) [ 1476.279466][T30178] netlink: 'syz.5.16283': attribute type 10 has an invalid length. [ 1477.085859][T30217] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1477.092442][T30217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1477.169385][T30217] vhci_hcd vhci_hcd.0: Device attached [ 1477.181102][T30222] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 1477.187654][T30222] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1477.229668][T30222] vhci_hcd vhci_hcd.0: Device attached [ 1477.286417][T30223] vhci_hcd: connection closed [ 1477.286539][T30218] vhci_hcd: connection closed [ 1477.289193][ T6333] vhci_hcd vhci_hcd.1: stop threads [ 1477.334215][ T6333] vhci_hcd vhci_hcd.1: release socket [ 1477.350001][ T6333] vhci_hcd vhci_hcd.1: disconnect device [ 1477.382544][ T6333] vhci_hcd vhci_hcd.1: stop threads [ 1477.398772][ T6333] vhci_hcd vhci_hcd.1: release socket [ 1477.413919][ T6333] vhci_hcd vhci_hcd.1: disconnect device [ 1477.443059][T27337] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1477.472612][T27337] usb 35-1: enqueue for inactive port 0 [ 1477.572575][T27337] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1477.754546][ T6015] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1477.936040][ T6015] usb 6-1: Using ep0 maxpacket: 16 [ 1477.961264][ T6015] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 1477.993004][T27422] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1478.001944][ T6015] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 1478.040541][ T6015] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1478.101074][ T6015] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1478.132549][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.183818][ T6015] usb 6-1: config 0 descriptor?? [ 1478.196492][T27422] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 1478.229871][ T6015] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input124 [ 1478.236896][T27422] usb 1-1: config 0 has no interface number 0 [ 1478.287057][T27422] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.311928][T27422] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1478.332128][T27422] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1478.344394][T27422] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1478.354048][T27422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.398385][T27422] usb 1-1: config 0 descriptor?? [ 1478.428941][T30254] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1478.440436][T30295] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1478.509329][T27422] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input125 [ 1478.533827][T27208] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1478.629344][T27422] usb 6-1: USB disconnect, device number 113 [ 1478.629372][ C1] pxrc 6-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1478.753980][T27208] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1478.800133][T27208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.847468][T27208] usb 3-1: Product: syz [ 1478.874467][T27208] usb 3-1: Manufacturer: syz [ 1478.901655][T27208] usb 3-1: SerialNumber: syz [ 1478.932446][T27208] usb 3-1: config 0 descriptor?? [ 1478.942044][T22529] usb 1-1: USB disconnect, device number 103 [ 1479.163976][T30338] loop1: detected capacity change from 0 to 512 [ 1479.205053][T27208] usb 3-1: ignoring: probably an ADSL modem [ 1479.427273][T27208] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1479.469929][T27208] usb 3-1: USB disconnect, device number 112 [ 1480.499140][ T6015] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1480.703997][ T6015] usb 1-1: Using ep0 maxpacket: 16 [ 1480.728503][ T6015] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 178, changing to 7 [ 1480.781066][ T6015] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1480.808025][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.844014][ T30] audit: type=1326 audit(2000003653.347:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30427 comm="syz.4.16341" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1480.848676][ T6015] usb 1-1: Product: syz [ 1480.951248][ T6015] usb 1-1: Manufacturer: syz [ 1480.951969][ T30] audit: type=1326 audit(2000003653.347:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30427 comm="syz.4.16341" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1480.957604][T30433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1480.994531][ T6015] usb 1-1: SerialNumber: syz [ 1481.045222][ T6015] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1481.058383][ T30] audit: type=1326 audit(2000003653.347:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30427 comm="syz.4.16341" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1481.133093][ T30] audit: type=1326 audit(2000003653.347:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30427 comm="syz.4.16341" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1481.231680][ T30] audit: type=1326 audit(2000003653.347:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30427 comm="syz.4.16341" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1481.295305][ T30] audit: type=1326 audit(2000003653.347:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30427 comm="syz.4.16341" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1481.379556][ T30] audit: type=1326 audit(2000003653.347:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30427 comm="syz.4.16341" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1481.505757][ T30] audit: type=1326 audit(2000003653.347:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30427 comm="syz.4.16341" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1481.572290][ T6015] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1481.600897][T30457] pim6reg: entered allmulticast mode [ 1481.663160][ T6015] usb 1-1: USB disconnect, device number 104 [ 1481.726180][T30477] netlink: 172 bytes leftover after parsing attributes in process `syz.2.16352'. [ 1481.750650][T30477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16352'. [ 1481.808703][T30477] netlink: 172 bytes leftover after parsing attributes in process `syz.2.16352'. [ 1481.814713][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1481.842052][T30477] netlink: 100 bytes leftover after parsing attributes in process `syz.2.16352'. [ 1481.921587][T30477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16352'. [ 1482.523197][T30520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16363'. [ 1482.858123][T30542] netlink: 'syz.3.16370': attribute type 12 has an invalid length. [ 1483.054670][T22529] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1483.162598][T30498] loop1: detected capacity change from 0 to 32768 [ 1483.182946][T30553] lo speed is unknown, defaulting to 1000 [ 1483.219157][T30498] JBD2: Ignoring recovery information on journal [ 1483.232609][T22529] usb 6-1: Using ep0 maxpacket: 32 [ 1483.235761][T30559] overlayfs: conflicting lowerdir path [ 1483.273555][T30553] lo speed is unknown, defaulting to 1000 [ 1483.281024][T30553] lo speed is unknown, defaulting to 1000 [ 1483.293512][T22529] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1483.329659][T30498] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1483.351405][T22529] usb 6-1: config 0 has no interface number 0 [ 1483.402129][T22529] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1483.430874][T22529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.467713][T22529] usb 6-1: Product: syz [ 1483.496798][T22529] usb 6-1: Manufacturer: syz [ 1483.519163][T22529] usb 6-1: SerialNumber: syz [ 1483.547718][T30498] ocfs2: Unmounting device (7,1) on (node local) [ 1483.566496][T22529] usb 6-1: config 0 descriptor?? [ 1483.618731][T22529] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1483.628817][T30567] IPVS: Error connecting to the multicast addr [ 1483.864091][T22529] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1483.945488][T22529] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1484.050393][T30587] ip6tnl1: entered promiscuous mode [ 1484.057673][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1484.092144][T30587] ip6tnl1: entered allmulticast mode [ 1484.285889][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1484.301596][T27208] usb 6-1: USB disconnect, device number 114 [ 1484.419296][T27208] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1484.550385][T27208] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1484.607364][T27208] quatech2 6-1:0.51: device disconnected [ 1484.869914][T27422] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1484.939409][T30630] loop0: detected capacity change from 0 to 4096 [ 1484.970768][T30630] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1485.101044][T27422] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1485.143978][T27422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.179093][T27422] usb 