last executing test programs: 8.954406577s ago: executing program 4 (id=3337): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.730304675s ago: executing program 0 (id=3341): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400ccdc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3"], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) 7.716111917s ago: executing program 4 (id=3342): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 7.63766389s ago: executing program 0 (id=3344): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, 0xffffffffffffffff, 0x2}}, 0x48) 6.514827516s ago: executing program 4 (id=3346): syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r0, 0x0, 0xfffffcd9) 6.513328393s ago: executing program 2 (id=3347): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c49"], 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0)='vfat\x00', 0x400040, &(0x7f00000001c0)='discard') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x21, 0x301, 0x270bd27, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x7, 0x1b3f, 0x3, 0x40000000000001a, 0x3, 0x2, 0xb, 0x100fff}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8000000, {0x2, 0x9, 0x6, 0x8}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x80d1) r6 = fcntl$dupfd(r1, 0x0, r1) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaa"], 0x0) write$binfmt_script(r6, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000001b00), 0xfffffd9d) close_range(r0, 0xffffffffffffffff, 0x0) 6.294416282s ago: executing program 2 (id=3348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xf, 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230a29bd7000fbdbdf253100000008000300", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 6.126710591s ago: executing program 2 (id=3349): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x9, 0x1, "b3"}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x5, 0x6, "cd96b3361c91"}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 5.995907733s ago: executing program 0 (id=3350): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x1, 0x1003, 0x0, 0x0, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x800, 0x6, 0xa512, 0x3, "4ebdaed43bb30000000000d1188400"}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.324189388s ago: executing program 0 (id=3353): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/10/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$l2tp6(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x0, 0x80, 0xa, 0x4, 0xfffffed8, 0x2, 0xfffffffd, 0x20, 0x1, 0x20, 0x2, &(0x7f00000002c0)=[0x4], 0x1, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) 4.28414398s ago: executing program 1 (id=3356): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400ccdc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d2"], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) 4.266104335s ago: executing program 4 (id=3357): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$FS_IOC_FSSETXATTR(r0, 0xc00c4d03, 0x0) openat$ptp0(0xffffff9c, &(0x7f00000003c0), 0x8402, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001400090527bd7000fddbdf25021f00cb", @ANYRES32, @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000e40)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r6 = userfaultfd(0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) 4.227935696s ago: executing program 0 (id=3358): socket$inet6(0xa, 0x400000000001, 0xff7ff67b) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000400)=ANY=[], 0xb0, &(0x7f00000003c0)='smaps\x00') syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020}, 0x2020) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000200)={0x2, 0x0, 0x98, &(0x7f0000000140)={0x406, 0x7, 0x4}}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, 0x0) 4.108221028s ago: executing program 1 (id=3359): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='file f_subset.c +p\n', 0x13) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='dummy_udc.0', 0xb) clock_nanosleep(0x0, 0x0, &(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000005c0)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000640)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000680)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000740)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000780)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='\n', 0x1) 4.106277832s ago: executing program 3 (id=3360): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 3.954532442s ago: executing program 3 (id=3361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xf, 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230a29bd7000fbdbdf253100000008000300", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 3.944686577s ago: executing program 5 (id=3362): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, 0xffffffffffffffff, 0x2}}, 0x48) 3.776601064s ago: executing program 4 (id=3363): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) mount$nfs(&(0x7f0000000480)='\\(\x00o\xa2]\xb6d\x0fO\x1a\x96e,\xb6k\xc38\x17\x9f\x9a\xe5\x83{\xa3\xc1[{\xf1\x9bS\x17\x8b\xf6\x02\xdf\xaf]\xf8#\xba0\x02\xfcD\x9a\f\xad/Z\a_\x18q[Cm5\x9eq\xbe\xd1G\xdb\xab\x86\xcf\xb0\x8f\xb3\x99\xd3\x9f\xb4\xb5\x02E\xbb\xb4\\\xb5\xd8\xb2\xe3\x9e\xb5G\n\xd7\xb3\xd2\xa4U\xcb\xf5&.\xd4\xc7>\xcf\xcd%\x0e\xcb\'\x9e\x82\nDN\x81G\xad\x00'/124, 0x0, 0x0, 0x80001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) write$P9_RSTATFS(r3, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x7, 0x4, 0x0, 0x7ef, 0xe, 0x80000000000007, 0x200, 0x6}}, 0x43) 3.717960673s ago: executing program 3 (id=3364): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 2.882236203s ago: executing program 3 (id=3365): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffdff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010021120000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20049809}, 0x0) 2.86191406s ago: executing program 2 (id=3366): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x400c09, 0x8, 0x8002, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000100)={0x60, 0x0, r1, {{0xa, 0x8, 0x8, 0x7, 0x7fff, 0x4, 0x7fffffff, 0x9}}}, 0x60) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.803934352s ago: executing program 1 (id=3367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000280)="34451d3af9980aaa8f7b1d36b18056e0cc07ca92cef401778e4e7d6d0e66dba5a7856b8d582bea0d0f0db50a660697f1a20d10e4f54cab228a3e361dd378719dc9b1ab335356ffaa0f4b906643702dc421be9e8a113f8d", 0x57}], 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.803469622s ago: executing program 4 (id=3368): syz_open_dev$media(&(0x7f0000000080), 0x5f8f, 0x4000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x4000080) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x8c, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x9020}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8000000000000001}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xf4b}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xe4e}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x8c}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000003, 0x12, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r9, &(0x7f0000001300)="92", 0x2) syz_usb_control_io$printer(r8, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 2.634608355s ago: executing program 3 (id=3369): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000380)={0x0, 0x5, 0x8, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c6000000", 0x4c}], 0x1) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x2a6c}], 0x1, 0x2000, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r7, 0x80000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e45451870f05bc3323fff441abf20ec979657e03dd9d01284d1e064b524e36686fb3de9a1649d08264ed39abd6a95b5b8b832d51f76db4058e8f623d5b38e8463639f3a2e7499e2ba9b3a777f4e3cf28af8df8e043318c89eb61d7c8b5f98815f4123dbd0f2284af4a88b6542b8e3f6b9cca466278e208ad4c58d370f9989fad78a256adeb3ffaa6588abac776b393867d6318e80e9129df67dfb06ef41d95cfc74c319d4eec99fecc0b5a498048d897da0017f51785e673d2709"], 0x2d, 0x443f, &(0x7f00000088c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setresuid(0x0, 0xee01, 0x0) 2.310485378s ago: executing program 5 (id=3370): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/10/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$l2tp6(0xa, 0x2, 0x73) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x0, 0x80, 0xa, 0x4, 0xfffffed8, 0x2, 0xfffffffd, 0x20, 0x1, 0x20, 0x2, &(0x7f00000002c0)=[0x4], 0x1, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) 1.381242077s ago: executing program 3 (id=3371): openat$nullb(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) 1.240783553s ago: executing program 1 (id=3372): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400ccdc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d2"], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) 1.14083337s ago: executing program 5 (id=3373): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 982.845189ms ago: executing program 1 (id=3374): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), 0x0, &(0x7f0000000300)={0x0, "43ab7b12deeafab4f21eab7da267ea8ec0a1f1b9a61459b4e6236efa067a6ca7a8088205a1b2825c488d0e7e4504909f25be051ff3ac8a3f74ab2297a38e9950", 0x2e}, 0x48, 0xffffffffffffffff) request_key(0x0, 0x0, &(0x7f0000000540)='incremental-fs\x00', r1) r2 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) 827.478821ms ago: executing program 2 (id=3375): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$FS_IOC_FSSETXATTR(r0, 0xc00c4d03, 0x0) openat$ptp0(0xffffff9c, &(0x7f00000003c0), 0x8402, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001400090527bd7000fddbdf25021f00cb", @ANYRES32, @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000e40)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r6 = userfaultfd(0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) 826.312217ms ago: executing program 5 (id=3376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xf, 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230a29bd7000fbdbdf253100000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 749.967525ms ago: executing program 5 (id=3377): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 690.82716ms ago: executing program 5 (id=3378): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x9, 0x1, "b3"}, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)={0x40, 0x5, 0x6, "cd96b3361c91"}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 343.255484ms ago: executing program 2 (id=3379): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$l2tp(0x2, 0x2, 0x73) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800020000000000000000000108000400010000000600150003000000200016800c000b001234567890abcdef05000800200000000500070002000000", 0x60) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e1f, 0x101, @private1, 0x8e4}}, 0x0, 0x0, 0x40e, 0x0, "bb02a3c364ca41d6357e54452401400000000000000000000064ac038d000000000000f9ff0000000000000000000000000000000000000000000000000000000000004000"}, 0xd8) r4 = socket$kcm(0x23, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0xfffe) preadv(r7, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r4, 0x800) accept4(r4, 0x0, 0x0, 0x80000) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) sendmsg$nl_route(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000007000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x80) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 2.21885ms ago: executing program 1 (id=3380): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, 0x0, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/net\x00') 0s ago: executing program 0 (id=3381): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0x0525', 0x6) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/idProduct\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='dummy_udc.0', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='\n', 0x1) kernel console output (not intermixed with test programs): eta_evt+0x10/0x10 [ 599.870175][ T5637] ? __pfx_hci_event_packet+0x10/0x10 [ 599.870219][ T5637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 599.870247][ T5637] ? hci_send_to_monitor+0xe2/0x590 [ 599.870276][ T5637] hci_rx_work+0x3ee/0x1020 [ 599.870318][ T5637] ? process_scheduled_works+0xa20/0x14e0 [ 599.870349][ T5637] process_scheduled_works+0xa8e/0x14e0 [ 599.870411][ T5637] ? __pfx_process_scheduled_works+0x10/0x10 [ 599.870448][ T5637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 599.870477][ T5637] ? assign_work+0x3cf/0x5d0 [ 599.870512][ T5637] worker_thread+0xa47/0xfb0 [ 599.870574][ T5637] kthread+0x388/0x470 [ 599.870612][ T5637] ? __pfx_worker_thread+0x10/0x10 [ 599.870642][ T5637] ? __pfx_kthread+0x10/0x10 [ 599.870685][ T5637] ret_from_fork+0x514/0xb70 [ 599.870727][ T5637] ? __pfx_ret_from_fork+0x10/0x10 [ 599.870765][ T5637] ? srso_alias_return_thunk+0x5/0xfbef5 [ 599.870794][ T5637] ? __switch_to+0xc89/0x1420 [ 599.870831][ T5637] ? __pfx_kthread+0x10/0x10 [ 599.870870][ T5637] ret_from_fork_asm+0x1a/0x30 [ 599.870913][ T5637] [ 599.871291][ T5637] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 600.162086][ T5637] Bluetooth: hci2: failed to register connection device [ 600.176355][ T5774] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 600.273910][ T24] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 600.349201][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2196'. [ 600.585116][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.615749][ T5774] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 600.643803][ T5774] usb 2-1: config 1 has no interface number 0 [ 600.662121][ T5774] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 600.716032][ T5774] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 600.748855][ T5774] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 600.778126][ T5774] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 600.833165][ T5774] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.854539][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.871545][ T5774] usb 2-1: Product: syz [ 600.879370][ T5774] usb 2-1: Manufacturer: syz [ 600.887425][ T5774] usb 2-1: SerialNumber: syz [ 600.897201][T12817] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 601.090838][T12851] syzkaller0: entered promiscuous mode [ 601.126831][T12851] syzkaller0: entered allmulticast mode [ 601.492409][T12817] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 602.404943][ T5774] cdc_ncm 2-1:1.1: bind() failure [ 602.420051][T12869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2212'. [ 602.607217][T12869] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2212'. [ 602.629403][ T5774] usb 2-1: USB disconnect, device number 44 [ 603.385499][ T5841] kworker/1:5 (5841) used greatest stack depth: 13976 bytes left [ 603.492125][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 603.773362][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 603.851507][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.161587][ T24] usb 6-1: config 0 descriptor?? [ 604.225502][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2214'. [ 604.392030][ T24] cp210x 6-1:0.0: cp210x converter detected [ 605.317218][ T24] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 605.353016][T12882] 8021q: VLANs not supported on ip6gre0 [ 605.528149][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 605.716089][ T5774] usb 6-1: USB disconnect, device number 43 [ 605.748652][ T5774] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 605.816549][ T5774] cp210x 6-1:0.0: device disconnected [ 606.176185][T12905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2225'. [ 606.493406][ T24] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 606.644416][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.659525][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 606.677599][ T24] usb 4-1: config 1 has no interface number 0 [ 606.688793][ T24] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 606.713677][ T24] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 606.734392][ T24] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 606.765254][ T24] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 606.804787][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.814221][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.829550][ T24] usb 4-1: Product: syz [ 607.048173][ T24] usb 4-1: Manufacturer: syz [ 607.064153][ T24] usb 4-1: SerialNumber: syz [ 607.785906][T12913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 608.239000][T12913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 608.774393][ T24] cdc_ncm 4-1:1.1: bind() failure [ 609.025914][ T24] usb 4-1: USB disconnect, device number 42 [ 610.047212][T12949] loop4: detected capacity change from 0 to 512 [ 611.886962][T12979] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 616.262458][T13033] overlayfs: missing 'workdir' [ 617.252634][ T1607] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 617.432627][ T1607] usb 5-1: Using ep0 maxpacket: 8 [ 617.457315][ T1607] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 617.477294][ T1607] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 617.512410][ T1607] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 617.526248][ T1607] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 617.538259][ T1607] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.575953][ T1607] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 617.595308][ T1607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.626867][ T1607] usbtmc 5-1:16.0: bulk endpoints not found [ 617.889411][T13054] IPVS: Error connecting to the multicast addr [ 619.022433][T13067] overlayfs: missing 'workdir' [ 620.064399][ T24] usb 5-1: USB disconnect, device number 43 [ 620.770097][T13102] overlayfs: missing 'workdir' [ 620.829746][T13100] syzkaller0: entered promiscuous mode [ 620.895254][T13100] syzkaller0: entered allmulticast mode [ 621.030474][T13108] binder: BINDER_SET_CONTEXT_MGR already set [ 621.056875][T13108] binder: 13107:13108 ioctl 4018620d 200000001000 returned -16 [ 621.087172][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'. [ 621.258495][T13109] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 621.346176][T13109] bond2 (unregistering): Released all slaves [ 621.802233][T13115] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 621.847495][T13115] bond2 (unregistering): Released all slaves [ 621.989777][T13121] syzkaller1: entered allmulticast mode [ 622.283264][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 622.427362][T13142] netlink: 'syz.4.2306': attribute type 1 has an invalid length. [ 622.462773][T13142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 622.492622][ T5774] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 622.504226][T13142] bond1: (slave geneve2): making interface the new active one [ 622.515164][T13142] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 622.564694][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 622.577503][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.614946][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.639654][ T24] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 622.644630][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.661604][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.661995][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.673400][ T5774] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 622.694899][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.700661][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 622.716088][ T5774] usb 3-1: config 0 descriptor?? [ 622.719046][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 622.733465][ T24] usb 1-1: Manufacturer: syz [ 622.745764][ T24] usb 1-1: config 0 descriptor?? [ 622.972977][ T30] audit: type=1326 audit(1785526980.982:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.0.2300" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f904c19e019 code=0x0 [ 623.337432][ T5774] usbhid 3-1:0.0: can't add hid device: -71 [ 623.344808][ T5774] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 623.376051][ T5774] usb 3-1: USB disconnect, device number 37 [ 623.596407][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.602830][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.853809][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 625.025439][ T5774] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 625.203528][ T5774] usb 4-1: Using ep0 maxpacket: 8 [ 625.220455][ T5774] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 625.250024][ T5774] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 625.277629][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 625.288221][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 625.307185][ T5774] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.347741][ T5774] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 625.377142][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.531385][ T989] usb 1-1: USB disconnect, device number 44 [ 625.648239][ T5774] usb 4-1: GET_CAPABILITIES returned 0 [ 625.671938][ T5774] usbtmc 4-1:16.0: can't read capabilities [ 625.850711][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.859788][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.868839][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.877894][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.886930][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.052172][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.061269][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.070312][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.079356][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.124108][ T5774] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 626.135903][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.145084][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.154151][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.163226][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.202295][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.211381][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.220541][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 626.234944][ T5924] usb 4-1: USB disconnect, device number 43 [ 626.292636][ T5774] usb 6-1: Using ep0 maxpacket: 16 [ 626.313264][ T5774] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 626.340440][ T5774] usb 6-1: config 0 interface 0 has no altsetting 0 [ 626.361094][ T5774] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 626.390481][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.427536][ T5774] usb 6-1: config 0 descriptor?? [ 626.660583][T13200] loop2: detected capacity change from 0 to 32768 [ 627.091335][ T5774] usbhid 6-1:0.0: can't add hid device: -71 [ 627.113169][ T5774] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 627.134360][ T5774] usb 6-1: USB disconnect, device number 44 [ 627.460431][T13230] loop4: detected capacity change from 0 to 512 [ 627.512103][T13230] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2341: inode has both inline data and extents flags [ 627.540451][T13230] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 627.549495][T13230] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2341: couldn't read orphan inode 15 (err -117) [ 627.558733][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 627.558757][ C1] EXT4-fs (loop4): initial error at time 1785526985: ext4_orphan_get:1399: inode 15 [ 627.558795][ C1] EXT4-fs (loop4): last error at time 1785526985: ext4_orphan_get:1399: inode 15 [ 627.605779][T13230] loop4: lost filesystem error report for type 5 error -117 [ 627.608758][T13230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.843387][ T5774] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 627.940925][T13245] loop2: detected capacity change from 0 to 1024 [ 627.974728][T13245] EXT4-fs: Invalid want_extra_isize 7 [ 628.992581][ T5774] usb 1-1: Using ep0 maxpacket: 16 [ 628.999458][ T5774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.010141][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 629.973394][ T5774] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 629.985569][ T5774] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.004012][ T5774] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 630.015342][ T5774] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 630.612604][ T989] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 630.620330][ T5774] usb 1-1: Manufacturer: syz [ 630.631949][ T5774] usb 1-1: config 0 descriptor?? [ 630.656070][ T5774] usb 1-1: can't set config #0, error -71 [ 630.693666][ T5774] usb 1-1: USB disconnect, device number 45 [ 630.773054][ T989] usb 6-1: Using ep0 maxpacket: 8 [ 630.794165][ T989] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 630.816564][ T989] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 630.848333][ T989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 630.872178][ T989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 630.901661][ T989] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.951784][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.970635][ T989] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 631.009942][ T989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.086442][ T989] usb 6-1: can't set config #16, error -71 [ 631.125780][ T989] usb 6-1: USB disconnect, device number 45 [ 631.510712][T13279] loop2: detected capacity change from 0 to 512 [ 631.592451][T13279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.605397][T13279] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.631206][T13279] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 631.658237][T13279] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 631.711716][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.384815][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035281800: rx timeout, send abort [ 632.885583][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054d57400: rx timeout, send abort [ 632.895339][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035281800: abort rx timeout. Force session deactivation [ 633.333675][ T1607] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 633.392071][T13304] loop4: detected capacity change from 0 to 1024 [ 633.393943][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054d57400: abort rx timeout. Force session deactivation [ 633.419379][T13304] EXT4-fs: Invalid want_extra_isize 7 [ 633.612589][ T1607] usb 3-1: Using ep0 maxpacket: 16 [ 633.617820][ T5773] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 633.619423][ T1607] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.852938][ T5773] usb 1-1: Using ep0 maxpacket: 8 [ 634.339737][ T1607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.361735][ T1607] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 634.389514][ T5773] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 634.423266][ T989] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 634.426435][ T1607] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.432275][ T5773] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 634.512397][ T5773] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 634.528218][ T1607] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 634.553974][ T5773] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 634.577866][ T1607] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 634.586982][ T5773] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.615263][ T989] usb 4-1: unable to get BOS descriptor or descriptor too short [ 634.628936][ T989] usb 4-1: not running at top speed; connect to a high speed hub [ 634.644414][ T5773] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 634.646876][ T1607] usb 3-1: Manufacturer: syz [ 634.663034][ T989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 634.675995][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.690169][ T989] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 634.729232][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.752134][ T1607] usb 3-1: config 0 descriptor?? [ 634.766527][ T989] usb 4-1: Product: syz [ 634.786275][ T989] usb 4-1: Manufacturer: syz [ 634.811559][ T989] usb 4-1: SerialNumber: syz [ 634.842802][T13309] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 635.043051][ T30] audit: type=1326 audit(1785526993.032:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13295 comm="syz.2.2363" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0a19e019 code=0x0 [ 635.111762][ T5773] usb 1-1: GET_CAPABILITIES returned 0 [ 635.118599][ T5773] usbtmc 1-1:16.0: can't read capabilities [ 635.133071][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.172016][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.241777][ T5637] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 635.936138][ T989] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.943235][ T5773] usb 1-1: USB disconnect, device number 46 [ 635.951541][ T989] usb 4-1: MIDIStreaming interface descriptor not found [ 636.306361][ T989] usb 4-1: USB disconnect, device number 44 [ 636.942609][T13344] xt_recent: Unsupported userspace flags (000000b1) [ 637.164421][ T24] usb 3-1: USB disconnect, device number 38 [ 637.206934][ T6423] udevd[6423]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.932716][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 639.533920][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 639.751387][ T5745] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 639.792136][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 639.817011][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 639.837404][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 639.879556][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 639.916273][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.956918][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 639.966889][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.976740][ T5745] usb 6-1: unable to get BOS descriptor or descriptor too short [ 640.001799][ T5745] usb 6-1: not running at top speed; connect to a high speed hub [ 640.010993][ T5745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 640.025617][ T5745] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 640.035254][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.043473][ T5745] usb 6-1: Product: syz [ 640.047753][ T5745] usb 6-1: Manufacturer: syz [ 640.052376][ T5745] usb 6-1: SerialNumber: syz [ 640.175043][T13378] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 640.915934][ T24] usb 3-1: usb_control_msg returned -71 [ 640.934523][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.977539][ T24] usbtmc 3-1:16.0: can't read capabilities [ 641.015061][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.059066][ T24] usb 3-1: USB disconnect, device number 39 [ 641.107337][ T5745] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.117736][T13395] xt_recent: Unsupported userspace flags (000000b1) [ 641.152293][ T5745] usb 6-1: MIDIStreaming interface descriptor not found [ 641.210236][T13396] tipc: Started in network mode [ 641.226648][T13396] tipc: Node identity fa008bef61d, cluster identity 4711 [ 641.247415][T13396] tipc: Enabled bearer , priority 0 [ 641.270271][T13400] syzkaller0: entered promiscuous mode [ 641.282497][T13400] syzkaller0: entered allmulticast mode [ 641.325455][T13396] tipc: Resetting bearer [ 641.357532][T13394] tipc: Resetting bearer [ 641.417381][T13394] tipc: Disabling bearer [ 641.434265][ T5745] usb 6-1: USB disconnect, device number 46 [ 641.621239][ T5658] udevd[5658]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.363634][T13433] xt_recent: Unsupported userspace flags (000000b1) [ 645.586758][ T5773] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 645.694842][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 645.762890][ T5773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 645.776520][ T5773] usb 2-1: not running at top speed; connect to a high speed hub [ 645.802297][ T5773] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 