last executing test programs: 11.1816549s ago: executing program 2 (id=193): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 8.367189856s ago: executing program 1 (id=205): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x2208004, 0x0) 8.285470586s ago: executing program 3 (id=206): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x100, 0x9, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x20000004, 0x4, 0xa, 0x7c, 0x8, 0x3, 0x0, 0x9, 0xffffffff, 0x3, 0x6, 0x10006, 0x403, 0x7, 0x9, 0xfffffff9, 0x1000, 0x4c, 0x8, 0x4, 0x0, 0xf5c0, 0x7, 0xff]}) 8.042576807s ago: executing program 2 (id=207): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xffffffffffffffff, 0x6, 0xfd, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="a1fe7be3907c", 0x0, 0xfffffffb, 0x5dbcc8c695e4f439, 0xffffffff, 0x0}) 7.880379074s ago: executing program 3 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7.617477483s ago: executing program 2 (id=210): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x44, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000e80)={0x20, 0x85, 0x4, 0x6}, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000080)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x6, 0x0, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x20, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000740)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.617299329s ago: executing program 1 (id=211): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000080)) eventfd(0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0xc, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TCSETS(r3, 0x89f0, &(0x7f0000000480)={0x2, 0x4400ef, 0x9, 0xfffffff9, 0xd, "3e0a7a08100af7717fc5bc71f6092c9e7b27ab"}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 7.613600683s ago: executing program 3 (id=213): r0 = syz_usb_connect_ath9k(0x3, 0x97, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x16b2f3ab525d7ac, [{{0x9, 0x2, 0xffffffffffffff94}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "8d58743d", {0x1, 0x3ff, 0x45a4, 0x9, 0x6}}) socket(0x10, 0x3, 0x0) setgid(0x0) syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00004e15", @ANYRESOCT=r0]) 6.179022758s ago: executing program 4 (id=214): syz_open_dev$evdev(0x0, 0x1, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.401090983s ago: executing program 4 (id=216): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000200)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 5.058824394s ago: executing program 0 (id=217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x221e, 0x4) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6690000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="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", 0xf44}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) 4.891806624s ago: executing program 4 (id=218): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) read(r0, 0x0, 0x0) 4.877962976s ago: executing program 1 (id=219): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 3.558932153s ago: executing program 3 (id=220): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x451, 0x8001008, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x1, 0x800002b, r2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x112) 3.558748381s ago: executing program 0 (id=221): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000280)={0x14, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 3.174023371s ago: executing program 4 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2.746424671s ago: executing program 0 (id=223): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x1ff, 0xe72, 0x7, 0x2800, 0x4, 0xa, {0xffff945a, 0x1}, 0x3, 0xed}}) 2.411267634s ago: executing program 4 (id=224): r0 = syz_open_dev$midi(&(0x7f0000000000), 0xf200000000000000, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) syz_open_dev$dvb_dvr(&(0x7f00000001c0), 0x7, 0x4100) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000080)={&(0x7f0000000b00)=[{0x401, 0x9c01, 0x0, 0x0}], 0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) 2.411086232s ago: executing program 1 (id=225): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 2.410944188s ago: executing program 2 (id=226): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1.835354558s ago: executing program 0 (id=227): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg(r0, &(0x7f00000000c0)={0x1, {&(0x7f0000000380)=""/71, 0xffffffffffffff00, 0x0, 0x0, 0x2}}, 0x48) 1.756751711s ago: executing program 1 (id=228): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x146) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 1.516309371s ago: executing program 3 (id=229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES64=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 1.488447433s ago: executing program 4 (id=230): syz_usb_connect(0x5, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x110, 0x6e, 0xd1, 0xce, 0x20, 0x545, 0x8080, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x40, 0x8, "", [{{0x9, 0x4, 0xf8, 0x6, 0x0, 0x84, 0x44, 0xa8, 0x8}}]}}]}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x44000) 1.268433334s ago: executing program 2 (id=231): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0xe9e3, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0xa, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0x3e, 0x8, 0x4006, 0x6, 0x4, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xbffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x4, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x10000004, 0x2, 0x4, 0xb, 0x4, 0x101, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x2, 0x5, 0xc, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x4, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0x1, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffff, 0xb1e, 0x5, 0x200, 0xffff3441, 0x40fff]}, 0x45c) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 980.103102ms ago: executing program 2 (id=232): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r3 = getpid() syz_pidfd_open(r3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000003c0)={0x1}) 465.903066ms ago: executing program 0 (id=233): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 94.488331ms ago: executing program 1 (id=234): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f00000000c0)) 94.296474ms ago: executing program 3 (id=235): syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x40, 0xa}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x85, 0x3, "67d1a0"}}) 0s ago: executing program 0 (id=236): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000000)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@tcp={{0x7, 0x4, 0x3, 0x2f, 0x30, 0x64, 0x0, 0x8, 0x6, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3e}, {[@cipso={0x86, 0x6, 0x1}]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x101, 0x0, 0x401}}}}, 0x3e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 91.722417][ T5598] cgroup: Unknown subsys name 'net' [ 91.964377][ T5598] cgroup: Unknown subsys name 'cpuset' [ 92.018807][ T5598] cgroup: Unknown subsys name 'rlimit' [ 92.057416][ T37] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 94.094630][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.872942][ T4926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.912985][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.914319][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.919644][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.957926][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.987620][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.001128][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.037268][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.037598][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.053723][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.066005][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.082781][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.087444][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.106633][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.123149][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.128023][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.156496][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.157218][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.165321][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.187406][ T4926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.189599][ T4926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.194054][ T4926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.201804][ T4926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.221259][ T4926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.235089][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.310051][ T5623] Bluetooth: hci0: command tx timeout [ 99.389324][ T5620] Bluetooth: hci3: command tx timeout [ 99.389462][ T5620] Bluetooth: hci2: command tx timeout [ 99.389667][ T5623] Bluetooth: hci1: command tx timeout [ 99.398364][ T5623] Bluetooth: hci4: command tx timeout [ 99.877203][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.882840][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.883684][ T5615] bridge_slave_0: entered allmulticast mode [ 99.899711][ T5615] bridge_slave_0: entered promiscuous mode [ 99.964807][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.965059][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.965267][ T5615] bridge_slave_1: entered allmulticast mode [ 99.967780][ T5615] bridge_slave_1: entered promiscuous mode [ 100.187590][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.274066][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.335061][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.335320][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.335528][ T5617] bridge_slave_0: entered allmulticast mode [ 100.338063][ T5617] bridge_slave_0: entered promiscuous mode [ 100.437547][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.437963][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.440025][ T5617] bridge_slave_1: entered allmulticast mode [ 100.449298][ T5617] bridge_slave_1: entered promiscuous mode [ 100.485727][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.486055][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.486363][ T5616] bridge_slave_0: entered allmulticast mode [ 100.491403][ T5616] bridge_slave_0: entered promiscuous mode [ 100.514418][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.514740][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.516568][ T5618] bridge_slave_0: entered allmulticast mode [ 100.524692][ T5618] bridge_slave_0: entered promiscuous mode [ 100.547185][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.547565][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.548009][ T5619] bridge_slave_0: entered allmulticast mode [ 100.559169][ T5619] bridge_slave_0: entered promiscuous mode [ 100.603410][ T5615] team0: Port device team_slave_0 added [ 100.603837][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.604162][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.604768][ T5616] bridge_slave_1: entered allmulticast mode [ 100.607249][ T5616] bridge_slave_1: entered promiscuous mode [ 100.641938][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.642188][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.642430][ T5618] bridge_slave_1: entered allmulticast mode [ 100.645006][ T5618] bridge_slave_1: entered promiscuous mode [ 100.647208][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.647440][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.654165][ T5619] bridge_slave_1: entered allmulticast mode [ 100.678874][ T5619] bridge_slave_1: entered promiscuous mode [ 100.748823][ T5615] team0: Port device team_slave_1 added [ 100.810710][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.893663][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.927353][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.941231][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.946967][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.983886][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.983900][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.983920][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.015773][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.042305][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.046807][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.083631][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.083644][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.083665][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.182634][ T5617] team0: Port device team_slave_0 added [ 101.259887][ T5617] team0: Port device team_slave_1 added [ 101.266642][ T5616] team0: Port device team_slave_0 added [ 101.284193][ T5618] team0: Port device team_slave_0 added [ 101.287980][ T5619] team0: Port device team_slave_0 added [ 101.325195][ T5616] team0: Port device team_slave_1 added [ 101.334634][ T5618] team0: Port device team_slave_1 added [ 101.341284][ T5619] team0: Port device team_slave_1 added [ 101.388380][ T5623] Bluetooth: hci0: command tx timeout [ 101.468404][ T4926] Bluetooth: hci2: command tx timeout [ 101.468436][ T4926] Bluetooth: hci3: command tx timeout [ 101.468455][ T4926] Bluetooth: hci4: command tx timeout [ 101.468651][ T5623] Bluetooth: hci1: command tx timeout [ 101.894548][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.894562][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.894583][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.014507][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.014526][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.014556][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.074384][ T5615] hsr_slave_0: entered promiscuous mode [ 102.076237][ T5615] hsr_slave_1: entered promiscuous mode [ 102.087174][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.087216][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.087291][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.109834][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.109853][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.109882][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.121158][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.121189][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.121271][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.195620][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.195671][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.195760][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.204592][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.204642][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.204717][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.212663][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.212680][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.212708][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.577107][ T5617] hsr_slave_0: entered promiscuous mode [ 102.581771][ T5617] hsr_slave_1: entered promiscuous mode [ 102.587945][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 102.596485][ T5617] Cannot create hsr debugfs directory [ 102.683972][ T5616] hsr_slave_0: entered promiscuous mode [ 102.685746][ T5616] hsr_slave_1: entered promiscuous mode [ 102.687095][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 102.687126][ T5616] Cannot create hsr debugfs directory [ 102.714603][ T5619] hsr_slave_0: entered promiscuous mode [ 102.716344][ T5619] hsr_slave_1: entered promiscuous mode [ 102.717693][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 102.717717][ T5619] Cannot create hsr debugfs directory [ 102.753167][ T5618] hsr_slave_0: entered promiscuous mode [ 102.754936][ T5618] hsr_slave_1: entered promiscuous mode [ 102.756284][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 102.756333][ T5618] Cannot create hsr debugfs directory [ 103.468845][ T5623] Bluetooth: hci0: command tx timeout [ 103.548439][ T5620] Bluetooth: hci4: command tx timeout [ 103.548474][ T5620] Bluetooth: hci3: command tx timeout [ 103.548495][ T5620] Bluetooth: hci2: command tx timeout [ 103.548854][ T5623] Bluetooth: hci1: command tx timeout [ 103.926892][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.978617][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.986709][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.013387][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.032052][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.066026][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.094266][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.125662][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.242895][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.286536][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.309790][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.344026][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.361484][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.394617][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.421422][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.455083][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.627283][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.663800][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.683366][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.726727][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.739573][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.784690][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.825693][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.863857][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.083565][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.125009][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.152147][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.182463][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.195197][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.226315][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.265760][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.305654][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.491063][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.524246][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.548871][ T5623] Bluetooth: hci0: command tx timeout [ 105.557249][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.558033][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.593095][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.621296][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.628570][ T4926] Bluetooth: hci2: command tx timeout [ 105.628618][ T4926] Bluetooth: hci3: command tx timeout [ 105.628637][ T4926] Bluetooth: hci4: command tx timeout [ 105.628717][ T5623] Bluetooth: hci1: command tx timeout [ 105.662819][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.679003][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.715031][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.854722][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.913676][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.941866][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.942419][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.030859][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.031018][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.135660][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.199381][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.219876][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.219993][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.284489][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.284660][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.397764][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.452197][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.491328][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.491512][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.572021][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.572166][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.705260][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.767206][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.785074][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.785323][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.900682][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.905339][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.056014][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.123177][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.123378][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.223277][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.223454][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.985432][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.408706][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.900364][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.125116][ T5617] veth0_vlan: entered promiscuous mode [ 109.252830][ T5617] veth1_vlan: entered promiscuous mode [ 109.446320][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.481453][ T5616] veth0_vlan: entered promiscuous mode [ 109.497317][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.546124][ T5615] veth0_vlan: entered promiscuous mode [ 109.584976][ T5616] veth1_vlan: entered promiscuous mode [ 109.609290][ T5615] veth1_vlan: entered promiscuous mode [ 109.672638][ T5617] veth0_macvtap: entered promiscuous mode [ 109.725545][ T5617] veth1_macvtap: entered promiscuous mode [ 109.868060][ T5619] veth0_vlan: entered promiscuous mode [ 109.904067][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.905321][ T5616] veth0_macvtap: entered promiscuous mode [ 109.923065][ T5618] veth0_vlan: entered promiscuous mode [ 109.940254][ T5615] veth0_macvtap: entered promiscuous mode [ 109.970871][ T5616] veth1_macvtap: entered promiscuous mode [ 109.995460][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.018941][ T5615] veth1_macvtap: entered promiscuous mode [ 110.027875][ T5619] veth1_vlan: entered promiscuous mode [ 110.070319][ T5618] veth1_vlan: entered promiscuous mode [ 110.094201][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.133325][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.163580][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.181425][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.271374][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.314410][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.385241][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.514835][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.552870][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.618438][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.627272][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.677605][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.712694][ T5619] veth0_macvtap: entered promiscuous mode [ 110.724054][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.763336][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.783780][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.831907][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.832961][ T5618] veth0_macvtap: entered promiscuous mode [ 110.883814][ T5619] veth1_macvtap: entered promiscuous mode [ 111.062055][ T5618] veth1_macvtap: entered promiscuous mode [ 111.130168][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.130194][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.432816][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.489965][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.489997][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.528036][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.569327][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.662900][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.706190][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.706210][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.731689][ T1499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.746391][ T1499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.760471][ T1499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.764957][ T1499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.835367][ T1499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.862998][ T1499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.906024][ T1499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.966006][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.966026][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.967112][ T1499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.225557][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.225576][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.729525][ T5803] loop1: detected capacity change from 0 to 16 [ 112.767297][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.767318][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.422555][ T5803] erofs (device loop1): mounted with root inode @ nid 36. [ 113.438117][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.438135][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.804851][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.804870][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.293552][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.293574][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.415227][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.415247][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.444588][ T5743] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.680499][ T5743] usb 2-1: device descriptor read/64, error -71 [ 115.002638][ T5743] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.102120][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.168446][ T5743] usb 2-1: device descriptor read/64, error -71 [ 115.283301][ T5743] usb usb2-port1: attempt power cycle [ 115.434421][ T5813] loop4: detected capacity change from 0 to 32768 [ 115.439783][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 115.439812][ T9] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 115.439832][ T9] usb 3-1: Product: syz [ 115.969679][ T5813] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 116.220152][ T9] usb 3-1: config 0 descriptor?? [ 116.551124][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 116.609451][ T5813] XFS (loop4): Ending clean mount [ 116.721959][ T9] usb 3-1: Detected FT232H [ 116.904283][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 116.946887][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 116.952553][ T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 116.989446][ T5601] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.148268][ T5601] usb 1-1: Using ep0 maxpacket: 16 [ 117.209745][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.209780][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.209804][ T5601] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.209847][ T5601] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 117.209872][ T5601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.286438][ T5615] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 117.435457][ T5601] usb 1-1: config 0 descriptor?? [ 117.671364][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 118.048593][ T5840] PKCS7: Unknown OID: [4] 0.0 [ 118.048618][ T5840] PKCS7: Only support pkcs7_signedData type [ 118.064853][ T5840] loop1: detected capacity change from 0 to 8 [ 118.157298][ T5840] SQUASHFS error: xz decompression failed, data probably corrupt [ 118.157336][ T5840] SQUASHFS error: Failed to read block 0x108: -5 [ 118.157356][ T5840] SQUASHFS error: Unable to read metadata cache entry [106] [ 118.157379][ T5840] SQUASHFS error: Unable to read inode 0x11f [ 118.535708][ T9] usb 3-1: USB disconnect, device number 2 [ 119.094720][ T5827] [U]  [ 119.136973][ T5601] usbhid 1-1:0.0: can't add hid device: -71 [ 119.137063][ T5601] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 119.302379][ T5601] usb 1-1: USB disconnect, device number 2 [ 120.046135][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 120.341706][ T9] ftdi_sio 3-1:0.0: device disconnected [ 120.854722][ T5854] loop1: detected capacity change from 0 to 64 [ 120.941223][ T5857] loop4: detected capacity change from 0 to 8 [ 120.979956][ T5848] trusted_key: syz.0.10 sent an empty control message without MSG_MORE. [ 121.040862][ T5849] capability: warning: `syz.0.10' uses 32-bit capabilities (legacy support in use) [ 121.041243][ T5849] program syz.0.