last executing test programs: 18.176760321s ago: executing program 0 (id=3916): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) clock_nanosleep(0x9, 0x2000000, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x2000000000000000}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000400)=""/249) r3 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000010c0)=""/4096) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000000)={0x6, 'veth1_vlan\x00', {}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {0xfff2}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1ff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xc}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x60}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000300)={{0x2, @remote, 0x4e21, 0x3, 'sh\x00', 0x0, 0xa, 0x26}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x2, 0x7, 0x8, 0x1}}, 0x44) 17.552272328s ago: executing program 3 (id=3920): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000100)="630500020000000adf3da7b33389", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 14.599072126s ago: executing program 3 (id=3922): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, 0x2c) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000ac0)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000c00)={0x20, 0x16, 0xd8, "826de5932c2af37de1eac2e479421a7a63d3d7eb5fa1c7708491db52c1a8c28e0c11c6557359b7fabb9d584e66a619f580c5e99c83fb85c2f6577817d1db2c8869b6c1fb0f5f3121b77249745fbd0f303372e56ac8636605b2a0727e725403385c5aa25cced5824445287e4d28a64e7663d8d82d729e7c0ca935fe3d432acb5c1c056ebf64d75c9124b90c8c5b903316defa1ea0483d048129e0c69e3ffed8ee1cbf66ef0c1aff413f31609c138dd8b1bc58f4a70eb7ecfca67310152692b037081083556788dc3f195036b01625439b399ad6e3b4788708"}, 0x0, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0xff81, 0x0, 0x6, 0x6, 0x3, 0x1, 0xb, 0x5, 0xfb0, 0x1, 0xaf5c, 0x1}}, &(0x7f0000000e00)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000e40)={0x20, 0x83, 0x2}, &(0x7f0000000e80)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000ec0)={0x20, 0x89, 0x2}}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) nanosleep(&(0x7f0000000300)={0x1}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000480)=[{0x0, 0x3}, {0x1, 0x2}], 0xdeadbeef, 0x8, 0x2}) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x18, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20044040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 12.904954506s ago: executing program 4 (id=3927): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040091}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) 12.378751572s ago: executing program 0 (id=3928): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') listns(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x18, 0x4, 0x1, @empty, @mcast2, {[@routing={0x1, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x4}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x3f, 0xc, "ac743563f3bed073d52815d72e94fe47ba8a9d7ee7b7f58da03534beaaa0cc8a525cc4053489a4f711fda4fc087631a46f48b7aece95feef6b2d2f"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73ebe5e0}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x37501c15}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0x150}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a9, &(0x7f0000000680)="$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") 10.509530436s ago: executing program 1 (id=3929): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') listns(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x18, 0x4, 0x1, @empty, @mcast2, {[@routing={0x1, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x4}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x3f, 0xc, "ac743563f3bed073d52815d72e94fe47ba8a9d7ee7b7f58da03534beaaa0cc8a525cc4053489a4f711fda4fc087631a46f48b7aece95feef6b2d2f"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73ebe5e0}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x37501c15}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0x150}}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a9, &(0x7f0000000680)="$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") 10.487897868s ago: executing program 2 (id=3930): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x500, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000800000000029500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) 10.486716944s ago: executing program 3 (id=3931): socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="a99c383d33c9c607", 0x8, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 10.45966496s ago: executing program 4 (id=3932): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f0000000540)=[{0x0}, {0x0}, {&(0x7f0000000480)="521ab4177d0efa9581ec4439b69851eaa48b5591d9659cc0c746363e0ed21e9b0ccd386accd85aa8f67fa2146069ecc44ea22e2848f15a9e1b984fe57e863316795da24092726c438e8ef9633ea7fc7bdb4a368bc517b4bef7f58ef1f02de2e4951b75c28bf11a8ac622e620e4c1d3834c28a0f2f9bac54746daa8e7d9e799ba2d0cd4d0ffc8d417aaad372239d94a074f91ccf8d940f8823fb5a9a383dc8b213460f2f38f50200c2e7f590c3f49c8000924e4f10873baf2bc1933fa59", 0xbd}], 0x3, 0x0, 0x0, 0x900}, 0x8010) 6.133540682s ago: executing program 2 (id=3933): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008d"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.960765137s ago: executing program 4 (id=3934): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000)=r3, 0xc) 5.9589072s ago: executing program 1 (id=3935): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x1400, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 5.732803764s ago: executing program 4 (id=3936): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) recvmsg(r1, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r6 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x40002000, &(0x7f0000000080)="689808bf37e22cd4c43ca79445109ca536eb9376fcd51b2504f4e6c41cdb1fc3b1c861df7e043e705a9d5e55372850ab396608bb", 0x34, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="6c67557c94ffa82fa59c123daea9a6bb0215fb9285d10e3295de12ae9abd84c59d703b52948385f5952fe9deacbe95528443d6f31d42a889aab17bf7aa75803fb812fcc255addc20b2c14f8b517b8718d1ec90ad0e9d59cc88db3750dbd977876898dc70c4eee62cb6952a3d99e5a5af98e2e605983a2c385568e7e0a0") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000300009116144f782db44b904021d", 0x12}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="2000000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b200", 0x42}], 0x1}, 0x0) 5.732590986s ago: executing program 1 (id=3937): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)}, 0x4000890) 5.48195768s ago: executing program 0 (id=3938): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x80, 0x10000}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r2, &(0x7f0000000300), 0x0, 0x4}, 0x20) 5.408949187s ago: executing program 2 (id=3939): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000100fef74b0000000000080005007a010401a80016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 5.182077679s ago: executing program 0 (id=3940): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000d80)=""/270, 0x10e}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000002240)=""/4082, 0xff2}, {&(0x7f00000009c0)=""/214, 0xd6}, {&(0x7f0000000bc0)=""/215, 0xd7}, {&(0x7f0000000cc0)=""/163, 0xa3}, {&(0x7f0000000540)=""/154, 0x9a}], 0x7}, 0x40012100) 5.181679083s ago: executing program 3 (id=3941): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 5.18149749s ago: executing program 2 (id=3942): r0 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, 0x0, 0x37}, 0x40011013) 5.125587923s ago: executing program 1 (id=3943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000300)=""/248, &(0x7f0000000400)=0xf8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) 4.918115172s ago: executing program 0 (id=3944): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') listns(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="140100002700010000000000000000"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x18, 0x4, 0x1, @empty, @mcast2, {[@routing={0x1, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x4}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x3f, 0xc, "ac743563f3bed073d52815d72e94fe47ba8a9d7ee7b7f58da03534beaaa0cc8a525cc4053489a4f711fda4fc087631a46f48b7aece95feef6b2d2f"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73ebe5e0}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x37501c15}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0x150}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a9, &(0x7f0000000680)="$eJzs3U1sFOUbAPBnth/8of1bTDBGTk042ARp7UcgBCKCiR5UItaLiZeGlo9QQNua2J70RvwiJnLyAp6IBy3CwZCQGM8mRj1oIpJgwqVJQyJ4Q2tmd2dZ7FKKbRlkfr9k2HdmZ3mf2WefYefdl90ACqsz/aMU8VhEnEwiOurua47qnZ2V/c73Tx9IlyTm5gavJpFExNn+6QPZ/kn1tq36sK6I2HUyYkPr/H7HJ6cODY2OjoxV13smDr/eMz45teng4aH9I/tHjgz0bdnc27e1r39g2Y51YGbdtg1/7O6YnpvZ+NfgVzfSeNur99Ufx3LpjM7ac3KLJOKJ5e4sZ6VF7vfIyPELKxwKi9T+zVODTdU6b4mI9dERTdWqjxdf+70jvnw67xiBlbMjIuaAgkrUPxRU9j4gvf7Nlnv13uO5Z+5VT9zO7M7KBeDZ6tjO+Vr+mytjQ/G/8rXhmmtJdmVYlmRjR0sw9UX6d2wsdZ47sz1dYoXGYbg/Tf+WdwTkqXX5hnb5D1q/J+8IyNN3x/KOgDz9OJt3BOTp5cG8IyBPuzfnHQF5+uRq3hHw9c4oT0aZP/5Xqo3/RIPxn7aIeHKJfV9+NqIzPhyp3zZ//Kc0s8RuWMDszojtdXO7ztflv2ptU3Xt/+lKtCT7Do6OpLl/KCK6omVVut67QB+7Tl9p+FJ5dSDNf8/ai8cvbMuWtP/09uZepZnmVbc+bnhoYmipx03F7DsR65sb5T+p1X/SoP7T18NiJwcd/2XLtUbbP9ia5v/GDwvnn5U0dyri8Yb1f3PmYrLw/Mye8vmgJzsrzPfRoz9/3mj76T1p/r/fIf/5Set/zcL5L5//a/N1x+++jxObhq402n55Ms3/2J//5vzfmrxSDjCbWvzW0MTEWG9Ea/LC/O19dx/zgyp7PrLnK81/14bG//4vdP5fHREvLbLPlv1Xvm20/cSFNP9bfspy33nuzHb1f2+l+R++Q/0nt9T/3Tc63v/0VKO+295N8//re9nnv1n+s8+CK9L6HygH01Xd4v3fnS02QXnHCQAAAAAAAAAAAAAAAAAAAAAAUDSl8m9gJ6XuWrtU6u6ufL/vulhTGj06PrFx39E3jwxXfit7bbSUsm967Kj7Ptjecvvmet8/1vsj4uGIONa0urzevffo6HDeBw8F1R5x6ewbexv8Mj8AAAAAAAAAAAAAAAAAAJCXttv8///Uxaa8owNWQnvEpX0fN72dtq+rcyiUtP4/u374+VD/UDjqH4pL/UNxqX8oLvUPxaX+objUPxSX+ofiUv9QXPX1DwAAAAA8mMYnpw4NjY6OjGloaGjUGnmfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuJ/8HQAA//9rTy3i") 4.853734046s ago: executing program 2 (id=3945): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6ac4, 0x400, 0x0, 0x155}, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)={[{@largeio}, {@filestreams}, {@grpquota}, {@quota}]}, 0x5, 0xb919, &(0x7f0000000840)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_extract_tcp_res(&(0x7f00000001c0), 0x0, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) 4.852638089s ago: executing program 4 (id=3946): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040091}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) 4.805626588s ago: executing program 3 (id=3947): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x2fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)}, 0x9}], 0x4, 0x0, 0x0) 1.638588726s ago: executing program 1 (id=3948): prctl$PR_MCE_KILL(0x23, 0x3, 0x7ffffffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_pgetevents(r4, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) io_submit(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 1.633216947s ago: executing program 2 (id=3949): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) clock_nanosleep(0x9, 0x2000000, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x2000000000000000}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000400)=""/249) r3 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000010c0)=""/4096) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000000)={0x6, 'veth1_vlan\x00', {}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {0xfff2}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1ff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xc}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x60}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000300)={{0x2, @remote, 0x4e21, 0x3, 'sh\x00', 0x0, 0xa, 0x26}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x2, 0x7, 0x8, 0x1}}, 0x44) 1.522481125s ago: executing program 4 (id=3950): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r3 = dup(0xffffffffffffffff) write$binfmt_script(r3, &(0x7f00000005c0)={'#! ', './file1'}, 0xb) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xffffffffffffffa1) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@dax_always}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@nombcache}, {@user_xattr}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x400fff}}]}, 0xfa, 0x489, &(0x7f0000001f80)="$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") mlockall(0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='250', 0x3) unshare(0x40000000) 169.527791ms ago: executing program 3 (id=3951): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828f27b6e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/241) 159.323699ms ago: executing program 0 (id=3952): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003b686481086124a2036e60102030109021b0001080780030904590c01ffffff00090502004000c00006"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xae, &(0x7f00000000c0)=@string={0xae, 0x3, "923b66a8e317dad5d5a09feb4a6c9fbb37eaf92681aa600f336d2f525ebf3dd19ca21c47f198beedb63ad40dccba88dbeb941da725b003c6f04be6020006fe65ac52fae921ddb6c3dcb09b596220b2da19ca1d678556fc1c489339b0bac1ed83c040a3dab6ad334a5c068a97b1541ec8b49fbfd7e11ab36491f90ce3a139d1020e75820c60b6a3f54dd147a21baf069956f1e574d0797c29ef62dd4dd625b29f208883e0c579e2b779064d52"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x421}}]}) 0s ago: executing program 1 (id=3953): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xfd, 0x33}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x50, &(0x7f0000000100)="03bd18370c8f663aa08c22a8fe1aeb976b3d39979983cb5ea5d25389e6caf8a260fa25adad64977dae8d64a30e92cd5158e6c7c4c3630272512b5366df9ddd71ecc0b1b81d38bffa1801000000e1beae") r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/178) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB=' \rH\x00\x00\x00H'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e0023000069"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="738e958dc869ba71183dea690a69a3380b31daeec0e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x141c00) read$hidraw(r5, 0x0, 0x60) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000f2a0000fe1c1fa41e52a935e60d7b04e44e4310ac5ab57819cd8474de07be6b8606f91302facb95c344d6492a6e7b46c86ccc331392c644798e90484a9bff8a0aff5dc02f73baecf681c128d1e7ac6e26c1ccf058f8aeb0eec00eb0f91210f65df6d05f8f854a692432dcc5994f7725d7d95dfa9b66bb6486c39f4be54c046276"], 0x0}, 0x0) kernel console output (not intermixed with test programs): 9097.738:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc71a39ddeb code=0x7ffc0000 [ 1564.790503][ T33] audit: type=1326 audit(1790269097.758:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19603 comm="syz.3.3398" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7b79ddeb code=0x7ffc0000 [ 1564.790541][ T33] audit: type=1326 audit(1790269097.808:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc71a39ddeb code=0x7ffc0000 [ 1564.790578][ T33] audit: type=1326 audit(1790269097.848:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19603 comm="syz.3.3398" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7b79ddeb code=0x7ffc0000 [ 1564.790616][ T33] audit: type=1326 audit(1790269097.848:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19603 comm="syz.3.3398" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7b79ddeb code=0x7ffc0000 [ 1564.790655][ T33] audit: type=1326 audit(1790269097.858:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19603 comm="syz.3.3398" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7b79ddeb code=0x7ffc0000 [ 1564.790693][ T33] audit: type=1326 audit(1790269097.898:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc71a39ddeb code=0x7ffc0000 [ 1564.790732][ T33] audit: type=1326 audit(1790269097.908:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc71a39ddeb code=0x7ffc0000 [ 1564.790770][ T33] audit: type=1326 audit(1790269097.918:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19603 comm="syz.3.3398" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7b79ddeb code=0x7ffc0000 [ 1564.790808][ T33] audit: type=1326 audit(1790269097.918:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19607 comm="syz.4.3400" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc71a39ddeb code=0x7ffc0000 [ 1564.959906][T16877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.959927][T16877] usb 4-1: Product: syz [ 