5-1: Product: syz [ 1485.202550][T27422] usb 5-1: Manufacturer: syz [ 1485.227595][T27422] usb 5-1: SerialNumber: syz [ 1485.276245][T27422] usb 5-1: config 0 descriptor?? [ 1485.341400][T27422] usb 5-1: selecting invalid altsetting 1 [ 1485.383408][T27422] technisat-usb2: could not set alternate setting to 0 [ 1485.514382][T30553] infiniband sz1: set down [ 1485.568500][ T6015] lo speed is unknown, defaulting to 1000 [ 1485.572098][T27422] technisat-usb2: firmware version: 0.0 [ 1485.584003][T30553] infiniband sz1: added lo [ 1485.612861][T27422] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1485.678924][T30553] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1485.713737][T30553] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1485.836550][T30553] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1485.886878][T27422] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1485.981649][T27422] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 1486.034751][T27422] usb 5-1: USB disconnect, device number 117 [ 1486.204910][T30553] RDS/IB: sz1: added [ 1486.224798][T30553] smc: adding ib device sz1 with port count 1 [ 1486.264646][T30553] smc: ib device sz1 port 1 has no pnetid [ 1486.370355][T27422] lo speed is unknown, defaulting to 1000 [ 1486.404899][T30553] lo speed is unknown, defaulting to 1000 [ 1486.417375][T30703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16397'. [ 1486.452293][T30703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16397'. [ 1486.531365][T30711] loop5: detected capacity change from 0 to 128 [ 1486.633313][ T6015] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1486.713456][ T30] audit: type=1326 audit(2000003658.840:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.4.16400" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1486.820049][ T30] audit: type=1326 audit(2000003658.840:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.4.16400" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1486.860935][ T6015] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1486.902055][ T6015] usb 2-1: config 0 has no interface number 0 [ 1486.912910][ T30] audit: type=1326 audit(2000003658.868:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.4.16400" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1486.942459][ T6015] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1486.978575][ T6015] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1487.023953][ T6015] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1487.042772][ T30] audit: type=1326 audit(2000003658.868:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.4.16400" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1487.045245][ T6015] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1487.141634][ T30] audit: type=1326 audit(2000003658.868:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.4.16400" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1487.168840][ T6015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.196116][ T30] audit: type=1326 audit(2000003658.887:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.4.16400" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1487.222801][ T6015] usb 2-1: config 0 descriptor?? [ 1487.230000][ T30] audit: type=1326 audit(2000003658.887:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.4.16400" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1487.267712][T30702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1487.292301][T30741] loop5: detected capacity change from 0 to 256 [ 1487.311665][T30741] exfat: Deprecated parameter 'namecase' [ 1487.316785][ T6015] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input126 [ 1487.333821][ T30] audit: type=1326 audit(2000003658.906:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.4.16400" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1487.373181][T30745] program syz.4.16404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1487.471345][T30749] program syz.4.16404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1487.525434][T30741] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 1487.542282][ T30] audit: type=1326 audit(2000003658.906:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.4.16400" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1487.545672][T30753] ipip0: entered allmulticast mode [ 