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.364737][ T5862] loop3: detected capacity change from 0 to 256 [ 122.700658][ T5854] syz.1.11: attempt to access beyond end of device [ 122.700658][ T5854] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 122.700785][ T5854] Buffer I/O error on dev loop1, logical block 512, async page read [ 122.701144][ T5854] syz.1.11: attempt to access beyond end of device [ 122.701144][ T5854] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 122.701173][ T5854] Buffer I/O error on dev loop1, logical block 56576, async page read [ 122.971800][ T5862] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 123.359770][ T5869] loop2: detected capacity change from 0 to 4096 [ 123.361098][ T5869] EXT4-fs: inline encryption not supported [ 123.361302][ T5869] EXT4-fs: Ignoring removed bh option [ 123.611352][ T5869] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 123.691936][ T5875] loop1: detected capacity change from 0 to 512 [ 123.742569][ T5875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.839491][ T5869] comedi comedi3: 8255: I/O base address not correctly aligned [ 124.024548][ T5878] Illegal XDP return value 4294967294 on prog (id 6) dev N/A, expect packet loss! [ 124.053167][ T5877] loop4: detected capacity change from 0 to 128 [ 124.115831][ T5882] loop0: detected capacity change from 0 to 512 [ 124.175178][ T5882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.178063][ T5884] netlink: 144 bytes leftover after parsing attributes in process `syz.2.20'. [ 124.246745][ T5875] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 124.256583][ T5875] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.16: corrupted in-inode xattr: e_value size too large [ 124.256781][ T5875] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.260054][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 124.260076][ C0] EXT4-fs (loop1): initial error at time 1780277423: ext4_iget_extra_inode:5128: inode 15 [ 124.260118][ C0] EXT4-fs (loop1): last error at time 1780277423: ext4_iget_extra_inode:5128: inode 15 [ 124.328480][ T5875] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.16: couldn't read orphan inode 15 (err -117) [ 124.328609][ T5875] loop1: lost filesystem error report for type 5 error -117 [ 124.334360][ T5875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.451125][ T5882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.451149][ T5882] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.906397][ T5890] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.16: corrupted in-inode xattr: e_value size too large [ 124.991158][ T5882] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.18: Allocating blocks 41-42 which overlap fs metadata [ 124.991195][ T5882] loop0: lost filesystem error report for type 5 error -117 [ 125.058153][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 125.058177][ C1] EXT4-fs (loop0): initial error at time 1780277424: ext4_mb_mark_diskspace_used:4222 [ 125.058204][ C1] EXT4-fs (loop0): last error at time 1780277424: ext4_mb_mark_diskspace_used:4222 [ 125.283349][ T5882] EXT4-fs (loop0): Remounting filesystem read-only [ 125.302352][ T5882] Quota error (device loop0): write_blk: dquota write failed [ 125.302372][ T5882] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 125.305160][ T5882] Quota error (device loop0): write_blk: dquota write failed [ 125.356519][ T5882] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 125.357079][ T5882] EXT4-fs (loop0): 1 truncate cleaned up [ 125.438533][ T5882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.585079][ T5903] wg1: entered promiscuous mode [ 125.585107][ T5903] wg1: entered allmulticast mode [ 125.835132][ T5909] netlink: 64 bytes leftover after parsing attributes in process `syz.2.25'. [ 126.115461][ T5911] loop2: detected capacity change from 0 to 2048 [ 126.127302][ T5911] ======================================================= [ 126.127302][ T5911] WARNING: The mand mount option has been deprecated and [ 126.127302][ T5911] and is ignored by this kernel. Remove the mand [ 126.127302][ T5911] option from the mount to silence this warning. [ 126.127302][ T5911] ======================================================= [ 126.172999][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.256330][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.580555][ T5911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.743232][ T38] audit: type=1326 audit(1780277425.872:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e6f3ce59 code=0x7ffc0000 [ 126.743291][ T38] audit: type=1326 audit(1780277425.872:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e6f3ce59 code=0x7ffc0000 [ 126.821511][ T38] audit: type=1326 audit(1780277425.872:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e6f3ce59 code=0x7ffc0000 [ 126.823914][ T38] audit: type=1326 audit(1780277425.952:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26e6f3ce59 code=0x7ffc0000 [ 126.823982][ T38] audit: type=1326 audit(1780277425.952:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e6f3ce59 code=0x7ffc0000 [ 126.824029][ T38] audit: type=1326 audit(1780277425.952:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5922 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e6f3ce59 code=0x7ffc0000 [ 126.954063][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 127.000273][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 127.050959][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 127.174867][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.175633][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 127.192079][ T9] usb 3-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 127.192154][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 127.192197][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 45: 197, using maximum allowed: 30 [ 127.192244][ T9] usb 3-1: config 1 interface 1 altsetting 45 has 0 endpoint descriptors, different from the interface descriptor's value: 197 [ 127.192272][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 127.262850][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.262884][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 127.262905][ T9] usb 3-1: Product: syz [ 127.262921][ T9] usb 3-1: Manufacturer: syz [ 127.262936][ T9] usb 3-1: SerialNumber: syz [ 127.403026][ T5911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.604793][ T5932] process 'syz.1.26' launched './file0' with NULL argv: empty string added [ 127.714954][ T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 127.794102][ T9] usb 3-1: USB disconnect, device number 3 [ 127.905567][ T5941] loop0: detected capacity change from 0 to 8 [ 129.748963][ T5962] loop4: detected capacity change from 0 to 256 [ 129.862084][ T5962] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 129.862500][ T5962] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 130.793284][ T38] kauditd_printk_skb: 46 callbacks suppressed [ 130.793311][ T38] audit: type=1800 audit(1780277429.882:54): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.43" name="file1" dev="tmpfs" ino=66 res=0 errno=0 [ 130.958616][ T5979] loop1: detected capacity change from 0 to 64 [ 131.197543][ T5977] loop2: detected capacity change from 0 to 256 [ 131.200052][ T5979] MINIX-fs: mounting file system with errors, running fsck is recommended [ 131.237729][ T5979] Trying to free block not in datazone [ 132.130589][ T5972] Invalid source name [ 132.390799][ T5977] FAT-fs (loop2): Directory bread(block 64) failed [ 132.390838][ T5977] FAT-fs (loop2): Directory bread(block 65) failed [ 132.390943][ T5977] FAT-fs (loop2): Directory bread(block 66) failed [ 132.390968][ T5977] FAT-fs (loop2): Directory bread(block 67) failed [ 132.391068][ T5977] FAT-fs (loop2): Directory bread(block 68) failed [ 132.391091][ T5977] FAT-fs (loop2): Directory bread(block 69) failed [ 132.391210][ T5977] FAT-fs (loop2): Directory bread(block 70) failed [ 132.391234][ T5977] FAT-fs (loop2): Directory bread(block 71) failed [ 132.391332][ T5977] FAT-fs (loop2): Directory bread(block 72) failed [ 132.391355][ T5977] FAT-fs (loop2): Directory bread(block 73) failed [ 133.222820][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.232950][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.196165][ T5986] binfmt_misc: register: failed to install interpreter file ./file0 [ 134.485538][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.648871][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 134.655400][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.675660][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.675689][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.675709][ T9] usb 1-1: Product: syz [ 134.675724][ T9] usb 1-1: Manufacturer: syz [ 134.675739][ T9] usb 1-1: SerialNumber: syz [ 134.736142][ T9] usb 1-1: config 0 descriptor?? [ 135.148555][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.268227][ T5817] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.270739][ T5343] kernel write not supported for file /fb0 (pid: 5343 comm: kworker/1:3) [ 135.298280][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 135.306952][ T9] usb 2-1: config 0 has no interfaces? [ 135.327169][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 135.327202][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.327224][ T9] usb 2-1: Product: syz [ 135.327239][ T9] usb 2-1: Manufacturer: syz [ 135.327255][ T9] usb 2-1: SerialNumber: syz [ 135.448498][ T9] usb 2-1: config 0 descriptor?? [ 135.498191][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 135.501000][ T5817] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 135.501029][ T5817] usb 5-1: config 0 has no interface number 0 [ 135.504821][ T5817] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 135.504849][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.504868][ T5817] usb 5-1: Product: syz [ 135.504882][ T5817] usb 5-1: Manufacturer: syz [ 135.504895][ T5817] usb 5-1: SerialNumber: syz [ 135.606104][ T5817] usb 5-1: config 0 descriptor?? [ 135.742453][ T5343] usb 2-1: USB disconnect, device number 5 [ 135.828643][ T6017] loop0: detected capacity change from 0 to 128 [ 135.931714][ T6013] loop2: detected capacity change from 0 to 32768 [ 136.013922][ T6013] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.058462][ T6017] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 136.303591][ T6013] XFS (loop2): Ending clean mount [ 136.313737][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.366566][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.526349][ T5817] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 136.526494][ T5817] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 136.561621][ T5616] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.776533][ T6029] loop1: detected capacity change from 0 to 128 [ 136.863365][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.864094][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.071392][ T5817] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 137.117182][ T5627] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.129629][ T5817] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 137.255691][ T5817] usb 5-1: USB disconnect, device number 2 [ 137.278723][ T5627] usb 4-1: Using ep0 maxpacket: 32 [ 137.293962][ T5627] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.297367][ T5627] usb 4-1: config 11 has an invalid interface number: 86 but max is 0 [ 137.297394][ T5627] usb 4-1: config 11 has no interface number 0 [ 137.297437][ T5627] usb 4-1: config 11 interface 86 altsetting 92 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.297461][ T5627] usb 4-1: config 11 interface 86 has no altsetting 0 [ 137.357672][ T5627] usb 4-1: New USB device found, idVendor=0499, idProduct=1034, bcdDevice=b6.9f [ 137.357712][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.357734][ T5627] usb 4-1: Product: syz [ 137.357749][ T5627] usb 4-1: Manufacturer: syz [ 137.357764][ T5627] usb 4-1: SerialNumber: syz [ 137.619722][ T6037] loop8: detected capacity change from 0 to 7 [ 137.774782][ T6037] Dev loop8: unable to read RDB block 7 [ 137.774850][ T6037] loop8: unable to read partition table [ 137.775116][ T6037] loop8: partition table beyond EOD, truncated [ 137.775159][ T6037] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 137.874339][ T5627] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.945553][ T10] usb 1-1: USB disconnect, device number 3 [ 138.551503][ T6046] dvmrp8: entered allmulticast mode [ 138.954147][ T6061] loop3: detected capacity change from 0 to 512 [ 138.955098][ T6061] EXT4-fs: Ignoring removed nobh option [ 138.971856][ T6061] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 138.971917][ T6061] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.037083][ T6061] EXT4-fs (loop3): 1 truncate cleaned up [ 139.052841][ T6061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.143923][ T6065] loop2: detected capacity change from 0 to 512 [ 139.189578][ T5627] snd-usb-audio 4-1:11.86: probe with driver snd-usb-audio failed with error -2 [ 139.221828][ T6065] EXT4-fs: Ignoring removed oldalloc option [ 139.246480][ T6065] EXT4-fs (loop2): filesystem is read-only [ 139.246872][ T6065] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 139.281788][ T5627] usb 4-1: USB disconnect, device number 2 [ 139.318602][ T6065] EXT4-fs (loop2): filesystem is read-only [ 139.318622][ T6065] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.451617][ T6065] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.73: bg 0: block 64: padding at end of block bitmap is not set [ 139.451652][ T6065] loop2: lost filesystem error report for type 5 error -117 [ 139.458216][ C0] EXT4-fs (loop2): initial error at time 1780277438: ext4_validate_block_bitmap:441 [ 139.458249][ C0] EXT4-fs (loop2): last error at time 1780277438: ext4_validate_block_bitmap:441 [ 139.516347][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:11.86/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.677268][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.783216][ T6065] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 139.783242][ T6065] loop2: lost filesystem error report for type 5 error -117 [ 139.828490][ T6065] EXT4-fs (loop2): 1 orphan inode deleted [ 139.833779][ T6053] loop1: detected capacity change from 0 to 32768 [ 139.865900][ T6065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.935084][ T6053] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 140.167550][ T6053] XFS (loop1): Ending clean mount [ 140.314755][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.326914][ T5617] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 140.458265][ T5804] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.614231][ T6088] loop0: detected capacity change from 0 to 32768 [ 141.701023][ T6088] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 141.740276][ T5804] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 141.740311][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.740333][ T5804] usb 4-1: Product: syz [ 141.740349][ T5804] usb 4-1: Manufacturer: syz [ 141.740366][ T5804] usb 4-1: SerialNumber: syz [ 141.830896][ T6088] XFS (loop0): Ending clean mount [ 141.973297][ T5618] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 142.289156][ T6105] loop2: detected capacity change from 0 to 16 [ 142.323483][ T6105] erofs (device loop2): invalid ishare xattr prefix id 0 [ 142.480400][ T6108] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 142.584299][ T5804] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 142.584369][ T5804] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 143.174021][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.174891][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.044639][ T5804] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 144.046651][ T5804] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 144.292011][ T5804] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 144.292075][ T5804] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 144.460378][ T5804] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 144.566892][ T5804] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 144.661287][ T5627] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.695010][ T5804] usb 4-1: USB disconnect, device number 3 [ 144.831699][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.831735][ T5627] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.831752][ T5627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.848163][ T5627] usb 1-1: config 0 descriptor?? [ 145.129406][ T37] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 145.131400][ T5627] usbhid 1-1:0.0: can't add hid device: -71 [ 145.131529][ T5627] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 145.291062][ T5627] usb 1-1: USB disconnect, device number 4 [ 145.306481][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.308869][ T37] usb 5-1: not running at top speed; connect to a high speed hub [ 145.310401][ T37] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.310426][ T37] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.328711][ T37] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 145.328744][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.328767][ T37] usb 5-1: Product: syz [ 145.328783][ T37] usb 5-1: Manufacturer: syz [ 145.328799][ T37] usb 5-1: SerialNumber: syz [ 146.968346][ T5627] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 147.200609][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 147.201284][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 147.201676][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 147.202332][ T5627] usb 1-1: device descriptor read/all, error -32 [ 147.465282][ T6156] comedi comedi4: commands at RT priority not supported in this driver [ 147.575083][ T6137] loop1: detected capacity change from 0 to 32768 [ 147.761355][ T6137] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 147.834507][ T6137] XFS (loop1): Ending clean mount [ 148.039150][ T5617] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 148.195248][ T5627] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 148.250136][ T37] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 148.347161][ T37] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3) [ 148.364754][ T37] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 148.420624][ T37] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 148.553137][ T5627] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 148.553169][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 148.553191][ T5627] usb 1-1: Product: syz [ 148.553206][ T5627] usb 1-1: Manufacturer: syz [ 148.553221][ T5627] usb 1-1: SerialNumber: syz [ 148.681826][ T5627] usb 1-1: config 0 descriptor?? [ 148.850628][ T37] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 148.904376][ T822] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.904660][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 149.921223][ T822] usb 4-1: device descriptor read/64, error -32 [ 150.342432][ T37] usb 5-1: USB disconnect, device number 3 [ 150.468213][ T822] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.649189][ T822] usb 4-1: Using ep0 maxpacket: 8 [ 150.651955][ T822] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 150.651993][ T822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 150.652020][ T822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.652045][ T822] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.652090][ T822] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.652115][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.930217][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.067803][ T822] usb 4-1: usb_control_msg returned -32 [ 151.067845][ T822] usbtmc 4-1:16.0: can't read capabilities [ 151.082281][ T6187] loop4: detected capacity change from 0 to 4096 [ 151.321426][ T6192] loop1: detected capacity change from 0 to 256 [ 151.403144][ T6187] ntfs3(loop4): Failed to load $Volume (-22). [ 151.663579][ T6192] FAT-fs (loop1): Directory bread(block 64) failed [ 151.663616][ T6192] FAT-fs (loop1): Directory bread(block 65) failed [ 151.663733][ T6192] FAT-fs (loop1): Directory bread(block 66) failed [ 151.663758][ T6192] FAT-fs (loop1): Directory bread(block 67) failed [ 151.663981][ T6192] FAT-fs (loop1): Directory bread(block 68) failed [ 151.664007][ T6192] FAT-fs (loop1): Directory bread(block 69) failed [ 151.664113][ T6192] FAT-fs (loop1): Directory bread(block 70) failed [ 151.664138][ T6192] FAT-fs (loop1): Directory bread(block 71) failed [ 151.664251][ T6192] FAT-fs (loop1): Directory bread(block 72) failed [ 151.664274][ T6192] FAT-fs (loop1): Directory bread(block 73) failed [ 151.957371][ T9] usb 1-1: USB disconnect, device number 6 [ 152.104444][ T38] audit: type=1800 audit(1780277451.232:55): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.99" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 153.571047][ T5817] usb 4-1: USB disconnect, device number 5 [ 156.233170][ T6309] hsr0: entered promiscuous mode [ 156.295476][ T6313] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 156.364926][ T6312] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 157.645157][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 157.772942][ T6357] syz.4.164 uses obsolete (PF_INET,SOCK_PACKET) [ 157.810852][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 157.810882][ T9] usb 3-1: config 0 has no interface number 0 [ 157.810927][ T9] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 157.810956][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 157.810984][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid maxpacket 5706, setting to 64 [ 157.882764][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 157.882800][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 157.882822][ T9] usb 3-1: Product: syz [ 157.882838][ T9] usb 3-1: SerialNumber: syz [ 158.016995][ T9] usb 3-1: config 0 descriptor?? [ 158.067741][ T6347] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.243628][ T9] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 158.299355][ T9] usb 3-1: USB disconnect, device number 4 [ 158.454507][ T6370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.968737][ T6383] program syz.2.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.088687][ T37] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.238366][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 159.248838][ T37] usb 4-1: config 0 has no interfaces? [ 159.252152][ T37] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 159.252172][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.252186][ T37] usb 4-1: Product: syz [ 159.252196][ T37] usb 4-1: Manufacturer: syz [ 159.252207][ T37] usb 4-1: SerialNumber: syz [ 159.295138][ T37] usb 4-1: config 0 descriptor?? [ 160.308279][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.474569][ T9] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 160.496382][ T9] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 160.496415][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.496435][ T9] usb 1-1: Product: syz [ 160.496450][ T9] usb 1-1: Manufacturer: syz [ 160.496466][ T9] usb 1-1: SerialNumber: syz [ 160.626924][ T9] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 160.730533][ T5817] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.730669][ T6418] random: crng reseeded on system resumption [ 160.938505][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 160.957648][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 160.957745][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.957791][ T5817] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 160.957816][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.086890][ T5817] usb 5-1: config 0 descriptor?? [ 161.341855][ T5601] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 161.426408][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.427985][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 161.431768][ T9] usb 1-1: media controller created [ 161.526085][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.541759][ T5601] usb 3-1: config 8 has an invalid interface number: 92 but max is 0 [ 161.541788][ T5601] usb 3-1: config 8 has no interface number 0 [ 161.541864][ T5601] usb 3-1: config 8 interface 92 has no altsetting 0 [ 161.549710][ T5601] usb 3-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=c4.9f [ 161.550398][ T5601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.550520][ T5601] usb 3-1: Product: syz [ 161.550537][ T5601] usb 3-1: Manufacturer: syz [ 161.550552][ T5601] usb 3-1: SerialNumber: syz [ 161.620071][ T5817] hid (null): unknown global tag 0xc [ 161.849045][ T5817] uclogic 0003:2179:0077.0001: interface is invalid, ignoring [ 161.886909][ T6430] ubi16: attaching mtd0 [ 161.886940][ T6430] ubi16 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 161.927667][ T5601] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 161.927982][ T5601] dvb-usb: bulk message failed: -22 (3/0) [ 161.995341][ T10] usb 4-1: USB disconnect, device number 6 [ 162.073576][ T5817] usb 5-1: USB disconnect, device number 4 [ 162.197716][ T5601] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 162.208627][ T5601] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 162.208704][ T5601] usb 3-1: media controller created [ 162.230438][ T5601] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.411038][ T5601] dvb-usb: bulk message failed: -22 (6/0) [ 162.411165][ T5601] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 162.620465][ T5601] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 162.831732][ T5817] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 162.876369][ T5601] dvb-usb: schedule remote query interval to 150 msecs. [ 162.876388][ T5601] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 162.994139][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.994172][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.994199][ T5817] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 162.994216][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.032374][ T5818] dvb-usb: bulk message failed: -22 (1/0) [ 163.032519][ T5818] dvb-usb: error while querying for an remote control event. [ 163.176444][ T5601] usb 3-1: USB disconnect, device number 5 [ 163.191905][ T1246] dvb-usb: bulk message failed: -22 (1/0) [ 163.191940][ T1246] dvb-usb: error while querying for an remote control event. [ 163.264330][ T5817] usb 5-1: config 0 descriptor?? [ 163.480951][ T9] usb 1-1: USB disconnect, device number 7 [ 163.802796][ T5817] elan 0003:04F3:0755.0002: invalid report_count 42020 [ 163.802823][ T5817] elan 0003:04F3:0755.0002: item 0 2 1 9 parsing failed [ 163.803751][ T5817] elan 0003:04F3:0755.0002: Hid Parse failed [ 163.803859][ T5817] elan 0003:04F3:0755.0002: probe with driver elan failed with error -22 [ 163.855776][ T6456] syzkaller1: entered promiscuous mode [ 163.855819][ T6456] syzkaller1: entered allmulticast mode [ 164.017152][ T5601] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 164.029995][ T1246] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.188604][ T1246] usb 2-1: Using ep0 maxpacket: 32 [ 164.190840][ T1246] usb 2-1: config 1 has an invalid interface number: 110 but max is 3 [ 164.190867][ T1246] usb 2-1: config 1 has an invalid interface number: 62 but max is 3 [ 164.190888][ T1246] usb 2-1: config 1 has an invalid interface number: 45 but max is 3 [ 164.190909][ T1246] usb 2-1: config 1 has an invalid interface number: 130 but max is 3 [ 164.190931][ T1246] usb 2-1: config 1 has no interface number 0 [ 164.190949][ T1246] usb 2-1: config 1 has no interface number 1 [ 164.190966][ T1246] usb 2-1: config 1 has no interface number 2 [ 164.190984][ T1246] usb 2-1: config 1 has no interface number 3 [ 164.191065][ T1246] usb 2-1: config 1 interface 110 has no altsetting 0 [ 164.191085][ T1246] usb 2-1: config 1 interface 62 has no altsetting 0 [ 164.191105][ T1246] usb 2-1: config 1 interface 45 has no altsetting 0 [ 164.191125][ T1246] usb 2-1: config 1 interface 130 has no altsetting 0 [ 164.196450][ T1246] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=6a.6c [ 164.196481][ T1246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.196502][ T1246] usb 2-1: Product: syz [ 164.196518][ T1246] usb 2-1: Manufacturer: syz [ 164.196533][ T1246] usb 2-1: SerialNumber: syz [ 164.479519][ T5601] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.649255][ T5601] usb 3-1: Using ep0 maxpacket: 32 [ 164.659108][ T5601] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.659201][ T5601] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.659319][ T5601] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.659345][ T5601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.766554][ T5601] usb 3-1: config 0 descriptor?? [ 164.802948][ T5601] hub 3-1:0.0: bad descriptor, ignoring hub [ 164.802990][ T5601] hub 3-1:0.0: probe with driver hub failed with error -5 [ 164.853927][ T5601] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 165.018375][ T5627] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.089223][ T37] usb 3-1: USB disconnect, device number 6 [ 165.170631][ T5627] usb 1-1: Using ep0 maxpacket: 16 [ 165.176310][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 165.199324][ T5627] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.199450][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.199473][ T5627] usb 1-1: Product: syz [ 165.199489][ T5627] usb 1-1: Manufacturer: syz [ 165.199504][ T5627] usb 1-1: SerialNumber: syz [ 165.320787][ T5627] usb 1-1: config 0 descriptor?? [ 165.350829][ T5627] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 165.350867][ T5627] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 165.533130][ T5601] usb 5-1: USB disconnect, device number 5 [ 165.940798][ T1246] usb 2-1: USB disconnect, device number 6 [ 165.968036][ T5627] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 166.473888][ T5817] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 166.517083][ T6498] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 166.522653][ T5627] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 166.526216][ T5627] em28xx 1-1:0.0: board has no eeprom [ 166.588404][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.686517][ T5817] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 166.686551][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.686573][ T5817] usb 3-1: Product: syz [ 166.686589][ T5817] usb 3-1: Manufacturer: syz [ 166.686604][ T5817] usb 3-1: SerialNumber: syz [ 166.887053][ T10] usb 4-1: too many configurations: 172, using maximum allowed: 8 [ 166.912536][ T10] usb 4-1: config index 0 descriptor too short (expected 65428, got 133) [ 166.912565][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.955918][ T10] usb 4-1: config index 1 descriptor too short (expected 65428, got 133) [ 166.955952][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.959710][ T10] usb 4-1: config index 2 descriptor too short (expected 65428, got 133) [ 166.959761][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.099373][ T10] usb 4-1: config index 3 descriptor too short (expected 65428, got 133) [ 167.099408][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.137519][ T10] usb 4-1: config index 4 descriptor too short (expected 65428, got 133) [ 167.137552][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.165969][ T10] usb 4-1: config index 5 descriptor too short (expected 65428, got 133) [ 167.166020][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.167945][ T10] usb 4-1: config index 6 descriptor too short (expected 65428, got 133) [ 167.167974][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.229085][ T10] usb 4-1: config index 7 descriptor too short (expected 65428, got 133) [ 167.229119][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.255969][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 167.256001][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.256021][ T10] usb 4-1: Product: syz [ 167.256040][ T10] usb 4-1: Manufacturer: syz [ 167.256056][ T10] usb 4-1: SerialNumber: syz [ 167.315230][ T5817] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 167.315319][ T5817] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 167.667692][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 167.736040][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 167.748713][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.766894][ T5627] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 167.766941][ T5627] em28xx 1-1:0.0: dvb set to bulk mode. [ 167.767256][ T37] em28xx 1-1:0.0: Binding DVB extension [ 167.870158][ T6471] em28xx 1-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 167.911696][ T9] usb 1-1: USB disconnect, device number 8 [ 168.019253][ T6498] bond0: (slave team0): Enslaving as an active interface with an up link [ 168.128721][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 168.620619][ T37] em28xx 1-1:0.0: Registering input extension [ 168.732658][ T9] em28xx 1-1:0.0: Closing input extension [ 169.726309][ T5817] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 169.726375][ T5817] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 169.761155][ T10] usb 4-1: USB disconnect, device number 7 [ 169.797800][ T5817] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 170.478265][ T5817] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 170.685409][ T5818] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 170.709789][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 171.091835][ T5817] usb 3-1: USB disconnect, device number 7 [ 172.244534][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.130/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 172.278575][ T6493] udevd[6493]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.62/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 172.357542][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.45/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 172.483414][ T9] em28xx 1-1:0.0: Freeing device [ 172.852836][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 173.025358][ T6545] netlink: 48 bytes leftover after parsing attributes in process `syz.3.229'. [ 173.187626][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 173.198623][ T10] usb 5-1: config 8 has an invalid interface number: 248 but max is 0 [ 173.198649][ T10] usb 5-1: config 8 has no interface number 0 [ 173.198677][ T10] usb 5-1: config 8 interface 248 has no altsetting 0 [ 173.241089][ T10] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 173.241122][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.241145][ T10] usb 5-1: Product: syz [ 173.241161][ T10] usb 5-1: Manufacturer: syz [ 173.241177][ T10] usb 5-1: SerialNumber: syz [ 173.743671][ T10] usb 5-1: USB disconnect, device number 6 [ 173.849292][ T6556] syzkaller1: entered promiscuous mode [ 173.849320][ T6556] syzkaller1: entered allmulticast mode [ 173.894288][ T6549] ================================================================== [ 173.894307][ T6549] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 173.894340][ T6549] Read of size 8 at addr ffff888029d0f000 by task syz.2.232[ 173.894340][ T6549] Read of size 8 at addr ffff888029d0f000 by task syz.2.232/6549 [ 173.894360][ T6549] [ 173.894385][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.2.232 