1564.960050][T16877] usb 4-1: Manufacturer: syz [ 1564.960064][T16877] usb 4-1: SerialNumber: syz [ 1564.986074][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.986096][ T5611] usb 5-1: Product: syz [ 1564.986109][ T5611] usb 5-1: Manufacturer: syz [ 1564.986122][ T5611] usb 5-1: SerialNumber: syz [ 1565.154186][T13597] usb 3-1: config 0 descriptor?? [ 1565.181310][ T5611] usb 5-1: USB2VGA dongle found at address 38 [ 1565.191245][ T5611] usb 5-1: Allocated 8 output buffers [ 1565.211157][T16877] usb 4-1: USB2VGA dongle found at address 44 [ 1565.228008][T16877] usb 4-1: Allocated 8 output buffers [ 1565.367520][ T969] usb 3-1: USB disconnect, device number 45 [ 1566.170694][ T5611] usb 5-1: Failed to early initialize device [ 1566.204534][ T5611] usb 5-1: USB disconnect, device number 38 [ 1566.253547][T16877] usb 4-1: Failed to early initialize device [ 1566.278060][T16877] usb 4-1: USB disconnect, device number 44 [ 1567.268117][T19630] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3403'. [ 1568.379327][T16877] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1568.412459][ T27] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1568.459855][T19646] loop1: detected capacity change from 0 to 2048 [ 1568.472474][T19646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1568.579182][T16877] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1568.580358][T16877] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1568.580386][T16877] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1568.580409][T16877] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1568.580433][T16877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1568.613683][ T27] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1568.618806][ T27] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1568.618833][ T27] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1568.618857][ T27] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1568.618879][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1568.621021][ T27] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1568.621040][ T27] usb 5-1: Product: syz [ 1568.621053][ T27] usb 5-1: Manufacturer: syz [ 1568.621065][ T27] usb 5-1: SerialNumber: syz [ 1568.645235][T16877] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1568.645257][T16877] usb 4-1: Product: syz [ 1568.645270][T16877] usb 4-1: Manufacturer: syz [ 1568.645283][T16877] usb 4-1: SerialNumber: syz [ 1568.648875][ T27] usb 5-1: config 0 descriptor?? [ 1568.650981][T19636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1568.676688][ T27] usb 5-1: selecting invalid altsetting 0 [ 1568.767054][T16877] usb 4-1: config 0 descriptor?? [ 1568.769204][T19642] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1568.911648][T16877] usb 4-1: selecting invalid altsetting 0 [ 1569.666615][T16877] usb 4-1: USB disconnect, device number 45 [ 1569.746568][T19659] overlayfs: failed to resolve './bus': -2 [ 1569.807300][ T27] usb 5-1: USB disconnect, device number 39 [ 1570.179103][T19663] loop0: detected capacity change from 0 to 2048 [ 1570.208964][T19663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1570.901474][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1571.061524][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1571.065172][ T27] usb 1-1: New USB device found: idVendor=0e41, idProduct=3061, bcdDevice=0.40 [ 1571.065840][ T27] usb 1-1: config 0 has no interfaces? [ 1571.069128][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.069150][ T27] usb 1-1: Product: ␁ [ 1571.069163][ T27] usb 1-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢駎膌쏖 [ 1571.069179][ T27] usb 1-1: SerialNumber: 샺 [ 1571.129443][ T27] usb 1-1: config 0 descriptor?? [ 1571.238951][T19680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1571.343485][ T5611] usb 1-1: USB disconnect, device number 11 [ 1571.578864][ T5608] block nbd2: Receive control failed (result -32) [ 1571.600529][T19673] block nbd2: shutting down sockets [ 1573.480948][T19708] fuse: Bad value for 'fd' [ 1574.504146][T19712] fuse: Bad value for 'fd' [ 1576.387759][T19729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3432'. [ 1576.465574][T19729] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1576.465780][T19729] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1576.465954][T19729] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1576.466104][T19729] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1576.466287][T19729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1576.532115][ T5611] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1576.682140][ T5611] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1576.683153][ T5611] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1576.683181][ T5611] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1576.683205][ T5611] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1576.683230][ T5611] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1576.753356][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1576.753379][ T5611] usb 5-1: Product: syz [ 1576.753393][ T5611] usb 5-1: Manufacturer: syz [ 1576.753407][ T5611] usb 5-1: SerialNumber: syz [ 1576.782087][ T5611] usb 5-1: config 0 descriptor?? [ 1576.784728][T19725] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1576.817029][ T5611] usb 5-1: selecting invalid altsetting 0 [ 1577.372808][ T5611] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1577.447635][T19744] netlink: 'syz.1.3435': attribute type 1 has an invalid length. [ 1577.500692][T19746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 1577.515557][T19744] bond2: entered promiscuous mode [ 1577.515976][T19744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1577.536199][T19746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1577.536533][T19746] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1577.536551][T19746] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1577.579393][T12204] usb 5-1: USB disconnect, device number 40 [ 1577.724166][ T5611] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1577.737248][ T5611] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1577.737349][ T5611] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1577.737409][ T5611] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1577.737466][ T5611] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1577.805910][ T5611] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1577.805933][ T5611] usb 4-1: Product: syz [ 1577.805946][ T5611] usb 4-1: Manufacturer: syz [ 1577.805960][ T5611] usb 4-1: SerialNumber: syz [ 1577.857755][ T5611] usb 4-1: config 0 descriptor?? [ 1577.858455][T19739] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1578.506312][T19746] bond2: (slave wireguard1): making interface the new active one [ 1578.506334][T19746] wireguard1: entered promiscuous mode [ 1578.532623][T19732] Bluetooth: hci3: command 0x0c1a tx timeout [ 1578.532644][T10622] Bluetooth: hci4: command 0x0c1a tx timeout [ 1578.532656][T19732] Bluetooth: hci0: command 0x0c1a tx timeout [ 1578.532670][T10622] Bluetooth: hci5: command 0x0c1a tx timeout [ 1578.532680][T19732] Bluetooth: hci1: command 0x0406 tx timeout [ 1578.662198][T19746] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 1578.668154][ T5611] usb 4-1: selecting invalid altsetting 0 [ 1578.825161][ T5611] usb 4-1: USB disconnect, device number 46 [ 1578.941051][T19539] udevd[19539]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1582.213511][T19791] fuse: Bad value for 'fd' [ 1582.791469][ T969] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1582.950342][T19795] loop1: detected capacity change from 0 to 512 [ 1584.236429][ T969] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1584.237597][ T969] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1584.237625][ T969] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1584.237649][ T969] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1584.237671][ T969] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1584.239943][ T969] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1584.239966][ T969] usb 1-1: Product: syz [ 1584.239979][ T969] usb 1-1: Manufacturer: syz [ 1584.239992][ T969] usb 1-1: SerialNumber: syz [ 1584.318722][ T27] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1584.332626][ T969] usb 1-1: config 0 descriptor?? [ 1584.336786][T19788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1584.355168][ T969] usb 1-1: selecting invalid altsetting 0 [ 1584.487337][ T27] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1584.506058][ T27] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1584.506086][ T27] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1584.506107][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1584.540282][ T27] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1584.540305][ T27] usb 4-1: Product: syz [ 1584.540319][ T27] usb 4-1: Manufacturer: syz [ 1584.540333][ T27] usb 4-1: SerialNumber: syz [ 1584.570856][ T27] usb 4-1: config 0 descriptor?? [ 1584.590202][ T27] usb 4-1: selecting invalid altsetting 0 [ 1584.615847][T19788] loop0: detected capacity change from 0 to 512 [ 1584.643171][T19788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1584.643305][T19788] System zones: 1-12 [ 1584.648188][T19788] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.3446: missing EA_INODE flag [ 1584.648212][T19788] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1584.650016][T19788] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3446: error while reading EA inode 12 err=-117 [ 1584.650042][T19788] loop0: lost filesystem error report for type 5 error -117 [ 1584.651407][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 1584.651426][ C0] EXT4-fs (loop0): initial error at time 1790269118: ext4_xattr_inode_iget:437: inode 12 [ 1584.651454][ C0] EXT4-fs (loop0): last error at time 1790269118: ext4_xattr_inode_iget:442 [ 1584.652984][T19788] EXT4-fs (loop0): 1 orphan inode deleted [ 1584.668743][T19788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1585.023027][ T5611] usb 1-1: USB disconnect, device number 12 [ 1585.101680][T16877] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1585.267506][T19811] overlayfs: missing 'lowerdir' [ 1585.694242][ T27] usb 4-1: USB disconnect, device number 47 [ 1585.792293][T16877] usb 5-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1585.793284][T16877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.793339][T16877] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1585.793361][T16877] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1585.796334][T16877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.796356][T16877] usb 5-1: Product: syz [ 1585.796370][T16877] usb 5-1: Manufacturer: syz [ 1585.796383][T16877] usb 5-1: SerialNumber: syz [ 1586.394890][T19802] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1586.449470][T16639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.849790][T16877] speedtch 5-1:1.0: speedtch_bind: device reset failed (-19)! [ 1587.851496][T16877] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1587.875603][T16877] usb 5-1: USB disconnect, device number 41 [ 1587.962750][T13597] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1588.131678][T13597] usb 1-1: Using ep0 maxpacket: 32 [ 1588.137712][T13597] usb 1-1: New USB device found: idVendor=0e41, idProduct=3061, bcdDevice=0.40 [ 1588.140483][T13597] usb 1-1: config 0 has no interfaces? [ 1588.196612][T13597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.196666][T13597] usb 1-1: Product: ␁ [ 1588.196713][T13597] usb 1-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢駎膌쏖 [ 1588.196871][T13597] usb 1-1: SerialNumber: 샺 [ 1588.260652][T13597] usb 1-1: config 0 descriptor?? [ 1588.493675][T13597] usb 1-1: USB disconnect, device number 13 [ 1588.597616][ T5608] block nbd1: Receive control failed (result -32) [ 1588.807182][T19831] block nbd1: shutting down sockets [ 1591.099274][T19850] netlink: 'syz.3.3466': attribute type 1 has an invalid length. [ 1591.136280][T19850] bond3: entered promiscuous mode [ 1591.136701][T19850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1591.148102][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3466'. [ 1591.174227][T19850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1591.174576][T19850] bond3: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1591.174593][T19850] bond3: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 1591.221580][T16877] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1591.230966][T19850] bond3: (slave wireguard2): making interface the new active one [ 1591.230987][T19850] wireguard2: entered promiscuous mode [ 1591.253566][T19850] bond3: (slave wireguard2): Enslaving as an active interface with an up link [ 1591.373049][T16877] usb 1-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 1591.374353][T16877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1591.374384][T16877] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1591.376859][T16877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.376875][T16877] usb 1-1: Product: syz [ 1591.376883][T16877] usb 1-1: Manufacturer: syz [ 1591.376890][T16877] usb 1-1: SerialNumber: syz [ 1591.438159][T19858] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3465'. [ 1591.439098][T16877] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1591.473923][T16877] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1591.473923][T16877] Please send a copy of this message to and [ 1591.776049][T16877] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1591.792792][T16877] usb 1-1: USB disconnect, device number 14 [ 1591.811333][T19556] udevd[19556]: setting owner of /dev/bus/usb/001/014 to uid=0, gid=0 failed: No such file or directory [ 1592.281501][T16940] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1592.357004][T19874] fuse: Bad value for 'fd' [ 1593.047226][T16940] usb 5-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1593.048230][T16940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.048285][T16940] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1593.048307][T16940] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1593.064075][T16940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.064098][T16940] usb 5-1: Product: syz [ 1593.064110][T16940] usb 5-1: Manufacturer: syz [ 1593.064123][T16940] usb 5-1: SerialNumber: syz [ 1593.818494][T19880] loop1: detected capacity change from 0 to 32768 [ 1593.819443][T19880] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 1593.821859][T19868] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1593.856441][T19880] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3472 (19880) [ 1593.875194][T19880] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1593.875223][T19880] BTRFS info (device loop1): using crc32c checksum algorithm [ 1593.995453][T19880] BTRFS info (device loop1): rebuilding free space tree [ 1594.009475][T19880] BTRFS info (device loop1): disabling free space tree [ 1594.009516][T19880] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1594.009529][T19880] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1594.044633][T19880] BTRFS info (device loop1): enabling ssd optimizations [ 1594.044647][T19880] BTRFS info (device loop1): turning on async discard [ 1594.044656][T19880] BTRFS info (device loop1): force clearing of disk cache [ 1594.044666][T19880] BTRFS info (device loop1): use zstd compression, level 3 [ 1594.341483][ T33] kauditd_printk_skb: 84 callbacks suppressed [ 1594.341503][ T33] audit: type=1326 audit(1790269127.648:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.0.3474" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb00ed9e159 code=0x0 [ 1594.923978][T16940] speedtch 5-1:1.0: speedtch_bind: device reset failed (-19)! [ 1594.924197][T16940] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1594.956653][T16940] usb 5-1: USB disconnect, device number 42 [ 1595.506863][T17686] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1597.088614][T19917] fuse: Bad value for 'fd' [ 1598.131770][T13597] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1598.292393][T13597] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1598.293417][T13597] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1598.293445][T13597] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1598.293466][T13597] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1598.295461][T13597] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1598.295484][T13597] usb 