1487.629581][T30749] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1487.679747][ T30] audit: type=1326 audit(2000003658.906:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.4.16400" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f8fa339de59 code=0x7ffc0000 [ 1487.813608][ T6015] usb 2-1: USB disconnect, device number 97 [ 1487.813717][ C1] usbtouchscreen 2-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1488.158707][T30784] loop0: detected capacity change from 0 to 1024 [ 1488.337556][T30553] lo speed is unknown, defaulting to 1000 [ 1488.401851][T30784] hfsplus: keylen 65060 too large [ 1488.426079][T30784] hfsplus: xattr search failed [ 1488.607243][T30784] hfsplus: keylen 65060 too large [ 1488.649138][T30784] hfsplus: xattr search failed [ 1489.002375][T30812] tmpfs: Too few inodes for current use [ 1489.193180][T30771] loop4: detected capacity change from 0 to 32768 [ 1489.259168][T30771] JBD2: Ignoring recovery information on journal [ 1489.266877][T27419] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1489.422306][T30771] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1489.434748][T27419] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1489.459100][T27419] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1489.499787][T27419] usb 1-1: config 2 interface 0 has no altsetting 0 [ 1489.533905][T27419] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1489.570185][T27419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.588514][T30553] lo speed is unknown, defaulting to 1000 [ 1489.601613][T30771] (syz.4.16409,30771,1):ocfs2_find_entry:1111 ERROR: status = -117 [ 1489.715467][T30771] (syz.4.16409,30771,0):ocfs2_find_entry:1111 ERROR: status = -117 [ 1489.778531][T30771] (syz.4.16409,30771,0):ocfs2_mknod:506 ERROR: status = -117 [ 1489.836522][T30771] (syz.4.16409,30771,0):ocfs2_mkdir:662 ERROR: status = -117 [ 1490.071345][ T6037] ocfs2: Unmounting device (7,4) on (node local) [ 1490.172657][T27419] elo 0003:04E7:0009.0002: item fetching failed at offset 3/5 [ 1490.197533][T27419] elo 0003:04E7:0009.0002: parse failed [ 1490.217468][T27419] elo 0003:04E7:0009.0002: probe with driver elo failed with error -22 [ 1490.290430][T27419] usb 1-1: USB disconnect, device number 105 [ 1490.446523][T30875] loop5: detected capacity change from 0 to 1024 [ 1490.606035][T30875] hfsplus: keylen 65060 too large [ 1490.631967][T30875] hfsplus: xattr search failed [ 1490.664442][T30875] hfsplus: keylen 65060 too large [ 1490.708021][T30887] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 1490.719800][T30875] hfsplus: xattr search failed [ 1490.763639][T30553] lo speed is unknown, defaulting to 1000 [ 1490.874657][T27337] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1491.051813][T30898] loop5: detected capacity change from 0 to 2048 [ 1491.069379][T27337] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 1491.098498][T30898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1491.107360][T27337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.107404][T27337] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1491.107444][T27337] usb 3-1: config 1 has no interface number 0 [ 1491.107501][T27337] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1491.153783][T27337] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1491.204096][T27337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.244901][T27337] usb 3-1: Product: syz [ 1491.266812][T27337] usb 3-1: Manufacturer: syz [ 1491.290978][T27337] usb 3-1: SerialNumber: syz [ 1491.360401][T27337] cdc_wdm 3-1:1.128: skipping garbage [ 1491.385640][T27337] cdc_wdm 3-1:1.128: probe with driver cdc_wdm failed with error -22 [ 1491.580187][T27337] usb 3-1: USB disconnect, device number 113 [ 1491.732235][T30553] lo speed is unknown, defaulting to 1000 [ 1491.860005][T27208] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1492.035070][T27208] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1492.044439][T30952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16448'. [ 1492.054793][T27208] usb 5-1: not running at top speed; connect to a high speed hub [ 1492.082818][T27208] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1492.100395][T27208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.132119][T27208] usb 5-1: Product: syz [ 1492.143709][T27208] usb 5-1: Manufacturer: syz [ 1492.155155][T27208] usb 5-1: SerialNumber: syz [ 1492.277345][T30964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16451'. [ 