last executing test programs: 13.347633996s ago: executing program 3 (id=2022): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x40000005}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = mq_open(0x0, 0x42, 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r2, &(0x7f0000000340)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000640)={0x20004, r4, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000680)={0x0, 0x0, r6}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000003c0)={r7, r7, 0xc, 0x1, &(0x7f0000000480)='\x00', 0xb, 0x1, 0xb57, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000007809a2a42e000000180100002020692500000000002020225a00000000000000bfa100000000000007010000f8ffffffb785000000d000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6d}, 0x94) 11.725093754s ago: executing program 1 (id=2026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x0, 0x7, 0x10, 0x7f}, {0x4, 0x8, 0x45, 0x4}, {0x1, 0x2, 0x7f, 0xc}, {0x4, 0x14, 0x2, 0xffff0000}]}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) clock_gettime(0x8, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000002c0)) r4 = syz_open_dev$sndctrl(&(0x7f0000000980), 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/current_tracer\x00', 0x1, 0x0) write(r5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10.775620966s ago: executing program 1 (id=2027): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000002800)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000002840)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000028c0)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000002900), 0xfa0) syz_clone3(&(0x7f0000002940)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f00000029c0)}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000002a00)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002a80)='./config\x00', &(0x7f0000002ac0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000002bc0)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000002c00)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000002c40)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000002c80)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002d40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002e00)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000002e40)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002e80)={&(0x7f0000002ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x10000004, @rand_addr=' \x01\x00', 0x1}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) 8.868442281s ago: executing program 2 (id=2030): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="bf00"}) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000640), &(0x7f0000000680)=r2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x38}}, 0x0) 8.372826593s ago: executing program 3 (id=2032): getpriority(0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, 0x0, 0x9, 0x9, 0x10cf, 0x5500, 0x43, 0x2, 0x8, 'syz1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102392, 0x18ff8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000019400)) sched_setaffinity(r1, 0x2, &(0x7f0000019440)=0x80000000000003) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r4, &(0x7f0000019600)=[{{&(0x7f0000019680)=@l2tp6={0xa, 0x500, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000019700)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000019780)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x2, 0x0) 7.058761773s ago: executing program 3 (id=2033): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000002800)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000002840)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000028c0)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000002900), 0xfa0) syz_clone3(&(0x7f0000002940)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f00000029c0)}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000002a00)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002a80)='./config\x00', &(0x7f0000002ac0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000002bc0)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000002c00)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000002c40)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000002c80)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002d40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002e00)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000002e40)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002e80)={&(0x7f0000002ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x10000004, @rand_addr=' \x01\x00', 0x1}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) 6.986880096s ago: executing program 0 (id=2034): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000680)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.815618439s ago: executing program 0 (id=2035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x0, 0x7, 0x10, 0x7f}, {0x4, 0x8, 0x45, 0x4}, {0x1, 0x2, 0x7f, 0xc}, {0x4, 0x14, 0x2, 0xffff0000}]}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) clock_gettime(0x8, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000980), 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/current_tracer\x00', 0x1, 0x0) write(r5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.571324869s ago: executing program 0 (id=2036): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000002800)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000002840)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000028c0)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000002900), 0xfa0) syz_clone3(&(0x7f0000002940)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f00000029c0)}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000002a00)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002a80)='./config\x00', &(0x7f0000002ac0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000002bc0)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000002c00)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000002c40)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000002c80)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002d40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002e00)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000002e40)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002780)={0xffffffffffffffff, 0x0, 0xd8, 0x55, &(0x7f0000001500)="96e49fc9be9d9fa55306c928837f63c8dc4f2573427e526a89d0a976a2702893e62fe781b4b77d2e9d36c0d00e1d7efd0faf4fb246f44f2087325f76b91a241321320ba15b5bb0a9312b2dfd0b98051a94439d4ee8c36cd55c7b82c078db2a3f0a0ca75731afa8ad5d9450f952cfb298abdb572b7d18c4e3827c26b0affdf42e0103efb445fc6b77e06de525b98eb21b3d4951c728f97cf777b67d34010bf90b236aa204ba96b4fe1a000042b34513682444c1742e3512ec39c8f7611b6a37784c30918c2dedc7cea234ef34d97866cf7c5ff52543bc2070", &(0x7f0000001600)=""/85, 0xb, 0x0, 0x1000, 0xe9, &(0x7f0000001680)="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", &(0x7f0000002680)="25c0aadfa3650b0b2cb2ec9fb8fced0f62132cc04041963e5379748db74d39f9588dc5bb72beaabea6f9549f7b6135a5abf795ef6b98bd89acd8845b255e11b555ff726902f3e99ca02cabf486738b6c57fd0af7eda7d80e3aa9c0eab23c8eaedd14d3ae0520bbbb58930679ebaa35d691f336113e60c753cb2e6dfa96a71a3651e6fe36828814841adb2cc32502a1f742a599d8944e44130e80ea815022b786417cda58ae91468597bc87cd369014173639cdd289055bd2b47daa749df01c5fc7e6173b29e65071ccccaebf1fc72c4d7ba46729c779f872ee2f3c2924d6cee87eb3769618e9a43e11", 0x5, 0x0, 0x8}, 0x4c) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x10000004, @rand_addr=' \x01\x00', 0x1}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) 5.235926747s ago: executing program 1 (id=2037): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000002800)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000002840)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000028c0)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000002900), 0xfa0) syz_clone3(&(0x7f0000002940)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f00000029c0)}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000002a00)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002a80)='./config\x00', &(0x7f0000002ac0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000002bc0)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000002c00)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000002c40)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000002c80)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002d40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002e00)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000002e40)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002e80)={&(0x7f0000002ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x10000004, @rand_addr=' \x01\x00', 0x1}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) 4.854931916s ago: executing program 1 (id=2038): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000003d40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x7, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r4, 0x100000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 4.854276336s ago: executing program 3 (id=2039): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf25020000000900010073797a320000000014"], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) 4.767721448s ago: executing program 2 (id=2040): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x40000005}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = mq_open(0x0, 0x42, 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r2, &(0x7f0000000340)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000640)={0x20004, r4, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000680)={0x0, 0x0, r6}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000003c0)={r7, r7, 0xc, 0x1, &(0x7f0000000480)='\x00', 0xb, 0x1, 0xb57, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000007809a2a42e000000180100002020692500000000002020225a00000000000000bfa100000000000007010000f8ffffffb785000000d000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6d}, 0x94) 3.968810586s ago: executing program 1 (id=2041): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) close(0x3) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000180)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000540)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000600)=0x2) 3.784388541s ago: executing program 3 (id=2042): getpriority(0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, 0x0, 0x9, 0x9, 0x10cf, 0x5500, 0x43, 0x2, 0x8, 'syz1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102392, 0x18ff8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000019400)) sched_setaffinity(r1, 0x2, &(0x7f0000019440)=0x80000000000003) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r4, &(0x7f0000019600)=[{{&(0x7f0000019680)=@l2tp6={0xa, 0x500, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000019700)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000019780)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x2, 0x0) 3.742064762s ago: executing program 2 (id=2043): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000680)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.468364882s ago: executing program 3 (id=2044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x0, 0x7, 0x10, 0x7f}, {0x4, 0x8, 0x45, 0x4}, {0x1, 0x2, 0x7f, 0xc}, {0x4, 0x14, 0x2, 0xffff0000}]}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) clock_gettime(0x8, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000980), 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/current_tracer\x00', 0x1, 0x0) write(r5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.327591576s ago: executing program 2 (id=2045): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000002800)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000002840)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000028c0)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000002900), 0xfa0) syz_clone3(&(0x7f0000002940)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f00000029c0)}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000002a00)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002a80)='./config\x00', &(0x7f0000002ac0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000002bc0)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000002c00)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000002c40)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000002c80)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002d40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002e00)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000002e40)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002e80)={&(0x7f0000002ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x10000004, @rand_addr=' \x01\x00', 0x1}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) 1.985754613s ago: executing program 2 (id=2046): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000002800)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000002840)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000028c0)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000002900), 0xfa0) syz_clone3(&(0x7f0000002940)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f00000029c0)}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000002a00)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002a80)='./config\x00', &(0x7f0000002ac0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000002bc0)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000002c00)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000002c40)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000002c80)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002d40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002e00)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000002e40)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002e80)={&(0x7f0000002ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x10000004, @rand_addr=' \x01\x00', 0x1}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) 1.885728796s ago: executing program 0 (id=2047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000005c0)="a37081a3159c4ac4", 0x8}], 0x2) 1.564023903s ago: executing program 2 (id=2048): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000002800)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000002840)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000028c0)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000002900), 0xfa0) syz_clone3(&(0x7f0000002940)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f00000029c0)}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000002a00)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002a80)='./config\x00', &(0x7f0000002ac0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000002bc0)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000002c00)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000002c40)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000002c80)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002d40)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002e00)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000002e40)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002780)={0xffffffffffffffff, 0x0, 0xd8, 0x55, &(0x7f0000001500)="96e49fc9be9d9fa55306c928837f63c8dc4f2573427e526a89d0a976a2702893e62fe781b4b77d2e9d36c0d00e1d7efd0faf4fb246f44f2087325f76b91a241321320ba15b5bb0a9312b2dfd0b98051a94439d4ee8c36cd55c7b82c078db2a3f0a0ca75731afa8ad5d9450f952cfb298abdb572b7d18c4e3827c26b0affdf42e0103efb445fc6b77e06de525b98eb21b3d4951c728f97cf777b67d34010bf90b236aa204ba96b4fe1a000042b34513682444c1742e3512ec39c8f7611b6a37784c30918c2dedc7cea234ef34d97866cf7c5ff52543bc2070", &(0x7f0000001600)=""/85, 0xb, 0x0, 0x1000, 