3-1: Product: syz [ 1598.295498][T13597] usb 3-1: Manufacturer: syz [ 1598.295512][T13597] usb 3-1: SerialNumber: syz [ 1598.345356][T13597] usb 3-1: config 0 descriptor?? [ 1598.370337][T13597] usb 3-1: selecting invalid altsetting 0 [ 1598.431792][ T969] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1598.597144][ T969] usb 5-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 1598.609768][ T969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1598.609788][ T969] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1598.659990][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.660012][ T969] usb 5-1: Product: syz [ 1598.660026][ T969] usb 5-1: Manufacturer: syz [ 1598.660039][ T969] usb 5-1: SerialNumber: syz [ 1598.681913][ T969] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1598.693653][ T969] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1598.693653][ T969] Please send a copy of this message to and [ 1599.147278][T19934] overlayfs: missing 'lowerdir' [ 1599.710759][T13597] usb 3-1: USB disconnect, device number 46 [ 1600.037789][ T969] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1600.205767][ T969] usb 5-1: USB disconnect, device number 43 [ 1600.413300][ T33] audit: type=1800 audit(1790269133.798:2274): pid=19944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3484" name="file0" dev="overlay" ino=532 res=0 errno=0 [ 1600.487889][T19944] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3484'. [ 1600.501808][T19944] loop1: detected capacity change from 0 to 1024 [ 1600.525989][T19944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1600.544868][T19944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.601923][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1600.784960][ T27] usb 1-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1600.794242][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.794297][ T27] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1600.794316][ T27] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1600.801462][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.801494][ T27] usb 1-1: Product: syz [ 1600.801521][ T27] usb 1-1: Manufacturer: syz [ 1600.801534][ T27] usb 1-1: SerialNumber: syz [ 1601.604817][T19943] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1601.841939][ T969] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1601.936475][T19968] kAFS: No cell specified [ 1601.994828][ T969] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1602.000460][ T969] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1602.000558][ T969] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1602.000653][ T969] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1602.000707][ T969] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1602.084707][ T969] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1602.084761][ T969] usb 4-1: Product: syz [ 1602.084808][ T969] usb 4-1: Manufacturer: syz [ 1602.087234][ T969] usb 4-1: SerialNumber: syz [ 1602.150443][ T969] usb 4-1: config 0 descriptor?? [ 1602.172592][T19960] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1602.279447][ T969] usb 4-1: selecting invalid altsetting 0 [ 1602.719006][ T27] speedtch 1-1:1.0: speedtch_bind: device reset failed (-19)! [ 1602.741010][ T27] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1602.967560][ T27] usb 1-1: USB disconnect, device number 15 [ 1603.379096][T19972] loop0: detected capacity change from 0 to 32768 [ 1603.380039][T19972] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 1603.399347][T19972] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3494 (19972) [ 1603.423465][T19972] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1603.423492][T19972] BTRFS info (device loop0): using crc32c checksum algorithm [ 1603.581574][T19980] overlayfs: missing 'lowerdir' [ 1603.989153][T19972] BTRFS info (device loop0): rebuilding free space tree [ 1604.008587][ T27] usb 4-1: USB disconnect, device number 48 [ 1604.029348][T19972] BTRFS info (device loop0): disabling free space tree [ 1604.029405][T19972] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1604.029427][T19972] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1604.061825][T19972] BTRFS info (device loop0): enabling ssd optimizations [ 1604.061849][T19972] BTRFS info (device loop0): turning on async discard [ 1604.061864][T19972] BTRFS info (device loop0): force clearing of disk cache [ 1604.061881][T19972] BTRFS info (device loop0): use zstd compression, level 3 [ 1604.073277][T19985] ip_tables: iptables: counters copy to user failed while replacing table [ 1604.197539][T19539] udevd[19539]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.078001][T19995] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3495'. [ 1606.434036][ T5611] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1606.603207][ T5611] usb 3-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 1606.607613][ T5611] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1606.607678][ T5611] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1606.670383][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.670442][ T5611] usb 3-1: Product: syz [ 1606.670495][ T5611] usb 3-1: Manufacturer: syz [ 1606.702446][ T5611] usb 3-1: SerialNumber: syz [ 1607.492189][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.492246][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.495341][ T5611] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1607.846631][ T5611] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1607.846631][ T5611] Please send a copy of this message to and [ 1607.939643][ T5611] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1607.973877][ T5611] usb 3-1: USB disconnect, device number 47 [ 1608.294913][T20027] fuse: Bad value for 'fd' [ 1611.110940][T16940] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1611.122053][T20043] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3507'. [ 1611.561572][T16940] usb 2-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1611.582702][T16940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.582756][T16940] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1611.582780][T16940] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1611.645209][T16940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.645233][T16940] usb 2-1: Product: syz [ 1611.645247][T16940] usb 2-1: Manufacturer: syz [ 1611.645260][T16940] usb 2-1: SerialNumber: syz [ 1612.300878][ T27] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1612.460376][ T27] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1612.480813][ T27] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1612.480854][ T27] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1612.480906][ T27] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1612.494917][T20034] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1612.536817][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1612.559272][ T27] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1612.559331][ T27] usb 5-1: Product: syz [ 1612.559375][ T27] usb 5-1: Manufacturer: syz [ 1612.559436][ T27] usb 5-1: SerialNumber: syz [ 1612.676734][ T27] usb 5-1: config 0 descriptor?? [ 1612.722640][T20045] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1612.843159][ T27] usb 5-1: selecting invalid altsetting 0 [ 1613.625453][T16940] speedtch 2-1:1.0: speedtch_bind: device reset failed (-19)! [ 1613.625668][T16940] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1613.642676][T16940] usb 2-1: USB disconnect, device number 46 [ 1613.786075][T20052] overlayfs: missing 'lowerdir' [ 1613.951939][ T27] usb 5-1: USB disconnect, device number 44 [ 1614.333647][T20055] netlink: 'syz.1.3511': attribute type 1 has an invalid length. [ 1614.337818][T16639] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1614.391967][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3511'. [ 1614.489614][T20055] bond3: entered promiscuous mode [ 1614.490105][T20055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1614.633504][T20058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1614.633854][T20058] bond3: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1614.633874][T20058] bond3: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 1614.648520][T16940] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1614.676649][T20058] bond3: (slave wireguard2): making interface the new active one [ 1614.676669][T20058] wireguard2: entered promiscuous mode [ 1614.693554][T20058] bond3: (slave wireguard2): Enslaving as an active interface with an up link [ 1614.801483][T16940] usb 3-1: Using ep0 maxpacket: 32 [ 1614.803128][T16940] usb 3-1: New USB device found: idVendor=0e41, idProduct=3061, bcdDevice=0.40 [ 1614.803681][T16940] usb 3-1: config 0 has no interfaces? [ 1614.806176][T16940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.806200][T16940] usb 3-1: Product: ␁ [ 1614.806221][T16940] usb 3-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢駎膌쏖 [ 1614.806239][T16940] usb 3-1: SerialNumber: 샺 [ 1614.809439][T16940] usb 3-1: config 0 descriptor?? [ 1615.382436][T16940] usb 3-1: USB disconnect, device number 48 [ 1615.731328][T20067] netlink: 'syz.4.3513': attribute type 1 has an invalid length. [ 1615.791303][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3513'. [ 1615.916141][T20067] bond2: entered promiscuous mode [ 1615.916406][T20067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1615.986168][T20070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1615.986519][T20070] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1615.986539][T20070] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1616.034242][T20070] bond2: (slave wireguard1): making interface the new active one [ 1616.034263][T20070] wireguard1: entered promiscuous mode [ 1616.035948][T20078] loop0: detected capacity change from 0 to 2048 [ 1616.038624][T20070] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 1616.094512][T20078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1617.891813][T20092] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3518'. [ 1618.558653][ T969] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1618.743552][ T969] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1618.792868][ T969] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1618.792909][ T969] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1618.792946][ T969] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1618.793042][ T969] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1618.911341][ T969] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1618.911498][ T969] usb 3-1: Product: syz [ 1618.911597][ T969] usb 3-1: Manufacturer: syz [ 1618.911696][ T969] usb 3-1: SerialNumber: syz [ 1619.029010][ T969] usb 3-1: config 0 descriptor?? [ 1619.041880][T20095] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1619.214143][ T969] usb 3-1: selecting invalid altsetting 0 [ 1620.037151][T20096] overlayfs: missing 'lowerdir' [ 1620.251564][ T969] usb 3-1: USB disconnect, device number 49 [ 1621.650905][T19628] udevd[19628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1622.537961][T16877] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1622.685358][T16877] usb 1-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1622.690963][T16877] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.691018][T16877] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1622.691041][T16877] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1622.693582][T16877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.693604][T16877] usb 1-1: Product: syz [ 1622.693617][T16877] usb 1-1: Manufacturer: syz [ 1622.693630][T16877] usb 1-1: SerialNumber: syz [ 1623.061619][T16940] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1623.108997][T20111] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1623.214620][T16940] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1623.231006][T16940] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1623.231083][T16940] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1623.231154][T16940] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1623.243029][T16940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1623.291333][T16940] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1623.291487][T16940] usb 5-1: Product: syz [ 1623.291544][T16940] usb 5-1: Manufacturer: syz [ 1623.291602][T16940] usb 5-1: SerialNumber: syz [ 1623.335135][T16940] usb 5-1: config 0 descriptor?? [ 1623.340284][T20125] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1623.375425][T16940] usb 5-1: selecting invalid altsetting 0 [ 1624.562545][T16877] speedtch 1-1:1.0: speedtch_bind: device reset failed (-19)! [ 1624.562762][T16877] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1624.570299][T16877] usb 1-1: USB disconnect, device number 16 [ 1624.648599][T20135] netlink: 'syz.1.3532': attribute type 1 has an invalid length. [ 1624.669588][T20135] bond4: entered promiscuous mode [ 1624.669990][T20135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1624.686024][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3532'. [ 1624.807142][T20135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1624.807487][T20135] bond4: (slave wireguard3): The slave device specified does not support setting the MAC address [ 1624.807506][T20135] bond4: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 1624.878853][T20135] bond4: (slave wireguard3): making interface the new active one [ 1624.878873][T20135] wireguard3: entered promiscuous mode [ 1624.885487][T20135] bond4: (slave wireguard3): Enslaving as an active interface with an up link [ 1624.898777][T20142] loop0: detected capacity change from 0 to 512 [ 1624.960378][T20142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1624.960497][T20142] System zones: 1-12 [ 1625.059172][T20142] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.3533: missing EA_INODE flag [ 1625.059196][T20142] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1625.059517][T20142] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3533: error while reading EA inode 12 err=-117 [ 1625.059542][T20142] loop0: lost filesystem error report for type 5 error -117 [ 1625.061413][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 1625.061432][ C0] EXT4-fs (loop0): initial error at time 1790269158: ext4_xattr_inode_iget:437: inode 12 [ 1625.061462][ C0] EXT4-fs (loop0): last error at time 1790269158: ext4_xattr_inode_iget:442 [ 1625.071733][T20142] EXT4-fs (loop0): 1 orphan inode deleted [ 1625.074252][T20142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1625.164158][T20146] overlayfs: missing 'lowerdir' [ 1625.231312][T13597] usb 5-1: USB disconnect, device number 45 [ 1625.547587][ T5608] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1626.351984][T20157] overlayfs: missing 'lowerdir' [ 1626.520252][T16639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1627.461489][T16940] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1627.632107][T16940] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1627.633103][T16940] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1627.633132][T16940] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1627.633157][T16940] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1627.633180][T16940] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1627.635247][T16940] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1627.635270][T16940] usb 1-1: Product: syz [ 1627.635283][T16940] usb 1-1: Manufacturer: syz [ 1627.635297][T16940] usb 1-1: SerialNumber: syz [ 1627.639227][T16940] usb 1-1: config 0 descriptor?? [ 1627.639985][T20165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1627.657175][T16940] usb 1-1: selecting invalid altsetting 0 [ 1627.681520][ T27] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1627.822950][T20179] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1627.831726][ T969] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1627.850880][ T27] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1627.860867][ T27] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1627.860896][ T27] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1627.860920][ T27] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1627.860944][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1627.868228][ T27] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1627.868250][ T27] usb 5-1: Product: syz [ 1627.868288][ T27] usb 5-1: Manufacturer: syz [ 1627.868302][ T27] usb 5-1: SerialNumber: syz [ 1627.876678][ T27] usb 5-1: config 0 descriptor?? [ 1627.879438][T20173] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1627.904006][ T27] usb 5-1: selecting invalid altsetting 0 [ 1627.925495][T20165] loop0: detected capacity change from 0 to 512 [ 1627.953504][T20165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1627.953624][T20165] System zones: 1-12 [ 1627.954902][T20165] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.3539: missing EA_INODE flag [ 1627.954926][T20165] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1627.955315][T20165] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3539: error while reading EA inode 12 err=-117 [ 1627.955339][T20165] loop0: lost filesystem error report for type 5 error -117 [ 1627.956259][T20165] EXT4-fs (loop0): 1 orphan inode deleted [ 1627.964640][T20165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1627.985601][ T969] usb 4-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1627.989724][ T969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.989779][ T969] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1627.989800][ T969] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1628.046188][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.046210][ T969] usb 4-1: Product: syz [ 1628.046224][ T969] usb 4-1: Manufacturer: syz [ 1628.046237][ T969] usb 4-1: SerialNumber: syz [ 1628.624636][T20188] overlayfs: missing 'lowerdir' [ 1629.041832][T20177] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1629.391513][T13597] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1629.489176][T20196] overlayfs: failed to resolve './file0': -2 [ 1629.568669][T13597] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1629.571926][T20198] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1629.577081][T13597] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1629.577108][T13597] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1629.577131][T13597] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1629.577154][T13597] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1629.757057][T20199] loop1: detected capacity change from 0 to 1024 [ 1629.808598][T20200] overlayfs: failed to resolve './bus': -2 [ 1629.836481][ T27] usb 5-1: USB disconnect, device number 46 [ 1629.892903][T13597] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1629.892927][T13597] usb 3-1: Product: syz [ 1629.892940][T13597] usb 3-1: Manufacturer: syz [ 1629.892954][T13597] usb 3-1: SerialNumber: syz [ 1630.105507][ T969] speedtch 4-1:1.0: speedtch_bind: device reset failed (-19)! [ 1630.106578][ T969] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1630.357894][T15862] usb 1-1: USB disconnect, device number 17 [ 1630.431454][T20199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1630.533395][T13597] usb 3-1: config 0 descriptor?? [ 1630.535068][T20190] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1630.588451][T20199] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.833083][ T969] usb 4-1: USB disconnect, device number 49 [ 1631.129303][T16639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1631.421192][T13597] usb 3-1: selecting invalid altsetting 0 [ 1632.995402][T13597] usb 3-1: USB disconnect, device number 50 [ 1634.061488][ T27] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1634.240214][ T27] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1634.281821][ T27] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1634.282269][ T27] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1634.282563][ T27] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1634.282889][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1634.366268][ T27] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1634.366292][ T27] usb 2-1: Product: syz [ 1634.366306][ T27] usb 2-1: Manufacturer: syz [ 1634.366319][ T27] usb 2-1: SerialNumber: syz [ 1634.485355][T20234] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1634.511152][ T27] usb 2-1: config 0 descriptor?? [ 1634.522985][ T27] usb 2-1: selecting invalid altsetting 0 [ 1634.747510][T20232] loop1: detected capacity change from 0 to 512 [ 1634.779659][T20232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1634.779777][T20232] System zones: 1-12 [ 1634.780904][T20232] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.3561: missing EA_INODE flag [ 1634.780927][T20232] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1634.781598][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1634.781619][ C0] EXT4-fs (loop1): initial error at time 1790269168: ext4_xattr_inode_iget:437: inode 12 [ 1634.781650][ C0] EXT4-fs (loop1): last error at time 1790269168: ext4_xattr_inode_iget:437: inode 12 [ 1634.861591][T20232] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3561: error while reading EA inode 12 err=-117 [ 1634.861620][T20232] loop1: lost filesystem error report for type 5 error -117 [ 1634.861998][T20232] EXT4-fs (loop1): 1 orphan inode deleted [ 1634.867429][T20232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1635.081975][T15862] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1635.305670][T15862] usb 4-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1635.399611][T15862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.399670][T15862] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1635.399693][T15862] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1635.577691][T15862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.577715][T15862] usb 4-1: Product: syz [ 1635.577729][T15862] usb 4-1: Manufacturer: syz [ 1635.577741][T15862] usb 4-1: SerialNumber: syz [ 1635.875336][T20236] CacheFiles: Failed to register: -30 [ 1635.881502][T15862] speedtch 4-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1635.881562][T15862] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1635.881609][T15862] speedtch 4-1:1.0: probe with driver speedtch failed with error -71 [ 1635.908884][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 1636.010376][T20251] overlayfs: missing 'lowerdir' [ 1636.113727][T13597] usb 2-1: USB disconnect, device number 47 [ 1636.489494][T15862] speedtch 4-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 1636.502600][T15862] speedtch 4-1:1.1: usbatm_usb_probe: bind failed: -71! [ 1636.502651][T15862] speedtch 4-1:1.1: probe with driver speedtch failed with error -71 [ 1636.531179][T15862] usb 4-1: USB disconnect, device number 50 [ 1636.716122][ T33] audit: type=1326 audit(1790269170.098:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.3.3567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1636.716289][ T33] audit: type=1326 audit(1790269170.098:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.3.3567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1636.777696][ T33] audit: type=1326 audit(1790269170.158:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.3.3567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1636.778517][ T33] audit: type=1326 audit(1790269170.158:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.3.3567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1636.778561][ T33] audit: type=1326 audit(1790269170.158:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.3.3567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1636.779243][ T33] audit: type=1326 audit(1790269170.158:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.3.3567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1636.808642][ T33] audit: type=1326 audit(1790269170.188:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.3.3567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1636.808686][ T33] audit: type=1326 audit(1790269170.188:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.3.3567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1637.053397][ T33] audit: type=1326 audit(1790269170.438:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.3.3567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde7b75e98e code=0x7ffc0000 [ 1637.053446][ T33] audit: type=1326 audit(1790269170.438:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20253 comm="syz.3.3567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7b79ddeb code=0x7ffc0000 [ 1637.135897][T20257] fuse: Bad value for 'fd' [ 1637.566480][T17686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.722886][T15862] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1637.875729][T15862] usb 4-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 1637.879316][T15862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.879364][T15862] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1637.879384][T15862] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1637.879405][T15862] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1637.880700][T20263] loop1: detected capacity change from 0 to 2048 [ 1637.889811][T15862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.889832][T15862] usb 4-1: Product: syz [ 1637.889845][T15862] usb 4-1: Manufacturer: syz [ 1637.889858][T15862] usb 4-1: SerialNumber: syz [ 1637.928357][T15862] sisusb 4-1:1.0: Invalid USB2VGA device [ 1637.928378][T15862] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 1638.048733][T20263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1639.460620][ T27] usb 4-1: USB disconnect, device number 51 [ 1639.691533][T13597] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1639.805938][T20287] overlayfs: failed to resolve './file1': -2 [ 1639.844137][T13597] usb 5-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1639.850098][T13597] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.850391][T13597] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1639.850499][T13597] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1640.090925][T13597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.090985][T13597] usb 5-1: Product: syz [ 1640.090999][T13597] usb 5-1: Manufacturer: syz [ 1640.091054][T13597] usb 5-1: SerialNumber: syz [ 1640.189703][T20288] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3579'. [ 1640.810877][T20282] CacheFiles: Failed to register: -30 [ 1640.920943][T13597] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1640.921237][T13597] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1640.939698][T13597] speedtch 5-1:1.0: probe with driver speedtch failed with error -71 [ 1641.143701][T13597] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 1641.171015][T13597] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -71! [ 1641.186312][T13597] speedtch 5-1:1.1: probe with driver speedtch failed with error -71 [ 1641.397878][T13597] usb 5-1: USB disconnect, device number 47 [ 1642.463892][T20309] overlayfs: failed to resolve './file0': -2 [ 1642.747432][T20310] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3584'. [ 1643.341568][ T27] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1643.494372][ T27] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1643.499100][ T27] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x7B, changing to 0xB [ 1643.499140][ T27] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 1643.499179][ T27] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0xB has invalid wMaxPacketSize 0 [ 1643.499238][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1643.607557][ T27] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1643.607602][ T27] usb 3-1: Product: syz [ 1643.607648][ T27] usb 3-1: Manufacturer: syz [ 1643.607695][ T27] usb 3-1: SerialNumber: syz [ 1643.657691][ T27] usb 3-1: config 0 descriptor?? [ 1643.713078][ T27] usb 3-1: selecting invalid altsetting 0 [ 1644.384119][T20324] fuse: Bad value for 'fd' [ 1644.644397][T20326] overlayfs: missing 'lowerdir' [ 1645.122021][T13597] usb 3-1: USB disconnect, device number 51 [ 1647.394013][T20350] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3595'. [ 1647.481594][T13597] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1647.668371][T13597] usb 5-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1647.684789][T13597] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.685038][T13597] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1647.685093][T13597] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1647.760853][T13597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.761014][T13597] usb 5-1: Product: syz [ 1647.761075][T13597] usb 5-1: Manufacturer: syz [ 1647.761089][T13597] usb 5-1: SerialNumber: syz [ 1648.310470][T20345] CacheFiles: Failed to register: -30 [ 1648.388471][T13597] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1648.388703][T13597] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1648.388908][T13597] speedtch 5-1:1.0: probe with driver speedtch failed with error -71 [ 1648.533624][T13597] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 1648.534178][T13597] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -71! [ 1648.534227][T13597] speedtch 5-1:1.1: probe with driver speedtch failed with error -71 [ 1648.554931][T13597] usb 5-1: USB disconnect, device number 48 [ 1648.642179][T20350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1648.643813][T20350] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1648.643966][T20350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1648.644110][T20350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1648.644261][T20350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1650.691978][T10622] Bluetooth: hci4: command 0x0c1a tx timeout [ 1650.692121][T10622] Bluetooth: hci0: command 0x0c1a tx timeout [ 1650.692223][T10622] Bluetooth: hci5: command 0x0c1a tx timeout [ 1650.695029][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 1650.695176][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 1650.904456][T20376] loop1: detected capacity change from 0 to 512 [ 1652.274491][T20392] ip_tables: iptables: counters copy to user failed while replacing table [ 1652.325355][T20393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1652.332641][ T27] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1652.602437][ T27] usb 3-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 1652.603592][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.201815][ T27] usbhid 3-1:1.0: can't add hid device: -71 [ 1653.201931][ T27] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1653.209317][ T27] usb 3-1: USB disconnect, device number 52 [ 1660.260685][T20459] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1660.381154][T20459] loop0: detected capacity change from 0 to 1024 [ 1660.562921][T20459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1660.875787][T20465] netlink: 'syz.1.3628': attribute type 1 has an invalid length. [ 1661.293753][T16639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1661.379180][T20465] bond5: entered promiscuous mode [ 1661.393567][T20465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1661.818355][T20481] loop1: detected capacity change from 0 to 1024 [ 1662.007155][T20481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1663.255649][T17686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.707873][T20510] ip_tables: iptables: counters copy to user failed while replacing table [ 1666.049809][T20521] fuse: Bad value for 'fd' [ 1667.781530][T12204] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1667.911466][T12204] usb 1-1: device descriptor read/64, error -71 [ 1668.047697][T20539] loop1: detected capacity change from 0 to 32768 [ 1668.048674][T20539] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 1668.077346][T20539] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3646 (20539) [ 1668.106771][T20539] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1668.106798][T20539] BTRFS info (device loop1): using crc32c checksum algorithm [ 1668.532360][T20553] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3647'. [ 1668.558416][T12204] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1668.773527][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.773618][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.784564][T12204] usb 1-1: device descriptor