645.828544][ T5773] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 645.839401][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.857637][ T5773] usb 2-1: Product: syz [ 645.868690][ T5773] usb 2-1: Manufacturer: syz [ 645.873563][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 645.886677][ T5773] usb 2-1: SerialNumber: syz [ 645.897414][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 645.908691][ T9] usb 1-1: config 0 has no interface number 0 [ 645.918522][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.937863][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 645.938283][T13448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 645.957622][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.998833][ T9] usb 1-1: config 0 descriptor?? [ 646.033447][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 646.178782][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.245135][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.301727][ T5773] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 646.578197][ T5773] usb 2-1: MIDIStreaming interface descriptor not found [ 647.802387][T13468] fuse: Bad value for 'fd' [ 648.823970][ T5773] usb 2-1: USB disconnect, device number 45 [ 650.137937][T13476] sctp: [Deprecated]: syz.1.2424 (pid 13476) Use of int in max_burst socket option. [ 650.137937][T13476] Use struct sctp_assoc_value instead [ 650.154509][ T5658] udevd[5658]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.549120][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2425'. [ 651.352646][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 651.736225][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 651.743557][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 651.751844][ T9] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 651.762889][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 651.772894][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 651.782742][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 651.795714][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 651.804846][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.340699][ T9] usbtmc 2-1:16.0: bulk endpoints not found [ 652.908677][T13449] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 653.086649][ T989] usb 1-1: USB disconnect, device number 47 [ 653.197910][T13507] syzkaller0: entered promiscuous mode [ 653.210911][T13507] syzkaller0: entered allmulticast mode [ 653.322721][ T9] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 653.348225][T13514] bdc serial8250: error -EINVAL: invalid resource (null) [ 653.378982][T13514] bdc serial8250: probe with driver bdc failed with error -22 [ 653.456567][T13502] loop4: detected capacity change from 0 to 32768 [ 653.469535][T13502] btrfs: Deprecated parameter 'usebackuproot' [ 653.527631][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 653.602898][T13502] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 653.714967][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 653.900470][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 654.027481][T13502] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2432 (13502) [ 654.068563][ T9] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 654.295405][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.303890][ T9] usb 3-1: Product: syz [ 654.308079][ T9] usb 3-1: Manufacturer: syz [ 654.317765][ T9] usb 3-1: SerialNumber: syz [ 654.326815][T13505] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 654.345632][T13502] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 654.452959][T13502] BTRFS info (device loop4): using crc32c checksum algorithm [ 654.613392][ T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 654.742583][T13505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.925875][T13505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.938288][ T24] usb 6-1: device descriptor read/64, error -71 [ 655.184035][ T77] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 655.204450][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.234174][T13502] BTRFS error (device loop4): failed to load root extent [ 655.443089][ T802] usb 2-1: USB disconnect, device number 46 [ 655.452422][T13502] BTRFS warning (device loop4): try to load backup roots slot 1 [ 655.470161][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 655.516388][ T36] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 655.611215][T13502] BTRFS warning (device loop4): couldn't read tree root [ 655.639066][T13502] BTRFS warning (device loop4): try to load backup roots slot 2 [ 655.692606][ T36] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 655.760043][T13502] BTRFS warning (device loop4): couldn't read tree root [ 655.795544][T13502] BTRFS warning (device loop4): try to load backup roots slot 3 [ 655.848750][ T9] usb 3-1: USB disconnect, device number 40 [ 655.921113][ T24] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 655.961792][T13502] BTRFS error (device loop4): open_ctree failed: -4 [ 656.079003][ T24] usb 6-1: device descriptor read/64, error -71 [ 656.169664][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2445'. [ 656.265361][ T24] usb usb6-port1: attempt power cycle [ 656.722674][ T24] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 656.787617][ T24] usb 6-1: device descriptor read/8, error -71 [ 656.900402][T13566] loop2: detected capacity change from 0 to 512 [ 656.920377][T13566] EXT4-fs: Ignoring removed bh option [ 656.940908][T13566] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 656.971928][T13566] EXT4-fs (loop2): 1 truncate cleaned up [ 657.035688][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.093492][T13566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.252374][ T24] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 657.283675][ T24] usb 6-1: device descriptor read/8, error -71 [ 657.756038][T13573] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 658.038752][ T24] usb usb6-port1: unable to enumerate USB device [ 658.214068][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.422671][ T802] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 660.474205][T13610] kAFS: unable to lookup cell 'ÿ' [ 660.508781][T13612] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 660.609700][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 660.634772][ T802] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 660.653617][ T802] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 660.663817][ T802] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 660.680198][ T802] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 660.692750][ T802] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.705950][ T802] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 660.736873][T13612] 8021q: adding VLAN 0 to HW filter on device bond3 [ 660.750271][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.776214][T13621] netlink: 'syz.1.2461': attribute type 10 has an invalid length. [ 661.616251][ T802] usbtmc 3-1:16.0: bulk endpoints not found [ 661.643420][T13621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2461'. [ 661.678126][T13621] dummy0: entered promiscuous mode [ 661.788359][T13614] bond3: (slave veth3): Enslaving as an active interface with a down link [ 661.834836][T13616] dummy0: left promiscuous mode [ 661.882353][T13616] bond3: (slave dummy0): making interface the new active one [ 661.910640][T13616] dummy0: entered promiscuous mode [ 661.924958][T13616] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 662.352692][ T802] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 662.696362][ T802] usb 4-1: device descriptor read/64, error -71 [ 662.814392][ T5637] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 664.157216][ T802] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 664.280960][ T24] usb 3-1: USB disconnect, device number 41 [ 664.302801][ T802] usb 4-1: device descriptor read/64, error -71 [ 664.449988][ T802] usb usb4-port1: attempt power cycle [ 665.422952][ T802] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 665.642659][ T802] usb 4-1: device descriptor read/8, error -71 [ 666.715031][T13679] loop2: detected capacity change from 0 to 512 [ 666.977308][T13685] fuse: Unknown parameter 'group_i00000000000000000000' [ 667.061613][T13684] loop4: detected capacity change from 0 to 512 [ 667.168602][T13684] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2480: inode has both inline data and extents flags [ 667.191522][T13684] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 667.202566][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 667.218195][ C1] EXT4-fs (loop4): initial error at time 1785527025: ext4_orphan_get:1399: inode 15 [ 667.227646][ C1] EXT4-fs (loop4): last error at time 1785527025: ext4_orphan_get:1399: inode 15 [ 667.334787][T13684] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2480: couldn't read orphan inode 15 (err -117) [ 667.561907][T13684] loop4: lost filesystem error report for type 5 error -117 [ 667.715062][T13684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.967522][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.440749][T13713] Invalid ELF header magic: != ELF [ 672.482687][ T5773] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 672.687186][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 672.878621][ T5773] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 673.090483][ T5773] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 673.293336][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 673.377163][ T5773] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 673.437039][ T5773] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.498571][ T5773] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 673.534259][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.570056][ T5773] usbtmc 3-1:16.0: bulk endpoints not found [ 673.843554][ T5787] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 674.308804][T13756] binder: 13754:13756 ioctl c0306201 200000000680 returned -14 [ 674.546946][ T5787] usb 5-1: Using ep0 maxpacket: 32 [ 674.556299][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.573047][ T5787] usb 5-1: config 0 has no interfaces? [ 674.584626][ T5787] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 674.599265][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 674.619411][ T5787] usb 5-1: Product: syz [ 674.635993][ T5787] usb 5-1: Manufacturer: syz [ 674.665639][ T5787] usb 5-1: SerialNumber: syz [ 674.707360][ T5787] usb 5-1: config 0 descriptor?? [ 675.008649][ T5787] usb 5-1: USB disconnect, device number 44 [ 675.100281][T13772] Invalid ELF header magic: != ELF [ 675.958294][ T5745] usb 3-1: USB disconnect, device number 42 [ 679.019059][T13815] netlink: 'syz.3.2508': attribute type 1 has an invalid length. [ 680.246001][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.322642][T13829] Invalid ELF header magic: != ELF [ 681.162645][ T802] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 681.513398][T13848] input: syz1 as /devices/virtual/input/input24 [ 681.540000][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 681.572816][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 682.401607][T13841] kAFS: unable to lookup cell 'ÿ' [ 682.414662][ T802] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 682.440911][ T802] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 682.470568][ T802] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 682.480958][ T802] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 682.492061][ T802] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.205283][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 683.220654][ T802] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 683.362666][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.381196][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.396775][ T9] usb 5-1: config 0 has no interfaces? [ 683.414869][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 683.428536][ T802] usbtmc 3-1:16.0: bulk endpoints not found [ 683.436590][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 683.451165][ T9] usb 5-1: Product: syz [ 683.455595][ T9] usb 5-1: Manufacturer: syz [ 683.460914][ T9] usb 5-1: SerialNumber: syz [ 683.471036][ T9] usb 5-1: config 0 descriptor?? [ 683.532036][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'. [ 683.730143][ T9] usb 5-1: USB disconnect, device number 45 [ 684.526737][T13862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2521'. [ 684.840978][ T9] usb 3-1: USB disconnect, device number 43 [ 685.563584][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.579652][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.803612][ T1102] dummy0: left promiscuous mode [ 686.129446][T13876] Invalid ELF header magic: != ELF [ 687.026403][T13881] netlink: 'syz.3.2530': attribute type 1 has an invalid length. [ 687.262684][T13881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.964779][ T1607] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 689.132707][ T5787] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 689.972740][ T1607] usb 5-1: Using ep0 maxpacket: 32 [ 689.985234][ T1607] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.007313][ T1607] usb 5-1: config 0 has no interfaces? [ 690.029286][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'. [ 690.062892][ T1607] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 690.088588][ T1607] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 690.118944][ T1607] usb 5-1: Product: syz [ 690.126734][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 690.132921][ T1607] usb 5-1: Manufacturer: syz [ 690.138373][ T1607] usb 5-1: SerialNumber: syz [ 690.146931][ T5787] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 690.159165][ T5787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 690.171434][ T1607] usb 5-1: config 0 descriptor?? [ 690.178730][ T5787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 690.191855][ T5787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 690.201992][ T5787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 690.213207][ T5787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.232069][ T5787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 690.232973][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2542'. [ 690.241533][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.297329][ T5787] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 690.544918][ T989] usb 5-1: USB disconnect, device number 46 [ 691.509384][T13952] netlink: 'syz.5.2547': attribute type 1 has an invalid length. [ 691.716346][T13952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 692.569979][T13970] loop4: detected capacity change from 0 to 512 [ 692.585921][T13970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 692.668452][T13970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.717761][ T5787] usb 3-1: USB disconnect, device number 44 [ 692.758464][T13970] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 692.933191][T13985] loop2: detected capacity change from 0 to 1024 [ 692.963019][T13985] EXT4-fs: Invalid want_extra_isize 7 [ 693.850320][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.099108][T14005] kAFS: unable to lookup cell 'ÿ' [ 694.134235][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2560'. [ 694.319081][T14017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2560'. [ 696.323668][T14045] binder: BINDER_SET_CONTEXT_MGR already set [ 696.370319][T14045] binder: 14043:14045 ioctl 4018620d 200000004a80 returned -16 [ 697.591081][T14057] loop2: detected capacity change from 0 to 256 [ 697.647368][T14057] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 697.709319][T14057] FAT-fs (loop2): Can't find a valid FAT filesystem [ 699.180640][T14082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2577'. [ 699.198585][T14081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 699.539930][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 699.620222][T14082] kAFS: unable to lookup