0xe9, &(0x7f0000001680)="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", &(0x7f0000002680)="25c0aadfa3650b0b2cb2ec9fb8fced0f62132cc04041963e5379748db74d39f9588dc5bb72beaabea6f9549f7b6135a5abf795ef6b98bd89acd8845b255e11b555ff726902f3e99ca02cabf486738b6c57fd0af7eda7d80e3aa9c0eab23c8eaedd14d3ae0520bbbb58930679ebaa35d691f336113e60c753cb2e6dfa96a71a3651e6fe36828814841adb2cc32502a1f742a599d8944e44130e80ea815022b786417cda58ae91468597bc87cd369014173639cdd289055bd2b47daa749df01c5fc7e6173b29e65071ccccaebf1fc72c4d7ba46729c779f872ee2f3c2924d6cee87eb3769618e9a43e11", 0x5, 0x0, 0x8}, 0x4c) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x10000004, @rand_addr=' \x01\x00', 0x1}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) 1.383565507s ago: executing program 0 (id=2049): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000003d40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x7, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r4, 0x100000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 77.755548ms ago: executing program 0 (id=2050): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf25020000000900010073797a3200000000140002"], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) 0s ago: executing program 1 (id=2051): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x40000005}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r0 = mq_open(0x0, 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r1, &(0x7f0000000340)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000640)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000680)={0x0, 0x0, r5}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000003c0)={r6, r6, 0xc, 0x1, &(0x7f0000000480)='\x00', 0xb, 0x1, 0xb57, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000007809a2a42e000000180100002020692500000000002020225a00000000000000bfa100000000000007010000f8ffffffb785000000d000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6d}, 0x94) kernel console output (not intermixed with test programs): 8][ T27] mos7840: probe of ttyUSB0 failed with error -32 [ 433.514917][ T8] usb 2-1: USB disconnect, device number 36 [ 433.555279][ T8] mos7840 2-1:1.0: device disconnected [ 434.146676][T10513] autofs4:pid:10513:autofs_fill_super: called with bogus options [ 435.153872][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 436.463936][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 436.495845][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 436.524004][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.532064][ T9] usb 3-1: Product: syz [ 436.553641][ T9] usb 3-1: Manufacturer: syz [ 436.560141][ T9] usb 3-1: SerialNumber: syz [ 436.594960][ T9] usb 3-1: config 0 descriptor?? [ 436.607517][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 436.918364][T10530] syzkaller0: entered promiscuous mode [ 436.926100][T10530] syzkaller0: entered allmulticast mode [ 436.973796][ T9] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 437.153727][ T9] usb 3-1: device descriptor read/64, error -71 [ 437.197723][T10545] binder: 10543:10545 ioctl c0306201 0 returned -14 [ 438.131947][T10560] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 438.200252][T10560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.856396][T10597] autofs4:pid:10597:autofs_fill_super: called with bogus options [ 439.456079][ T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 439.655505][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 439.674162][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.692657][T10604] syzkaller0: entered promiscuous mode [ 439.698509][T10604] syzkaller0: entered allmulticast mode [ 439.707513][ T8] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 439.723618][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 439.745441][ T8] usb 1-1: Product: syz [ 439.749663][ T8] usb 1-1: Manufacturer: syz [ 439.771015][ T8] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 439.895173][ T9] gspca_se401: read req failed req 0x06 error -19 [ 439.912749][ T9] usb 3-1: USB disconnect, device number 28 [ 440.247342][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.259194][ T8] mos7840: probe of ttyUSB0 failed with error -32 [ 440.404630][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.185419][ T23] usb 1-1: USB disconnect, device number 34 [ 442.227281][ T23] mos7840 1-1:1.0: device disconnected [ 442.366891][T10647] binder: 10646:10647 ioctl c0306201 0 returned -14 [ 442.946486][T10650] autofs4:pid:10650:autofs_fill_super: called with bogus options [ 443.724596][ T27] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 443.933826][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 443.962521][ T27] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 443.986983][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.011577][ T27] usb 4-1: Product: syz [ 444.016258][ T27] usb 4-1: Manufacturer: syz [ 444.020902][ T27] usb 4-1: SerialNumber: syz [ 444.047118][ T27] usb 4-1: config 0 descriptor?? [ 444.067907][ T27] gspca_main: se401-2.14.0 probing 047d:5003 [ 445.233695][ T27] usb 4-1: reset high-speed USB device number 23 using dummy_hcd [ 445.403982][ T27] usb 4-1: device descriptor read/64, error -71 [ 446.434959][ T27] gspca_se401: read req failed req 0x06 error -19 [ 446.468363][ T27] usb 4-1: USB disconnect, device number 23 [ 449.413660][ T8] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 449.603994][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 449.616675][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 449.625191][ T8] usb 1-1: config 0 has no interface number 0 [ 449.649649][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 449.660222][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.703666][ T8] usb 1-1: Product: syz [ 449.707893][ T8] usb 1-1: Manufacturer: syz [ 449.732995][ T8] usb 1-1: SerialNumber: syz [ 449.771702][ T8] usb 1-1: config 0 descriptor?? [ 449.831470][T10707] binder: 10706:10707 ioctl c0306201 0 returned -14 [ 450.903291][ T8] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 451.010500][ T8] usb 1-1: selecting invalid altsetting 1 [ 451.016370][ T8] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 451.038397][ T8] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 451.100319][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 451.123483][ T8] usb 1-1: media controller created [ 451.182788][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.274011][ T8] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 451.291258][ T8] zl10353_read_register: readreg error (reg=127, ret==-71) [ 451.313319][ T8] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 451.447446][ T8] usb 1-1: USB disconnect, device number 35 [ 452.502434][T10734] loop1: detected capacity change from 0 to 4096 [ 452.541006][T10736] binder: BINDER_SET_CONTEXT_MGR already set [ 452.553806][T10736] binder: 10735:10736 ioctl 4018620d 200000002e00 returned -16 [ 452.571971][T10741] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.787936][T10749] loop0: detected capacity change from 0 to 128 [ 456.045696][T10766] binder: BINDER_SET_CONTEXT_MGR already set [ 456.052002][T10766] binder: 10762:10766 ioctl 4018620d 200000004a80 returned -16 [ 456.074988][T10766] binder: 10762:10766 ioctl c0306201 0 returned -14 [ 456.133566][ C0] sched: RT throttling activated [ 456.233781][ T27] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 456.433880][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 456.515899][ T27] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 456.580868][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.634652][ T27] usb 4-1: Product: syz [ 456.638990][ T27] usb 4-1: Manufacturer: syz [ 456.664846][ T27] usb 4-1: SerialNumber: syz [ 456.730862][ T27] usb 4-1: config 0 descriptor?? [ 456.797850][ T27] gspca_main: se401-2.14.0 probing 047d:5003 [ 457.388290][ T27] gspca_se401: Wrong descriptor type [ 457.760022][ T27] usb 4-1: USB disconnect, device number 24 [ 459.179806][T10793] loop3: detected capacity change from 0 to 4096 [ 459.268992][T10799] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 460.085023][T10808] loop2: detected capacity change from 0 to 128 [ 461.274852][T10824] binder: 10823:10824 ioctl c0306201 0 returned -14 [ 462.673758][ T27] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 462.776852][T10847] loop2: detected capacity change from 0 to 4096 [ 462.821849][T10851] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 463.003762][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 463.030241][ T27] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 463.459521][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.660900][ T27] usb 2-1: Product: syz [ 463.670856][ T27] usb 2-1: Manufacturer: syz [ 463.682388][ T27] usb 2-1: SerialNumber: syz [ 463.699649][ T27] usb 2-1: config 0 descriptor?? [ 463.719534][ T27] gspca_main: se401-2.14.0 probing 047d:5003 [ 463.900188][T10862] loop2: detected capacity change from 0 to 128 [ 464.135940][ T27] gspca_se401: Wrong descriptor type [ 464.853700][ T5837] usb 2-1: USB disconnect, device number 37 [ 465.211538][T10890] binder: 10889:10890 ioctl c0306201 0 returned -14 [ 465.297642][T10896] loop0: detected capacity change from 0 to 4096 [ 465.331653][T10902] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.354360][ T5837] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 467.546185][ T8] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 467.620901][T10917] loop3: detected capacity change from 0 to 128 [ 467.667469][ T5837] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.687522][ T5837] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.713765][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0 [ 467.720460][ T5837] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 467.730144][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.742021][ T5837] usb 3-1: config 0 descriptor?? [ 467.795863][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.816033][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.844873][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 467.879115][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.995639][ T5837] usbhid 3-1:0.0: can't add hid device: -71 [ 469.696412][ T5837] usbhid: probe of 3-1:0.0 failed with error -71 [ 469.795432][ T5837] usb 3-1: USB disconnect, device number 29 [ 469.840699][ T8] usb 2-1: usb_control_msg returned -71 [ 469.858471][ T8] usbtmc 2-1:16.0: can't read capabilities [ 469.889343][ T8] usb 2-1: USB disconnect, device number 38 [ 471.680786][T10966] binder: 10964:10966 ioctl c0306201 0 returned -14 [ 474.544317][ T27] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 474.689758][T11002] loop0: detected capacity change from 0 to 128 [ 474.735850][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.746311][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.763981][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 474.772844][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.783138][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.903763][ T1849] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 475.024341][ T27] usb 2-1: usb_control_msg returned -32 [ 475.029990][ T27] usbtmc 2-1:16.0: can't read capabilities [ 475.104886][ T1849] usb 4-1: Using ep0 maxpacket: 32 [ 475.186971][ T1849] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 475.304238][ T1849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.409023][ T1849] usb 4-1: config 0 has no interface number 0 [ 475.510171][ T1849] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 475.546107][ T1849] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 475.558100][T11015] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -32 [ 475.588140][ T1849] usb 4-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 475.606416][ T1849] usb 4-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xD5, skipping [ 475.619894][ T1849] usb 4-1: config 0 interface 239 has no altsetting 0 [ 475.632653][ T1849] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 475.646979][ T1849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.656704][ T1849] usb 4-1: Product: syz [ 475.660903][ T1849] usb 4-1: Manufacturer: syz [ 475.671480][ T1849] usb 4-1: SerialNumber: syz [ 475.689786][ T1849] usb 4-1: config 0 descriptor?? [ 475.698663][ T23] usb 2-1: USB disconnect, device number 39 [ 475.716892][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 475.724850][T10997] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 475.732430][T10997] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 475.738258][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.756575][ T8] usb 3-1: config 0 has no interface number 0 [ 475.787841][ T8] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 475.827799][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.837039][ T8] usb 3-1: Product: syz [ 475.841469][ T8] usb 3-1: Manufacturer: syz [ 477.050939][ T8] usb 3-1: SerialNumber: syz [ 477.054374][ T27] usb 4-1: USB disconnect, device number 25 [ 477.083259][ T8] usb 3-1: config 0 descriptor?? [ 477.098611][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 478.882914][ T8] gspca_spca1528: reg_w err -110 [ 478.916616][ T8] spca1528: probe of 3-1:0.1 failed with error -110 [ 478.933020][ T8] usb 3-1: USB disconnect, device number 30 [ 479.060677][T11058] binder: 11057:11058 ioctl c0306201 0 returned -14 [ 480.563648][ T8] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 480.613888][ T27] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 481.932980][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 481.943234][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.963762][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 481.971276][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.974564][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 481.995060][ T27] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.005974][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.051992][ T27] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.090936][ T27] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 482.163963][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 482.171110][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 482.198836][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.222417][ T27] usb 3-1: config 0 descriptor?? [ 482.229624][ T8] usb 4-1: usb_control_msg returned -32 [ 482.262178][ T8] usbtmc 4-1:16.0: can't read capabilities [ 482.634814][T11114] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 482.666946][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 482.678618][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 482.678715][T11120] netlink: 128 bytes leftover after parsing attributes in process `syz.1.944'. [ 482.689582][ T27] usb 3-1: USB disconnect, device number 31 [ 482.736766][ T23] usb 4-1: USB disconnect, device number 26 [ 483.199014][ T27] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 484.182080][ T27] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 484.241467][ T27] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 484.385483][ T27] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 484.445803][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.507767][ T27] usb 2-1: Product: syz [ 484.533623][ T27] usb 2-1: Manufacturer: syz [ 484.558088][ T27] usb 2-1: SerialNumber: syz [ 485.091377][T11137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.108425][T11137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.595548][T11113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.779937][ T27] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 486.789217][ T27] dvb_usb_af9015: probe of 2-1:2.0 failed with error -22 [ 486.834064][ T27] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 486.840908][ T27] dvb_usb_af9035: probe of 2-1:2.0 failed with error -22 [ 486.868136][ T27] usb 2-1: USB disconnect, device number 40 [ 487.889104][T11177] loop1: detected capacity change from 0 to 128 [ 488.261489][T11181] binder: 11180:11181 ioctl c0306201 0 returned -14 [ 494.653695][ T23] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 494.846120][ T23] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.867458][ T23] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.890819][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 494.900234][ T23] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 494.914978][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.964775][ T23] usb 1-1: config 0 descriptor?? [ 496.347914][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 496.365680][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 496.401485][ T23] usb 1-1: USB disconnect, device number 36 [ 501.687623][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.695893][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.754898][T11269] binder: 11268:11269 ioctl c0306201 0 returned -14 [ 504.320585][T11278] netlink: 'syz.2.974': attribute type 5 has an invalid length. [ 505.320332][T11283] autofs4:pid:11283:autofs_fill_super: called with bogus options [ 508.094348][T11309] binder: 11308:11309 ioctl c0306201 0 returned -14 [ 509.281947][T11317] netlink: 'syz.3.986': attribute type 5 has an invalid length. [ 510.607649][T11321] autofs4:pid:11321:autofs_fill_super: called with bogus options [ 515.949595][T11368] loop1: detected capacity change from 0 to 4096 [ 515.963853][ T23] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 515.988172][T11370] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 516.157794][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 516.196856][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 516.222690][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.244224][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.257760][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 516.276242][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.371238][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 516.421127][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.732427][ T23] usb 4-1: usb_control_msg returned -32 [ 516.788743][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.807857][ T23] usbtmc 4-1:16.0: can't read capabilities [ 516.827701][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.887451][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 516.896618][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 516.905752][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 516.935937][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 516.945106][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 516.954229][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 516.963345][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 516.974615][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 516.983754][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 516.992863][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 517.001976][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 517.011705][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 517.020847][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 517.029972][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 517.076819][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 517.085987][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 517.175178][ T27] usb 4-1: USB disconnect, device number 27 [ 518.182177][T11377] autofs4:pid:11377:autofs_fill_super: called with bogus options [ 520.721311][ T27] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 521.845124][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.858083][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.064731][ T27] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 522.083732][ T27] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 522.109396][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 522.129320][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.143627][ T27] usb 1-1: Product: syz [ 522.147856][ T27] usb 1-1: Manufacturer: syz [ 522.163063][ T27] usb 1-1: SerialNumber: syz [ 522.411268][ T27] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 522.429342][ T27] dvb_usb_af9015: probe of 1-1:2.0 failed with error -22 [ 522.446414][ T27] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 522.463377][ T27] dvb_usb_af9035: probe of 1-1:2.0 failed with error -22 [ 522.495763][ T27] usb 1-1: USB disconnect, device number 37 [ 522.716717][T11453] loop0: detected capacity change from 0 to 4096 [ 522.767784][T11453] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 522.786935][T11453] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 522.797155][T11453] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 522.804535][T11453] loop0: [ 523.714699][T11460] autofs4:pid:11460:autofs_fill_super: called with bogus options [ 528.466819][T11496] autofs4:pid:11496:autofs_fill_super: called with bogus options [ 529.825433][T11501] loop2: detected capacity change from 0 to 8 [ 529.901289][T11501] SQUASHFS error: Failed to read block 0x8f: -5 [ 529.933888][ T28] audit: type=1800 audit(1792234460.028:9): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1016" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 530.008112][T11512] SQUASHFS error: Failed to read block 0x85: -5 [ 530.033952][T11512] SQUASHFS error: Failed to read block 0x85: -5 [ 530.047625][T11512] SQUASHFS error: Failed to read block 0x85: -5 [ 530.064450][T11512] SQUASHFS error: Failed to read block 0x85: -5 [ 530.091244][T11512] SQUASHFS error: Failed to read block 0x85: -5 [ 530.114697][T11512] SQUASHFS error: Failed to read block 0x85: -5 [ 530.121081][T11512] SQUASHFS error: Failed to read block 0x85: -5 [ 530.181856][T11512] SQUASHFS error: Failed to read block 0x85: -5 [ 530.183970][ T1849] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 530.230737][T11512] SQUASHFS error: Failed to read block 0x85: -5 [ 530.414332][ T1849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.438493][ T1849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.471549][ T1849] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 530.488154][ T1849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.513733][ T1849] usb 1-1: Product: syz [ 530.520187][ T1849] usb 1-1: Manufacturer: syz [ 530.533873][ T1849] usb 1-1: SerialNumber: syz [ 530.560038][ T1849] symbolserial 1-1:1.0: symbol converter detected [ 530.589731][ T1849] usb 1-1: symbol converter now attached to ttyUSB0 [ 530.600885][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 530.690533][T11522] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1022'. [ 530.785549][ T5850] usb 1-1: USB disconnect, device number 38 [ 530.805632][ T5850] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 530.828833][ T5850] symbolserial 1-1:1.0: device disconnected [ 531.654169][T11555] autofs4:pid:11555:autofs_fill_super: called with bogus options [ 532.103802][ T1849] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 532.216108][T11561] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 532.240279][T11561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.273837][ T1849] usb 2-1: device descriptor read/64, error -71 [ 532.306856][T11561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.321405][T11561] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 532.481432][ T28] audit: type=1326 audit(1792234462.578:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1032" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 532.507530][ T28] audit: type=1326 audit(1792234462.578:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1032" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 532.551234][ T28] audit: type=1326 audit(1792234462.578:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1032" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 532.601259][ T28] audit: type=1326 audit(1792234462.578:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1032" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 532.603640][ T1849] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 532.646595][ T28] audit: type=1326 audit(1792234462.578:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1032" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 533.499304][ T28] audit: type=1326 audit(1792234462.578:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1032" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 533.567106][ T28] audit: type=1326 audit(1792234462.578:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1032" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 533.591904][ T28] audit: type=1326 audit(1792234462.578:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1032" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 533.623673][ T28] audit: type=1326 audit(1792234462.578:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.2.1032" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 533.631502][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 533.663653][ T1849] usb 2-1: device descriptor read/64, error -71 [ 533.957963][T11617] autofs4:pid:11617:autofs_fill_super: called with bogus options [ 534.982789][ T1849] usb usb2-port1: attempt power cycle [ 535.214793][T11625] netlink: 'syz.2.1043': attribute type 1 has an invalid length. [ 535.365168][T11625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.404937][T11632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.435039][T11632] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 535.893818][ T9] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 536.007451][T11683] loop0: detected capacity change from 0 to 512 [ 536.015713][T11683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 536.022506][T11683] EXT4-fs: Ignoring removed mblk_io_submit option [ 536.051704][T11683] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 536.059890][T11683] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 536.071196][T11683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 536.101250][T11683] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1047: bad symlink. [ 536.135398][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.157018][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.170773][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.179971][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.198909][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.400542][ T9] usb 3-1: usb_control_msg returned -32 [ 536.406476][ T9] usbtmc 3-1:16.0: can't read capabilities [ 536.546594][ T5852] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 536.735951][ T5852] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.747017][ T5852] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.760568][ T5852] usb 1-1: config 0 interface 0 has no altsetting 0 [ 536.767329][ T5852] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 536.776813][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.791104][ T5852] usb 1-1: config 0 descriptor?? [ 536.816243][T11705] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -32 [ 536.866551][ T9] usb 3-1: USB disconnect, device number 32 [ 537.009996][ T5852] usbhid 1-1:0.0: can't add hid device: -71 [ 537.017101][T11696] binder: 11695:11696 ioctl c0306201 200000000400 returned -11 [ 537.288798][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 537.825275][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 537.827785][ T5852] usbhid: probe of 1-1:0.0 failed with error -71 [ 537.914312][ T5852] usb 1-1: USB disconnect, device number 39 [ 538.343681][ T1849] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 538.513778][ T1849] usb 3-1: device descriptor read/64, error -71 [ 538.561569][T11743] loop1: detected capacity change from 0 to 512 [ 538.620677][T11743] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 538.636540][T11743] FAT-fs (loop1): Filesystem has been set read-only [ 538.650472][T11743] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 538.660329][T11743] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 538.813638][ T1849] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 539.713720][ T1849] usb 3-1: device descriptor read/64, error -71 [ 539.846207][ T1849] usb usb3-port1: attempt power cycle [ 540.165389][T11756] loop3: detected capacity change from 0 to 8 [ 540.219394][T11756] SQUASHFS error: Failed to read block 0x8f: -5 [ 540.240138][ T28] audit: type=1800 audit(1792234470.338:19): pid=11756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1057" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 540.293693][ T1849] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 540.325548][ T1849] usb 3-1: device descriptor read/8, error -71 [ 540.519234][ T27] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 540.623754][ T1849] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 540.674199][ T27] usb 1-1: device descriptor read/64, error -71 [ 540.698971][ T1849] usb 3-1: device descriptor read/8, error -71 [ 540.876484][ T1849] usb usb3-port1: unable to enumerate USB device [ 541.024697][ T27] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 541.253807][ T27] usb 1-1: device descriptor read/64, error -71 [ 541.346440][T11776] autofs4:pid:11776:autofs_fill_super: called with bogus options [ 542.571232][ T27] usb usb1-port1: attempt power cycle [ 542.983816][ T27] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 543.027793][ T27] usb 1-1: device descriptor read/8, error -71 [ 543.321759][T11800] loop0: detected capacity change from 0 to 8 [ 543.367396][T11800] SQUASHFS error: Failed to read block 0x8f: -5 [ 543.388915][ T28] audit: type=1800 audit(1792234473.488:20): pid=11800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1067" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 545.725465][ T27] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 545.744365][T11829] kAFS: Invalid Command on /proc/fs/afs/cells file [ 545.963715][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 546.021759][ T27] usb 1-1: no configurations [ 546.033759][ T27] usb 1-1: can't read configurations, error -22 [ 546.203711][ T27] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 547.115801][T11841] loop3: detected capacity change from 0 to 8 [ 547.136083][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 547.147530][ T27] usb 1-1: no configurations [ 547.157430][T11841] SQUASHFS error: Failed to read block 0x8f: -5 [ 547.164057][ T27] usb 1-1: can't read configurations, error -22 [ 547.170983][ T28] audit: type=1800 audit(1792234477.268:21): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1081" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 547.171040][ T27] usb usb1-port1: attempt power cycle [ 547.623707][ T27] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 547.654266][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 547.662937][ T27] usb 1-1: no configurations [ 547.673614][ T27] usb 1-1: can't read configurations, error -22 [ 547.863661][ T27] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 547.914324][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 547.929076][ T27] usb 1-1: no configurations [ 547.951923][ T27] usb 1-1: can't read configurations, error -22 [ 547.963968][ T27] usb usb1-port1: unable to enumerate USB device [ 548.324761][T11851] loop2: detected capacity change from 0 to 4096 [ 548.644042][T11859] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 550.480578][T11869] FAULT_INJECTION: forcing a failure. [ 550.480578][T11869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.524581][T11869] CPU: 1 PID: 11869 Comm: syz.3.1087 Not tainted syzkaller #0 [ 550.532128][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 550.542218][T11869] Call Trace: [ 550.545525][T11869] [ 550.548474][T11869] dump_stack_lvl+0x18c/0x250 [ 550.553184][T11869] ? show_regs_print_info+0x20/0x20 [ 550.558411][T11869] ? load_image+0x420/0x420 [ 550.562950][T11869] ? __might_fault+0xaa/0x120 [ 550.567660][T11869] ? __lock_acquire+0x7eb0/0x7eb0 [ 550.572718][T11869] ? __virt_addr_valid+0x10c/0x380 [ 550.577871][T11869] should_fail_ex+0x394/0x4c0 [ 550.582589][T11869] _copy_from_user+0x2f/0xe0 [ 550.587215][T11869] strndup_user+0xb7/0x150 [ 550.591667][T11869] __se_sys_mount+0x9f/0x3d0 [ 