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.894411][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.894433][ T6549] Call Trace: [ 173.894445][ T6549] [ 173.894455][ T6549] dump_stack_lvl+0xe8/0x150 [ 173.894487][ T6549] print_address_description+0x55/0x1e0 [ 173.894524][ T6549] ? reverse_path_check_proc+0x5b/0x240 [ 173.894546][ T6549] print_report+0x58/0x70 [ 173.894573][ T6549] kasan_report+0x117/0x150 [ 173.894604][ T6549] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.894643][ T6549] ? reverse_path_check_proc+0x5b/0x240 [ 173.894669][ T6549] ? ep_insert+0xbbb/0x1820 [ 173.894702][ T6549] reverse_path_check_proc+0x5b/0x240 [ 173.894728][ T6549] ? ep_insert+0xbbb/0x1820 [ 173.894761][ T6549] ep_insert+0xc6c/0x1820 [ 173.894802][ T6549] ? __pfx_ep_insert+0x10/0x10 [ 173.894841][ T6549] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.894862][ T6549] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.894898][ T6549] ? mutex_lock_nested+0x152/0x1d0 [ 173.894926][ T6549] ? do_epoll_ctl_file+0xc69/0xed0 [ 173.894961][ T6549] do_epoll_ctl_file+0x8bb/0xed0 [ 173.894995][ T6549] ? do_epoll_ctl_file+0xac3/0xed0 [ 173.895032][ T6549] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 173.895067][ T6549] ? __fget_files+0x3a6/0x420 [ 173.895096][ T6549] ? __fget_files+0x2a/0x420 [ 173.895131][ T6549] __se_sys_epoll_ctl+0x14e/0x210 [ 173.895167][ T6549] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 173.895207][ T6549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.895243][ T6549] do_syscall_64+0x174/0x580 [ 173.895265][ T6549] ? trace_irq_disable+0x3b/0x140 [ 173.895293][ T6549] ? clear_bhb_loop+0x40/0x90 [ 173.895320][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.895343][ T6549] RIP: 0033:0x7f5383a8ce59 [ 173.895408][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.895428][ T6549] RSP: 002b:00007f5381ca4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 173.895460][ T6549] RAX: ffffffffffffffda RBX: 00007f5383d06180 RCX: 00007f5383a8ce59 [ 173.895483][ T6549] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007 [ 173.895508][ T6549] RBP: 00007f5383b22d6f R08: 0000000000000000 R09: 0000000000000000 [ 173.895523][ T6549] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 173.895538][ T6549] R13: 00007f5383d06218 R14: 00007f5383d06180 R15: 00007ffc48dc8fe8 [ 173.895574][ T6549] [ 173.895583][ T6549] [ 173.895588][ T6549] Allocated by task 6547: [ 173.895598][ T6549] kasan_save_track+0x3e/0x80 [ 173.895626][ T6549] __kasan_slab_alloc+0x6c/0x80 [ 173.895655][ T6549] kmem_cache_alloc_noprof+0x33b/0x680 [ 173.895692][ T6549] ep_insert+0x512/0x1820 [ 173.895731][ T6549] do_epoll_ctl_file+0x8bb/0xed0 [ 173.895762][ T6549] __se_sys_epoll_ctl+0x14e/0x210 [ 173.895795][ T6549] do_syscall_64+0x174/0x580 [ 173.895815][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.895835][ T6549] [ 173.895840][ T6549] Freed by task 6547: [ 173.895850][ T6549] kasan_save_track+0x3e/0x80 [ 173.895876][ T6549] kasan_save_free_info+0x46/0x50 [ 173.895895][ T6549] __kasan_slab_free+0x5c/0x80 [ 173.895922][ T6549] kmem_cache_free+0x187/0x6c0 [ 173.895951][ T6549] eventpoll_release_file+0xc2/0x240 [ 173.895980][ T6549] __fput+0x83c/0xa70 [ 173.896006][ T6549] task_work_run+0x1d9/0x270 [ 173.896033][ T6549] get_signal+0x11eb/0x1330 [ 173.896065][ T6549] arch_do_signal_or_restart+0xbc/0x840 [ 173.896088][ T6549] exit_to_user_mode_loop+0xa9/0x680 [ 173.896115][ T6549] do_syscall_64+0x353/0x580 [ 173.896134][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.896154][ T6549] [ 173.896160][ T6549] The buggy address belongs to the object at ffff888029d0f000 [ 173.896160][ T6549] which belongs to the cache ep_head of size 16 [ 173.896178][ T6549] The buggy address is located 0 bytes inside of [ 173.896178][ T6549] freed 16-byte region [ffff888029d0f000, ffff888029d0f010) [ 173.896201][ T6549] [ 173.896206][ T6549] The buggy address belongs to the physical page: [ 173.896228][ T6549] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029d0f0c0 pfn:0x29d0f [ 173.896251][ T6549] memcg:ffff888027b2e001 [ 173.896260][ T6549] flags: 0x80000000000200(workingset|node=0|zone=1) [ 173.896284][ T6549] page_type: f5(slab) [ 173.896304][ T6549] raw: 0080000000000200 ffff888020ae8dc0 ffffea0000fc4550 ffffea0000f8cd50 [ 173.896325][ T6549] raw: ffff888029d0f0c0 000000080080002b 00000000f5000000 ffff888027b2e001 [ 173.896337][ T6549] page dumped because: kasan: bad access detected [ 173.896351][ T6549] page_owner tracks the page as allocated [ 173.896359][ T6549] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4977, tgid 4977 (udevd), ts 33725785548, free_ts 32931601451 [ 173.896398][ T6549] post_alloc_hook+0x1f9/0x250 [ 173.896425][ T6549] get_page_from_freelist+0x265c/0x26e0 [ 173.896459][ T6549] __alloc_frozen_pages_noprof+0x18d/0x380 [ 173.896492][ T6549] allocate_slab+0x74/0x5e0 [ 173.896520][ T6549] refill_objects+0x33c/0x3d0 [ 173.896539][ T6549] __pcs_replace_empty_main+0x373/0x720 [ 173.896560][ T6549] kmem_cache_alloc_noprof+0x433/0x680 [ 173.896587][ T6549] ep_insert+0x512/0x1820 [ 173.896645][ T6549] do_epoll_ctl_file+0x8bb/0xed0 [ 173.896675][ T6549] __se_sys_epoll_ctl+0x14e/0x210 [ 173.896706][ T6549] do_syscall_64+0x174/0x580 [ 173.896724][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.896744][ T6549] page last free pid 29 tgid 29 stack trace: [ 173.896756][ T6549] __free_frozen_pages+0x10af/0x1190 [ 173.896783][ T6549] tlb_remove_table_rcu+0x85/0x100 [ 173.896815][ T6549] rcu_cpu_kthread+0x99e/0x1470 [ 173.896842][ T6549] smpboot_thread_fn+0x541/0xa50 [ 173.896863][ T6549] kthread+0x388/0x470 [ 173.896885][ T6549] ret_from_fork+0x514/0xb70 [ 173.896911][ T6549] ret_from_fork_asm+0x1a/0x30 [ 173.896940][ T6549] [ 173.896945][ T6549] Memory state around the buggy address: [ 173.896957][ T6549] ffff888029d0ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 173.896973][ T6549] ffff888029d0ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 173.896988][ T6549] >ffff888029d0f000: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 173.896999][ T6549] ^ [ 173.897011][ T6549] ffff888029d0f080: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 173.897025][ T6549] ffff888029d0f100: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 173.897037][ T6549] ================================================================== [ 173.920007][ T6549] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 173.920048][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.2.232 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.920123][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.920158][ T6549] Call Trace: [ 173.920179][ T6549] [ 173.920202][ T6549] vpanic+0x56c/0xa60 [ 173.920307][ T6549] ? __pfx_vpanic+0x10/0x10 [ 173.920404][ T6549] panic+0xc5/0xd0 [ 173.920489][ T6549] ? __pfx_panic+0x10/0x10 [ 173.920596][ T6549] ? preempt_schedule_thunk+0x16/0x40 [ 173.920677][ T6549] ? preempt_schedule_thunk+0x16/0x40 [ 173.920741][ T6549] ? reverse_path_check_proc+0x5b/0x240 [ 173.920798][ T6549] check_panic_on_warn+0x89/0xb0 [ 173.920881][ T6549] ? reverse_path_check_proc+0x5b/0x240 [ 173.920937][ T6549] end_report+0x73/0x170 [ 173.921026][ T6549] ? reverse_path_check_proc+0x5b/0x240 [ 173.921080][ T6549] kasan_report+0x128/0x150 [ 173.921155][ T6549] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.921253][ T6549] ? reverse_path_check_proc+0x5b/0x240 [ 173.921325][ T6549] ? ep_insert+0xbbb/0x1820 [ 173.921412][ T6549] reverse_path_check_proc+0x5b/0x240 [ 173.921476][ T6549] ? ep_insert+0xbbb/0x1820 [ 173.921571][ T6549] ep_insert+0xc6c/0x1820 [ 173.921670][ T6549] ? __pfx_ep_insert+0x10/0x10 [ 173.921766][ T6549] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.921820][ T6549] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.921923][ T6549] ? mutex_lock_nested+0x152/0x1d0 [ 173.922021][ T6549] ? do_epoll_ctl_file+0xc69/0xed0 [ 173.922118][ T6549] do_epoll_ctl_file+0x8bb/0xed0 [ 173.922233][ T6549] ? do_epoll_ctl_file+0xac3/0xed0 [ 173.922328][ T6549] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 173.922415][ T6549] ? __fget_files+0x3a6/0x420 [ 173.922491][ T6549] ? __fget_files+0x2a/0x420 [ 173.922572][ T6549] __se_sys_epoll_ctl+0x14e/0x210 [ 173.922609][ T6549] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 173.922649][ T6549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.922672][ T6549] do_syscall_64+0x174/0x580 [ 173.922694][ T6549] ? trace_irq_disable+0x3b/0x140 [ 173.922722][ T6549] ? clear_bhb_loop+0x40/0x90 [ 173.922748][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.922770][ T6549] RIP: 0033:0x7f5383a8ce59 [ 173.922790][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.922809][ T6549] RSP: 002b:00007f5381ca4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 173.922832][ T6549] RAX: ffffffffffffffda RBX: 00007f5383d06180 RCX: 00007f5383a8ce59 [ 173.922849][ T6549] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007 [ 173.922863][ T6549] RBP: 00007f5383b22d6f R08: 0000000000000000 R09: 0000000000000000 [ 173.922878][ T6549] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 173.922903][ T6549] R13: 00007f5383d06218 R14: 00007f5383d06180 R15: 00007ffc48dc8fe8 [ 173.922977][ T6549] [ 173.923168][ T6549] Kernel Offset: disabled