cell 'ÿ' [ 699.870009][ T5637] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 700.017296][T14103] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 700.657711][T14119] netlink: 'syz.4.2588': attribute type 29 has an invalid length. [ 701.061801][ T30] audit: type=1326 audit(1785527059.062:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.0.2590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f904c19e019 code=0x0 [ 702.166473][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2598'. [ 702.300134][T14156] kAFS: unable to lookup cell 'ÿ' [ 702.333882][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 702.913760][ T5637] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 703.076595][T14144] loop4: detected capacity change from 0 to 32768 [ 703.133552][T14144] Duplicate index:1 in stbl in dtroot [ 703.133552][T14144] [ 703.167561][T14144] ERROR: (device loop4): copy_from_dinode: Corrupt dtroot [ 703.167561][T14144] [ 703.219277][T14144] ERROR: (device loop4): remounting filesystem as read-only [ 703.348897][T14168] binder: 14167:14168 ioctl c0306201 0 returned -14 [ 703.437840][T14169] binder: 14167:14169 ioctl c0306201 0 returned -14 [ 705.318660][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2612'. [ 705.429719][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'. [ 705.496466][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2611'. [ 705.611607][T14202] kAFS: unable to lookup cell 'ÿ' [ 706.162630][ T5637] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 706.585979][T14215] netlink: 'syz.0.2618': attribute type 1 has an invalid length. [ 707.741883][T14229] could not allocate digest TFM handle md5 [ 708.204721][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 709.333154][T14247] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 709.351744][T14247] bond4 (unregistering): Released all slaves [ 709.452212][T14259] kAFS: unable to lookup cell 'ÿ' [ 711.990360][T14272] can0: slcan on ttyS3. [ 712.403433][T14267] can0 (unregistered): slcan off ttyS3. [ 713.774697][T14305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2646'. [ 713.884027][T14308] kAFS: unable to lookup cell 'ÿ' [ 714.081345][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2649'. [ 714.479249][T14312] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 714.710655][T14312] bond8 (unregistering): Released all slaves [ 716.473938][T11898] Bluetooth: hci5: command 0x0406 tx timeout [ 716.713982][T14351] syzkaller0: entered promiscuous mode [ 716.739832][T14351] syzkaller0: entered allmulticast mode [ 717.775060][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'. [ 718.204745][T14377] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 718.291479][T14377] bond5 (unregistering): Released all slaves [ 718.780946][T14368] loop2: detected capacity change from 0 to 32768 [ 719.058454][T14368] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 719.226842][T14368] XFS (loop2): Ending clean mount [ 719.756304][ T5636] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 719.777229][ T5745] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 720.652979][ T5745] usb 6-1: Using ep0 maxpacket: 8 [ 720.687319][ T5745] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 720.692792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 720.709033][ T5745] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 720.721131][ T5745] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 720.755243][ T5745] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 720.785678][ T5745] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.861844][ T5745] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 720.924438][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.290881][T14440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2680'. [ 721.438278][ T5745] usb 6-1: USB disconnect, device number 51 [ 721.520603][T14440] kAFS: unable to lookup cell 'ÿ' [ 722.490039][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2683'. [ 722.626709][T14455] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 722.731161][T14455] bond6 (unregistering): Released all slaves [ 722.763084][T14454] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2684'. [ 723.938587][T14488] netlink: 'syz.3.2690': attribute type 10 has an invalid length. [ 724.089875][T14488] syz_tun: entered promiscuous mode [ 725.345810][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 725.602650][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 725.644210][ T9] usb 2-1: config 0 has no interfaces? [ 725.674001][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 726.052392][T14522] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2700'. [ 726.709442][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.722039][ T9] usb 2-1: config 0 descriptor?? [ 726.906774][ T9] usb 2-1: can't set config #0, error -71 [ 726.938381][ T9] usb 2-1: USB disconnect, device number 47 [ 727.775472][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2710'. [ 727.960022][T14554] binder_alloc: 14553: binder_alloc_buf, no vma [ 728.061498][T14556] binder_alloc: 14553: binder_alloc_buf, no vma [ 728.114320][T14551] bond6: (slave macvlan1): Enslaving as an active interface with an up link [ 728.172487][T14552] bond6 (unregistering): (slave macvlan1): Releasing backup interface [ 728.210470][T14552] bond6 (unregistering): Released all slaves [ 728.452696][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2713'. [ 728.592404][T14563] kAFS: unable to lookup cell 'ÿ' [ 728.810212][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 729.245139][T14570] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 730.013935][T14589] Invalid ELF header magic: != ELF [ 730.853187][T14592] xt_hashlimit: size too large, truncated to 1048576 [ 732.256388][T14625] tipc: Enabled bearer , priority 0 [ 732.762399][T14624] tipc: Disabling bearer [ 732.812742][ T5773] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 732.988758][ T5773] usb 5-1: Using ep0 maxpacket: 8 [ 733.110269][ T5773] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 733.132379][ T5773] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 733.147754][ T5773] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 733.357012][ T5773] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 733.784962][ T5773] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.800410][ T5773] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 733.809565][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.046791][ T5773] usb 5-1: GET_CAPABILITIES returned 0 [ 734.058451][ T5773] usbtmc 5-1:16.0: can't read capabilities [ 734.268876][ T9] usb 5-1: USB disconnect, device number 47 [ 735.700022][T14671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2743'. [ 735.854650][T14671] kAFS: unable to lookup cell 'ÿ' [ 736.428325][T14685] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 736.742628][ T5745] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 737.123743][ T5745] usb 5-1: Using ep0 maxpacket: 8 [ 737.145677][ T5745] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 737.180493][ T5745] usb 5-1: config 0 has no interface number 0 [ 737.197829][ T5745] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.240704][ T5745] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 737.523550][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.854511][ T5745] usb 5-1: config 0 descriptor?? [ 737.881157][ T5745] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 738.547673][ T5745] usb 5-1: USB disconnect, device number 48 [ 739.663602][T14711] loop2: detected capacity change from 0 to 256 [ 740.540795][T14721] fuse: Bad value for 'fd' [ 740.682752][ T802] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 740.752636][ T5773] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 740.858133][ T802] usb 5-1: Using ep0 maxpacket: 32 [ 740.886506][ T802] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 740.896073][ T802] usb 5-1: config 0 has no interface number 0 [ 740.917894][ T5773] usb 6-1: Using ep0 maxpacket: 32 [ 740.949680][ T802] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 740.966661][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 740.979739][ T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.991233][ T5773] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 741.011957][ T802] usb 5-1: Product: syz [ 741.017927][ T802] usb 5-1: Manufacturer: syz [ 741.058304][ T5773] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 741.067927][ T802] usb 5-1: SerialNumber: syz [ 741.080502][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 741.119243][ T802] usb 5-1: config 0 descriptor?? [ 741.126405][ T5773] usb 6-1: Product: syz [ 741.148735][ T5773] usb 6-1: Manufacturer: syz [ 741.192202][ T5773] usb 6-1: SerialNumber: syz [ 741.236232][ T802] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 741.305202][ T802] usb 5-1: selecting invalid altsetting 1 [ 741.312469][ T802] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 741.344590][ T5773] usb 6-1: config 0 descriptor?? [ 741.876596][ T802] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 742.053539][ T5773] usb 6-1: USB disconnect, device number 52 [ 742.068994][ T802] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 742.120940][ T802] usb 5-1: media controller created [ 742.401444][ T802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 742.414898][T14735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2762'. [ 742.574195][ T802] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 742.609485][ T802] zl10353_read_register: readreg error (reg=127, ret==-71) [ 742.820535][ T802] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 742.854897][T14742] binder: 14740:14742 ioctl c0306201 200000000680 returned -14 [ 745.681936][ T802] usb 5-1: USB disconnect, device number 49 [ 746.485440][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.754974][T14756] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 746.773536][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.333733][T14771] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2772'. [ 748.579138][T14771] kAFS: unable to lookup cell 'ÿ' [ 749.181923][ T30] audit: type=1800 audit(1785527107.182:27): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2777" name="scan_secs" dev="configfs" ino=39618 res=0 errno=0 [ 751.166121][T14803] fuse: Bad value for 'fd' [ 751.300693][ T5637] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 755.842834][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 755.922165][T14836] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 756.231645][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 756.239217][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 756.256678][ T9] usb 5-1: config 0 has no interface number 0 [ 756.262883][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 756.277973][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 756.292044][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.606750][ T9] usb 5-1: config 0 descriptor?? [ 756.629771][ T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 757.066451][T14851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2796'. [ 757.089793][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 757.225054][T14851] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 758.774005][ T5924] usb 5-1: USB disconnect, device number 50 [ 759.159146][T14862] syzkaller0: entered promiscuous mode [ 759.185004][T14870] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2798'. [ 759.263036][T14862] syzkaller0: entered allmulticast mode [ 759.299990][T14872] syzkaller0: entered promiscuous mode [ 759.326846][T14872] syzkaller0: entered allmulticast mode [ 759.425370][T14870] kAFS: unable to lookup cell 'ÿ' [ 760.083197][T14879] fuse: Bad value for 'fd' [ 761.739894][T14869] loop2: detected capacity change from 0 to 32768 [ 762.022672][T14869] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 762.756558][T14869] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR [ 762.757017][T14869] XFS (loop2): log mount failed [ 763.537611][T14901] syzkaller0: entered promiscuous mode [ 763.566030][T14901] syzkaller0: entered allmulticast mode [ 764.108868][T14911] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 764.305141][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2815'. [ 764.381585][T14918] syzkaller0: entered promiscuous mode [ 764.387544][T14918] syzkaller0: entered allmulticast mode [ 764.401700][T14922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2817'. [ 764.423155][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 764.622608][ T5745] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 764.752607][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 764.764521][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 764.782583][ T9] usb 5-1: config 0 has no interface number 0 [ 764.782647][ T5745] usb 6-1: Using ep0 maxpacket: 16 [ 765.011288][ T5745] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.369624][ T5745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 765.465562][ T5745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 765.492024][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 765.513116][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 765.539468][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.539563][ T5745] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 765.581206][ T5745] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.595172][ T9] usb 5-1: config 0 descriptor?? [ 765.612705][ T5745] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 765.632296][ T5745] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 765.647206][ T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 765.652644][ T5745] usb 6-1: Manufacturer: syz [ 765.676483][ T5745] usb 6-1: config 0 descriptor?? [ 766.062690][ T5787] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 766.499136][T14944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2822'. [ 766.698285][T14944] kAFS: unable to lookup cell 'ÿ' [ 766.715549][ T5745] rc_core: IR keymap rc-hauppauge not found [ 766.721706][ T5745] Registered IR keymap rc-empty [ 766.726965][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 766.753368][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 766.784058][ T5745] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 766.798051][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 766.815879][ T5787] usb 3-1: config 0 has no interfaces? [ 766.826190][ T5745] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 766.840163][ T5787] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 766.862975][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.876130][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 766.889322][ T5787] usb 3-1: config 0 descriptor?? [ 766.902720][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 766.934377][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 766.962712][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 766.982716][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 767.022685][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 767.062989][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 767.092757][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 767.112737][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 767.132820][ T5745] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 767.166024][ T5745] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 767.175107][ T5745] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 767.189877][ T5745] usb 6-1: USB disconnect, device number 53 [ 767.338559][ T5787] usb 3-1: USB disconnect, device number 45 [ 767.420921][T14953] fuse: Bad value for 'fd' [ 769.178287][ T5745] usb 5-1: USB disconnect, device number 51 [ 769.538573][T14961] syzkaller0: entered promiscuous mode [ 769.564082][T14961] syzkaller0: entered allmulticast mode [ 771.181635][T14981] program syz.4.2832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.404305][T14985] loop4: detected capacity change from 0 to 64 [ 771.653338][T14985] loop4: detected capacity change from 0 to 256 [ 771.687203][T14985] exfat: Bad value for 'uid' [ 771.693629][T14985] exfat: Bad value for 'uid' [ 771.773908][T14991] bridge0: port 2(erspan0) entered blocking state [ 771.781254][T14991] bridge0: port 2(erspan0) entered disabled state [ 771.790260][T14991] erspan0: entered allmulticast mode [ 771.820637][T14991] erspan0: entered promiscuous mode [ 771.898579][T14991] erspan0: left allmulticast mode [ 771.903730][T14991] erspan0: left promiscuous mode [ 771.910345][T14991] bridge0: port 2(erspan0) entered disabled state [ 773.449933][T15002] Invalid ELF header magic: != ELF [ 774.072712][ T802] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 774.223133][T15014] fuse: Invalid rootmode [ 774.265545][ T802] usb 6-1: Using ep0 maxpacket: 8 [ 774.304662][ T802] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 774.372401][ T802] usb 6-1: config 0 has no interface number 0 [ 774.438404][ T802] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 774.533912][ T802] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 774.623695][ T802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.870743][ T802] usb 6-1: config 0 descriptor?? [ 775.236752][ T802] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 775.447611][T15023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2844'. [ 775.889816][T15023] kAFS: unable to lookup cell 'ÿ' [ 775.922946][ T989] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 776.084639][ T989] usb 2-1: Using ep0 maxpacket: 8 [ 776.108256][ T989] usb 2-1: config 0 has no interfaces? [ 776.122761][ T989] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 776.159711][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.217602][ T989] usb 2-1: config 0 descriptor?? [ 776.459741][ T989] usb 2-1: USB disconnect, device number 48 [ 777.161744][ T989] usb 6-1: USB disconnect, device number 54 [ 777.448169][T15034] macsec1: entered allmulticast mode [ 777.506331][T15034] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 777.538042][T15034] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 777.602284][T15034] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 777.964400][T15043] bridge0: port 2(erspan0) entered blocking state [ 777.971770][T15043] bridge0: port 2(erspan0) entered disabled state [ 777.979564][T15043] erspan0: entered allmulticast mode [ 778.004328][T15043] erspan0: entered promiscuous mode [ 778.013214][T15043] bridge0: port 2(erspan0) entered blocking state [ 778.019706][T15043] bridge0: port 2(erspan0) entered forwarding state [ 778.059942][T15043] erspan0: left allmulticast mode [ 778.065108][T15043] erspan0: left promiscuous mode [ 778.071701][T15043] bridge0: port 2(erspan0) entered disabled state [ 778.886031][T15049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2852'. [ 779.022121][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2851'. [ 779.117895][T15054] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.145534][T15063] openvswitch: netlink: Flow key attr not present in new flow. [ 780.335824][T15070] loop4: detected capacity change from 0 to 64 [ 780.538301][ T989] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 780.559116][T15070] loop4: detected capacity change from 0 to 256 [ 780.594549][T15070] exfat: Bad value for 'uid' [ 780.615989][T15070] exfat: Bad value for 'uid' [ 780.679435][T15072] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5635] was attempted by ""[15072] [ 780.703622][T15072] netlink: 'syz.3.2858': attribute type 29 has an invalid length. [ 780.734624][T15072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.437875][ T989] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 781.453499][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.462627][ T989] usb 2-1: Product: syz [ 781.467987][ T989] usb 2-1: Manufacturer: syz [ 781.960967][ T989] usb 2-1: SerialNumber: syz [ 782.339790][ T1607] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 782.512665][ T1607] usb 6-1: Using ep0 maxpacket: 8 [ 782.523377][ T1607] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 782.541679][ T1607] usb 6-1: config 0 has no interface number 0 [ 782.552713][ T1607] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.582868][ T1607] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 782.601100][ T1607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.627365][ T1607] usb 6-1: config 0 descriptor?? [ 782.656214][ T1607] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 782.665787][ T989] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 782.701302][ T989] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 782.730542][ T989] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 782.764506][ T989] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 783.023538][T15098] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 783.024079][T15097] IPVS: stopping backup sync thread 15098 ... [ 783.073969][ T1607] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 783.243222][ T1607] usb 5-1: Using ep0 maxpacket: 8 [ 783.385620][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'. [ 783.392203][ T1607] usb 5-1: config 0 has no interfaces? [ 783.423048][ T1607] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 783.449243][ T1607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.483786][ T1607] usb 5-1: config 0 descriptor?? [ 783.496530][T15110] binder: BINDER_SET_CONTEXT_MGR already set [ 783.503402][T15110] binder: 15109:15110 ioctl 4018620d 200000001000 returned -16 [ 783.710568][ T5787] usb 5-1: USB disconnect, device number 52 [ 785.029574][ T989] usb 6-1: USB disconnect, device number 55 [ 785.069999][ T5773] usb 2-1: USB disconnect, device number 49 [ 785.090389][T15130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2875'. [ 785.228157][T15130] kAFS: unable to lookup cell 'ÿ' [ 785.689991][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2882'. [ 786.440659][T15159] binder: BINDER_SET_CONTEXT_MGR already set [ 786.447126][T15159] binder: 15158:15159 ioctl 4018620d 200000001000 returned -16 [ 787.132709][ T5787] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 787.312762][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 787.338822][ T5787] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 787.378946][ T5787] usb 4-1: config 0 has no interface number 0 [ 787.391872][ T5787] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 787.437874][ T5787] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 787.475222][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.525645][ T5787] usb 4-1: config 0 descriptor?? [ 787.768498][ T5787] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 789.319885][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'. [ 789.930630][ T30] audit: type=1800 audit(1785527147.932:28): pid=15206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2901" name="UDC" dev="configfs" ino=41847 res=0 errno=0 [ 790.057776][T15208] binder: BINDER_SET_CONTEXT_MGR already set [ 790.075058][T15208] binder: 15207:15208 ioctl 4018620d 200000001000 returned -16 [ 790.151582][ T5787] usb 4-1: USB disconnect, device number 49 [ 790.408345][T15218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2905'. [ 790.438261][T15218] kAFS: unable to lookup cell 'ÿ' [ 790.652768][ T5787] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 790.813233][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 790.827665][ T5787] usb 3-1: config 0 has no interfaces? [ 790.833933][ T5787] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 790.847533][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.876354][ T5787] usb 3-1: config 0 descriptor?? [ 791.096072][ T5773] usb 3-1: USB disconnect, device number 46 [ 791.596444][T15232] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 791.700287][ T5787] IPVS: starting estimator thread 0... [ 791.883737][T15233] IPVS: using max 25 ests per chain, 60000 per kthread [ 792.942102][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 795.804121][T15258] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 795.913706][T15260] netlink: 'syz.5.2919': attribute type 1 has an invalid length. [ 797.654762][T15280] loop2: detected capacity change from 0 to 2048 [ 797.884044][T15286] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 798.248198][T15286] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 798.295845][T15286] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 798.374839][T15286] Remounting filesystem read-only [ 798.913105][ T5636] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 799.367481][T15306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2929'. [ 799.458011][T15306] kAFS: unable to lookup cell 'ÿ' [ 799.602870][ T1607] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 800.612724][ T1607] usb 5-1: Using ep0 maxpacket: 8 [ 800.650458][ T1607] usb 5-1: config 0 has no interfaces? [ 800.673086][ T1607] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 800.714138][ T1607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.756858][ T1607] usb 5-1: config 0 descriptor?? [ 800.864599][ T1607] usb 5-1: can't set config #0, error -71 [ 800.915839][ T1607] usb 5-1: USB disconnect, device number 53 [ 801.716729][T15329] macsec1: entered allmulticast mode [ 801.748189][T15329] dummy0: entered allmulticast mode [ 801.800189][T15329] dummy0: entered promiscuous mode [ 801.867215][T15329] dummy0: left allmulticast mode [ 802.009457][ T1607] dummy0: left promiscuous mode [ 803.364082][ T989] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 803.552592][ T989] usb 6-1: Using ep0 maxpacket: 8 [ 803.581008][ T989] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 803.612780][ T989] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 803.646747][ T989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 803.684680][ T989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 803.721887][ T30] audit: type=1804 audit(1785527161.722:29): pid=15342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2946" name="/newroot/479/file0" dev="fuse" ino=1 res=1 errno=0 [ 803.743994][ T989] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 803.781089][ T989] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 803.829946][ T989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.648670][T15349] fuse: Bad value for 'rootmode' [ 806.727686][ T1607] usb 6-1: USB disconnect, device number 56 [ 807.915897][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.926652][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.887952][T15383] syzkaller0: entered promiscuous mode [ 808.915400][T15390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2958'. [ 808.934607][T15383] syzkaller0: entered allmulticast mode [ 809.036859][T15391] kAFS: unable to lookup cell 'ÿ' [ 810.892726][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 811.084621][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 811.104724][ T10] usb 6-1: config 0 has no interfaces? [ 811.126130][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 811.159588][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.187271][ T10] usb 6-1: config 0 descriptor?? [ 811.518073][ T10] usb 6-1: USB disconnect, device number 57 [ 815.244333][T15458] Invalid ELF header magic: != ELF [ 816.035087][T15461] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 816.043888][T15461] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 816.684910][T15456] bridge0: port 2(erspan0) entered blocking state [ 816.691431][T15456] bridge0: port 2(erspan0) entered disabled state [ 816.699880][T15456] erspan0: entered allmulticast mode [ 816.706851][T15456] erspan0: entered promiscuous mode [ 816.712450][T15456] bridge0: port 2(erspan0) entered blocking state [ 816.718951][T15456] bridge0: port 2(erspan0) entered forwarding state [ 816.726674][T15459] erspan0: left allmulticast mode [ 816.731789][T15459] erspan0: left promiscuous mode [ 816.737089][T15459] bridge0: port 2(erspan0) entered disabled state [ 817.329067][T15475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2980'. [ 817.506149][T15475] kAFS: unable to lookup cell 'ÿ' [ 821.582487][T15508] Invalid ELF header magic: != ELF [ 822.807276][T15514] bridge0: port 2(erspan0) entered blocking state [ 822.813935][T15514] bridge0: port 2(erspan0) entered disabled state [ 822.820502][T15514] erspan0: entered allmulticast mode [ 822.827612][T15514] erspan0: entered promiscuous mode [ 822.834048][T15514] bridge0: port 2(erspan0) entered blocking state [ 822.840543][T15514] bridge0: port 2(erspan0) entered forwarding state [ 822.850815][T15514] erspan0: left allmulticast mode [ 822.855926][T15514] erspan0: left promiscuous mode [ 822.861037][T15514] bridge0: port 2(erspan0) entered disabled state [ 824.223118][ T5924] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 825.058327][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 825.081251][ T5924] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 825.092983][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 825.099629][ T5924] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 825.114181][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.172177][ T5924] usb 4-1: config 0 descriptor?? [ 825.546856][T15538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.235627][ T5924] bigben 0003:146B:0902.0010: unexpected rdesc, please submit for review [ 826.237253][ T5924] bigben 0003:146B:0902.0010: ignoring exceeding usage max [ 826.243070][ T5924] bigben 0003:146B:0902.0010: unknown main item tag 0x0 [ 826.243101][ T5924] bigben 0003:146B:0902.0010: unknown main item tag 0x0 [ 826.243125][ T5924] bigben 0003:146B:0902.0010: item fetching failed at offset 37/40 [ 826.245026][ T5924] bigben 0003:146B:0902.0010: parse failed [ 826.245130][ T5924] bigben 0003:146B:0902.0010: probe with driver bigben failed with error -22 [ 827.512643][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 827.708244][T15562] Invalid ELF header magic: != ELF [ 828.507586][ T802] usb 4-1: USB disconnect, device number 50 [ 828.513944][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 828.942177][ T10] usb 3-1: device descriptor read/all, error -71 [ 830.488028][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3011'. [ 830.712020][T15596] kAFS: unable to lookup cell 'ÿ' [ 831.063274][ T5924] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 831.109011][T15605] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3015'. [ 832.022610][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 832.554634][T15621] Invalid ELF header magic: != ELF [ 832.803611][ T5924] usb 6-1: device descriptor read/all, error -71 [ 833.877773][ T5773] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 834.062737][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 834.091949][ T5773] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 834.149620][ T5773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 834.187971][ T5773] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 834.469501][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.958377][T15639] zram0: detected capacity change from 0 to 8 [ 834.979134][ T5773] usb 4-1: config 0 descriptor?? [ 835.552327][ T5773] bigben 0003:146B:0902.0011: unexpected rdesc, please submit for review [ 835.553183][ T5773] bigben 0003:146B:0902.0011: ignoring exceeding usage max [ 835.563765][ T5773] bigben 0003:146B:0902.0011: unknown main item tag 0x0 [ 835.563790][ T5773] bigben 0003:146B:0902.0011: unknown main item tag 0x0 [ 835.563807][ T5773] bigben 0003:146B:0902.0011: item fetching failed at offset 37/40 [ 835.564370][ T5773] bigben 0003:146B:0902.0011: parse failed [ 835.564446][ T5773] bigben 0003:146B:0902.0011: probe with driver bigben failed with error -22 [ 835.636196][ T5787] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 835.813041][ T5787] usb 6-1: Using ep0 maxpacket: 8 [ 835.833355][ T5787] usb 6-1: config 0 has no interfaces? [ 835.833559][ T5787] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 835.833608][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.968731][ T5787] usb 6-1: config 0 descriptor?? [ 837.138257][ T5745] usb 6-1: USB disconnect, device number 60 [ 837.377693][ T5745] usb 4-1: USB disconnect, device number 51 [ 837.953159][T15685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3036'. [ 838.016494][T15685] kAFS: unable to lookup cell 'ÿ' [ 838.125618][ T5773] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 838.411468][ T5773] usb 5-1: unable to get BOS descriptor or descriptor too short [ 838.421187][ T5773] usb 5-1: not running at top speed; connect to a high speed hub [ 838.452080][ T5773] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 838.508977][ T5773] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 838.557146][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.604154][ T5773] usb 5-1: Product: syz [ 838.621811][ T5773] usb 5-1: Manufacturer: syz [ 838.638673][ T5773] usb 5-1: SerialNumber: syz [ 839.517328][T15683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 839.812853][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 839.852220][ T5773] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 839.877416][ T5773] usb 5-1: MIDIStreaming interface descriptor not found [ 839.992710][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 840.012228][ T10] usb 4-1: config 0 has no interfaces? [ 840.028594][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 840.064885][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.076715][ T5773] usb 5-1: USB disconnect, device number 54 [ 840.098362][ T10] usb 4-1: config 0 descriptor?? [ 840.271906][ T5658] udevd[5658]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 840.342126][ T10] usb 4-1: USB disconnect, device number 52 [ 844.542638][ T989] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 844.702709][ T989] usb 5-1: Using ep0 maxpacket: 16 [ 844.725289][ T989] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 844.772785][ T989] usb 5-1: config 0 interface 0 has no altsetting 0 [ 844.805239][ T989] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 844.841351][ T989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.914590][ T989] usb 5-1: config 0 descriptor?? [ 845.350537][T15741] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3053'. [ 845.535799][ T989] bigben 0003:146B:0902.0012: unexpected rdesc, please submit for review [ 845.536332][ T989] bigben 0003:146B:0902.0012: ignoring exceeding usage max [ 845.539875][ T989] bigben 0003:146B:0902.0012: unknown main item tag 0x0 [ 845.539907][ T989] bigben 0003:146B:0902.0012: unknown main item tag 0x0 [ 845.539931][ T989] bigben 0003:146B:0902.0012: item fetching failed at offset 37/40 [ 845.545039][ T989] bigben 0003:146B:0902.0012: parse failed [ 845.640278][ T989] bigben 0003:146B:0902.0012: probe with driver bigben failed with error -22 [ 845.763403][ T24] usb 5-1: USB disconnect, device number 55 [ 846.657253][T15759] Invalid ELF header magic: != ELF [ 847.872621][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 848.046377][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 848.076676][ T10] usb 4-1: config 0 has no interfaces? [ 848.101398][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 848.141046][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.201695][ T10] usb 4-1: config 0 descriptor?? [ 848.455053][ T10] usb 4-1: USB disconnect, device number 53 [ 849.386812][T15797] loop4: detected capacity change from 0 to 2048 [ 849.472764][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 849.532012][T15797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.936046][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 849.969435][ T24] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 850.012785][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 850.037234][ T24] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 850.080560][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.130825][ T24] usb 3-1: config 0 descriptor?? [ 850.827565][ T24] bigben 0003:146B:0902.0013: unexpected rdesc, please submit for review [ 850.828074][ T24] bigben 0003:146B:0902.0013: ignoring exceeding usage max [ 850.838449][ T24] bigben 0003:146B:0902.0013: unknown main item tag 0x0 [ 850.838479][ T24] bigben 0003:146B:0902.0013: unknown main item tag 0x0 [ 850.838502][ T24] bigben 0003:146B:0902.0013: item fetching failed at offset 37/40 [ 850.854853][ T24] bigben 0003:146B:0902.0013: parse failed [ 850.854967][ T24] bigben 0003:146B:0902.0013: probe with driver bigben failed with error -22 [ 851.273332][ T5745] usb 3-1: USB disconnect, device number 49 [ 851.963571][ T5745] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 851.982386][T15841] Invalid ELF header magic: != ELF [ 852.123057][ T5745] usb 2-1: Using ep0 maxpacket: 8 [ 852.146979][ T5745] usb 2-1: config 0 has no interfaces? [ 852.168283][ T5745] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 852.191372][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.222939][ T5745] usb 2-1: config 0 descriptor?? [ 852.451667][ T5773] usb 2-1: USB disconnect, device number 50 [ 857.451138][ T5745] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 857.768949][ T5745] usb 3-1: Using ep0 maxpacket: 16 [ 857.885500][ T5745] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 858.066795][ T5745] usb 3-1: config 0 interface 0 has no altsetting 0 [ 858.199168][ T5745] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 858.351573][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.656608][ T5745] usb 3-1: config 0 descriptor?? [ 859.239920][ T5745] bigben 0003:146B:0902.0014: unexpected rdesc, please submit for review [ 859.240460][ T5745] bigben 0003:146B:0902.0014: ignoring exceeding usage max [ 859.247620][ T5745] bigben 0003:146B:0902.0014: unknown main item tag 0x0 [ 859.295723][ T5745] bigben 0003:146B:0902.0014: unknown main item tag 0x0 [ 859.295754][ T5745] bigben 0003:146B:0902.0014: item fetching failed at offset 37/40 [ 859.298363][ T5745] bigben 0003:146B:0902.0014: parse failed [ 859.354787][ T5745] bigben 0003:146B:0902.0014: probe with driver bigben failed with error -22 [ 859.568237][ T5773] usb 3-1: USB disconnect, device number 50 [ 860.622729][ T5745] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 860.632819][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 860.793080][ T5745] usb 6-1: Using ep0 maxpacket: 8 [ 860.794735][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 860.818432][ T5745] usb 6-1: config 0 has no interfaces? [ 860.826582][ T10] usb 2-1: config 0 has no interfaces? [ 860.835157][ T5745] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 860.844070][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 860.863615][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.873535][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.898062][ T5745] usb 6-1: config 0 descriptor?? [ 860.927605][ T10] usb 2-1: config 0 descriptor?? [ 861.121384][ T5745] usb 6-1: USB disconnect, device number 61 [ 861.166034][ T10] usb 2-1: USB disconnect, device number 51 [ 861.570628][T15947] Invalid ELF header magic: != ELF [ 862.351326][T15952] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3117'. [ 862.802327][T15965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3120'. [ 862.911945][T15965] kAFS: unable to lookup cell 'ÿ' [ 863.182643][ T1607] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 863.372633][ T1607] usb 5-1: Using ep0 maxpacket: 8 [ 863.374588][ T1607] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 863.417061][ T1607] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 863.457929][ T1607] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 863.497486][ T1607] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 863.531942][ T1607] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.573134][ T1607] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 863.608330][ T1607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.457719][T15980] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 864.659585][ T9] usb 5-1: USB disconnect, device number 56 [ 866.492971][T16010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3133'. [ 867.131911][T16031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3141'. [ 867.338052][T16031] kAFS: unable to lookup cell 'ÿ' [ 867.565729][T16041] Invalid ELF header magic: != ELF [ 867.922694][ T5773] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 868.082646][ T5773] usb 4-1: Using ep0 maxpacket: 8 [ 868.099194][ T5773] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 868.120351][ T5773] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 868.148322][ T5773] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 868.162683][ T1607] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 868.173864][ T5773] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 868.215579][ T5773] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.262500][ T5773] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 868.285986][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.375790][ T1607] usb 5-1: Using ep0 maxpacket: 8 [ 868.397731][ T1607] usb 5-1: config 0 has no interfaces? [ 868.415689][ T1607] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 868.434845][ T1607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.460921][ T1607] usb 5-1: config 0 descriptor?? [ 868.572629][ T5745] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 868.685740][ T5773] usb 5-1: USB disconnect, device number 57 [ 868.734971][ T5745] usb 2-1: Using ep0 maxpacket: 16 [ 868.756179][ T5745] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 868.782770][ T5745] usb 2-1: config 0 interface 0 has no altsetting 0 [ 868.796807][ T5745] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 868.816731][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.843514][ T5745] usb 2-1: config 0 descriptor?? [ 869.095214][T16049] usbtmc 4-1:16.0: simple usb_control_msg returned 0 [ 869.297448][ T1607] usb 4-1: USB disconnect, device number 54 [ 869.360448][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.360503][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.391648][ T5745] bigben 0003:146B:0902.0015: unexpected rdesc, please submit for review [ 869.392097][ T5745] bigben 0003:146B:0902.0015: ignoring exceeding usage max [ 869.398083][ T5745] bigben 0003:146B:0902.0015: unknown main item tag 0x0 [ 869.398114][ T5745] bigben 0003:146B:0902.0015: unknown main item tag 0x0 [ 869.398139][ T5745] bigben 0003:146B:0902.0015: item fetching failed at offset 37/40 [ 869.398870][ T5745] bigben 0003:146B:0902.0015: parse failed [ 869.398981][ T5745] bigben 0003:146B:0902.0015: probe with driver bigben failed with error -22 [ 869.586480][ T5924] usb 2-1: USB disconnect, device number 52 [ 869.651026][T16058] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3150'. [ 869.776325][T16062] dlm: Using TCP for communications [ 870.046396][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3156'. [ 870.316538][T16081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3158'. [ 870.404832][T16081] kAFS: unable to lookup cell 'ÿ' [ 870.683131][T16083] Invalid ELF header magic: != ELF [ 871.938347][T16096] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3163'. [ 872.322740][ T5745] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 872.505472][ T5745] usb 3-1: Using ep0 maxpacket: 8 [ 872.539192][ T5745] usb 3-1: config 0 has no interfaces? [ 872.563672][ T5745] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 872.594765][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.631604][ T5745] usb 3-1: config 0 descriptor?? [ 872.740434][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3169'. [ 872.858928][ T5745] usb 3-1: USB disconnect, device number 51 [ 873.102660][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 873.252692][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 873.260090][ T10] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 873.271914][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 873.281249][ T10] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 873.293781][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.308104][ T10] usb 2-1: config 0 descriptor?? [ 873.526993][T16126] Invalid ELF header magic: != ELF [ 873.658488][T16128] netlink: 'syz.4.3175': attribute type 10 has an invalid length. [ 873.681454][T16128] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3175'. [ 873.706376][T16130] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3176'. [ 873.713552][T16128] dummy0: entered promiscuous mode [ 873.720870][T16128] bridge0: port 2(dummy0) entered blocking state [ 873.739249][T16128] bridge0: port 2(dummy0) entered disabled state [ 873.754647][T16128] dummy0: entered allmulticast mode [ 873.779800][T16128] bridge0: port 2(dummy0) entered blocking state [ 873.787293][T16128] bridge0: port 2(dummy0) entered forwarding state [ 873.790025][T16128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3175'. [ 873.871050][ T10] bigben 0003:146B:0902.0016: unexpected rdesc, please submit for review [ 873.878412][ T10] bigben 0003:146B:0902.0016: ignoring exceeding usage max [ 873.888463][ T10] bigben 0003:146B:0902.0016: unknown main item tag 0x0 [ 873.975921][ T10] bigben 0003:146B:0902.0016: unknown main item tag 0x0 [ 873.976041][ T10] bigben 0003:146B:0902.0016: item fetching failed at offset 37/40 [ 873.977937][ T10] bigben 0003:146B:0902.0016: parse failed [ 873.979232][ T10] bigben 0003:146B:0902.0016: probe with driver bigben failed with error -22 [ 874.142693][ T5924] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 874.216969][ T24] usb 2-1: USB disconnect, device number 53 [ 874.302705][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 874.316523][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.337223][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 874.360805][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 874.370959][T16143] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3181'. [ 874.390201][ T5924] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 874.414618][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 874.449845][ T5924] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 874.467074][ T5924] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 874.489887][ T5924] usb 3-1: Manufacturer: syz [ 874.494816][T16143] kAFS: unable to lookup cell 'ÿ' [ 874.514413][ T5924] usb 3-1: config 0 descriptor?? [ 874.895907][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3182'. [ 874.945410][ T5924] rc_core: IR keymap rc-hauppauge not found [ 874.968423][ T5924] Registered IR keymap rc-empty [ 875.000046][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.052932][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.103873][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 875.178373][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 875.243763][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.292676][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.342739][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.396304][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.465564][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.522897][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.562691][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.596651][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.633880][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 875.677532][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 876.318183][ T5924] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 876.353770][ T5924] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 876.447377][ T5924] usb 3-1: USB disconnect, device number 52 [ 876.908740][T16175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3191'. [ 876.973533][ T802] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 877.162626][ T802] usb 4-1: Using ep0 maxpacket: 8 [ 877.178711][ T802] usb 4-1: config 0 has no interfaces? [ 877.193434][ T802] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 877.214541][ T802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.241384][ T802] usb 4-1: config 0 descriptor?? [ 877.492503][ T24] usb 4-1: USB disconnect, device number 55 [ 878.052633][ T5924] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 878.232799][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 878.245979][ T5924] usb 3-1: config 0 has no interfaces? [ 878.269668][ T5924] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 878.292904][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 878.305010][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.314331][T16203] Invalid ELF header magic: != ELF [ 878.341172][ T5924] usb 3-1: config 0 descriptor?? [ 878.483642][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 878.494825][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 878.514290][T16207] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3204'. [ 878.523497][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 878.536611][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 878.560095][ T5924] usb 3-1: USB disconnect, device number 53 [ 878.589863][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 878.622191][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.664798][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 878.684936][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.713157][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3205'. [ 879.088417][T16219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3207'. [ 879.235134][T16219] kAFS: unable to lookup cell 'ÿ' [ 879.493683][T16226] usbtmc 5-1:16.0: simple control status returned b3 [ 879.715733][ T5745] usb 5-1: USB disconnect, device number 58 [ 880.613635][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3216'. [ 880.877141][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3216'. [ 880.895109][ T303] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.064381][T12776] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.691530][T16246] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3218'. [ 881.708200][T12776] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.739101][T12776] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.202830][ T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 883.454410][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 883.461788][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 883.472685][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 883.514725][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 883.567624][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 883.622094][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.661801][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 883.684286][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.624222][T16287] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 884.722383][T16290] usbtmc 6-1:16.0: simple control status returned b3 [ 884.773342][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 884.930058][ T5773] usb 6-1: USB disconnect, device number 62 [ 884.963808][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 885.003281][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 885.017514][ T10] usb 5-1: config 0 has no interfaces? [ 885.062091][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 885.110393][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.166664][ T10] usb 5-1: config 0 descriptor?? [ 885.226374][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 885.238470][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 885.267952][ T9] usb 4-1: config 0 has no interface number 0 [ 885.289197][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 885.312672][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 885.332000][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.362161][ T9] usb 4-1: config 0 descriptor?? [ 885.393792][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 885.421364][ T5773] usb 5-1: USB disconnect, device number 59 [ 885.883553][ T9] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 886.067837][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 886.100998][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 886.148087][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 886.178998][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.214322][ T9] usb 6-1: config 0 descriptor?? [ 886.452115][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 886.725499][T16317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3239'. [ 886.826794][T16320] fuse: Bad value for 'fd' [ 888.533385][ T5773] usb 4-1: USB disconnect, device number 56 [ 888.599200][T16328] kAFS: unable to lookup cell 'ÿ' [ 888.722027][ T1607] usb 6-1: USB disconnect, device number 63 [ 889.892675][ T5773] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 890.052633][ T5773] usb 5-1: Using ep0 maxpacket: 8 [ 890.224955][ T5773] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 890.235205][ T5773] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 890.245310][ T5773] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 890.255326][ T5773] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 890.265716][ T5773] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.929806][ T5773] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 890.939221][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.143578][T16354] vivid-001: ================= START STATUS ================= [ 891.167339][T16354] vivid-001: Radio HW Seek Mode: Bounded [ 891.182064][T16354] vivid-001: Radio Programmable HW Seek: false [ 891.195111][T16354] vivid-001: RDS Rx I/O Mode: Block I/O [ 891.217984][T16354] vivid-001: Generate RBDS Instead of RDS: false [ 891.241640][T16354] vivid-001: RDS Reception: true [ 891.268064][T16354] vivid-001: RDS Program Type: 0 inactive [ 891.304473][T16354] vivid-001: RDS PS Name: inactive [ 891.325787][T16354] vivid-001: RDS Radio Text: inactive [ 891.352702][T16354] vivid-001: RDS Traffic Announcement: false inactive [ 891.393182][T16354] vivid-001: RDS Traffic Program: false inactive [ 891.430250][T16354] vivid-001: RDS Music: false inactive [ 891.458427][T16354] vivid-001: ================== END STATUS ================== [ 891.864884][T16365] usbtmc 5-1:16.0: simple control status returned b3 [ 892.115387][T16366] can0: slcan on ttyS3. [ 892.828902][ T1607] usb 5-1: USB disconnect, device number 60 [ 893.274714][T16366] can0 (unregistered): slcan off ttyS3. [ 893.623701][T16374] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 893.820950][T16387] fuse: Bad value for 'fd' [ 893.984869][ T5745] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 894.655579][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 894.785063][ T5745] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 894.868087][ T5745] usb 4-1: config 0 has no interface number 0 [ 894.918096][ T5745] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 894.990381][ T5745] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 895.036804][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.411255][ T5745] usb 4-1: config 0 descriptor?? [ 895.428399][ T5745] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 896.830817][ T5745] usb 4-1: USB disconnect, device number 57 [ 897.374794][ T5745] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 897.406433][T16433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3274'. [ 898.190680][ T5745] usb 3-1: Using ep0 maxpacket: 8 [ 898.309397][ T5745] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 898.318192][ T5745] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 898.329779][ T5745] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 898.342054][ T5745] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 898.352832][ T5745] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.368629][ T5745] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 898.378013][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.386371][T16433] kAFS: unable to lookup cell 'ÿ' [ 898.835258][T16441] fuse: Bad value for 'group_id' [ 898.852346][T16441] fuse: Bad value for 'group_id' [ 899.306697][ T989] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 899.327300][T16450] usbtmc 3-1:16.0: simple control status returned b3 [ 899.540058][ T5745] usb 3-1: USB disconnect, device number 54 [ 900.182940][ T5773] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 900.203218][ T989] usb 4-1: Using ep0 maxpacket: 8 [ 900.321486][ T989] usb 4-1: device descriptor read/all, error -71 [ 900.353160][ T5773] usb 6-1: Using ep0 maxpacket: 16 [ 900.379925][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.442049][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.480956][ T5773] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 900.528206][ T5773] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 900.528498][T16462] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3284'. [ 900.580974][T16462] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3284'. [ 900.585326][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.651608][ T5773] usb 6-1: config 0 descriptor?? [ 900.692310][T16459] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 900.852128][T16466] fuse: Bad value for 'fd' [ 900.879222][ T5745] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 901.646308][ T5773] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0017/input/input27 [ 901.732727][ T5745] usb 2-1: Using ep0 maxpacket: 8 [ 901.743262][ T5745] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 901.756311][ T5745] usb 2-1: config 0 has no interface number 0 [ 901.762693][ T5745] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 901.783962][ T5745] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 901.794211][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.838323][ T5745] usb 2-1: config 0 descriptor?? [ 901.943946][ T5745] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 901.959867][ T5773] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 902.035476][ T5773] usb 6-1: USB disconnect, device number 64 [ 903.267507][T16485] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5634] was attempted by ""[16485] [ 903.286441][T16485] netlink: 'syz.4.3289': attribute type 29 has an invalid length. [ 903.310286][T16485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.640152][ T5773] usb 2-1: USB disconnect, device number 54 [ 904.740186][T16475] fido_id[16475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 907.272651][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 907.664378][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 907.676247][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 908.346907][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 908.391902][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 908.536225][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 908.601376][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.659585][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 908.696146][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.247753][T16532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3302'. [ 909.267713][T16532] kAFS: unable to lookup cell 'ÿ' [ 910.378734][ T10] usb 5-1: usb_control_msg returned -71 [ 910.420957][ T10] usbtmc 5-1:16.0: can't read capabilities [ 910.502654][ T802] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 910.583229][ T10] usb 5-1: USB disconnect, device number 61 [ 910.640346][T16546] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 910.814776][ T802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.831324][ T802] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 910.896025][T16552] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5635] was attempted by ""[16552] [ 910.920580][T16552] netlink: 'syz.3.3306': attribute type 29 has an invalid length. [ 910.958083][T16552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.083178][ T5787] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 911.419839][ T802] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.429677][ T802] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 911.445757][ T802] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 911.455081][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 911.463403][ T802] usb 3-1: SerialNumber: syz [ 911.495003][ T802] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 911.535054][ T802] usb-storage 3-1:1.0: USB Mass Storage device detected [ 911.622745][ T5787] usb 6-1: Using ep0 maxpacket: 8 [ 911.629761][ T5787] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 911.643597][ T802] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 911.650253][ T5787] usb 6-1: config 0 has no interface number 0 [ 911.671729][ T5787] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 911.696094][ T5787] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 911.709796][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.735648][ T5787] usb 6-1: config 0 descriptor?? [ 911.807206][ T5787] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 912.198289][T16564] mmap: syz.4.3313 (16564) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 912.828669][ T5787] usb 3-1: USB disconnect, device number 55 [ 913.199097][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3318'. [ 913.373612][ T57] netdevsim netdevsim120 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.418713][ T57] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.900249][ T802] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 914.556609][ T5924] usb 6-1: USB disconnect, device number 65 [ 914.622626][ T802] usb 5-1: Using ep0 maxpacket: 8 [ 914.640717][ T802] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 914.649636][ T802] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 914.659879][ T802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 914.670088][ T802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 914.689921][ T802] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.718839][ T802] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 914.748213][ T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.070295][T16606] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5636] was attempted by ""[16606] [ 915.088719][T16606] netlink: 'syz.2.3326': attribute type 29 has an invalid length. [ 915.112033][T16606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.124361][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888035274c00: rx timeout, send abort [ 915.624552][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888035274400: rx timeout, send abort [ 916.132951][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888035274400: abort rx timeout. Force session deactivation [ 917.961232][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'. [ 918.055230][ T989] usb 5-1: USB disconnect, device number 62 [ 918.066661][T16621] tipc: Started in network mode [ 918.097728][T16621] tipc: Node identity 52f7ddfb236d, cluster identity 4711 [ 918.134981][T16623] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3334'. [ 918.139436][T16621] tipc: Enabled bearer , priority 0 [ 918.166780][T16625] syzkaller0: entered promiscuous mode [ 918.179653][T16625] syzkaller0: entered allmulticast mode [ 918.245631][T16632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3337'. [ 918.259214][T16621] tipc: Resetting bearer [ 918.283423][T16623] kAFS: unable to lookup cell 'ÿ' [ 918.288960][T16633] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 919.244923][ T5924] tipc: Node number set to 1905974779 [ 919.325448][T16641] tipc: Resetting bearer [ 919.502610][ T989] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 919.516431][T16641] tipc: Disabling bearer [ 919.571388][T16660] netlink: 'syz.4.3342': attribute type 39 has an invalid length. [ 919.629453][T16660] syz_tun (unregistering): left allmulticast mode [ 919.662979][ T989] usb 2-1: Using ep0 maxpacket: 8 [ 919.676048][ T989] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 919.692440][ T989] usb 2-1: config 0 has no interface number 0 [ 919.712314][ T989] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 919.736302][ T989] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 