550.596292][T11869] ? __x64_sys_mount+0xc0/0xc0 [ 550.601094][T11869] ? lockdep_hardirqs_on+0x98/0x150 [ 550.606322][T11869] ? __x64_sys_mount+0x20/0xc0 [ 550.611120][T11869] do_syscall_64+0x55/0xb0 [ 550.615562][T11869] ? clear_bhb_loop+0x40/0x90 [ 550.620261][T11869] ? clear_bhb_loop+0x40/0x90 [ 550.624965][T11869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.630899][T11869] RIP: 0033:0x7f57a199e559 [ 550.635348][T11869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.654993][T11869] RSP: 002b:00007f57a27c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 550.663445][T11869] RAX: ffffffffffffffda RBX: 00007f57a1c25fa0 RCX: 00007f57a199e559 [ 550.671453][T11869] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 550.679459][T11869] RBP: 00007f57a1a35ab8 R08: 0000200000000440 R09: 0000000000000000 [ 550.687467][T11869] R10: 0000000000802000 R11: 0000000000000246 R12: 0000000000000000 [ 550.695473][T11869] R13: 00007f57a1c26038 R14: 00007f57a1c25fa0 R15: 00007ffcfe392c88 [ 550.703504][T11869] [ 552.754883][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 556.413740][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 556.605563][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.617278][ T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.633775][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 556.643653][ T9] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 556.652884][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.674733][ T9] usb 1-1: config 0 descriptor?? [ 556.878408][T11932] loop2: detected capacity change from 0 to 4096 [ 556.909022][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 556.915517][T11922] binder: 11921:11922 ioctl c0306201 200000000400 returned -11 [ 556.924066][T11936] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 556.934782][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 558.276139][ T9] usb 1-1: USB disconnect, device number 48 [ 559.214748][T11947] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11957] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11947] [ 563.706414][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.712746][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.049128][ T1849] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 564.260396][ T1849] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 564.270852][ T1849] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 564.283633][ T1849] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 564.292726][ T1849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.303976][ T1849] usb 4-1: Product: syz [ 564.308193][ T1849] usb 4-1: Manufacturer: syz [ 564.312809][ T1849] usb 4-1: SerialNumber: syz [ 564.526032][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.568233][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.336411][ T1849] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 565.343672][ T1849] dvb_usb_af9015: probe of 4-1:2.0 failed with error -22 [ 565.351779][ T1849] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 565.358876][ T1849] dvb_usb_af9035: probe of 4-1:2.0 failed with error -22 [ 565.368529][ T1849] usb 4-1: USB disconnect, device number 28 [ 565.435378][T12024] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 565.517228][T12024] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 566.283698][ T1849] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 567.022758][T12033] autofs4:pid:12033:autofs_fill_super: called with bogus options [ 567.205790][ T1849] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 567.220239][ T1849] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 567.233230][ T1849] usb 4-1: config 0 interface 0 has no altsetting 0 [ 567.247580][ T1849] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 567.273686][ T1849] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 567.281938][ T1849] usb 4-1: Product: syz [ 567.295182][ T1849] usb 4-1: Manufacturer: syz [ 567.299850][ T1849] usb 4-1: SerialNumber: syz [ 567.315653][ T1849] usb 4-1: config 0 descriptor?? [ 567.325925][ T1849] hub 4-1:0.0: bad descriptor, ignoring hub [ 567.331903][ T1849] hub: probe of 4-1:0.0 failed with error -5 [ 567.352056][ T1849] usb 4-1: selecting invalid altsetting 0 [ 567.373729][ T23] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 567.583930][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 567.621930][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.673694][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 567.698414][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 567.707990][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.717669][ T23] usb 1-1: Product: syz [ 567.722308][ T23] usb 1-1: Manufacturer: syz [ 567.731143][ T23] usb 1-1: SerialNumber: syz [ 567.748109][ T23] usb 1-1: config 0 descriptor?? [ 567.966295][ T23] usb 1-1: USB disconnect, device number 49 [ 568.387372][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 568.424817][ T1849] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 568.625617][ T1849] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 568.640879][ T1849] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 568.674544][ T1849] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 568.684239][ T1849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.692270][ T1849] usb 3-1: Product: syz [ 568.699494][ T1849] usb 3-1: Manufacturer: syz [ 568.705102][ T1849] usb 3-1: SerialNumber: syz [ 568.943839][T12091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.566419][T12091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.661242][ T1849] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 569.668228][ T1849] dvb_usb_af9015: probe of 3-1:2.0 failed with error -22 [ 569.684991][ T1849] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 569.692535][ T1849] dvb_usb_af9035: probe of 3-1:2.0 failed with error -22 [ 569.703385][ T1849] usb 3-1: USB disconnect, device number 37 [ 570.963327][ T5850] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 571.153628][ T5850] usb 1-1: Using ep0 maxpacket: 32 [ 571.896011][ T5850] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.906284][ T5850] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 571.917749][ T5850] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 571.926906][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.935960][ T5850] usb 1-1: Product: syz [ 571.940184][ T5850] usb 1-1: Manufacturer: syz [ 571.944925][ T5850] usb 1-1: SerialNumber: syz [ 571.951951][ T5850] usb 1-1: config 0 descriptor?? [ 572.033275][T12175] FAULT_INJECTION: forcing a failure. [ 572.033275][T12175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.163865][T12175] CPU: 0 PID: 12175 Comm: syz.2.1152 Not tainted syzkaller #0 [ 572.171392][T12175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 572.181452][T12175] Call Trace: [ 572.184732][T12175] [ 572.187655][T12175] dump_stack_lvl+0x18c/0x250 [ 572.192323][T12175] ? show_regs_print_info+0x20/0x20 [ 572.197517][T12175] ? load_image+0x420/0x420 [ 572.202010][T12175] ? __might_fault+0xaa/0x120 [ 572.205197][ T1849] usb 1-1: USB disconnect, device number 50 [ 572.206674][T12175] ? __lock_acquire+0x7eb0/0x7eb0 [ 572.217632][T12175] ? __virt_addr_valid+0x10c/0x380 [ 572.222796][T12175] should_fail_ex+0x394/0x4c0 [ 572.227516][T12175] _copy_to_user+0x2f/0xa0 [ 572.231970][T12175] bpf_verifier_vlog+0x2f1/0x840 [ 572.236974][T12175] verbose+0x11e/0x1a0 [ 572.241085][T12175] ? __lock_acquire+0x7eb0/0x7eb0 [ 572.246135][T12175] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 572.251725][T12175] ? __might_fault+0xaa/0x120 [ 572.256412][T12175] ? __might_fault+0xaa/0x120 [ 572.261082][T12175] ? _copy_to_user+0x85/0xa0 [ 572.265681][T12175] print_verifier_state+0x1c1/0x2e70 [ 572.270986][T12175] ? verbose+0x11e/0x1a0 [ 572.275241][T12175] ? fmt_stack_mask+0x1e0/0x1e0 [ 572.280108][T12175] ? __kernel_text_address+0xd/0x30 [ 572.285312][T12175] ? unwind_get_return_address+0x91/0xc0 [ 572.290942][T12175] ? stack_trace_save+0x100/0x100 [ 572.295975][T12175] ? arch_stack_walk+0x160/0x190 [ 572.300914][T12175] ? print_insn_state+0x130/0x160 [ 572.305944][T12175] do_check+0x4f08/0xd0a0 [ 572.310290][T12175] ? stack_trace_snprint+0xf0/0xf0 [ 572.315407][T12175] ? __stack_depot_save+0x1f/0x660 [ 572.320523][T12175] ? kasan_set_track+0x5f/0x70 [ 572.325287][T12175] ? __kasan_kmalloc+0x8f/0xa0 [ 572.330051][T12175] ? __sys_bpf+0x5ba/0x890 [ 572.334466][T12175] ? __x64_sys_bpf+0x7c/0x90 [ 572.339057][T12175] ? do_syscall_64+0x55/0xb0 [ 572.343677][T12175] ? init_func_state+0x2d10/0x2d10 [ 572.348799][T12175] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 572.354347][T12175] ? print_verifier_state+0x2e70/0x2e70 [ 572.359898][T12175] ? init_func_state+0x1dc6/0x2d10 [ 572.365016][T12175] ? btf_check_subprog_arg_match+0x142/0x2a0 [ 572.371005][T12175] do_check_common+0xacc/0x1410 [ 572.375868][T12175] bpf_check+0x66a6/0xf530 [ 572.380304][T12175] ? __lock_acquire+0x1431/0x7eb0 [ 572.385334][T12175] ? mark_lock+0x94/0x320 [ 572.389667][T12175] ? bpf_get_btf_vmlinux+0x70/0x70 [ 572.394777][T12175] ? __lock_acquire+0x135d/0x7eb0 [ 572.399809][T12175] ? mark_lock+0x94/0x320 [ 572.404140][T12175] ? __lock_acquire+0x1431/0x7eb0 [ 572.409200][T12175] ? verify_lock_unused+0x140/0x140 [ 572.414412][T12175] ? verify_lock_unused+0x140/0x140 [ 572.419616][T12175] ? verify_lock_unused+0x140/0x140 [ 572.424845][T12175] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 572.430667][T12175] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 572.436651][T12175] ? __lock_acquire+0x7eb0/0x7eb0 [ 572.441682][T12175] ? lock_chain_count+0x20/0x20 [ 572.446541][T12175] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 572.452784][T12175] ? lockdep_hardirqs_on+0x98/0x150 [ 572.458005][T12175] ? ktime_get_with_offset+0x103/0x330 [ 572.463481][T12175] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 572.469736][T12175] ? ktime_get_real_ts64+0x440/0x440 [ 572.475026][T12175] ? do_raw_spin_unlock+0x121/0x230 [ 572.480258][T12175] ? bpf_obj_name_cpy+0x194/0x1e0 [ 572.485284][T12175] bpf_prog_load+0x10fa/0x1610 [ 572.490059][T12175] ? map_freeze+0x420/0x420 [ 572.494571][T12175] ? __might_fault+0xaa/0x120 [ 572.499251][T12175] ? __might_fault+0xc6/0x120 [ 572.503925][T12175] ? __might_fault+0xaa/0x120 [ 572.508601][T12175] ? bpf_lsm_bpf+0x9/0x10 [ 572.512932][T12175] ? security_bpf+0x7e/0xa0 [ 572.517441][T12175] __sys_bpf+0x5ba/0x890 [ 572.521687][T12175] ? bpf_link_show_fdinfo+0x560/0x560 [ 572.527070][T12175] ? lock_chain_count+0x20/0x20 [ 572.531927][T12175] __x64_sys_bpf+0x7c/0x90 [ 572.536367][T12175] do_syscall_64+0x55/0xb0 [ 572.540780][T12175] ? clear_bhb_loop+0x40/0x90 [ 572.545458][T12175] ? clear_bhb_loop+0x40/0x90 [ 572.550135][T12175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.556035][T12175] RIP: 0033:0x7f4b2919e559 [ 572.560448][T12175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.580056][T12175] RSP: 002b:00007f4b2a133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.588472][T12175] RAX: ffffffffffffffda RBX: 00007f4b29425fa0 RCX: 00007f4b2919e559 [ 572.596442][T12175] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 572.604411][T12175] RBP: 00007f4b29235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 572.612378][T12175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.620346][T12175] R13: 00007f4b29426038 R14: 00007f4b29425fa0 R15: 00007ffc4a969998 [ 572.628331][T12175] [ 574.532060][ T5837] usb 4-1: USB disconnect, device number 29 [ 576.785012][T12247] loop2: detected capacity change from 0 to 1764 [ 576.804617][ T1849] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 576.844965][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 576.995571][ T1849] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.006984][ T1849] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.020230][ T1849] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.027015][ T1849] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 577.036161][ T1849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.043729][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 577.052307][ T1849] usb 1-1: config 0 descriptor?? [ 577.062447][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.075742][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.087534][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 577.096938][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.105235][ T8] usb 4-1: Product: syz [ 577.114774][ T8] usb 4-1: Manufacturer: syz [ 577.119526][ T8] usb 4-1: SerialNumber: syz [ 577.128004][ T8] usb 4-1: config 0 descriptor?? [ 577.270683][ T1849] usbhid 1-1:0.0: can't add hid device: -71 [ 577.292242][T12236] binder: 12235:12236 ioctl c0306201 200000000400 returned -11 [ 578.440982][ T1849] usbhid: probe of 1-1:0.0 failed with error -71 [ 578.454644][ T1849] usb 1-1: USB disconnect, device number 51 [ 578.458676][ T9] usb 4-1: USB disconnect, device number 30 [ 580.967614][T12302] netlink: 'syz.3.1179': attribute type 5 has an invalid length. [ 581.908947][T12321] loop3: detected capacity change from 0 to 128 [ 583.649856][T12335] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1186'. [ 584.003268][T12345] netlink: 'syz.1.1190': attribute type 5 has an invalid length. [ 584.127242][T12348] loop3: detected capacity change from 0 to 8 [ 584.199156][T12348] SQUASHFS error: Failed to read block 0x8f: -5 [ 584.224597][ T28] audit: type=1800 audit(1792234514.328:22): pid=12348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1192" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 584.330470][T12355] SQUASHFS error: Failed to read block 0x85: -5 [ 584.364856][T12355] SQUASHFS error: Failed to read block 0x85: -5 [ 584.408748][T12355] SQUASHFS error: Failed to read block 0x85: -5 [ 584.449758][T12355] SQUASHFS error: Failed to read block 0x85: -5 [ 584.470181][T12355] SQUASHFS error: Failed to read block 0x85: -5 [ 584.490317][T12355] SQUASHFS error: Failed to read block 0x85: -5 [ 584.517139][T12355] SQUASHFS error: Failed to read block 0x85: -5 [ 584.547509][T12355] SQUASHFS error: Failed to read block 0x85: -5 [ 584.596536][T12355] SQUASHFS error: Failed to read block 0x85: -5 [ 584.613676][ T5852] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 584.839844][ T5852] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 584.902574][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.936900][ T5852] usb 3-1: config 0 descriptor?? [ 584.985450][ T5852] pwc: Samsung MPC-C10 USB webcam detected. [ 585.244319][ T5852] pwc: send_video_command error -71 [ 585.249591][ T5852] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 585.268284][ T5852] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 585.318184][ T5852] usb 3-1: USB disconnect, device number 38 [ 586.723794][ T5852] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 586.917511][ T5852] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 586.947066][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.974898][ T5852] usb 3-1: config 0 descriptor?? [ 586.997880][ T5852] pwc: Samsung MPC-C10 USB webcam detected. [ 587.401435][ T5852] pwc: recv_control_msg error -71 req 02 val 2b00 [ 587.438286][ T5852] pwc: recv_control_msg error -71 req 02 val 2700 [ 587.453681][ T5852] pwc: recv_control_msg error -71 req 04 val 1700 [ 587.477512][ T5852] pwc: recv_control_msg error -71 req 02 val 2c00 [ 587.506798][ T5852] pwc: recv_control_msg error -71 req 04 val 1000 [ 587.528574][ T5852] pwc: recv_control_msg error -71 req 04 val 1300 [ 587.544363][ T5852] pwc: recv_control_msg error -71 req 04 val 1400 [ 587.564069][ T5852] pwc: recv_control_msg error -71 req 02 val 2000 [ 587.576922][ T5852] pwc: recv_control_msg error -71 req 02 val 2100 [ 587.592787][ T5852] pwc: recv_control_msg error -71 req 02 val 2200 [ 587.619929][ T5852] pwc: recv_control_msg error -71 req 06 val 0600 [ 587.631050][ T5852] pwc: recv_control_msg error -71 req 04 val 1500 [ 587.651046][ T5852] pwc: recv_control_msg error -71 req 02 val 2500 [ 587.672573][ T5852] pwc: recv_control_msg error -71 req 02 val 2400 [ 587.692302][ T5852] pwc: recv_control_msg error -71 req 02 val 2600 [ 587.710704][ T5852] pwc: recv_control_msg error -71 req 02 val 2900 [ 587.722049][ T5852] pwc: recv_control_msg error -71 req 02 val 2800 [ 587.735503][ T5852] pwc: recv_control_msg error -71 req 04 val 1100 [ 587.752110][ T5852] pwc: recv_control_msg error -71 req 04 val 1200 [ 587.800491][ T5852] pwc: Registered as video103. [ 587.827887][ T5852] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 587.880873][ T5852] usb 3-1: USB disconnect, device number 39 [ 590.407064][T12462] autofs4:pid:12462:autofs_fill_super: called with bogus options [ 591.203560][T12465] binder: transaction release 200 bad handle 1, ret = -22 [ 591.483001][T12471] mmap: syz.3.1221 (12471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 594.283906][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 594.678183][ T9] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 595.008947][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 595.039190][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.101774][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.163709][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.455729][ T9] usb 1-1: usb_control_msg returned -32 [ 595.461384][ T9] usbtmc 1-1:16.0: can't read capabilities [ 595.757065][ T5837] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 595.943981][T12525] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 596.009008][ T5837] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.047135][ T5837] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.086046][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0 [ 596.118266][ T5837] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 596.143820][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.188387][ T5837] usb 3-1: config 0 descriptor?? [ 596.247322][ T9] usb 1-1: USB disconnect, device number 52 [ 596.430563][T12509] binder: 12507:12509 ioctl c0306201 200000000400 returned -11 [ 597.324118][ T5837] usbhid 3-1:0.0: can't add hid device: -71 [ 597.334361][ T5837] usbhid: probe of 3-1:0.0 failed with error -71 [ 597.365364][ T5837] usb 3-1: USB disconnect, device number 40 [ 601.273742][ T5850] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 601.586487][ T5850] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 601.602481][ T5850] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.683678][ T23] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 601.808500][ T5850] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 601.822473][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.427725][ T5850] usb 4-1: usb_control_msg returned -32 [ 602.433331][ T5850] usbtmc 4-1:16.0: can't read capabilities [ 602.705747][ T23] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 602.726238][ T23] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 602.753060][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 602.772351][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.785590][ T23] usb 1-1: Product: syz [ 602.789817][ T23] usb 1-1: Manufacturer: syz [ 602.822378][ T23] usb 1-1: SerialNumber: syz [ 603.045288][T12615] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 603.050955][T12585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.086145][T12585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.263974][ T23] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 603.288426][ T23] dvb_usb_af9015: probe of 1-1:2.0 failed with error -22 [ 603.307410][ T23] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 603.316196][ T23] dvb_usb_af9035: probe of 1-1:2.0 failed with error -22 [ 603.348568][ T23] usb 1-1: USB disconnect, device number 53 [ 603.589123][ T27] usb 4-1: USB disconnect, device number 31 [ 604.495459][T12651] binder: 12649:12651 ioctl c0306201 0 returned -14 [ 604.828492][T12656] loop2: detected capacity change from 0 to 32768 [ 604.951309][T12656] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 605.132847][T12656] XFS (loop2): Ending clean mount [ 605.295655][T12656] XFS (loop2): Quotacheck needed: Please wait. [ 605.517802][T12656] XFS (loop2): Quotacheck: Done. [ 605.897501][ T28] audit: type=1800 audit(1792234535.978:23): pid=12682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1259" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 606.471556][ T5785] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 608.423601][ T8] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 608.647044][ T8] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 608.676958][ T8] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 608.762773][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 608.773760][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.823621][ T8] usb 1-1: Product: syz [ 608.833612][ T8] usb 1-1: Manufacturer: syz [ 608.843091][ T8] usb 1-1: SerialNumber: syz [ 609.075824][T12692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.094283][T12692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.194028][ T8] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 609.202926][ T8] dvb_usb_af9015: probe of 1-1:2.0 failed with error -22 [ 609.256006][ T8] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 609.262408][ T8] dvb_usb_af9035: probe of 1-1:2.0 failed with error -22 [ 609.312599][ T8] usb 1-1: USB disconnect, device number 54 [ 610.803618][ T8] IPVS: starting estimator thread 0... [ 610.903619][T12723] IPVS: using max 34 ests per chain, 81600 per kthread [ 613.750641][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 614.364694][T12746] loop3: detected capacity change from 0 to 8 [ 614.510394][T12746] SQUASHFS error: Failed to read block 0x8f: -5 [ 614.557278][ T28] audit: type=1800 audit(1792234544.658:24): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1279" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 614.722121][T12750] SQUASHFS error: Failed to read block 0x85: -5 [ 614.876677][T12750] SQUASHFS error: Failed to read block 0x85: -5 [ 615.019578][T12750] SQUASHFS error: Failed to read block 0x85: -5 [ 615.093841][T12750] SQUASHFS error: Failed to read block 0x85: -5 [ 615.143693][T12750] SQUASHFS error: Failed to read block 0x85: -5 [ 615.150081][T12750] SQUASHFS error: Failed to read block 0x85: -5 [ 615.226510][T12750] SQUASHFS error: Failed to read block 0x85: -5 [ 615.273859][T12750] SQUASHFS error: Failed to read block 0x85: -5 [ 615.356530][T12750] SQUASHFS error: Failed to read block 0x85: -5 [ 616.296459][ T8] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 616.838371][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 616.907490][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.938031][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 616.979123][ T8] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 617.013531][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.034521][ T8] usb 3-1: Product: syz [ 617.052174][ T8] usb 3-1: Manufacturer: syz [ 617.072481][ T8] usb 3-1: SerialNumber: syz [ 617.098983][ T8] usb 3-1: selecting invalid altsetting 1 [ 617.124392][ T8] usb 3-1: unit 6 not found! [ 617.523785][ T8] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 617.616276][ T8] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 617.666171][ T8] usb 3-1: USB disconnect, device number 41 [ 617.751622][T12748] udevd[12748]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.994155][ T5837] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 618.503796][ T5837] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 618.548802][ T5837] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 618.638988][ T5837] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.656874][ T5837] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 618.672656][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.691671][T12803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1286'. [ 618.722522][ T5837] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 618.727671][T12803] netlink: 'syz.2.1286': attribute type 10 has an invalid length. [ 618.745653][ T5837] usb 4-1: invalid MIDI out EP 0 [ 621.210643][ T5837] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 621.257424][ T5837] usb 4-1: USB disconnect, device number 32 [ 621.286104][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 621.836682][T12826] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12844] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12826] [ 622.783727][ T1853] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 623.056341][ T1853] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 623.070677][ T1853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.305838][ T1853] usb 3-1: Product: syz [ 623.310030][ T1853] usb 3-1: Manufacturer: syz [ 623.322636][ T1853] usb 3-1: SerialNumber: syz [ 623.570833][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 623.602399][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 623.610130][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 623.617670][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 623.628009][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 623.641480][ T1853] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 623.703042][ T1853] usb 3-1: USB disconnect, device number 42 [ 623.712956][T12860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1294'. [ 623.748205][ T1853] usblp0: removed [ 624.374644][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'. [ 624.453221][T12881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.573346][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.579747][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.605181][T12915] bond2: (slave batadv0): Releasing backup interface [ 624.650154][T12923] loop3: detected capacity change from 0 to 1024 [ 624.728578][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.765870][T12926] loop0: detected capacity change from 0 to 1764 [ 624.776145][T12915] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 626.664210][T12942] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 626.671412][T12942] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 626.895671][ T4408] hfsplus: b-tree write err: -5, ino 25 [ 626.903286][ T4408] hfsplus: b-tree write err: -5, ino 4 [ 626.944438][ T4408] hfsplus: b-tree write err: -5, ino 2 [ 626.950313][ T4408] hfsplus: b-tree write err: -5, ino 26 [ 627.004549][ T4408] hfsplus: b-tree write err: -5, ino 27 [ 627.639648][T12946] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12950] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12946] [ 630.325047][T12965] loop2: detected capacity change from 0 to 8 [ 630.399829][T12965] SQUASHFS error: Failed to read block 0x8f: -5 [ 630.451297][ T28] audit: type=1800 audit(1792234560.548:25): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1306" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 630.452604][ T1849] IPVS: starting estimator thread 0... [ 630.653637][T12970] IPVS: using max 19 ests per chain, 45600 per kthread [ 630.973620][ T1849] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 631.176424][ T1849] usb 1-1: unable to get BOS descriptor or descriptor too short [ 631.198743][ T1849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.211198][ T1849] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 631.257319][ T1849] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 631.268662][ T1849] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 631.307204][ T1849] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 631.345852][ T1849] usb 1-1: config 1 interface 1 has no altsetting 0 [ 631.368476][ T1849] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 631.377961][ T1849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.413775][ T1849] usb 1-1: Product: syz [ 631.433788][ T1849] usb 1-1: Manufacturer: syz [ 631.446271][ T1849] usb 1-1: SerialNumber: syz [ 631.863781][T12984] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12989] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12984] [ 633.213946][ T1849] usb 1-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 633.295060][ T1849] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 633.339005][ T1849] usb 1-1: USB disconnect, device number 55 [ 633.395130][T12993] udevd[12993]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.295473][T13013] bond2: Unable to set up delay as MII monitoring is disabled [ 634.367577][T13013] bond2 (unregistering): Released all slaves [ 638.863755][T13099] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13112] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13099] [ 640.091707][T13116] bond5: Unable to set up delay as MII monitoring is disabled [ 640.116284][T13116] bond5 (unregistering): Released all slaves [ 640.336959][T13153] bond4: (slave batadv0): Releasing backup interface [ 644.039488][T13212] loop2: detected capacity change from 0 to 1764 [ 644.197722][T13220] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1343'. [ 645.505418][ T3479] Bluetooth: hci4: Frame reassembly failed (-84) [ 645.655415][T13239] loop0: detected capacity change from 0 to 4096 [ 645.719312][T13247] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 646.749521][ T5850] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 646.757300][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 646.953552][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 646.960633][ T5850] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 646.968485][ T5850] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 647.000149][ T5850] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 647.033542][ T5850] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 647.053540][ T5850] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 647.083529][ T5850] usb 4-1: config 168 interface 0 has no altsetting 0 [ 647.092820][ T5850] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 647.103934][ T5850] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 647.133618][ T5850] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 647.163991][ T5850] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 647.183587][ T5850] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 647.213547][ T5850] usb 4-1: config 168 interface 0 has no altsetting 0 [ 647.234340][ T5850] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 647.241803][ T5850] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 647.273546][ T5850] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 647.293936][ T5850] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 647.323547][ T5850] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 647.354847][ T5850] usb 4-1: config 168 interface 0 has no altsetting 0 [ 647.364683][ T5850] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 647.383672][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.391721][ T5850] usb 4-1: Product: syz [ 647.407265][ T5850] usb 4-1: Manufacturer: syz [ 647.411926][ T5850] usb 4-1: SerialNumber: syz [ 647.523667][ T5781] Bluetooth: hci4: command 0x1003 tx timeout [ 647.523983][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 647.631743][ T5850] adutux 4-1:168.0: interrupt endpoints not found [ 647.669635][ T5850] usb 4-1: USB disconnect, device number 33 [ 650.136426][T13300] loop0: detected capacity change from 0 to 4096 [ 650.195189][T13304] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 651.440446][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 653.278286][T13320] netlink: 'syz.3.1360': attribute type 5 has an invalid length. [ 653.538992][T13324] FAULT_INJECTION: forcing a failure. [ 653.538992][T13324] name failslab, interval 1, probability 0, space 0, times 0 [ 653.565247][T13324] CPU: 1 PID: 13324 Comm: syz.2.1364 Not tainted syzkaller #0 [ 653.572773][T13324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 653.582854][T13324] Call Trace: [ 653.586164][T13324] [ 653.589112][T13324] dump_stack_lvl+0x18c/0x250 [ 653.593805][T13324] ? show_regs_print_info+0x20/0x20 [ 653.599012][T13324] ? load_image+0x420/0x420 [ 653.603524][T13324] ? __might_sleep+0xe0/0xe0 [ 653.608130][T13324] ? __lock_acquire+0x7eb0/0x7eb0 [ 653.613162][T13324] should_fail_ex+0x394/0x4c0 [ 653.617846][T13324] should_failslab+0x9/0x20 [ 653.622392][T13324] slab_pre_alloc_hook+0x59/0x300 [ 653.627422][T13324] kmem_cache_alloc_lru+0x4d/0x2b0 [ 653.632554][T13324] ? __d_alloc+0x31/0x710 [ 653.636980][T13324] __d_alloc+0x31/0x710 [ 653.641134][T13324] ? alloc_fd+0x590/0x640 [ 653.645472][T13324] d_alloc_pseudo+0x1d/0x70 [ 653.649980][T13324] alloc_file_pseudo+0xe4/0x210 [ 653.654836][T13324] ? fput+0x1a0/0x1a0 [ 653.658824][T13324] ? alloc_fd+0x590/0x640 [ 653.663155][T13324] sock_alloc_file+0xb7/0x280 [ 653.667845][T13324] __sys_socket+0x140/0x1b0 [ 653.672359][T13324] __x64_sys_socket+0x7a/0x90 [ 653.677038][T13324] do_syscall_64+0x55/0xb0 [ 653.681451][T13324] ? clear_bhb_loop+0x40/0x90 [ 653.686132][T13324] ? clear_bhb_loop+0x40/0x90 [ 653.690808][T13324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.696723][T13324] RIP: 0033:0x7f4b2919e559 [ 653.701141][T13324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.720762][T13324] RSP: 002b:00007f4b2a133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 653.729180][T13324] RAX: ffffffffffffffda RBX: 00007f4b29425fa0 RCX: 00007f4b2919e559 [ 653.737203][T13324] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 653.745186][T13324] RBP: 00007f4b29235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 653.753258][T13324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.761235][T13324] R13: 00007f4b29426038 R14: 00007f4b29425fa0 R15: 00007ffc4a969998 [ 653.769233][T13324] [ 656.149955][T13348] loop2: detected capacity change from 0 to 4096 [ 656.200689][T13353] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 656.209387][T13354] netlink: 'syz.3.1378': attribute type 5 has an invalid length. [ 657.043794][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 657.563269][T13368] loop0: detected capacity change from 0 to 2048 [ 657.606893][T13368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 660.730354][T13395] loop2: detected capacity change from 0 to 128 [ 661.039057][T13400] netlink: 'syz.0.1388': attribute type 5 has an invalid length. [ 662.173664][ T23] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 662.176795][T13416] loop0: detected capacity change from 0 to 4096 [ 662.201406][T13419] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 662.252154][T13417] syzkaller0: entered promiscuous mode [ 662.306029][T13417] syzkaller0: entered allmulticast mode [ 662.345572][T13417] tipc: Enabled bearer , priority 0 [ 662.391051][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 662.424296][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 662.434834][T13417] tipc: Resetting bearer [ 662.461981][ T23] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 662.482796][ T23] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 662.491243][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 662.501991][ T23] usb 3-1: config 14 has no interface number 0 [ 662.522510][T13415] tipc: Resetting bearer [ 662.542745][ T23] usb 3-1: config 14 has no interface number 1 [ 662.578722][ T23] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 662.608800][ T23] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 5, skipping [ 662.621395][T13415] tipc: Disabling bearer [ 662.650959][ T23] usb 3-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 662.677078][ T23] usb 3-1: config 14 interface 57 has no altsetting 0 [ 662.689558][ T23] usb 3-1: config 14 interface 228 has no altsetting 0 [ 662.702500][ T23] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 662.721645][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.733296][ T23] usb 3-1: Product: syz [ 662.742412][ T23] usb 3-1: Manufacturer: syz [ 662.749142][ T23] usb 3-1: SerialNumber: syz [ 662.899637][T13434] netlink: 'syz.3.1395': attribute type 1 has an invalid length. [ 662.967376][T13434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.052424][ T23] legousbtower 3-1:14.57: interrupt endpoints not found [ 663.079220][T13434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.089221][T13434] bond2: (slave batadv0): making interface the new active one [ 663.105324][T13434] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 663.131695][T13434] bond0: (slave bridge0): Releasing backup interface [ 663.137494][ T23] legousbtower 3-1:14.228: interrupt endpoints not found [ 663.171486][ T23] usb 3-1: USB disconnect, device number 43 [ 663.182975][T13434] bond2: (slave batadv0): Releasing active interface [ 666.433944][T13514] ./dev/sda1: Can't lookup blockdev [ 668.274910][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 668.879225][T13527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 668.957531][T13535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.047681][T13535] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 671.496586][T13579] loop0: detected capacity change from 0 to 128 [ 672.554097][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 672.783289][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 672.820319][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 672.843913][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.852018][ T9] usb 3-1: Product: syz [ 672.863839][ T9] usb 3-1: Manufacturer: syz [ 672.868500][ T9] usb 3-1: SerialNumber: syz [ 672.926465][ T9] usb 3-1: config 0 descriptor?? [ 672.956505][ T9] gspca_main: spca508-2.14.0 probing 041e:4018 [ 673.936637][ T9] gspca_spca508: reg_read err -110 [ 673.944017][ T9] gspca_spca508: reg_read err -32 [ 674.109437][ T9] gspca_spca508: reg_read err -32 [ 674.165422][ T9] gspca_spca508: reg_read err -32 [ 674.461490][ T9] gspca_spca508: reg write: error -71 [ 674.487570][ T9] spca508: probe of 3-1:0.0 failed with error -71 [ 674.573698][ T9] usb 3-1: USB disconnect, device number 44 [ 675.431361][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 675.496685][T13627] bond3: (slave batadv0): Releasing backup interface [ 678.627427][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 678.954022][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 678.991460][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 681.277873][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 681.551430][T13697] FAULT_INJECTION: forcing a failure. [ 681.551430][T13697] name fail_futex, interval 1, probability 0, space 0, times 1 [ 681.598498][T13697] CPU: 1 PID: 13697 Comm: syz.3.1449 Not tainted syzkaller #0 [ 681.606038][T13697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 681.616125][T13697] Call Trace: [ 681.619432][T13697] [ 681.622385][T13697] dump_stack_lvl+0x18c/0x250 [ 681.627103][T13697] ? show_regs_print_info+0x20/0x20 [ 681.632341][T13697] ? load_image+0x420/0x420 [ 681.636917][T13697] should_fail_ex+0x394/0x4c0 [ 681.641646][T13697] get_futex_key+0x136/0x1030 [ 681.646367][T13697] ? futex_setup_timer+0xc0/0xc0 [ 681.651343][T13697] futex_wake+0x127/0x4f0 [ 681.655722][T13697] ? futex_wake_mark+0x150/0x150 [ 681.660704][T13697] ? __lock_acquire+0x7eb0/0x7eb0 [ 681.665773][T13697] ? file_end_write+0x159/0x250 [ 681.670670][T13697] ? vfs_write+0x5de/0x9a0 [ 681.675138][T13697] do_futex+0x35d/0x3e0 [ 681.679330][T13697] ? __ia32_sys_get_robust_list+0x110/0x110 [ 681.685270][T13697] __se_sys_futex+0x3a9/0x440 [ 681.689994][T13697] ? __x64_sys_futex+0xf0/0xf0 [ 681.694804][T13697] ? __x64_sys_futex+0x21/0xf0 [ 681.699611][T13697] do_syscall_64+0x55/0xb0 [ 681.704065][T13697] ? clear_bhb_loop+0x40/0x90 [ 681.708783][T13697] ? clear_bhb_loop+0x40/0x90 [ 681.713496][T13697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.719437][T13697] RIP: 0033:0x7f57a199e559 [ 681.723889][T13697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.743570][T13697] RSP: 002b:00007f57a27c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 681.751981][T13697] RAX: ffffffffffffffda RBX: 00007f57a1c25fa8 RCX: 00007f57a199e559 [ 681.759952][T13697] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f57a1c25fac [ 681.767922][T13697] RBP: 00007f57a1c25fa0 R08: 0000000000745a08 R09: 0000000000000000 [ 681.775887][T13697] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 681.783850][T13697] R13: 00007f57a1c26038 R14: 00007ffcfe392ba0 R15: 00007ffcfe392c88 [ 681.791860][T13697] [ 685.303595][ T23] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 685.533986][ T23] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 685.577072][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.045294][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.051625][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.099482][ T23] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 686.128489][T13742] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 686.155917][ T23] usb 4-1: USB disconnect, device number 34 [ 686.168962][T13742] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 687.145225][T13753] loop0: detected capacity change from 0 to 8 [ 688.479537][ T5850] IPVS: starting estimator thread 0... [ 688.593937][T13762] IPVS: using max 22 ests per chain, 52800 per kthread [ 691.021170][T13784] bond3: (slave batadv0): Releasing backup interface [ 695.075892][ T28] audit: type=1800 audit(1792234625.178:26): pid=13815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1475" name="id" dev="configfs" ino=22702 res=0 errno=0 [ 696.187397][T13846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.224136][T13846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.263723][ T5837] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 696.477179][ T5837] usb 1-1: Dual-Role OTG device on HNP port [ 696.493736][ T5837] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 696.503029][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.567667][ T5837] gspca_main: spca501-2.14.0 probing 0000:0000 [ 696.596372][ T5837] gspca_spca501: reg write: error -32 [ 696.615776][ T5837] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 696.638545][ T5837] spca501: probe of 1-1:1.0 failed with error -22 [ 696.653069][ T5837] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 698.154408][T13883] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 707.365000][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 712.783208][T13957] loop3: detected capacity change from 0 to 128 [ 715.813869][T13977] autofs4:pid:13977:autofs_fill_super: called with bogus options [ 721.499066][T14003] netlink: 'syz.1.1517': attribute type 3 has an invalid length. [ 724.051749][T14022] binder: 14021:14022 ioctl c0306201 0 returned -14 [ 726.765772][T14064] binder: 14063:14064 ioctl c0306201 0 returned -14 [ 728.658658][T14079] autofs4:pid:14079:autofs_fill_super: called with bogus options [ 731.279382][T14095] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 731.289282][T14095] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 732.165774][T14099] loop3: detected capacity change from 0 to 256 [ 732.301051][T14099] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 732.756457][T14111] binder: 14110:14111 ioctl c0306201 0 returned -14 [ 733.606373][T14118] autofs4:pid:14118:autofs_fill_super: called with bogus options [ 735.755874][T14144] autofs4:pid:14144:autofs_fill_super: called with bogus options [ 737.428095][T14153] binder: 14152:14153 ioctl c0306201 0 returned -14 [ 738.445263][T14159] binder: 14152:14159 ioctl c0306201 0 returned -14 [ 738.586970][T14161] FAULT_INJECTION: forcing a failure. [ 738.586970][T14161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.627526][T14161] CPU: 0 PID: 14161 Comm: syz.3.1569 Not tainted syzkaller #0 [ 738.635066][T14161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 738.645154][T14161] Call Trace: [ 738.648474][T14161] [ 738.651462][T14161] dump_stack_lvl+0x18c/0x250 [ 738.656186][T14161] ? show_regs_print_info+0x20/0x20 [ 738.661422][T14161] ? load_image+0x420/0x420 [ 738.665970][T14161] ? __lock_acquire+0x7eb0/0x7eb0 [ 738.671026][T14161] ? __virt_addr_valid+0x10c/0x380 [ 738.676171][T14161] should_fail_ex+0x394/0x4c0 [ 738.680901][T14161] _copy_from_user+0x2f/0xe0 [ 738.685531][T14161] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 738.690775][T14161] bpf_vlog_finalize+0x174/0x3e0 [ 738.695762][T14161] btf_new_fd+0x4ca/0x9e0 [ 738.700141][T14161] ? bpf_btf_show_fdinfo+0x80/0x80 [ 738.705285][T14161] ? capable+0x88/0xe0 [ 738.709387][T14161] __sys_bpf+0x670/0x890 [ 738.713662][T14161] ? bpf_link_show_fdinfo+0x560/0x560 [ 738.719096][T14161] ? lock_chain_count+0x20/0x20 [ 738.723995][T14161] __x64_sys_bpf+0x7c/0x90 [ 738.728456][T14161] do_syscall_64+0x55/0xb0 [ 738.732893][T14161] ? clear_bhb_loop+0x40/0x90 [ 738.737595][T14161] ? clear_bhb_loop+0x40/0x90 [ 738.742298][T14161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.748237][T14161] RIP: 0033:0x7f57a199e559 [ 738.752681][T14161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.772320][T14161] RSP: 002b:00007f57a27c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 738.780791][T14161] RAX: ffffffffffffffda RBX: 00007f57a1c25fa0 RCX: 00007f57a199e559 [ 738.788805][T14161] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 738.796812][T14161] RBP: 00007f57a1a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 738.804812][T14161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.812805][T14161] R13: 00007f57a1c26038 R14: 00007f57a1c25fa0 R15: 00007ffcfe392c88 [ 738.820832][T14161] [ 741.654769][T14178] autofs4:pid:14178:autofs_fill_super: called with bogus options [ 744.954881][T14203] loop3: detected capacity change from 0 to 8 [ 745.006913][T14203] SQUASHFS error: Failed to read block 0x8f: -5 [ 745.039777][ T28] audit: type=1800 audit(1792234675.138:27): pid=14203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1581" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 746.366622][T14211] SQUASHFS error: Failed to read block 0x85: -5 [ 746.373025][T14211] SQUASHFS error: Failed to read block 0x85: -5 [ 746.474031][T14211] SQUASHFS error: Failed to read block 0x85: -5 [ 746.480529][T14211] SQUASHFS error: Failed to read block 0x85: -5 [ 746.493674][T14211] SQUASHFS error: Failed to read block 0x85: -5 [ 746.500062][T14211] SQUASHFS error: Failed to read block 0x85: -5 [ 746.533994][T14211] SQUASHFS error: Failed to read block 0x85: -5 [ 746.553236][T14211] SQUASHFS error: Failed to read block 0x85: -5 [ 746.564595][T14211] SQUASHFS error: Failed to read block 0x85: -5 [ 746.718785][ T28] audit: type=1326 audit(1792234676.798:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b59e559 code=0x7ffc0000 [ 746.794113][ T28] audit: type=1326 audit(1792234676.798:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b59e559 code=0x7ffc0000 [ 746.873689][ T28] audit: type=1326 audit(1792234676.798:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b59e559 code=0x7ffc0000 [ 746.943829][ T28] audit: type=1326 audit(1792234676.798:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc07b59e559 code=0x7ffc0000 [ 747.023923][ T28] audit: type=1326 audit(1792234676.798:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc07b59e2c2 code=0x7ffc0000 [ 747.874246][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.880598][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.888744][T13742] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 747.955616][ T28] audit: type=1326 audit(1792234676.808:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07b59e559 code=0x7ffc0000 [ 748.107531][ T28] audit: type=1326 audit(1792234676.808:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc07b55ed8e code=0x7ffc0000 [ 748.183717][ T28] audit: type=1326 audit(1792234676.858:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc07b59e387 code=0x7ffc0000 [ 748.250731][ T28] audit: type=1326 audit(1792234676.858:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.1.