1492.300052][T30964] netlink: 'syz.1.16451': attribute type 5 has an invalid length. [ 1492.344273][T30964] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16451'. [ 1492.393877][T30964] geneve3: entered promiscuous mode [ 1492.401163][T30964] geneve3: entered allmulticast mode [ 1492.435694][T27208] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1492.515997][T30553] lo speed is unknown, defaulting to 1000 [ 1492.861685][T27208] gp8psk: usb out operation failed. [ 1492.883625][T27208] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1492.917271][T27208] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 1492.961285][T27208] usb 5-1: USB disconnect, device number 118 [ 1493.304091][T31002] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1493.754003][T31016] team0: Port device xfrm0 added [ 1493.777879][T31017] netlink: 'syz.5.16464': attribute type 1 has an invalid length. [ 1493.822757][T31017] netlink: 232 bytes leftover after parsing attributes in process `syz.5.16464'. [ 1494.189001][T31050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16468'. [ 1494.338547][T27337] [ 1494.338564][T27337] ====================================================== [ 1494.338579][T27337] WARNING: possible circular locking dependency detected [ 1494.338609][T27337] syzkaller #0 Tainted: G L [ 1494.338631][T27337] ------------------------------------------------------ [ 1494.338645][T27337] kworker/1:9/27337 is trying to acquire lock: [ 1494.338665][T27337] ffff88801bc620b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 1494.338762][T27337] [ 1494.338762][T27337] but task is already holding lock: [ 1494.338777][T27337] ffffffff8ebd24a0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 1494.338874][T27337] [ 1494.338874][T27337] which lock already depends on the new lock. [ 1494.338874][T27337] [ 1494.338889][T27337] [ 1494.338889][T27337] the existing dependency chain (in reverse order) is: [ 1494.338904][T27337] [ 1494.338904][T27337] -> #2 (console_lock){+.+.}-{0:0}: [ 1494.338957][T27337] lock_acquire+0x1b9/0x370 [ 1494.338995][T27337] console_lock+0x7a/0xa0 [ 1494.339033][T27337] con_flush_chars+0x63/0x90 [ 1494.339066][T27337] n_tty_write+0xc26/0x1160 [ 1494.339117][T27337] file_tty_write.isra.0+0x4d2/0x890 [ 1494.339160][T27337] vfs_write+0x6ac/0x1050 [ 1494.339199][T27337] ksys_write+0x12a/0x250 [ 1494.339237][T27337] do_syscall_64+0x115/0x870 [ 1494.339291][T27337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.339329][T27337] [ 1494.339329][T27337] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 1494.339385][T27337] lock_acquire+0x1b9/0x370 [ 1494.339422][T27337] down_write+0x8b/0x1f0 [ 1494.339458][T27337] n_tty_flush_buffer+0x25/0x1b0 [ 1494.339509][T27337] tty_buffer_flush+0x239/0x310 [ 1494.339548][T27337] tty_ldisc_flush+0x68/0xf0 [ 1494.339580][T27337] tty_port_close_start+0x306/0x500 [ 1494.339633][T27337] tty_port_close+0x26/0x170 [ 1494.339677][T27337] tty_release+0x40e/0x1300 [ 1494.339714][T27337] __fput+0x3ff/0xb50 [ 1494.339765][T27337] task_work_run+0x150/0x240 [ 1494.339821][T27337] do_exit+0x951/0x2ae0 [ 1494.339868][T27337] do_group_exit+0xd5/0x2a0 [ 1494.339916][T27337] __x64_sys_exit_group+0x3e/0x50 [ 1494.339968][T27337] x64_sys_call+0x102c/0x1530 [ 1494.340019][T27337] do_syscall_64+0x115/0x870 [ 1494.340078][T27337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.340116][T27337] [ 1494.340116][T27337] -> #0 (&buf->lock){+.+.}-{4:4}: [ 1494.340170][T27337] check_prev_add+0xeb/0xe60 [ 1494.340203][T27337] __lock_acquire+0x136c/0x1a40 [ 1494.340239][T27337] lock_acquire+0x1b9/0x370 [ 1494.340272][T27337] __mutex_lock+0x1a4/0x1bd0 [ 1494.340306][T27337] tty_buffer_flush+0x72/0x310 [ 1494.340345][T27337] tty_ldisc_flush+0x68/0xf0 [ 1494.340377][T27337] __do_SAK+0x368/0x480 [ 1494.340422][T27337] vc_SAK+0x7f/0x320 [ 1494.340474][T27337] process_one_work+0xa23/0x1940 [ 1494.340532][T27337] worker_thread+0x5ef/0xe50 [ 1494.340588][T27337] kthread+0x370/0x450 [ 1494.340647][T27337] ret_from_fork+0x72b/0xd50 [ 1494.340691][T27337] ret_from_fork_asm+0x1a/0x30 [ 1494.340741][T27337] [ 1494.340741][T27337] other info that might help us debug this: [ 1494.340741][T27337] [ 1494.340754][T27337] Chain exists of: [ 1494.340754][T27337] &buf->lock --> &tty->termios_rwsem --> console_lock [ 1494.340754][T27337] [ 1494.340818][T27337] Possible unsafe locking scenario: [ 