919.757789][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.789002][ T989] usb 2-1: config 0 descriptor?? [ 919.822726][ T989] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 919.960612][T16665] netlink: 'syz.5.3345': attribute type 29 has an invalid length. [ 919.990875][T16665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.642176][T16669] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 920.862634][ T5924] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 920.882592][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'. [ 921.095735][ T5924] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.132588][ T5924] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 921.149674][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 921.167566][ T5924] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 921.185523][T16677] xt_hashlimit: size too large, truncated to 1048576 [ 921.188153][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 921.222599][ T5924] usb 5-1: Product: syz [ 921.226812][ T5924] usb 5-1: Manufacturer: syz [ 921.231416][ T5924] usb 5-1: SerialNumber: syz [ 921.256084][ T5924] usb 5-1: config 0 descriptor?? [ 921.283276][ T5924] usb 5-1: selecting invalid altsetting 0 [ 921.392672][ T5787] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 921.449536][T16683] syzkaller0: entered promiscuous mode [ 921.469192][T16683] syzkaller0: entered allmulticast mode [ 921.563311][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 921.589550][ T5787] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 921.622385][ T5787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.636188][ T5924] usb 5-1: USB disconnect, device number 63 [ 921.646846][ T5787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 921.682198][ T5787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 921.695755][ T5787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.739421][ T5787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 921.749106][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.753358][ T5787] usb 2-1: USB disconnect, device number 55 [ 922.932161][T16692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 923.027377][T16703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3357'. [ 923.055528][T16699] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 923.136571][T16703] kAFS: unable to lookup cell 'ÿ' [ 923.206895][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 923.523243][T16708] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 924.187658][ T989] usb 3-1: USB disconnect, device number 56 [ 924.300197][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3365'. [ 924.328039][T16722] macsec1: entered allmulticast mode [ 924.345085][T16725] Invalid ELF header magic: != ELF [ 924.454941][T16729] syzkaller0: entered promiscuous mode [ 924.469983][T16729] syzkaller0: entered allmulticast mode [ 924.533930][T16730] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 925.482642][ T5924] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 925.962862][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 925.970525][ T5924] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 925.992396][ T5924] usb 5-1: config 0 has no interface number 0 [ 926.010019][ T5924] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 926.052065][ T5924] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 926.080265][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.114187][ T5924] usb 5-1: config 0 descriptor?? [ 926.168566][ T5924] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 926.444764][T16762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3375'. [ 926.539520][T16762] kAFS: unable to lookup cell 'ÿ' [ 926.652678][ T5773] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 926.719099][ T5787] usb 5-1: USB disconnect, device number 64 [ 926.833163][ T5773] usb 6-1: Using ep0 maxpacket: 8 [ 926.851126][ T5773] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 926.878833][ T5773] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 926.905017][ T5773] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 926.919542][ T5773] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 926.934883][ T5773] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 926.948229][ T5773] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 926.958248][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.103583][ T5924] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 927.155481][T16772] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 927.167717][T16772] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 927.176295][T16772] ================================================================== [ 927.184355][T16772] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x3f/0x80 [ 927.192092][T16772] Read of size 8 at addr ffff88803314c6f0 by task syz.0.3381/16772 [ 927.199977][T16772] [ 927.202302][T16772] CPU: 0 UID: 0 PID: 16772 Comm: syz.0.3381 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.202338][T16772] Tainted: [L]=SOFTLOCKUP [ 927.202348][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 927.202363][T16772] Call Trace: [ 927.202372][T16772] [ 927.202383][T16772] dump_stack_lvl+0xe8/0x150 [ 927.202430][T16772] print_address_description+0x55/0x1e0 [ 927.202468][T16772] ? dummy_free_request+0x3f/0x80 [ 927.202497][T16772] print_report+0x58/0x70 [ 927.202530][T16772] kasan_report+0x117/0x150 [ 927.202571][T16772] ? dummy_free_request+0x3f/0x80 [ 927.202605][T16772] dummy_free_request+0x3f/0x80 [ 927.202634][T16772] uvc_function_bind+0xe5d/0x15a0 [ 927.202675][T16772] usb_add_function+0x2e1/0x9f0 [ 927.202704][T16772] configfs_composite_bind+0xde0/0x1410 [ 927.202738][T16772] ? __pfx_configfs_composite_bind+0x10/0x10 [ 927.202764][T16772] gadget_bind_driver+0x2ca/0x9e0 [ 927.202806][T16772] ? __pfx_gadget_bind_driver+0x10/0x10 [ 927.202839][T16772] really_probe+0x254/0xae0 [ 927.202877][T16772] __driver_probe_device+0x1e8/0x360 [ 927.202910][T16772] driver_probe_device+0x4f/0x240 [ 927.202946][T16772] __driver_attach+0x339/0x600 [ 927.202978][T16772] bus_for_each_dev+0x23b/0x2c0 [ 927.203019][T16772] ? __pfx___driver_attach+0x10/0x10 [ 927.203049][T16772] ? __pfx_bus_for_each_dev+0x10/0x10 [ 927.203090][T16772] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.203121][T16772] ? do_raw_spin_unlock+0xf5/0x210 [ 927.203155][T16772] bus_add_driver+0x345/0x670 [ 927.203200][T16772] driver_register+0x23a/0x320 [ 927.203238][T16772] usb_gadget_register_driver_owner+0xf9/0x270 [ 927.203275][T16772] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 927.203311][T16772] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 927.203348][T16772] configfs_write_iter+0x337/0x430 [ 927.203390][T16772] vfs_write+0x612/0xba0 [ 927.203427][T16772] ? __pfx_vfs_write+0x10/0x10 [ 927.203457][T16772] ? __fget_files+0x2a/0x420 [ 927.203495][T16772] ? srso_alias_return_thunk+0x5/0xfbef5 [ 927.203528][T16772] ksys_write+0x150/0x270 [ 927.203554][T16772] ? __pfx_ksys_write+0x10/0x10 [ 927.203584][T16772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.203611][T16772] do_syscall_64+0x174/0x580 [ 927.203642][T16772] ? trace_irq_disable+0x3b/0x140 [ 927.203679][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.203705][T16772] RIP: 0033:0x7f904c19e019 [ 927.203727][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.203748][T16772] RSP: 002b:00007f904d073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.203773][T16772] RAX: ffffffffffffffda RBX: 00007f904c425fa0 RCX: 00007f904c19e019 [ 927.203793][T16772] RDX: 000000000000000b RSI: 00002000000003c0 RDI: 0000000000000004 [ 927.203810][T16772] RBP: 00007f904c23500c R08: 0000000000000000 R09: 0000000000000000 [ 927.203826][T16772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.203841][T16772] R13: 00007f904c426038 R14: 00007f904c425fa0 R15: 00007ffef2f08c48 [ 927.203871][T16772] [ 927.203881][T16772] [ 927.505368][T16772] Allocated by task 5627: [ 927.509678][T16772] kasan_save_track+0x3e/0x80 [ 927.514354][T16772] __kasan_kmalloc+0x93/0xb0 [ 927.518943][T16772] __kmalloc_cache_noprof+0x32d/0x660 [ 927.524312][T16772] __hw_addr_create+0x62/0x240 [ 927.529067][T16772] __hw_addr_add_ex+0x1ce/0x520 [ 927.533906][T16772] dev_addr_init+0x15a/0x240 [ 927.538486][T16772] alloc_netdev_mqs+0x2b4/0x12b0 [ 927.543414][T16772] rtnl_create_link+0x321/0xd70 [ 927.548265][T16772] rtnl_newlink_create+0x25f/0xb00 [ 927.553370][T16772] rtnl_newlink+0x167f/0x1bd0 [ 927.558032][T16772] rtnetlink_rcv_msg+0x802/0xc00 [ 927.562957][T16772] netlink_rcv_skb+0x226/0x4a0 [ 927.567710][T16772] netlink_unicast+0x7bb/0x940 [ 927.572457][T16772] netlink_sendmsg+0x813/0xb40 [ 927.577208][T16772] sock_sendmsg_nosec+0x13a/0x180 [ 927.582230][T16772] __sys_sendto+0x408/0x5a0 [ 927.586718][T16772] __x64_sys_sendto+0xde/0x100 [ 927.591490][T16772] do_syscall_64+0x174/0x580 [ 927.596071][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.601953][T16772] [ 927.604254][T16772] The buggy address belongs to the object at ffff88803314c600 [ 927.604254][T16772] which belongs to the cache kmalloc-128 of size 128 [ 927.618551][T16772] The buggy address is located 136 bytes to the right of [ 927.618551][T16772] allocated 104-byte region [ffff88803314c600, ffff88803314c668) [ 927.633203][T16772] [ 927.635507][T16772] The buggy address belongs to the physical page: [ 927.641898][T16772] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3314c [ 927.650649][T16772] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 927.657762][T16772] page_type: f5(slab) [ 927.661729][T16772] raw: 00fff00000000000 ffff88801b001a00 dead000000000100 dead000000000122 [ 927.670295][T16772] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 927.678875][T16772] page dumped because: kasan: bad access detected [ 927.685265][T16772] page_owner tracks the page as allocated [ 927.690957][T16772] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4989, tgid 4989 (udevadm), ts 29482286122, free_ts 29471373962 [ 927.711262][T16772] post_alloc_hook+0x1f9/0x250 [ 927.716021][T16772] get_page_from_freelist+0x21fa/0x2270 [ 927.721565][T16772] __alloc_frozen_pages_noprof+0x18d/0x380 [ 927.727366][T16772] allocate_slab+0x79/0x5e0 [ 927.731862][T16772] refill_objects+0x2d5/0x350 [ 927.736526][T16772] __pcs_replace_empty_main+0x2bf/0x6b0 [ 927.742063][T16772] __kmalloc_cache_noprof+0x3a7/0x660 [ 927.747431][T16772] kernfs_fop_open+0x7e6/0xce0 [ 927.752183][T16772] do_dentry_open+0x816/0x1380 [ 927.756942][T16772] vfs_open+0x3b/0x340 [ 927.761005][T16772] path_openat+0x2e44/0x3830 [ 927.765585][T16772] do_file_open+0x23e/0x4a0 [ 927.770080][T16772] do_sys_openat2+0x115/0x200 [ 927.774750][T16772] __x64_sys_openat+0x138/0x170 [ 927.779594][T16772] do_syscall_64+0x174/0x580 [ 927.784176][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.790143][T16772] page last free pid 4989 tgid 4989 stack trace: [ 927.796448][T16772] __free_frozen_pages+0xc1e/0xd10 [ 927.801553][T16772] __slab_free+0x274/0x2c0 [ 927.805964][T16772] qlist_free_all+0x99/0x100 [ 927.810547][T16772] kasan_quarantine_reduce+0x148/0x160 [ 927.816020][T16772] __kasan_slab_alloc+0x22/0x80 [ 927.820869][T16772] __kmalloc_cache_noprof+0x2ab/0x660 [ 927.826235][T16772] kernfs_fop_open+0x3ac/0xce0 [ 927.830987][T16772] do_dentry_open+0x816/0x1380 [ 927.835740][T16772] vfs_open+0x3b/0x340 [ 927.839798][T16772] path_openat+0x2e44/0x3830 [ 927.844368][T16772] do_file_open+0x23e/0x4a0 [ 927.848854][T16772] do_sys_openat2+0x115/0x200 [ 927.853547][T16772] __x64_sys_openat+0x138/0x170 [ 927.858391][T16772] do_syscall_64+0x174/0x580 [ 927.862973][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.868890][T16772] [ 927.871198][T16772] Memory state around the buggy address: [ 927.876808][T16772] ffff88803314c580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 927.884876][T16772] ffff88803314c600: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 927.892933][T16772] >ffff88803314c680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 927.900974][T16772] ^ [ 927.908686][T16772] ffff88803314c700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 927.916730][T16772] ffff88803314c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 927.924769][T16772] ================================================================== [ 927.933105][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 927.941096][ T5924] usb 4-1: config 0 has no interfaces? [ 927.947027][ T5924] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 927.962325][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.014448][T16772] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 928.021704][T16772] CPU: 0 UID: 0 PID: 16772 Comm: syz.0.3381 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.032644][T16772] Tainted: [L]=SOFTLOCKUP [ 928.037049][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 928.047099][T16772] Call Trace: [ 928.050371][T16772] [ 928.053296][T16772] vpanic+0x56c/0xa60 [ 928.057298][T16772] ? __pfx_vpanic+0x10/0x10 [ 928.061824][T16772] ? __pfx___schedule+0x10/0x10 [ 928.066690][T16772] panic+0xc5/0xd0 [ 928.070426][T16772] ? __pfx_panic+0x10/0x10 [ 928.074860][T16772] ? preempt_schedule_thunk+0x16/0x40 [ 928.080245][T16772] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.085898][T16772] ? dummy_free_request+0x3f/0x80 [ 928.090941][T16772] check_panic_on_warn+0x89/0xb0 [ 928.095895][T16772] ? dummy_free_request+0x3f/0x80 [ 928.100941][T16772] end_report+0x73/0x170 [ 928.105200][T16772] ? dummy_free_request+0x3f/0x80 [ 928.110227][T16772] kasan_report+0x128/0x150 [ 928.114748][T16772] ? dummy_free_request+0x3f/0x80 [ 928.119786][T16772] dummy_free_request+0x3f/0x80 [ 928.124642][T16772] uvc_function_bind+0xe5d/0x15a0 [ 928.129688][T16772] usb_add_function+0x2e1/0x9f0 [ 928.134550][T16772] configfs_composite_bind+0xde0/0x1410 [ 928.140106][T16772] ? __pfx_configfs_composite_bind+0x10/0x10 [ 928.146089][T16772] gadget_bind_driver+0x2ca/0x9e0 [ 928.151120][T16772] ? __pfx_gadget_bind_driver+0x10/0x10 [ 928.156654][T16772] really_probe+0x254/0xae0 [ 928.161150][T16772] __driver_probe_device+0x1e8/0x360 [ 928.166425][T16772] driver_probe_device+0x4f/0x240 [ 928.171460][T16772] __driver_attach+0x339/0x600 [ 928.176221][T16772] bus_for_each_dev+0x23b/0x2c0 [ 928.181069][T16772] ? __pfx___driver_attach+0x10/0x10 [ 928.186341][T16772] ? __pfx_bus_for_each_dev+0x10/0x10 [ 928.191742][T16772] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.197363][T16772] ? do_raw_spin_unlock+0xf5/0x210 [ 928.202466][T16772] bus_add_driver+0x345/0x670 [ 928.207150][T16772] driver_register+0x23a/0x320 [ 928.211911][T16772] usb_gadget_register_driver_owner+0xf9/0x270 [ 928.218077][T16772] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 928.223706][T16772] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 928.229886][T16772] configfs_write_iter+0x337/0x430 [ 928.235022][T16772] vfs_write+0x612/0xba0 [ 928.239272][T16772] ? __pfx_vfs_write+0x10/0x10 [ 928.244044][T16772] ? __fget_files+0x2a/0x420 [ 928.248650][T16772] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.254287][T16772] ksys_write+0x150/0x270 [ 928.258603][T16772] ? __pfx_ksys_write+0x10/0x10 [ 928.263442][T16772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.269496][T16772] do_syscall_64+0x174/0x580 [ 928.274092][T16772] ? trace_irq_disable+0x3b/0x140 [ 928.279110][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.284991][T16772] RIP: 0033:0x7f904c19e019 [ 928.289403][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.309000][T16772] RSP: 002b:00007f904d073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 928.317399][T16772] RAX: ffffffffffffffda RBX: 00007f904c425fa0 RCX: 00007f904c19e019 [ 928.325356][T16772] RDX: 000000000000000b RSI: 00002000000003c0 RDI: 0000000000000004 [ 928.333309][T16772] RBP: 00007f904c23500c R08: 0000000000000000 R09: 0000000000000000 [ 928.341263][T16772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.349236][T16772] R13: 00007f904c426038 R14: 00007f904c425fa0 R15: 00007ffef2f08c48 [ 928.357287][T16772] [ 928.360507][T16772] Kernel Offset: disabled [ 928.364812][T16772] Rebooting in 86400 seconds..