read/64, error -71 [ 1668.867317][T20539] BTRFS info (device loop1): rebuilding free space tree [ 1668.892771][T12204] usb usb1-port1: attempt power cycle [ 1669.118076][T20539] BTRFS info (device loop1): disabling free space tree [ 1669.118364][T20539] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1669.118392][T20539] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1669.164631][T20539] BTRFS info (device loop1): enabling ssd optimizations [ 1669.164645][T20539] BTRFS info (device loop1): turning on async discard [ 1669.164653][T20539] BTRFS info (device loop1): force clearing of disk cache [ 1669.164663][T20539] BTRFS info (device loop1): use zstd compression, level 3 [ 1669.291659][T12204] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1669.313353][T12204] usb 1-1: device descriptor read/8, error -71 [ 1669.562079][T12204] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1669.582065][T12204] usb 1-1: device descriptor read/8, error -71 [ 1670.057217][T12204] usb usb1-port1: unable to enumerate USB device [ 1671.363965][T12204] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1672.592137][T16877] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1672.743324][T16877] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1672.744428][T16877] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1672.744456][T16877] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1672.744480][T16877] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1672.744505][T16877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1672.748569][T16877] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1672.748592][T16877] usb 1-1: Product: syz [ 1672.748605][T16877] usb 1-1: Manufacturer: syz [ 1672.748619][T16877] usb 1-1: SerialNumber: syz [ 1672.797311][T16877] usb 1-1: config 0 descriptor?? [ 1672.813350][T20584] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1672.859931][T16877] usb 1-1: selecting invalid altsetting 0 [ 1672.952143][T12204] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1672.954338][T12204] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1672.954365][T12204] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1672.954388][T12204] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1672.954408][T12204] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1672.956429][T12204] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1672.956450][T12204] usb 4-1: Product: syz [ 1672.956463][T12204] usb 4-1: Manufacturer: syz [ 1672.956476][T12204] usb 4-1: SerialNumber: syz [ 1672.972537][T12204] usb 4-1: config 0 descriptor?? [ 1673.035569][T12204] usb 4-1: selecting invalid altsetting 0 [ 1673.156689][T20584] loop0: detected capacity change from 0 to 512 [ 1673.929563][T20594] overlayfs: missing 'lowerdir' [ 1674.679214][T17686] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1674.797301][T20584] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1674.841744][T20584] EXT4-fs: failed to create workqueue [ 1674.841759][T20584] EXT4-fs (loop0): mount failed [ 1674.896351][T12204] usb 4-1: USB disconnect, device number 52 [ 1674.926017][T16877] usb 1-1: USB disconnect, device number 22 [ 1675.207485][T20604] udevd[20604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1675.573151][T20613] fuse: Bad value for 'fd' [ 1676.236068][T13597] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1676.620384][T16877] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1676.635160][T13597] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1676.660976][T13597] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1676.661005][T13597] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1676.661034][T13597] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1676.692454][T13597] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1676.692476][T13597] usb 5-1: Product: syz [ 1676.692490][T13597] usb 5-1: Manufacturer: syz [ 1676.692497][T13597] usb 5-1: SerialNumber: syz [ 1676.697495][T13597] usb 5-1: config 0 descriptor?? [ 1676.739445][T13597] usb 5-1: selecting invalid altsetting 0 [ 1676.751487][T16877] usb 1-1: device descriptor read/64, error -71 [ 1676.831278][T20617] FAULT_INJECTION: forcing a failure. [ 1676.831278][T20617] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.831305][T20617] CPU: 1 UID: 0 PID: 20617 Comm: syz.2.3657 Not tainted syzkaller #0 PREEMPT(full) [ 1676.831326][T20617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1676.831338][T20617] Call Trace: [ 1676.831347][T20617] [ 1676.831356][T20617] dump_stack_lvl+0xe8/0x150 [ 1676.831396][T20617] should_fail_ex+0x3eb/0x540 [ 1676.831431][T20617] should_failslab+0xa8/0x100 [ 1676.831458][T20617] ? do_getname+0x2e/0x250 [ 1676.831487][T20617] kmem_cache_alloc_noprof+0x9c/0x600 [ 1676.831508][T20617] ? do_getname+0x2e/0x250 [ 1676.831539][T20617] do_getname+0x2e/0x250 [ 1676.831563][T20617] ? __se_sys_mkdirat+0x18/0x150 [ 1676.831589][T20617] __se_sys_mkdirat+0x24/0x150 [ 1676.831616][T20617] do_syscall_64+0x166/0x520 [ 1676.831638][T20617] ? trace_irq_disable+0x3b/0x140 [ 1676.831664][T20617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.831684][T20617] ? clear_bhb_loop+0x70/0xc0 [ 1676.831705][T20617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.831724][T20617] RIP: 0033:0x7f547139e159 [ 1676.831742][T20617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.831759][T20617] RSP: 002b:00007f547229f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1676.831780][T20617] RAX: ffffffffffffffda RBX: 00007f5471625fa0 RCX: 00007f547139e159 [ 1676.831794][T20617] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1676.831806][T20617] RBP: 00007f547143506b R08: 0000000000000000 R09: 0000000000000000 [ 1676.831819][T20617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1676.831831][T20617] R13: 00007f5471626038 R14: 00007f5471625fa0 R15: 00007ffcfa606e08 [ 1676.831863][T20617] [ 1677.005850][T16877] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1677.161525][T16877] usb 1-1: device descriptor read/64, error -71 [ 1677.272093][T16877] usb usb1-port1: attempt power cycle [ 1677.764355][T20630] overlayfs: missing 'lowerdir' [ 1677.985968][ T969] usb 5-1: USB disconnect, device number 49 [ 1678.550268][T20632] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3666'. [ 1678.686016][T20633] loop1: detected capacity change from 0 to 1024 [ 1678.801495][T16877] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1678.889211][T20633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1678.950800][T20633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1679.064127][T16877] usb 1-1: device descriptor read/8, error -71 [ 1679.613708][T20640] loop0: detected capacity change from 0 to 512 [ 1690.536101][T20704] fuse: Bad value for 'fd' [ 1691.301460][T16877] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1691.641283][T13597] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1691.642374][T16877] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1691.799583][T16877] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1691.799612][T16877] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1691.799635][T16877] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1691.799656][T16877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1692.011628][T13597] usb 2-1: Using ep0 maxpacket: 8 [ 1692.021494][T16877] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1692.021518][T16877] usb 4-1: Product: syz [ 1692.021532][T16877] usb 4-1: Manufacturer: syz [ 1692.021545][T16877] usb 4-1: SerialNumber: syz [ 1692.106911][T13597] usb 2-1: New USB device found: idVendor=0763, idProduct=2030, bcdDevice=0.40 [ 1692.162418][T13597] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.162440][T13597] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1692.504510][T13597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.504535][T13597] usb 2-1: Product: syz [ 1692.504549][T13597] usb 2-1: Manufacturer: syz [ 1692.504572][T13597] usb 2-1: SerialNumber: syz [ 1692.617762][T16877] usb 4-1: config 0 descriptor?? [ 1692.739703][T16877] usb 4-1: selecting invalid altsetting 0 [ 1695.388934][T20734] overlayfs: missing 'workdir' [ 1695.422380][ T969] usb 4-1: USB disconnect, device number 53 [ 1695.500654][T20735] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3692'. [ 1695.632087][T13597] usb 2-1: 0:1 : does not exist [ 1695.632157][T13597] usb 2-1: BAAD HEADSET c_chmask mismatch [ 1695.662729][T20735] loop0: detected capacity change from 0 to 1024 [ 1695.898278][T20735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1695.931545][T12204] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1695.962341][T20735] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.084756][T12204] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1696.089533][T12204] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1696.089574][T12204] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1696.089611][T12204] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1696.089704][T12204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1696.127146][T12204] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1696.127198][T12204] usb 3-1: Product: syz [ 1696.127249][T12204] usb 3-1: Manufacturer: syz [ 1696.127296][T12204] usb 3-1: SerialNumber: syz [ 1696.307650][T12204] usb 3-1: config 0 descriptor?? [ 1697.013072][T13597] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1697.018260][T13597] usb 2-1: USB disconnect, device number 48 [ 1697.198565][T12204] usb 3-1: selecting invalid altsetting 0 [ 1697.415752][T20746] overlayfs: missing 'lowerdir' [ 1697.771760][T15862] usb 3-1: USB disconnect, device number 53 [ 1698.915178][T20719] udevd[20719]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1700.403750][T20718] udevd[20718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1701.115492][T20769] fuse: Bad value for 'fd' [ 1701.465567][T15862] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1701.551507][ T969] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1701.735537][T15862] usb 5-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 1701.736795][T15862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.812326][ T969] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1701.814301][ T969] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1701.814330][ T969] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1701.814354][ T969] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1701.814384][ T969] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1701.879851][ T969] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1701.879875][ T969] usb 2-1: Product: syz [ 1701.879889][ T969] usb 2-1: Manufacturer: syz [ 1701.879902][ T969] usb 2-1: SerialNumber: syz [ 1701.911155][ T969] usb 2-1: config 0 descriptor?? [ 1701.918035][T20765] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1701.951266][ T969] usb 2-1: selecting invalid altsetting 0 [ 1702.158596][T20765] loop1: detected capacity change from 0 to 512 [ 1702.384831][T20781] fuse: Bad value for 'fd' [ 1702.559643][T20765] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1702.559755][T20765] System zones: 1-12 [ 1702.561036][T20765] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.3700: missing EA_INODE flag [ 1702.561060][T20765] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1702.561418][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1702.561437][ C0] EXT4-fs (loop1): initial error at time 1790269235: ext4_xattr_inode_iget:437: inode 12 [ 1702.561464][ C0] EXT4-fs (loop1): last error at time 1790269235: ext4_xattr_inode_iget:437: inode 12 [ 1702.572205][T15862] wacom 0003:056A:033B.001C: unknown main item tag 0x0 [ 1702.572238][T15862] wacom 0003:056A:033B.001C: unknown main item tag 0x0 [ 1702.572262][T15862] wacom 0003:056A:033B.001C: unknown main item tag 0x0 [ 1702.572287][T15862] wacom 0003:056A:033B.001C: unknown main item tag 0x0 [ 1702.572311][T15862] wacom 0003:056A:033B.001C: unknown main item tag 0x0 [ 1702.572348][T15862] wacom 0003:056A:033B.001C: unknown main item tag 0x0 [ 1702.572372][T15862] wacom 0003:056A:033B.001C: unknown main item tag 0x0 [ 1702.572396][T15862] wacom 0003:056A:033B.001C: unknown main item tag 0x0 [ 1702.572420][T15862] wacom 0003:056A:033B.001C: unknown main item tag 0x0 [ 1702.572444][T15862] wacom 0003:056A:033B.001C: unknown main item tag 0x0 [ 1702.573961][T15862] wacom 0003:056A:033B.001C: unbalanced collection at end of report description [ 1702.576016][T15862] wacom 0003:056A:033B.001C: parse failed [ 1702.576114][T15862] wacom 0003:056A:033B.001C: probe with driver wacom failed with error -22 [ 1702.621896][T13597] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1702.728221][T20765] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3700: error while reading EA inode 12 err=-117 [ 1702.728257][T20765] loop1: lost filesystem error report for type 5 error -117 [ 1702.729342][T20765] EXT4-fs (loop1): 1 orphan inode deleted [ 1702.740247][T20765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1702.771484][ T969] usb 5-1: USB disconnect, device number 50 [ 1702.912320][T13597] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1702.916729][T13597] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1702.916756][T13597] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1702.916780][T13597] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1702.916803][T13597] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1702.972288][T13597] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1702.972311][T13597] usb 1-1: Product: syz [ 1702.972325][T13597] usb 1-1: Manufacturer: syz [ 1702.972338][T13597] usb 1-1: SerialNumber: syz [ 1703.043051][T13597] usb 1-1: config 0 descriptor?? [ 1703.101906][T20773] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1703.620576][ T969] usb 2-1: USB disconnect, device number 49 [ 1703.681870][T15862] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1703.947473][T15862] usb 3-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 1703.949820][T15862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.336781][T13597] usb 1-1: selecting invalid altsetting 0 [ 1704.372541][T20773] loop0: detected capacity change from 0 to 512 [ 1704.457845][T20773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1704.457993][T20773] System zones: 1-12 [ 1704.459356][T20773] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.3704: missing EA_INODE flag [ 1704.459381][T20773] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1704.459733][T20773] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3704: error while reading EA inode 12 err=-117 [ 1704.459761][T20773] loop0: lost filesystem error report for type 5 error -117 [ 1704.460131][T20773] EXT4-fs (loop0): 1 orphan inode deleted [ 1704.474971][T20773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1705.268295][T13597] usb 1-1: USB disconnect, device number 27 [ 1705.315778][T17686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.541245][T15862] wacom 0003:056A:033B.001D: unbalanced collection at end of report description [ 1705.548919][T16639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.567332][T15862] wacom 0003:056A:033B.001D: parse failed [ 1705.567432][T15862] wacom 0003:056A:033B.001D: probe with driver wacom failed with error -22 [ 1705.621693][T12204] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1705.798641][ T5608] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1705.798869][T12204] usb 5-1: Using ep0 maxpacket: 32 [ 1705.800966][T12204] usb 5-1: New USB device found: idVendor=0e41, idProduct=0000, bcdDevice=0.00 [ 1705.800998][T12204] usb 5-1: no configurations [ 1705.801010][T12204] usb 5-1: can't read configurations, error -22 [ 1705.807794][ T969] usb 3-1: USB disconnect, device number 54 [ 1705.950186][T20814] fuse: Bad value for 'fd' [ 1706.150249][T12204] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1706.301502][T12204] usb 5-1: Using ep0 maxpacket: 32 [ 1706.320841][T12204] usb 5-1: New USB device found: idVendor=0e41, idProduct=0000, bcdDevice=0.00 [ 1706.320953][T12204] usb 5-1: no configurations [ 1706.321011][T12204] usb 5-1: can't read configurations, error -22 [ 1706.334984][T12220] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1706.361923][T12204] usb usb5-port1: attempt power cycle [ 1706.492302][T12220] usb 4-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 