1494.340818][T27337] [ 1494.340830][T27337] CPU0 CPU1 [ 1494.340842][T27337] ---- ---- [ 1494.340854][T27337] lock(console_lock); [ 1494.340881][T27337] lock(&tty->termios_rwsem); [ 1494.340911][T27337] lock(console_lock); [ 1494.340940][T27337] lock(&buf->lock); [ 1494.340966][T27337] [ 1494.340966][T27337] *** DEADLOCK *** [ 1494.340966][T27337] [ 1494.340976][T27337] 4 locks held by kworker/1:9/27337: [ 1494.340999][T27337] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1494.341111][T27337] #1: ffffc90005bb7d08 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1494.341224][T27337] #2: ffffffff8ebd24a0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 1494.341329][T27337] #3: ffff8880667060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xf0 [ 1494.341416][T27337] [ 1494.341416][T27337] stack backtrace: [ 1494.341439][T27337] CPU: 1 UID: 0 PID: 27337 Comm: kworker/1:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1494.341493][T27337] Tainted: [L]=SOFTLOCKUP [ 1494.341507][T27337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1494.341533][T27337] Workqueue: events vc_SAK [ 1494.341584][T27337] Call Trace: [ 1494.341596][T27337] [ 1494.341618][T27337] dump_stack_lvl+0x100/0x190 [ 1494.341660][T27337] print_circular_bug.cold+0x178/0x1c7 [ 1494.341723][T27337] check_noncircular+0x146/0x160 [ 1494.341791][T27337] check_prev_add+0xeb/0xe60 [ 1494.341831][T27337] __lock_acquire+0x136c/0x1a40 [ 1494.341876][T27337] lock_acquire+0x1b9/0x370 [ 1494.341910][T27337] ? tty_buffer_flush+0x72/0x310 [ 1494.341951][T27337] ? __pfx___might_resched+0x10/0x10 [ 1494.341991][T27337] __mutex_lock+0x1a4/0x1bd0 [ 1494.342025][T27337] ? tty_buffer_flush+0x72/0x310 [ 1494.342111][T27337] ? tty_buffer_flush+0x72/0x310 [ 1494.342153][T27337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1494.342199][T27337] ? check_prev_add+0x354/0xe60 [ 1494.342235][T27337] ? __pfx___mutex_lock+0x10/0x10 [ 1494.342271][T27337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1494.342319][T27337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1494.342372][T27337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1494.342423][T27337] ? tty_buffer_flush+0x72/0x310 [ 1494.342462][T27337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1494.342508][T27337] tty_buffer_flush+0x72/0x310 [ 1494.342551][T27337] tty_ldisc_flush+0x68/0xf0 [ 1494.342585][T27337] __do_SAK+0x368/0x480 [ 1494.342635][T27337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1494.342680][T27337] ? mark_held_locks+0x40/0x70 [ 1494.342722][T27337] vc_SAK+0x7f/0x320 [ 1494.342773][T27337] process_one_work+0xa23/0x1940 [ 1494.342843][T27337] ? __pfx_process_one_work+0x10/0x10 [ 1494.342908][T27337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1494.342965][T27337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1494.343014][T27337] worker_thread+0x5ef/0xe50 [ 1494.343077][T27337] ? __pfx_worker_thread+0x10/0x10 [ 1494.343135][T27337] ? kthread+0x13a/0x450 [ 1494.343186][T27337] ? __pfx_worker_thread+0x10/0x10 [ 1494.343244][T27337] kthread+0x370/0x450 [ 1494.343295][T27337] ? __pfx_kthread+0x10/0x10 [ 1494.343350][T27337] ret_from_fork+0x72b/0xd50 [ 1494.343397][T27337] ? __pfx_ret_from_fork+0x10/0x10 [ 1494.343440][T27337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1494.343486][T27337] ? rcu_is_watching+0x12/0xc0 [ 1494.343535][T27337] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1494.343581][T27337] ? __switch_to+0x800/0x10f0 [ 1494.343641][T27337] ? __switch_to_asm+0x39/0x70 [ 1494.343692][T27337] ? __pfx_kthread+0x10/0x10 [ 1494.343748][T27337] ret_from_fork_asm+0x1a/0x30 [ 1494.343812][T27337] [ 1494.379444][ T6015] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1494.558939][ T6015] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.558995][ T6015] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1494.559047][ T6015] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1494.560751][ T6015] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1494.560796][ T6015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.560833][ T6015] usb 2-1: Product: syz [ 1494.560861][ T6015] usb 2-1: Manufacturer: syz [ 1494.560890][ T6015] usb 2-1: SerialNumber: syz [ 1494.848509][ T6015] ims_pcu 2-1:2.0: Missing CDC union descriptor [ 1494.848549][ T6015] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22 [ 1494.850127][ T6015] usb 2-1: USB disconnect, device number 98