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc07b55ed8e code=0x7ffc0000 [ 750.028105][T14244] FAULT_INJECTION: forcing a failure. [ 750.028105][T14244] name fail_futex, interval 1, probability 0, space 0, times 0 [ 750.156280][T14244] CPU: 1 PID: 14244 Comm: syz.2.1585 Not tainted syzkaller #0 [ 750.163808][T14244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 750.173884][T14244] Call Trace: [ 750.177175][T14244] [ 750.180122][T14244] dump_stack_lvl+0x18c/0x250 [ 750.184828][T14244] ? show_regs_print_info+0x20/0x20 [ 750.190049][T14244] ? load_image+0x420/0x420 [ 750.194583][T14244] ? __lock_acquire+0x1431/0x7eb0 [ 750.199639][T14244] should_fail_ex+0x394/0x4c0 [ 750.204349][T14244] get_futex_key+0x136/0x1030 [ 750.209060][T14244] ? futex_setup_timer+0xc0/0xc0 [ 750.214031][T14244] futex_wake+0x127/0x4f0 [ 750.218389][T14244] ? futex_wake_mark+0x150/0x150 [ 750.223362][T14244] do_futex+0x35d/0x3e0 [ 750.227543][T14244] ? __might_fault+0xaa/0x120 [ 750.232244][T14244] ? __ia32_sys_get_robust_list+0x110/0x110 [ 750.238160][T14244] ? __might_fault+0xc6/0x120 [ 750.242854][T14244] mm_release+0x184/0x3a0 [ 750.247205][T14244] ? exit_mm_release+0x30/0x30 [ 750.251995][T14244] ? lockdep_hardirqs_on+0x98/0x150 [ 750.257226][T14244] exit_mm+0xa4/0x340 [ 750.261237][T14244] ? sysctl_delayacct+0x220/0x220 [ 750.266283][T14244] ? do_exit+0x2530/0x2530 [ 750.270730][T14244] ? tty_audit_exit+0x14d/0x1f0 [ 750.275609][T14244] do_exit+0x909/0x2530 [ 750.279806][T14244] ? put_task_struct+0xc0/0xc0 [ 750.284604][T14244] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 750.290603][T14244] ? get_signal+0x100e/0x1390 [ 750.295300][T14244] ? lock_chain_count+0x20/0x20 [ 750.300173][T14244] ? _raw_spin_lock_irq+0xbb/0xf0 [ 750.305226][T14244] do_group_exit+0x22d/0x2f0 [ 750.309842][T14244] ? lockdep_hardirqs_on+0x98/0x150 [ 750.315070][T14244] get_signal+0x12a6/0x1390 [ 750.319618][T14244] arch_do_signal_or_restart+0xc2/0x7b0 [ 750.325194][T14244] ? __ia32_sys_get_robust_list+0x110/0x110 [ 750.331108][T14244] ? get_sigframe_size+0x20/0x20 [ 750.336069][T14244] ? rawv6_setsockopt+0x276/0x5d0 [ 750.341128][T14244] ? exit_to_user_mode_loop+0x3b/0x110 [ 750.346614][T14244] exit_to_user_mode_loop+0x70/0x110 [ 750.351923][T14244] exit_to_user_mode_prepare+0xee/0x180 [ 750.357500][T14244] syscall_exit_to_user_mode+0x1a/0x50 [ 750.362984][T14244] do_syscall_64+0x61/0xb0 [ 750.367417][T14244] ? clear_bhb_loop+0x40/0x90 [ 750.372114][T14244] ? clear_bhb_loop+0x40/0x90 [ 750.376813][T14244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.382735][T14244] RIP: 0033:0x7f4b2919e559 [ 750.387167][T14244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.406795][T14244] RSP: 002b:00007f4b2a1330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 750.415237][T14244] RAX: fffffffffffffe00 RBX: 00007f4b29425fa8 RCX: 00007f4b2919e559 [ 750.423225][T14244] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b29425fa8 [ 750.431212][T14244] RBP: 00007f4b29425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 750.439200][T14244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.447190][T14244] R13: 00007f4b29426038 R14: 00007ffc4a9698b0 R15: 00007ffc4a969998 [ 750.455192][T14244] [ 751.892433][T14254] loop2: detected capacity change from 0 to 8 [ 752.137770][T14254] SQUASHFS error: Failed to read block 0x8f: -5 [ 752.312000][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 752.312086][ T28] audit: type=1800 audit(1792234682.378:51): pid=14254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1596" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 752.994201][T14269] binder: BINDER_SET_CONTEXT_MGR already set [ 753.000246][T14269] binder: 14268:14269 ioctl 4018620d 2000000002c0 returned -16 [ 753.075047][T14271] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 753.128174][T14274] FAULT_INJECTION: forcing a failure. [ 753.128174][T14274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.142714][T14274] CPU: 0 PID: 14274 Comm: syz.2.1602 Not tainted syzkaller #0 [ 753.150224][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 753.160309][T14274] Call Trace: [ 753.161020][T14277] loop0: detected capacity change from 0 to 128 [ 753.163594][T14274] [ 753.163605][T14274] dump_stack_lvl+0x18c/0x250 [ 753.163632][T14274] ? show_regs_print_info+0x20/0x20 [ 753.182733][T14274] ? load_image+0x420/0x420 [ 753.187289][T14274] ? __might_fault+0xaa/0x120 [ 753.192011][T14274] ? __lock_acquire+0x7eb0/0x7eb0 [ 753.197090][T14274] ? __virt_addr_valid+0x10c/0x380 [ 753.202251][T14274] should_fail_ex+0x394/0x4c0 [ 753.206976][T14274] _copy_to_user+0x2f/0xa0 [ 753.211436][T14274] bpf_verifier_vlog+0x432/0x840 [ 753.216434][T14274] btf_verifier_log+0x11e/0x1a0 [ 753.221341][T14274] ? btf_parse_graph_root+0xb00/0xb00 [ 753.226786][T14274] __btf_verifier_log_type+0x457/0x690 [ 753.230407][T14271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 753.232264][T14274] ? btf_sec_info_cmp+0x5d/0x100 [ 753.232309][T14274] ? btf_int_show+0x2810/0x2810 [ 753.242678][T14301] binder: 14299:14301 ioctl c0306201 0 returned -14 [ 753.243835][T14274] btf_enum64_check_meta+0xcd5/0xde0 [ 753.243874][T14274] btf_check_all_metas+0x371/0xaf0 [ 753.243905][T14274] btf_parse_type_sec+0xfc/0x1960 [ 753.243921][T14274] ? btf_check_sec_info+0x350/0x350 [ 753.243951][T14274] ? __virt_addr_valid+0x10c/0x380 [ 753.243976][T14274] ? btf_verifier_log+0x1a0/0x1a0 [ 753.243998][T14274] ? btf_parse_hdr+0x545/0x700 [ 753.244016][T14274] ? btf_parse_str_sec+0x20d/0x2a0 [ 753.244037][T14274] btf_new_fd+0x440/0x9e0 [ 753.244064][T14274] ? bpf_btf_show_fdinfo+0x80/0x80 [ 753.244092][T14274] ? capable+0x88/0xe0 [ 753.244121][T14274] __sys_bpf+0x670/0x890 [ 753.244140][T14274] ? bpf_link_show_fdinfo+0x560/0x560 [ 753.244167][T14274] ? lock_chain_count+0x20/0x20 [ 753.244190][T14274] __x64_sys_bpf+0x7c/0x90 [ 753.244206][T14274] do_syscall_64+0x55/0xb0 [ 753.244220][T14274] ? clear_bhb_loop+0x40/0x90 [ 753.244237][T14274] ? clear_bhb_loop+0x40/0x90 [ 753.244252][T14274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.244275][T14274] RIP: 0033:0x7f4b2919e559 [ 753.244291][T14274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.244305][T14274] RSP: 002b:00007f4b2a133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 753.244324][T14274] RAX: ffffffffffffffda RBX: 00007f4b29425fa0 RCX: 00007f4b2919e559 [ 753.244336][T14274] RDX: 0000000000000028 RSI: 0000200000000700 RDI: 0000000000000012 [ 753.244346][T14274] RBP: 00007f4b29235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 753.244357][T14274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.244378][T14274] R13: 00007f4b29426038 R14: 00007f4b29425fa0 R15: 00007ffc4a969998 [ 753.244404][T14274] [ 753.510528][T14301] binder: 14299:14301 ioctl c0306201 0 returned -14 [ 754.634444][T14325] loop0: detected capacity change from 0 to 256 [ 754.669227][T14331] loop2: detected capacity change from 0 to 8 [ 754.709801][T14325] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 754.743193][T14331] SQUASHFS error: Failed to read block 0x8f: -5 [ 754.783066][ T28] audit: type=1800 audit(1792234684.878:52): pid=14331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1607" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 754.840851][T14335] SQUASHFS error: Failed to read block 0x85: -5 [ 754.899669][T14335] SQUASHFS error: Failed to read block 0x85: -5 [ 754.954927][T14335] SQUASHFS error: Failed to read block 0x85: -5 [ 755.033944][T14335] SQUASHFS error: Failed to read block 0x85: -5 [ 755.040388][T14335] SQUASHFS error: Failed to read block 0x85: -5 [ 755.071927][T14335] SQUASHFS error: Failed to read block 0x85: -5 [ 755.096532][T14335] SQUASHFS error: Failed to read block 0x85: -5 [ 757.389803][T14335] SQUASHFS error: Failed to read block 0x85: -5 [ 757.401004][T14335] SQUASHFS error: Failed to read block 0x85: -5 [ 757.710523][T14352] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 757.719632][T14352] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 757.937695][T14354] loop0: detected capacity change from 0 to 4096 [ 758.330973][ T28] audit: type=1800 audit(1792234688.408:53): pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1612" name="file1" dev="loop0" ino=0 res=0 errno=0 [ 758.991334][T14366] loop3: detected capacity change from 0 to 128 [ 760.119857][T14381] loop3: detected capacity change from 0 to 256 [ 760.193102][T14381] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 760.412799][T14394] loop0: detected capacity change from 0 to 8 [ 760.453201][T14394] SQUASHFS error: Failed to read block 0x8f: -5 [ 760.479956][ T28] audit: type=1800 audit(1792234690.578:54): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1621" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 761.422193][T14400] loop3: detected capacity change from 0 to 4096 [ 761.476930][T14407] loop2: detected capacity change from 0 to 128 [ 761.504034][T14409] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 764.527528][T14436] loop0: detected capacity change from 0 to 256 [ 764.678258][T14436] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 766.523725][ T1853] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 768.781972][T14479] loop0: detected capacity change from 0 to 8 [ 768.795878][T14481] loop3: detected capacity change from 0 to 256 [ 768.838019][T14479] SQUASHFS error: Failed to read block 0x8f: -5 [ 768.874225][ T28] audit: type=1800 audit(1792234698.978:55): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1644" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 768.907655][T14481] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 768.952344][T14486] SQUASHFS error: Failed to read block 0x85: -5 [ 768.990709][T14486] SQUASHFS error: Failed to read block 0x85: -5 [ 769.023622][T14486] SQUASHFS error: Failed to read block 0x85: -5 [ 769.053833][T14486] SQUASHFS error: Failed to read block 0x85: -5 [ 769.109675][T14486] SQUASHFS error: Failed to read block 0x85: -5 [ 769.116643][T14486] SQUASHFS error: Failed to read block 0x85: -5 [ 769.123016][T14486] SQUASHFS error: Failed to read block 0x85: -5 [ 769.180762][T14486] SQUASHFS error: Failed to read block 0x85: -5 [ 769.213749][T14486] SQUASHFS error: Failed to read block 0x85: -5 [ 772.025994][T14510] loop2: detected capacity change from 0 to 4096 [ 772.175052][T14516] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 772.324135][T14519] loop0: detected capacity change from 0 to 256 [ 772.412428][T14519] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 775.914883][T14541] ip_tables: iptables: counters copy to user failed while replacing table [ 777.023655][T14552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.045859][T14552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.862374][T14573] loop0: detected capacity change from 0 to 4096 [ 777.984435][T14577] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 782.876042][T14624] loop2: detected capacity change from 0 to 4096 [ 782.949158][T14630] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 783.200106][T14633] loop0: detected capacity change from 0 to 256 [ 783.232281][T14633] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 785.766837][T14653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.776291][T14653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.323892][ T1853] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 786.537213][ T1853] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 786.555958][T14682] loop0: detected capacity change from 0 to 256 [ 786.559368][ T1853] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 786.585965][ T1853] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 786.602223][ T1853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.617645][ T1853] usb 3-1: Product: syz [ 786.625273][ T1853] usb 3-1: Manufacturer: syz [ 786.639691][ T1853] usb 3-1: SerialNumber: syz [ 786.639691][T14682] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 786.864700][T14669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.898458][T14669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.032884][T14695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1702'. [ 787.129937][ T1853] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 787.155371][ T1853] dvb_usb_af9015: probe of 3-1:2.0 failed with error -22 [ 787.176345][ T1853] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 787.182827][ T1853] dvb_usb_af9035: probe of 3-1:2.0 failed with error -22 [ 787.217751][ T1853] usb 3-1: USB disconnect, device number 45 [ 787.242886][T14695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1702'. [ 787.250455][T14699] loop3: detected capacity change from 0 to 4096 [ 787.309651][T14713] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 787.436930][T14695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1702'. [ 789.786671][T14737] loop3: detected capacity change from 0 to 256 [ 790.007120][T14737] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 792.091249][T14759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.108245][T14759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.278995][T14767] loop3: detected capacity change from 0 to 4096 [ 792.479084][T14770] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 793.382276][T14782] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14786] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14782] [ 797.648309][T14803] loop2: detected capacity change from 0 to 256 [ 797.855510][T14803] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 798.563692][ T23] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 798.757171][ T23] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.823489][ T23] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 798.853698][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 798.908195][ T23] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 798.950242][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.979612][ T23] usb 3-1: config 0 descriptor?? [ 799.228673][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 799.236428][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 799.258041][ T23] usb 3-1: USB disconnect, device number 46 [ 799.303564][T14816] binder: 14815:14816 ioctl c0306201 200000000400 returned -11 [ 801.432209][T14845] loop0: detected capacity change from 0 to 4096 [ 801.753500][T14855] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 805.456727][T14872] loop2: detected capacity change from 0 to 128 [ 808.655558][T14892] loop2: detected capacity change from 0 to 4096 [ 808.783457][T14895] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 808.888105][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.894517][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.856337][T14939] loop0: detected capacity change from 0 to 256 [ 816.998104][T14939] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 819.113641][T14959] loop2: detected capacity change from 0 to 4096 [ 819.452166][ T28] audit: type=1800 audit(1792234749.548:56): pid=14959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1770" name="file1" dev="loop2" ino=0 res=0 errno=0 [ 821.514465][ T5837] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 821.728815][ T5837] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 821.790389][ T5837] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 821.899004][ T5837] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 821.980223][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.431078][ T5837] usb 3-1: usb_control_msg returned -32 [ 822.485128][ T5837] usbtmc 3-1:16.0: can't read capabilities [ 822.704438][T15011] loop3: detected capacity change from 0 to 4096 [ 822.819329][ T28] audit: type=1800 audit(1792234752.918:57): pid=15011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1785" name="file1" dev="loop3" ino=0 res=0 errno=0 [ 823.907981][ T5837] usb 3-1: USB disconnect, device number 47 [ 824.131213][T15037] loop3: detected capacity change from 0 to 128 [ 824.870457][T15055] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 833.217455][T15097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.235762][T15097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.151951][T15113] binder_alloc: 