1706.493547][T12220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.702118][T12204] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1706.722102][T12204] usb 5-1: Using ep0 maxpacket: 32 [ 1706.725742][T12204] usb 5-1: New USB device found: idVendor=0e41, idProduct=0000, bcdDevice=0.00 [ 1706.725775][T12204] usb 5-1: no configurations [ 1706.725787][T12204] usb 5-1: can't read configurations, error -22 [ 1706.851478][T12204] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1706.872109][T12204] usb 5-1: Using ep0 maxpacket: 32 [ 1706.873549][T12204] usb 5-1: New USB device found: idVendor=0e41, idProduct=0000, bcdDevice=0.00 [ 1706.873582][T12204] usb 5-1: no configurations [ 1706.873594][T12204] usb 5-1: can't read configurations, error -22 [ 1706.876785][T12204] usb usb5-port1: unable to enumerate USB device [ 1706.901569][T13597] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1706.984327][T12220] wacom 0003:056A:033B.001E: unbalanced collection at end of report description [ 1706.985027][T12220] wacom 0003:056A:033B.001E: parse failed [ 1706.985121][T12220] wacom 0003:056A:033B.001E: probe with driver wacom failed with error -22 [ 1707.042228][T13597] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1707.043818][T13597] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1707.043844][T13597] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1707.043866][T13597] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1707.046560][T13597] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1707.046582][T13597] usb 2-1: Product: syz [ 1707.046595][T13597] usb 2-1: Manufacturer: syz [ 1707.046609][T13597] usb 2-1: SerialNumber: syz [ 1707.050509][T13597] usb 2-1: config 0 descriptor?? [ 1707.062182][T13597] usb 2-1: selecting invalid altsetting 0 [ 1707.192525][ T969] usb 4-1: USB disconnect, device number 54 [ 1707.971937][T20816] loop1: detected capacity change from 0 to 512 [ 1707.992769][T20816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1707.992889][T20816] System zones: 1-12 [ 1708.075389][T20816] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.3713: missing EA_INODE flag [ 1708.075413][T20816] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1708.075735][T20816] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3713: error while reading EA inode 12 err=-117 [ 1708.075760][T20816] loop1: lost filesystem error report for type 5 error -117 [ 1708.077918][T20816] EXT4-fs (loop1): 1 orphan inode deleted [ 1708.081308][T20816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1708.170182][T20840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1709.050232][T20844] overlayfs: missing 'lowerdir' [ 1709.624274][T20846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 1709.759376][ T969] usb 2-1: USB disconnect, device number 50 [ 1710.109028][T20838] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3720'. [ 1710.304185][T13597] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1710.311334][T20856] ip_tables: iptables: counters copy to user failed while replacing table [ 1710.448036][T17686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1710.492676][T13597] usb 5-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 1710.509032][T13597] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.509086][T13597] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1710.612886][T13597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.612924][T13597] usb 5-1: Product: syz [ 1710.612969][T13597] usb 5-1: Manufacturer: syz [ 1710.613017][T13597] usb 5-1: SerialNumber: syz [ 1711.766475][T20870] overlayfs: missing 'workdir' [ 1711.915379][ T969] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1711.999501][T20871] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3730'. [ 1712.431453][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 1712.462467][ T969] usb 2-1: New USB device found: idVendor=0e41, idProduct=0000, bcdDevice=0.00 [ 1712.462505][ T969] usb 2-1: no configurations [ 1712.462518][ T969] usb 2-1: can't read configurations, error -22 [ 1712.782529][ T969] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1713.041452][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 1713.044563][ T969] usb 2-1: New USB device found: idVendor=0e41, idProduct=0000, bcdDevice=0.00 [ 1713.044599][ T969] usb 2-1: no configurations [ 1713.044612][ T969] usb 2-1: can't read configurations, error -22 [ 1713.045081][ T969] usb usb2-port1: attempt power cycle [ 1713.411638][ T969] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1713.453454][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 1713.514251][ T969] usb 2-1: New USB device found: idVendor=0e41, idProduct=0000, bcdDevice=0.00 [ 1713.514746][ T969] usb 2-1: no configurations [ 1713.515023][ T969] usb 2-1: can't read configurations, error -22 [ 1713.547142][T12204] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1713.632575][T15862] usb 5-1: USB disconnect, device number 55 [ 1713.813601][T12204] usb 3-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 1713.814633][T12204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.851562][ T969] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1713.855157][ T33] kauditd_printk_skb: 46 callbacks suppressed [ 1713.855172][ T33] audit: type=1326 audit(1790269247.238:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.3.3737" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1713.855382][ T33] audit: type=1326 audit(1790269247.238:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.3.3737" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1713.858352][ T33] audit: type=1326 audit(1790269247.238:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.3.3737" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1713.858598][ T33] audit: type=1326 audit(1790269247.238:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.3.3737" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1713.859050][ T33] audit: type=1326 audit(1790269247.238:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.3.3737" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1713.861495][ T33] audit: type=1326 audit(1790269247.238:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.3.3737" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1713.861542][ T33] audit: type=1326 audit(1790269247.238:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.3.3737" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1713.861580][ T33] audit: type=1326 audit(1790269247.238:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.3.3737" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1713.867704][ T33] audit: type=1326 audit(1790269247.248:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.3.3737" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde7b75e98e code=0x7ffc0000 [ 1713.868274][ T33] audit: type=1326 audit(1790269247.248:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20891 comm="syz.3.3737" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7b79ddeb code=0x7ffc0000 [ 1713.930455][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 1714.153691][ T969] usb 2-1: New USB device found: idVendor=0e41, idProduct=0000, bcdDevice=0.00 [ 1714.153751][ T969] usb 2-1: no configurations [ 1714.153764][ T969] usb 2-1: can't read configurations, error -22 [ 1714.154276][ T969] usb usb2-port1: unable to enumerate USB device [ 1714.221521][T16877] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1714.308228][T20896] fuse: Bad value for 'fd' [ 1714.684653][T12204] hid_parser_main: 18 callbacks suppressed [ 1714.684768][T12204] wacom 0003:056A:033B.001F: unknown main item tag 0x0 [ 1714.685359][T12204] wacom 0003:056A:033B.001F: unknown main item tag 0x0 [ 1714.685916][T12204] wacom 0003:056A:033B.001F: unknown main item tag 0x0 [ 1714.686568][T12204] wacom 0003:056A:033B.001F: unknown main item tag 0x0 [ 1714.687094][T12204] wacom 0003:056A:033B.001F: unknown main item tag 0x0 [ 1714.687660][T12204] wacom 0003:056A:033B.001F: unknown main item tag 0x0 [ 1714.688150][T12204] wacom 0003:056A:033B.001F: unknown main item tag 0x0 [ 1714.766227][T12204] wacom 0003:056A:033B.001F: unbalanced collection at end of report description [ 1714.766954][T12204] wacom 0003:056A:033B.001F: parse failed [ 1714.767062][T12204] wacom 0003:056A:033B.001F: probe with driver wacom failed with error -22 [ 1714.833792][T16877] usb 4-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 1714.841550][T13597] usb 3-1: USB disconnect, device number 55 [ 1714.869726][T16877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.869749][T16877] usb 4-1: Product: syz [ 1714.869762][T16877] usb 4-1: Manufacturer: syz [ 1714.869776][T16877] usb 4-1: SerialNumber: syz [ 1714.938218][T16877] usb 4-1: USB2VGA dongle found at address 55 [ 1714.949013][T16877] usb 4-1: Allocated 8 output buffers [ 1715.012673][T20899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1715.093906][T20899] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1715.095078][T20899] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1715.096232][T20899] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1715.096636][T20899] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1715.096913][T20899] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1715.172399][T20905] overlayfs: missing 'lowerdir' [ 1716.002364][T16877] usb 4-1: Failed to early initialize device [ 1716.015489][T16877] usb 4-1: USB disconnect, device number 55 [ 1716.968382][ T5608] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1716.982319][T12204] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1717.091566][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 1717.159328][T12204] usb 2-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 1717.170347][T12204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.183743][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 1717.183822][ T5608] Bluetooth: hci4: command 0x0c1a tx timeout [ 1717.183861][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 1717.183902][ T5608] Bluetooth: hci5: command 0x0c1a tx timeout [ 1717.654513][T20932] kvm: pic: non byte write [ 1717.739022][T12204] wacom 0003:056A:033B.0020: unknown main item tag 0x0 [ 1717.739053][T12204] wacom 0003:056A:033B.0020: unbalanced collection at end of report description [ 1717.739822][T12204] wacom 0003:056A:033B.0020: parse failed [ 1717.739919][T12204] wacom 0003:056A:033B.0020: probe with driver wacom failed with error -22 [ 1718.857414][T12204] usb 2-1: USB disconnect, device number 55 [ 1719.058466][ T33] kauditd_printk_skb: 82 callbacks suppressed [ 1719.058482][ T33] audit: type=1326 audit(1790269252.438:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20942 comm="syz.4.3752" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71a39e159 code=0x7ffc0000 [ 1719.058618][ T33] audit: type=1326 audit(1790269252.438:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20942 comm="syz.4.3752" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71a39e159 code=0x7ffc0000 [ 1719.061488][ T33] audit: type=1326 audit(1790269252.438:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20942 comm="syz.4.3752" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc71a39e159 code=0x7ffc0000 [ 1719.061529][ T33] audit: type=1326 audit(1790269252.438:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20942 comm="syz.4.3752" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71a39e159 code=0x7ffc0000 [ 1719.061565][ T33] audit: type=1326 audit(1790269252.438:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20942 comm="syz.4.3752" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71a39e159 code=0x7ffc0000 [ 1719.062636][ T33] audit: type=1326 audit(1790269252.448:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20942 comm="syz.4.3752" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc71a39e159 code=0x7ffc0000 [ 1719.063887][ T33] audit: type=1326 audit(1790269252.448:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20942 comm="syz.4.3752" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71a39e159 code=0x7ffc0000 [ 1719.064089][ T33] audit: type=1326 audit(1790269252.448:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20942 comm="syz.4.3752" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71a39e159 code=0x7ffc0000 [ 1719.067591][ T33] audit: type=1326 audit(1790269252.448:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20942 comm="syz.4.3752" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc71a35e98e code=0x7ffc0000 [ 1719.067640][ T33] audit: type=1326 audit(1790269252.448:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20942 comm="syz.4.3752" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc71a39ddeb code=0x7ffc0000 [ 1719.301564][ T969] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1719.501837][ T969] usb 5-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 1719.544794][T20948] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3754'. [ 1719.646624][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.646657][ T969] usb 5-1: Product: syz [ 1719.646694][ T969] usb 5-1: Manufacturer: syz [ 1719.646746][ T969] usb 5-1: SerialNumber: syz [ 1719.705696][T20948] loop0: detected capacity change from 0 to 1024 [ 1719.786466][ T969] usb 5-1: USB2VGA dongle found at address 56 [ 1719.909895][T20948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1719.965770][T20948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.170224][ T969] usb 5-1: Allocated 8 output buffers [ 1720.960021][T20957] overlayfs: missing 'lowerdir' [ 1721.240481][T20957] loop1: detected capacity change from 0 to 1024 [ 1721.438350][T20957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1721.589532][T20957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.633100][ T969] usb 5-1: Failed to early initialize device [ 1721.928972][ T969] usb 5-1: USB disconnect, device number 56 [ 1722.158879][T20966] loop0: detected capacity change from 0 to 512 [ 1722.179313][T20966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1722.179444][T20966] System zones: 1-12 [ 1722.198903][T20966] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.3758: missing EA_INODE flag [ 1722.198927][T20966] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1722.199212][T20966] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3758: error while reading EA inode 12 err=-117 [ 1722.199238][T20966] loop0: lost filesystem error report for type 5 error -117 [ 1722.200116][T20966] EXT4-fs (loop0): 1 orphan inode deleted [ 1722.259703][T20966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1723.481832][T20982] fuse: Bad value for 'fd' [ 1723.534899][T20983] fuse: Bad value for 'fd' [ 1724.135150][T20988] kvm: pic: non byte write [ 1724.148932][T20991] loop1: detected capacity change from 0 to 512 [ 1725.032736][T16639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1725.160467][ T33] kauditd_printk_skb: 97 callbacks suppressed [ 1725.160484][ T33] audit: type=1326 audit(1790269258.538:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.3.3765" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1725.160703][ T33] audit: type=1326 audit(1790269258.538:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.3.3765" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1725.167680][ T33] audit: type=1326 audit(1790269258.548:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.3.3765" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1725.167884][ T33] audit: type=1326 audit(1790269258.548:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.3.3765" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1725.169180][ T33] audit: type=1326 audit(1790269258.548:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.3.3765" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1725.169589][ T33] audit: type=1326 audit(1790269258.548:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.3.3765" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1725.176923][ T33] audit: type=1326 audit(1790269258.558:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.3.3765" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1725.177137][ T33] audit: type=1326 audit(1790269258.558:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.3.3765" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7b79e159 code=0x7ffc0000 [ 1725.186832][ T33] audit: type=1326 audit(1790269258.568:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.3.3765" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde7b75e98e code=0x7ffc0000 [ 1725.187342][ T33] audit: type=1326 audit(1790269258.568:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.3.3765" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7b79ddeb code=0x7ffc0000 [ 1725.421459][ T969] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1725.616306][ T969] usb 4-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 1725.670467][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.670563][ T969] usb 4-1: Product: syz [ 1725.670668][ T969] usb 4-1: Manufacturer: syz [ 1725.670747][ T969] usb 4-1: SerialNumber: syz [ 1725.831706][ T969] usb 4-1: USB2VGA dongle found at address 56 [ 1725.862483][ T969] usb 4-1: Allocated 8 output buffers [ 1726.310975][ T969] usb 4-1: Failed to early initialize device [ 1726.326287][ T969] usb 4-1: USB disconnect, device number 56 [ 1726.448134][T21006] fuse: Bad value for 'fd' [ 1726.805675][T21007] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3770'. [ 1726.950158][T21011] loop0: detected capacity change from 0 to 1024 [ 1727.422357][T21011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1727.998284][T16639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1728.424263][T12204] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1728.573077][T12204] usb 5-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 1728.586410][T12204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.212749][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.212808][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.240818][ T33] kauditd_printk_skb: 102 callbacks suppressed [ 1730.240834][ T33] audit: type=1326 audit(1790269263.618:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.1.3767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1439ddeb code=0x7ffc0000 [ 1730.295007][ T33] audit: type=1326 audit(1790269263.678:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.1.3767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1439ddeb code=0x7ffc0000 [ 1730.355911][T15862] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1730.357843][ T33] audit: type=1326 audit(1790269263.738:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.1.3767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1439ddeb code=0x7ffc0000 [ 1730.360456][ T33] audit: type=1326 audit(1790269263.738:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.1.3767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1439ddeb code=0x7ffc0000 [ 1730.360710][ T33] audit: type=1326 audit(1790269263.738:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.1.3767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1439ddeb code=0x7ffc0000 [ 1730.441514][ T33] audit: type=1326 audit(1790269263.808:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.1.3767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1439ddeb code=0x7ffc0000 [ 1730.496768][T12204] wacom 0003:056A:033B.0021: unknown main item tag 0x0 [ 1730.496789][T12204] wacom 0003:056A:033B.0021: unknown main item tag 0x0 [ 1730.496805][T12204] wacom 0003:056A:033B.0021: unknown main item tag 0x0 [ 1730.496819][T12204] wacom 0003:056A:033B.0021: unbalanced collection at end of report description [ 1730.497197][T12204] wacom 0003:056A:033B.0021: parse failed [ 1730.497249][T12204] wacom 0003:056A:033B.0021: probe with driver wacom failed with error -22 [ 1730.515753][ T33] audit: type=1326 audit(1790269263.898:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.1.3767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1439ddeb code=0x7ffc0000 [ 1730.515883][T15862] usb 2-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 1730.518259][ T33] audit: type=1326 audit(1790269263.898:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.1.3767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1439ddeb code=0x7ffc0000 [ 1730.518362][ T33] audit: type=1326 audit(1790269263.898:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.1.3767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1439ddeb code=0x7ffc0000 [ 1730.525833][ T33] audit: type=1326 audit(1790269263.898:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.1.3767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c1439ddeb code=0x7ffc0000 [ 1730.547903][T15862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.547925][T15862] usb 2-1: Product: syz [ 1730.547938][T15862] usb 2-1: Manufacturer: syz [ 1730.547951][T15862] usb 2-1: SerialNumber: syz [ 1730.569688][T15862] usb 2-1: USB2VGA dongle found at address 56 [ 1730.573581][T15862] usb 2-1: Allocated 8 output buffers [ 1730.698990][T12220] usb 5-1: USB disconnect, device number 57 [ 1730.850087][T15862] usb 2-1: Failed to early initialize device [ 1730.871574][T15862] usb 2-1: USB disconnect, device number 56 [ 1732.100705][T13597] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1732.253551][T13597] usb 4-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 1732.254581][T13597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.768640][T13597] wacom 0003:056A:033B.0022: unknown main item tag 0x0 [ 1732.768887][T13597] wacom 0003:056A:033B.0022: unknown main item tag 0x0 [ 1732.769170][T13597] wacom 0003:056A:033B.0022: unknown main item tag 0x0 [ 1732.769770][T13597] wacom 0003:056A:033B.0022: unbalanced collection at end of report description [ 1732.837125][T13597] wacom 0003:056A:033B.0022: parse failed [ 1732.840030][T13597] wacom 0003:056A:033B.0022: probe with driver wacom failed with error -22 [ 1733.118291][T13597] usb 4-1: USB disconnect, device number 57 [ 1734.125442][T21069] fuse: Bad value for 'fd' [ 1738.150521][T21092] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3789'. [ 1738.178870][ T33] kauditd_printk_skb: 92 callbacks suppressed [ 1738.178920][ T33] audit: type=1800 audit(1790269271.518:2744): pid=21092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3789" name="file0" dev="overlay" ino=790 res=0 errno=0 [ 1741.809243][T21113] fuse: Bad value for 'fd' [ 1742.358725][T21108] overlayfs: failed to resolve './file1': -2 [ 1743.100306][T21127] fuse: Unknown parameter '0xffffffffffffffff' [ 1744.446380][ T33] audit: type=1800 audit(1790269277.808:2745): pid=21136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3803" name="file0" dev="overlay" ino=1966 res=0 errno=0 [ 1748.165280][ T33] audit: type=1800 audit(1790269281.546:2746): pid=21154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3807" name="file0" dev="overlay" ino=1980 res=0 errno=0 [ 1752.508187][T12220] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1752.669009][T12220] usb 5-1: not running at top speed; connect to a high speed hub [ 1752.669043][T12220] usb 5-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 1752.670412][T12220] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.670470][T12220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.091234][T12220] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 1753.558407][T12220] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 1753.626078][T12220] usb 5-1: USB disconnect, device number 58 [ 1755.898677][T21204] ip_tables: iptables: counters copy to user failed while replacing table [ 1757.509854][T21232] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1757.978772][T21235] ip_tables: iptables: counters copy to user failed while replacing table [ 1764.258329][T21292] fuse: Bad value for 'fd' [ 1769.554925][ T33] audit: type=1800 audit(1790269301.476:2747): pid=21328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3854" name="file0" dev="overlay" ino=877 res=0 errno=0 [ 1771.351382][T21339] fuse: Bad value for 'fd' [ 1772.205249][T21346] fuse: Bad value for 'fd' [ 1772.526170][T10622] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1775.067232][T21374] ip_tables: iptables: counters copy to user failed while replacing table [ 1775.627052][T21389] fuse: Bad value for 'fd' [ 1776.266381][T21392] loop0: detected capacity change from 0 to 32768 [ 1776.267296][T21392] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 1776.288247][T21392] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3875 (21392) [ 1776.305789][T21392] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1776.305818][T21392] BTRFS info (device loop0): using crc32c checksum algorithm [ 1776.434436][T21392] BTRFS info (device loop0): rebuilding free space tree [ 1776.460727][T21392] BTRFS info (device loop0): disabling free space tree [ 1776.460784][T21392] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1776.460806][T21392] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1776.493216][T21392] BTRFS info (device loop0): enabling ssd optimizations [ 1776.493238][T21392] BTRFS info (device loop0): turning on async discard [ 1776.493254][T21392] BTRFS info (device loop0): force clearing of disk cache [ 1776.493300][T21392] BTRFS info (device loop0): use zstd compression, level 3 [ 1776.684137][T21409] kvm: pic: non byte write [ 1777.970877][T16639] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1779.412231][T21441] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1783.934165][T13597] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1784.703970][T13597] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1784.748147][T13597] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1784.748178][T13597] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1784.748199][T13597] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1784.785765][T13597] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1784.785787][T13597] usb 1-1: Product: syz [ 1784.785799][T13597] usb 1-1: Manufacturer: syz [ 1784.785811][T13597] usb 1-1: SerialNumber: syz [ 1784.824768][T13597] usb 1-1: config 0 descriptor?? [ 1784.849081][T21479] kvm: pic: non byte write [ 1784.868215][T13597] usb 1-1: selecting invalid altsetting 0 [ 1785.119592][T21460] loop0: detected capacity change from 0 to 512 [ 1785.139618][T21460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1785.139748][T21460] System zones: 1-12 [ 1785.143357][T21460] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.3889: missing EA_INODE flag [ 1785.143380][T21460] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1785.143675][T21460] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3889: error while reading EA inode 12 err=-117 [ 1785.143702][T21460] loop0: lost filesystem error report for type 5 error -117 [ 1785.146054][T21460] EXT4-fs (loop0): 1 orphan inode deleted [ 1785.320655][T21460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1786.761607][ T969] usb 1-1: USB disconnect, device number 28 [ 1787.329322][T16639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1789.079317][T21527] loop0: detected capacity change from 0 to 1024 [ 1789.085473][T21527] EXT4-fs: Ignoring removed oldalloc option [ 1789.085526][T21527] EXT4-fs: Ignoring removed oldalloc option [ 1789.186542][T21527] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 1789.414698][T21527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1791.284207][ T969] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1791.794471][T16639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.855117][ T969] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1791.859691][ T969] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x7B, changing to 0xB [ 1791.859719][ T969] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0xB has invalid wMaxPacketSize 0 [ 1791.859740][ T969] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1791.872338][ T969] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1791.872360][ T969] usb 3-1: Product: syz [ 1791.872373][ T969] usb 3-1: Manufacturer: syz [ 1791.872386][ T969] usb 3-1: SerialNumber: syz [ 1791.905014][ T969] usb 3-1: config 0 descriptor?? [ 1791.925815][ T969] usb 3-1: selecting invalid altsetting 0 [ 1792.378885][T21544] loop1: detected capacity change from 0 to 1024 [ 1792.382395][T21544] EXT4-fs: Ignoring removed oldalloc option [ 1792.382459][T21544] EXT4-fs: Ignoring removed oldalloc option [ 1794.075602][T21544] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 1794.109482][T21539] overlayfs: failed to resolve './file0': -2 [ 1794.949619][T21539] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3911'. [ 1795.089219][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1795.089292][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.202579][T21544] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1795.203684][T21544] EXT4-fs: failed to create workqueue [ 1795.203698][T21544] EXT4-fs (loop1): mount failed [ 1796.395975][ T969] usb 3-1: USB disconnect, device number 56 [ 1796.578782][T21555] udevd[21555]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1797.274038][ T33] audit: type=1326 audit(1790269327.054:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21567 comm="syz.0.3916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ed9e159 code=0x7ffc0000 [ 1797.275461][ T33] audit: type=1326 audit(1790269327.054:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21567 comm="syz.0.3916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ed9e159 code=0x7ffc0000 [ 1797.286654][ T33] audit: type=1326 audit(1790269327.063:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21567 comm="syz.0.3916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb00ed9e159 code=0x7ffc0000 [ 1797.286698][ T33] audit: type=1326 audit(1790269327.063:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21567 comm="syz.0.3916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ed9e159 code=0x7ffc0000 [ 1797.286736][ T33] audit: type=1326 audit(1790269327.063:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21567 comm="syz.0.3916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ed9e159 code=0x7ffc0000 [ 1797.290450][ T33] audit: type=1326 audit(1790269327.063:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21567 comm="syz.0.3916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb00ed9e159 code=0x7ffc0000 [ 1797.291960][ T33] audit: type=1326 audit(1790269327.063:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21567 comm="syz.0.3916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ed9e159 code=0x7ffc0000 [ 1797.295776][ T33] audit: type=1326 audit(1790269327.063:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21567 comm="syz.0.3916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ed9e159 code=0x7ffc0000 [ 1797.311846][ T33] audit: type=1326 audit(1790269327.091:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21567 comm="syz.0.3916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb00ed5e98e code=0x7ffc0000 [ 1797.311890][ T33] audit: type=1326 audit(1790269327.091:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21567 comm="syz.0.3916" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb00ed9ddeb code=0x7ffc0000 [ 1797.669114][T13597] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1797.868551][T13597] usb 1-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 1797.901085][T13597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.901108][T13597] usb 1-1: Product: syz [ 1797.901122][T13597] usb 1-1: Manufacturer: syz [ 1797.901135][T13597] usb 1-1: SerialNumber: syz [ 1799.913755][T13597] usb 1-1: USB2VGA dongle found at address 29 [ 1799.919648][T13597] usb 1-1: Allocated 8 output buffers [ 1800.922391][T13597] usb 1-1: Failed to early initialize device [ 1800.952199][T13597] usb 1-1: USB disconnect, device number 29 [ 1801.099229][T21597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1801.507922][T21605] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1802.504299][T21606] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1804.991016][T21618] netlink: 'syz.4.3932': attribute type 39 has an invalid length. [ 1805.052805][ T33] kauditd_printk_skb: 85 callbacks suppressed [ 1805.052821][ T33] audit: type=1800 audit(1790269334.232:2843): pid=21619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3928" name="file0" dev="overlay" ino=1269 res=0 errno=0 [ 1805.137794][T21618] hsr_slave_0: left promiscuous mode [ 1805.184568][T21618] hsr_slave_1: left promiscuous mode [ 1805.742497][T21631] overlayfs: failed to resolve './file1': -2 [ 1807.210027][T21629] loop1: detected capacity change from 0 to 1024 [ 1807.285257][T21621] loop0: detected capacity change from 0 to 1024 [ 1808.352647][T21629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1808.395587][T21629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1808.588981][T21621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1809.289394][T21621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1809.698194][T21651] netlink: 'syz.1.3937': attribute type 39 has an invalid length. [ 1809.783960][T21653] netlink: 'syz.4.3936': attribute type 21 has an invalid length. [ 1809.783980][T21653] netlink: 'syz.4.3936': attribute type 10 has an invalid length. [ 1809.783993][T21653] netlink: 'syz.4.3936': attribute type 11 has an invalid length. [ 1809.784005][T21653] netlink: 'syz.4.3936': attribute type 12 has an invalid length. [ 1809.784016][T21653] netlink: 'syz.4.3936': attribute type 13 has an invalid length. [ 1809.784028][T21653] netlink: 'syz.4.3936': attribute type 14 has an invalid length. [ 1809.784039][T21653] netlink: 'syz.4.3936': attribute type 15 has an invalid length. [ 1809.784050][T21653] netlink: 'syz.4.3936': attribute type 16 has an invalid length. [ 1809.784062][T21653] netlink: 12922 bytes leftover after parsing attributes in process `syz.4.3936'. [ 1810.105606][T21657] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3939'. [ 1810.225806][T21659] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3941'. [ 1811.539036][ T33] audit: type=1800 audit(1790269340.221:2844): pid=21676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3944" name="file0" dev="overlay" ino=1293 res=0 errno=0 [ 1815.235592][ T33] audit: type=1326 audit(1790269343.635:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21689 comm="syz.2.3949" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547139e159 code=0x7ffc0000 [ 1815.235818][ T33] audit: type=1326 audit(1790269343.635:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21689 comm="syz.2.3949" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547139e159 code=0x7ffc0000 [ 1815.238643][ T33] audit: type=1326 audit(1790269343.635:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21689 comm="syz.2.3949" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f547139e159 code=0x7ffc0000 [ 1815.238688][ T33] audit: type=1326 audit(1790269343.635:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21689 comm="syz.2.3949" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547139e159 code=0x7ffc0000 [ 1815.238726][ T33] audit: type=1326 audit(1790269343.635:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21689 comm="syz.2.3949" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547139e159 code=0x7ffc0000 [ 1815.239112][ T33] audit: type=1326 audit(1790269343.635:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21689 comm="syz.2.3949" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f547139e159 code=0x7ffc0000 [ 1815.240431][ T33] audit: type=1326 audit(1790269343.635:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21689 comm="syz.2.3949" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547139e159 code=0x7ffc0000 [ 1815.242512][ T33] audit: type=1326 audit(1790269343.635:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21689 comm="syz.2.3949" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547139e159 code=0x7ffc0000 [ 1815.257666][ T33] audit: type=1326 audit(1790269343.635:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21689 comm="syz.2.3949" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f547135e98e code=0x7ffc0000 [ 1815.538616][T16877] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1815.538767][T13597] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1815.701235][T16877] usb 1-1: Using ep0 maxpacket: 16 [ 1815.707079][T16877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1815.707121][T16877] usb 1-1: New USB device found: idVendor=1286, idProduct=204a, bcdDevice=e6.36 [ 1815.707314][T13597] usb 3-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 1815.709389][T16877] usb 1-1: config 8 has an invalid interface number: 89 but max is 0 [ 1815.709410][T16877] usb 1-1: config 8 has no interface number 0 [ 1815.709448][T16877] usb 1-1: config 8 interface 89 has no altsetting 0 [ 1815.716883][T16877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.716905][T16877] usb 1-1: Product: С [ 1815.716918][T16877] usb 1-1: Manufacturer:   [ 1815.716966][T16877] usb 1-1: SerialNumber: syz [ 1815.732573][T13597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.732595][T13597] usb 3-1: Product: syz [ 1815.732608][T13597] usb 3-1: Manufacturer: syz [ 1815.732620][T13597] usb 3-1: SerialNumber: syz [ 1815.773607][T13597] usb 3-1: USB2VGA dongle found at address 57 [ 1815.795778][T13597] usb 3-1: Allocated 8 output buffers [ 1815.820825][T12220] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1816.254277][T12220] usb 4-1: Using ep0 maxpacket: 16 [ 1816.256145][T12220] usb 4-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1816.257363][T12220] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1816.257385][T12220] usb 4-1: config 0 has no interface number 0 [ 1816.257422][T12220] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 1816.257470][T12220] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 1816.259714][T12220] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1816.259736][T12220] usb 4-1: Product: syz [ 1816.259749][T12220] usb 4-1: SerialNumber: syz [ 1816.283542][T12220] usb 4-1: config 0 descriptor?? [ 1816.290849][T16877] usb 1-1: USB disconnect, device number 30 [ 1816.475463][T12220] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 1816.566442][T12220] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input101 [ 1816.939306][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1816.939363][ C0] ------------[ cut here ]------------ [ 1816.939374][ C0] URB ffff888034999100 submitted while active [ 1816.939394][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: syz.3.3951/21696 [ 1816.968177][ C0] Modules linked in: [ 1816.972095][ C0] CPU: 0 UID: 0 PID: 21696 Comm: syz.3.3951 Not tainted syzkaller #0 PREEMPT(full) [ 1816.981480][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1816.991548][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1816.997031][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 39 be c4 fa 49 83 3e 00 74 40 e8 9e 40 53 fa 48 8d 3d d7 27 12 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 83 40 53 fa eb 05 e8 7c 40 [ 1817.016660][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010087 [ 1817.022741][ C0] RAX: ffffffff877596a2 RBX: ffff888034999100 RCX: 0000000000040000 [ 1817.030727][ C0] RDX: ffffc900020f1000 RSI: ffff888034999100 RDI: ffffffff9087be80 [ 1817.038713][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004 [ 1817.046709][ C0] R10: dffffc0000000000 R11: fffff52000000f3c R12: ffff888083478048 [ 1817.054691][ C0] R13: ffff888083478030 R14: ffff888034999108 R15: 0000000000000820 [ 1817.062672][ C0] FS: 000055556643f500(0000) GS:ffff888124cb2000(0000) knlGS:0000000000000000 [ 1817.071624][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1817.078218][ C0] CR2: 0000555568ae7a48 CR3: 0000000076e04000 CR4: 00000000003526f0 [ 1817.086202][ C0] Call Trace: [ 1817.089493][ C0] [ 1817.092352][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1817.098206][ C0] cm109_urb_irq_callback+0x6fb/0xca0 [ 1817.103712][ C0] __usb_hcd_giveback_urb+0x378/0x540 [ 1817.109147][ C0] dummy_timer+0xa91/0x4cf0 [ 1817.113725][ C0] ? __lock_acquire+0x747/0x2de0 [ 1817.118741][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1817.124136][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1817.129099][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1817.134952][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1817.139913][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1817.145162][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1817.150306][ C0] handle_softirqs+0x223/0x840 [ 1817.155101][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1817.159910][ C0] __irq_exit_rcu+0xcb/0x220 [ 1817.164540][ C0] irq_exit_rcu+0x9/0x30 [ 1817.168820][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1817.174471][ C0] [ 1817.177408][ C0] [ 1817.180336][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1817.186318][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1817.192762][ C0] Code: f7 e8 fd 52 b7 f5 f7 c3 00 02 00 00 74 05 e8 b0 d9 e3 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 51 a8 f5 65 48 8b 05 1c 91 a9 07 48 85 c0 74 18 5b 41 5e c3 [ 1817.212433][ C0] RSP: 0018:ffffc90005eafa58 EFLAGS: 00000206 [ 1817.218528][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 1817.226509][ C0] RDX: 0000000000000006 RSI: ffffffff8e42a418 RDI: 0000000000000001 [ 1817.234511][ C0] RBP: 0000000000000000 R08: ffffffff907a12bf R09: 1ffffffff20f4257 [ 1817.242499][ C0] R10: dffffc0000000000 R11: fffffbfff20f4258 R12: 0000000000000246 [ 1817.250534][ C0] R13: dffffc0000000000 R14: ffff888029ec0000 R15: ffff88802a043400 [ 1817.258536][ C0] dummy_pullup+0xcf/0x120 [ 1817.262977][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 1817.268017][ C0] usb_gadget_disconnect_locked+0x126/0x480 [ 1817.274038][ C0] gadget_unbind_driver+0xc2/0x410 [ 1817.279221][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1817.284965][ C0] device_release_driver_internal+0x48b/0x880 [ 1817.291159][ C0] driver_detach+0x1f3/0x2d0 [ 1817.295779][ C0] bus_remove_driver+0x226/0x320 [ 1817.300755][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 1817.306498][ C0] raw_release+0xd7/0x260 [ 1817.310896][ C0] ? __pfx_raw_release+0x10/0x10 [ 1817.315853][ C0] __fput+0x413/0xa50 [ 1817.319867][ C0] fput_close_sync+0x11f/0x240 [ 1817.324647][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 1817.329956][ C0] filp_close_sync+0x6e/0xa0 [ 1817.334550][ C0] __se_sys_close_range+0xa77/0xef0 [ 1817.339769][ C0] ? __pfx___se_sys_close_range+0x10/0x10 [ 1817.345543][ C0] do_syscall_64+0x166/0x520 [ 1817.350187][ C0] ? trace_irq_disable+0x3b/0x140 [ 1817.355282][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.361359][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1817.366061][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.371984][ C0] RIP: 0033:0x7fde7b79e159 [ 1817.376426][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.396047][ C0] RSP: 002b:00007ffde4563588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1817.404491][ C0] RAX: ffffffffffffffda RBX: 00007ffde4563670 RCX: 00007fde7b79e159 [ 1817.412482][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1817.420466][ C0] RBP: 00000000001ba049 R08: 0000000000000001 R09: 0000000000000000 [ 1817.428434][ C0] R10: 0000001b2f420000 R11: 0000000000000246 R12: 00007ffde45636b0 [ 1817.436417][ C0] R13: 00007fde7ba25fac R14: 00000000001ba570 R15: 00007fde7ba25fa0 [ 1817.444415][ C0] [ 1817.447456][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1817.454741][ C0] CPU: 0 UID: 0 PID: 21696 Comm: syz.3.3951 Not tainted syzkaller #0 PREEMPT(full) [ 1817.464121][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1817.474190][ C0] Call Trace: [ 1817.477479][ C0] [ 1817.480337][ C0] vpanic+0x26f/0x710 [ 1817.484416][ C0] panic+0xc5/0xd0 [ 1817.488162][ C0] ? __pfx_panic+0x10/0x10 [ 1817.492625][ C0] __warn+0x315/0x4c0 [ 1817.496641][ C0] ? usb_submit_urb+0x79/0x18b0 [ 1817.501504][ C0] ? usb_submit_urb+0x79/0x18b0 [ 1817.506381][ C0] __report_bug+0x276/0x570 [ 1817.510945][ C0] ? usb_submit_urb+0x79/0x18b0 [ 1817.515814][ C0] ? __pfx___report_bug+0x10/0x10 [ 1817.520855][ C0] ? __lock_acquire+0x747/0x2de0 [ 1817.525808][ C0] report_bug_entry+0x19b/0x290 [ 1817.530677][ C0] ? usb_submit_urb+0x7c/0x18b0 [ 1817.535535][ C0] ? usb_submit_urb+0x81/0x18b0 [ 1817.540392][ C0] handle_bug+0xce/0x200 [ 1817.544661][ C0] exc_invalid_op+0x1a/0x50 [ 1817.549209][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1817.554073][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1817.559584][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 39 be c4 fa 49 83 3e 00 74 40 e8 9e 40 53 fa 48 8d 3d d7 27 12 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 83 40 53 fa eb 05 e8 7c 40 [ 1817.579199][ C0] RSP: 0018:ffffc900000079f8 EFLAGS: 00010087 [ 1817.585285][ C0] RAX: ffffffff877596a2 RBX: ffff888034999100 RCX: 0000000000040000 [ 1817.593270][ C0] RDX: ffffc900020f1000 RSI: ffff888034999100 RDI: ffffffff9087be80 [ 1817.601247][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004 [ 1817.609235][ C0] R10: dffffc0000000000 R11: fffff52000000f3c R12: ffff888083478048 [ 1817.617215][ C0] R13: ffff888083478030 R14: ffff888034999108 R15: 0000000000000820 [ 1817.625209][ C0] ? usb_submit_urb+0x72/0x18b0 [ 1817.630085][ C0] ? usb_submit_urb+0x72/0x18b0 [ 1817.634963][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1817.640831][ C0] cm109_urb_irq_callback+0x6fb/0xca0 [ 1817.646236][ C0] __usb_hcd_giveback_urb+0x378/0x540 [ 1817.651639][ C0] dummy_timer+0xa91/0x4cf0 [ 1817.656157][ C0] ? __lock_acquire+0x747/0x2de0 [ 1817.661131][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1817.666521][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1817.671468][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1817.677295][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1817.682255][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1817.687496][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1817.692638][ C0] handle_softirqs+0x223/0x840 [ 1817.697431][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1817.702238][ C0] __irq_exit_rcu+0xcb/0x220 [ 1817.706855][ C0] irq_exit_rcu+0x9/0x30 [ 1817.711122][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1817.716776][ C0] [ 1817.719712][ C0] [ 1817.722649][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1817.728650][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1817.735089][ C0] Code: f7 e8 fd 52 b7 f5 f7 c3 00 02 00 00 74 05 e8 b0 d9 e3 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 51 a8 f5 65 48 8b 05 1c 91 a9 07 48 85 c0 74 18 5b 41 5e c3 [ 1817.754755][ C0] RSP: 0018:ffffc90005eafa58 EFLAGS: 00000206 [ 1817.760838][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 1817.768829][ C0] RDX: 0000000000000006 RSI: ffffffff8e42a418 RDI: 0000000000000001 [ 1817.776853][ C0] RBP: 0000000000000000 R08: ffffffff907a12bf R09: 1ffffffff20f4257 [ 1817.784841][ C0] R10: dffffc0000000000 R11: fffffbfff20f4258 R12: 0000000000000246 [ 1817.792825][ C0] R13: dffffc0000000000 R14: ffff888029ec0000 R15: ffff88802a043400 [ 1817.800876][ C0] dummy_pullup+0xcf/0x120 [ 1817.805315][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 1817.810380][ C0] usb_gadget_disconnect_locked+0x126/0x480 [ 1817.816313][ C0] gadget_unbind_driver+0xc2/0x410 [ 1817.821447][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1817.827186][ C0] device_release_driver_internal+0x48b/0x880 [ 1817.833266][ C0] driver_detach+0x1f3/0x2d0 [ 1817.837870][ C0] bus_remove_driver+0x226/0x320 [ 1817.842825][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 1817.848563][ C0] raw_release+0xd7/0x260 [ 1817.852893][ C0] ? __pfx_raw_release+0x10/0x10 [ 1817.857828][ C0] __fput+0x413/0xa50 [ 1817.861822][ C0] fput_close_sync+0x11f/0x240 [ 1817.866584][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 1817.871876][ C0] filp_close_sync+0x6e/0xa0 [ 1817.876468][ C0] __se_sys_close_range+0xa77/0xef0 [ 1817.881704][ C0] ? __pfx___se_sys_close_range+0x10/0x10 [ 1817.887435][ C0] do_syscall_64+0x166/0x520 [ 1817.892038][ C0] ? trace_irq_disable+0x3b/0x140 [ 1817.897067][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.903156][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1817.907871][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.913758][ C0] RIP: 0033:0x7fde7b79e159 [ 1817.918171][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.937808][ C0] RSP: 002b:00007ffde4563588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1817.946219][ C0] RAX: ffffffffffffffda RBX: 00007ffde4563670 RCX: 00007fde7b79e159 [ 1817.954186][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1817.962156][ C0] RBP: 00000000001ba049 R08: 0000000000000001 R09: 0000000000000000 [ 1817.970119][ C0] R10: 0000001b2f420000 R11: 0000000000000246 R12: 00007ffde45636b0 [ 1817.978086][ C0] R13: 00007fde7ba25fac R14: 00000000001ba570 R15: 00007fde7ba25fa0 [ 1817.986068][ C0] [ 1817.989346][ C0] Kernel Offset: disabled [ 1817.993697][ C0] Rebooting in 86400 seconds..