15111: binder_alloc_buf, no vma [ 835.155281][T15112] jffs2: notice: (15112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 840.423516][T13892] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 840.636189][T13892] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 840.652923][T13892] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.667300][T13892] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 840.681006][T13892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.188974][T13892] usb 3-1: usb_control_msg returned -32 [ 841.226549][T13892] usbtmc 3-1:16.0: can't read capabilities [ 842.413709][T15140] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -32 [ 842.455104][T15173] binder_alloc: 15171: binder_alloc_buf, no vma [ 842.494915][T13892] usb 3-1: USB disconnect, device number 48 [ 849.723490][ T5837] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 849.947630][ T5837] usb 4-1: device descriptor read/64, error -71 [ 850.253520][ T5837] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 854.880783][T15282] loop2: detected capacity change from 0 to 256 [ 855.009403][T15282] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 858.161554][T15321] loop0: detected capacity change from 0 to 128 [ 867.595310][T15394] loop0: detected capacity change from 0 to 256 [ 867.682943][T15394] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 870.106030][T15420] loop0: detected capacity change from 0 to 128 [ 870.125023][T15420] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 870.273167][T15420] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 870.335815][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.342188][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.101061][ T1091] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 871.192344][T15433] comedi comedi4: comedi_config --init_data is deprecated [ 873.679094][T15452] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 873.688316][T15452] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 873.925783][T15454] loop0: detected capacity change from 0 to 4096 [ 874.423868][ T28] audit: type=1800 audit(1792234804.518:58): pid=15454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1906" name="file1" dev="loop0" ino=0 res=0 errno=0 [ 877.633562][T15406] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 878.489915][T15406] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.517701][T15406] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.564081][T15406] usb 4-1: config 0 interface 0 has no altsetting 0 [ 878.570789][T15406] usb 4-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 878.613403][T15406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.642782][T15406] usb 4-1: config 0 descriptor?? [ 880.169263][T15406] usbhid 4-1:0.0: can't add hid device: -71 [ 880.179982][T15406] usbhid: probe of 4-1:0.0 failed with error -71 [ 880.197524][T15482] binder: 15481:15482 ioctl c0306201 200000000400 returned -11 [ 880.229423][T15406] usb 4-1: USB disconnect, device number 38 [ 883.316223][T15543] loop2: detected capacity change from 0 to 128 [ 883.388222][T15543] FAT-fs (loop2): bogus number of FAT structure [ 883.394814][T15543] FAT-fs (loop2): Can't find a valid FAT filesystem [ 884.643806][T15550] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15553] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15550] [ 886.053625][ T8] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 886.750946][ T28] audit: type=1800 audit(1792234816.848:59): pid=15579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1933" name="id" dev="configfs" ino=26259 res=0 errno=0 [ 886.886854][ T8] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.904775][ T8] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 886.919764][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 886.936523][ T8] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 886.969488][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.009108][T15588] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 887.020479][T15588] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 887.108399][ T8] usb 3-1: config 0 descriptor?? [ 887.250873][T15590] loop3: detected capacity change from 0 to 4096 [ 887.631271][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 889.321434][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 889.408399][ T8] usb 3-1: USB disconnect, device number 49 [ 889.689624][ T28] audit: type=1800 audit(1792234819.788:60): pid=15587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1936" name="file1" dev="loop3" ino=0 res=0 errno=0 [ 891.314117][T15603] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15632] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15603] [ 891.518762][ T28] audit: type=1800 audit(1792234821.618:61): pid=15624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1943" name="id" dev="configfs" ino=25489 res=0 errno=0 [ 891.564980][ T28] audit: type=1326 audit(1792234821.648:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 891.650783][ T28] audit: type=1326 audit(1792234821.648:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 891.699445][ T28] audit: type=1326 audit(1792234821.648:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 891.739948][ T28] audit: type=1326 audit(1792234821.648:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 891.774174][ T28] audit: type=1326 audit(1792234821.648:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 891.802915][ T28] audit: type=1326 audit(1792234821.648:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 891.839784][ T28] audit: type=1326 audit(1792234821.648:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 891.883752][ T28] audit: type=1326 audit(1792234821.648:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 892.039247][ T28] audit: type=1326 audit(1792234821.658:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 892.205551][ T28] audit: type=1326 audit(1792234821.658:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 892.363708][ T28] audit: type=1326 audit(1792234821.658:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 892.522959][ T28] audit: type=1326 audit(1792234821.748:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 892.658418][ T28] audit: type=1326 audit(1792234821.748:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 892.682703][ T28] audit: type=1326 audit(1792234821.748:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.2.1942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4b2919e559 code=0x7ffc0000 [ 895.155546][T15676] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15680] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15676] [ 898.483719][T13892] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 898.781579][T13892] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.888982][T13892] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 898.948638][T13892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 898.955694][T13892] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 898.964877][T13892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.984006][T13892] usb 3-1: config 0 descriptor?? [ 899.072840][T15715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.104515][T15715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.212925][T15703] binder: 15702:15703 ioctl c0306201 200000000400 returned -11 [ 900.117496][T13892] usbhid 3-1:0.0: can't add hid device: -71 [ 900.159123][T13892] usbhid: probe of 3-1:0.0 failed with error -71 [ 900.175863][T13892] usb 3-1: USB disconnect, device number 50 [ 900.220988][T15732] 9pnet_fd: p9_fd_create_unix (15732): problem connecting socket: ./proc/thread-self/fail-nth: -2 [ 900.831959][T15747] loop0: detected capacity change from 0 to 128 [ 902.017882][T15758] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 902.027007][T15758] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 902.376342][T15760] loop3: detected capacity change from 0 to 4096 [ 902.479549][T15762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1979'. [ 904.476216][ T28] kauditd_printk_skb: 127 callbacks suppressed [ 904.476274][ T28] audit: type=1800 audit(1792234834.498:203): pid=15760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1978" name="file1" dev="loop3" ino=0 res=0 errno=0 [ 905.499695][T15776] netlink: 'syz.0.1981': attribute type 1 has an invalid length. [ 905.507652][T15776] netlink: 'syz.0.1981': attribute type 4 has an invalid length. [ 905.516100][T15776] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1981'. [ 905.907999][ T28] audit: type=1800 audit(1792234836.008:204): pid=15789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1986" name="id" dev="configfs" ino=27795 res=0 errno=0 [ 906.220442][ T28] audit: type=1800 audit(1792234836.308:205): pid=15802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1988" name="id" dev="configfs" ino=27898 res=0 errno=0 [ 906.279388][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1990'. [ 906.620349][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 907.458725][T15823] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 907.468119][T15823] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 907.690261][T15825] loop0: detected capacity change from 0 to 4096 [ 907.934022][T15406] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 908.465558][T15406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.485836][ T28] audit: type=1800 audit(1792234838.448:206): pid=15825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1994" name="file1" dev="loop0" ino=0 res=0 errno=0 [ 908.593273][T15406] usb 4-1: config 0 has no interfaces? [ 908.768946][T15406] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 908.800727][T15406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.832249][T15406] usb 4-1: Product: syz [ 908.850600][T15406] usb 4-1: Manufacturer: syz [ 908.884085][T15406] usb 4-1: SerialNumber: syz [ 908.932330][T15406] usb 4-1: config 0 descriptor?? [ 910.343490][T15819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.352315][T15819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.391826][ T28] audit: type=1800 audit(1792234840.488:207): pid=15861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1997" name="id" dev="configfs" ino=27996 res=0 errno=0 [ 910.427682][T15406] usb 4-1: USB disconnect, device number 39 [ 912.887429][ T28] audit: type=1800 audit(1792234842.988:208): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1999" name="id" dev="configfs" ino=27174 res=0 errno=0 [ 912.958715][T15902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2007'. [ 913.277793][ T28] audit: type=1800 audit(1792234843.378:209): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2009" name="id" dev="configfs" ino=28056 res=0 errno=0 [ 915.123143][T15928] binder: 15927:15928 ioctl 4018620d 0 returned -22 [ 919.485428][ T28] audit: type=1800 audit(1792234849.588:210): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2015" name="id" dev="configfs" ino=27251 res=0 errno=0 [ 919.774812][ T28] audit: type=1800 audit(1792234849.868:211): pid=15964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2028" name="id" dev="configfs" ino=28100 res=0 errno=0 [ 921.759007][T15979] binder: 15978:15979 ioctl 4018620d 0 returned -22 [ 925.178658][T16008] warning: `syz.2.2030' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 925.183641][ T28] audit: type=1800 audit(1792234855.278:212): pid=16001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2033" name="id" dev="configfs" ino=28157 res=0 errno=0 [ 928.044954][ T28] audit: type=1800 audit(1792234858.148:213): pid=16037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2045" name="id" dev="configfs" ino=27348 res=0 errno=0 [ 928.154123][ T28] audit: type=1800 audit(1792234858.258:214): pid=16042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2036" name="id" dev="configfs" ino=28210 res=0 errno=0 [ 928.500080][ T28] audit: type=1800 audit(1792234858.598:215): pid=16052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2046" name="id" dev="configfs" ino=28221 res=0 errno=0 [ 930.140219][ T28] audit: type=1800 audit(1792234860.238:216): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2048" name="id" dev="configfs" ino=27383 res=0 errno=0 [ 930.158725][ T5439] [ 930.162505][ T5439] ============================= [ 930.167725][ T5439] WARNING: suspicious RCU usage [ 930.172616][ T5439] syzkaller #0 Not tainted [ 930.177119][ T5439] ----------------------------- [ 930.181993][ T5439] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 930.190617][ T5439] [ 930.190617][ T5439] other info that might help us debug this: [ 930.190617][ T5439] [ 930.200911][ T5439] [ 930.200911][ T5439] rcu_scheduler_active = 2, debug_locks = 1 [ 930.209051][ T5439] 1 lock held by dhcpcd/5439: [ 930.214268][ T5439] #0: ffffffff8f1d2888 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2fc/0x1d70 [ 930.223651][ T5439] [ 930.223651][ T5439] stack backtrace: [ 930.230456][ T5439] CPU: 0 PID: 5439 Comm: dhcpcd Not tainted syzkaller #0 [ 930.237517][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 930.247601][ T5439] Call Trace: [ 930.250902][ T5439] [ 930.253861][ T5439] dump_stack_lvl+0x18c/0x250 [ 930.258591][ T5439] ? load_image+0x420/0x420 [ 930.263124][ T5439] ? show_regs_print_info+0x20/0x20 [ 930.268348][ T5439] ? load_image+0x420/0x420 [ 930.272885][ T5439] ? print_tainted+0x14c/0x170 [ 930.277695][ T5439] lockdep_rcu_suspicious+0x1e1/0x300 [ 930.283103][ T5439] ieee80211_check_concurrent_iface+0x46b/0x950 [ 930.289386][ T5439] ieee80211_open+0xc1/0x200 [ 930.294004][ T5439] __dev_open+0x2cb/0x430 [ 930.298343][ T5439] ? dev_open+0x190/0x190 [ 930.302714][ T5439] __dev_change_flags+0x1e8/0x6a0 [ 930.307764][ T5439] ? dev_get_flags+0x1c0/0x1c0 [ 930.312528][ T5439] ? apparmor_capable+0x137/0x1a0 [ 930.317557][ T5439] dev_change_flags+0x7c/0x1a0 [ 930.322326][ T5439] devinet_ioctl+0x949/0x1d70 [ 930.327023][ T5439] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 930.332133][ T5439] ? _copy_from_user+0xa5/0xe0 [ 930.336899][ T5439] ? get_user_ifreq+0x12b/0x180 [ 930.341759][ T5439] inet_ioctl+0x42b/0x560 [ 930.346093][ T5439] ? tomoyo_path_number_perm+0x217/0x5e0 [ 930.351726][ T5439] ? inet_shutdown+0x370/0x370 [ 930.356487][ T5439] ? slab_free_freelist_hook+0x130/0x1a0 [ 930.362118][ T5439] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 930.367753][ T5439] ? __kmem_cache_free+0xba/0x1f0 [ 930.372792][ T5439] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 930.378291][ T5439] sock_do_ioctl+0xfc/0x310 [ 930.382816][ T5439] ? sock_show_fdinfo+0xb0/0xb0 [ 930.387690][ T5439] sock_ioctl+0x5be/0x7e0 [ 930.392031][ T5439] ? sock_poll+0x3e0/0x3e0 [ 930.396460][ T5439] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 930.402474][ T5439] ? fd_install+0x60/0x4e0 [ 930.406908][ T5439] ? bpf_lsm_file_ioctl+0x9/0x10 [ 930.411847][ T5439] ? security_file_ioctl+0x80/0xa0 [ 930.416962][ T5439] ? sock_poll+0x3e0/0x3e0 [ 930.421383][ T5439] __se_sys_ioctl+0xfd/0x170 [ 930.425975][ T5439] do_syscall_64+0x55/0xb0 [ 930.430391][ T5439] ? clear_bhb_loop+0x40/0x90 [ 930.435069][ T5439] ? clear_bhb_loop+0x40/0x90 [ 930.439748][ T5439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 930.445646][ T5439] RIP: 0033:0x7f9da2316378 [ 930.450061][ T5439] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 930.469665][ T5439] RSP: 002b:00007ffc06960cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.478080][ T5439] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00007f9da2316378 [ 930.486076][ T5439] RDX: 00007ffc06970ef0 RSI: 0000000000008914 RDI: 0000000000000018 [ 930.494068][ T5439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 930.502053][ T5439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc06981090 [ 930.510040][ T5439] R13: 00007f9da22166c8 R14: 0000000000000028 R15: 0000000000008914 [ 930.518027][ T5439] [ 931.767620][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.782938][ T1294] ieee802154 phy1 wpan1: encryption failed: -22