Extracting prog: 1h9m8.558128483s Minimizing prog: 7h28m34.321365241s Simplifying prog options: 0s Extracting C: 6m30.167076337s Simplifying C: 29m47.897569334s extracting reproducer from 12 programs testing a last program of every proc single: executing 2 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442ffffc000000000000000000000000000002ff02000000000000000000000000000104"], 0xfdef) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash single: failed to extract reproducer bisect: bisecting 12 programs with base timeout 45s testing program (duration=48s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7, 5, 9, 1, 5, 7, 3, 9, 8, 6, 5] detailed listing: executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f0000002880)=[{&(0x7f0000000480)="e4c000ac07b540556e723b04", 0xc}], 0x1) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7, 0x0, 0x0, 0xfd, "ffff00"}) readv(r0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x3, "c3e904"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d2644"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) executing program 1: writev(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000000480)="e4c000ac07b540556e723b04", 0xc}], 0x1) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40641, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xfdef) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7, 0x0, 0x0, 0xfd, "ffff00"}) readv(r0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01000400000000000000010000000c00060001000000000000000c000200000000000000000054000780080001"], 0x80}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d2644"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c50000000ea20000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="f38d2c66d1439b441af01ffe05cc99c5e9db5ec5324f28fe475a04f01388bfe9d37acdf9eb8bf330805b2a235b6884f0cc87cc226150f57c18af57013e65bca937277fed86", 0x45}, {&(0x7f0000000100)="82df99fb9e9ba2796060c0ddac57c72da96b6ad41964c16f2cefed2834e8d0d533f0ce441ed99047ba8d9c13adead270448f883df269c62598b03115991a9c788e2533f1c71763cd2a6bb60f12548ff3c7f4c8ff6de2134774a968d5d144b495db9970f4957f49b3860bdd2f2720fbe0c44c05ebdb9d5e", 0x77}], 0x2}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0xf0, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/211, 0xd3}], 0x1}, 0xfffffffd}], 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="7eceb613cd868959cf7ccd88bb7078593d1b62cde1e976", 0x17}], 0x1}, 0x0) executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442ffffc000000000000000000000000000002ff02000000000000000000000000000104"], 0xfdef) program did not crash replaying the whole log did not cause a kernel crash single: executing 2 programs separately with timeout 5m0s testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442ffffc000000000000000000000000000002ff02000000000000000000000000000104"], 0xfdef) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash single: failed to extract reproducer bisect: bisecting 12 programs with base timeout 5m0s testing program (duration=5m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7, 5, 9, 1, 5, 7, 3, 9, 8, 6, 5] detailed listing: executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f0000002880)=[{&(0x7f0000000480)="e4c000ac07b540556e723b04", 0xc}], 0x1) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7, 0x0, 0x0, 0xfd, "ffff00"}) readv(r0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x3, "c3e904"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d2644"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) executing program 1: writev(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000000480)="e4c000ac07b540556e723b04", 0xc}], 0x1) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40641, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xfdef) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7, 0x0, 0x0, 0xfd, "ffff00"}) readv(r0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01000400000000000000010000000c00060001000000000000000c000200000000000000000054000780080001"], 0x80}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d2644"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c50000000ea20000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="f38d2c66d1439b441af01ffe05cc99c5e9db5ec5324f28fe475a04f01388bfe9d37acdf9eb8bf330805b2a235b6884f0cc87cc226150f57c18af57013e65bca937277fed86", 0x45}, {&(0x7f0000000100)="82df99fb9e9ba2796060c0ddac57c72da96b6ad41964c16f2cefed2834e8d0d533f0ce441ed99047ba8d9c13adead270448f883df269c62598b03115991a9c788e2533f1c71763cd2a6bb60f12548ff3c7f4c8ff6de2134774a968d5d144b495db9970f4957f49b3860bdd2f2720fbe0c44c05ebdb9d5e", 0x77}], 0x2}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0xf0, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/211, 0xd3}], 0x1}, 0xfffffffd}], 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="7eceb613cd868959cf7ccd88bb7078593d1b62cde1e976", 0x17}], 0x1}, 0x0) executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442ffffc000000000000000000000000000002ff02000000000000000000000000000104"], 0xfdef) program did not crash replaying the whole log did not cause a kernel crash single: executing 2 programs separately with timeout 16m0s testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442ffffc000000000000000000000000000002ff02000000000000000000000000000104"], 0xfdef) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program crashed: KASAN: slab-out-of-bounds Read in ucan_probe single: successfully extracted reproducer found reproducer with 6 syscalls minimizing guilty program testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000480)={0x0, 0x14}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program crashed: KASAN: slab-out-of-bounds Read in ucan_probe testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x86, {0x84, "e63c5d037786c1e63191f0568fdf9b5d6a8911b0300e579536e77ad4b0980028665fcb3900a03e359a7320ef0c84735ddd81aa4846d4b181dbc941262dd38b5166370cff53ec1aad034eca9914f59db26c57f2fa9dd497d9671d06f78be7b5a500b59460ecfec575b421e700ab0b5d135a2bee250d94aaaf6d60c0f5368d6a391f2d2b0e"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program crashed: KASAN: slab-out-of-bounds Read in ucan_probe testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program crashed: KASAN: slab-out-of-bounds Read in ucan_probe testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program crashed: KASAN: slab-out-of-bounds Read in ucan_probe testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) program did not crash testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm detailed listing: executing program 0: mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}]}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000480)={0x0, 0x14, 0x93, "862c67b0aff6f88c5d2bd1e09bbf1d52a813d2dc56fcf5c3252e8c26e6862ae5b75d37f9a3befc6acc805bef198e60237ffca03fcc64dcb1a3c86b3dcf75e7e4c767b642d15aa5bb319b1ee6ed9f4eec99fefe1a2e6444e35864f57e4c2da617cb4783d2b1a936d9bfec7bbc0c73a9055d555b03f27c51ecb73568c230581bcc1b38f0f21eb68f0bdbe0f219fc0a0f63b3a664"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0xad}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0}) program crashed: KASAN: slab-out-of-bounds Read in ucan_probe extracting C reproducer testing compiled C program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm program crashed: KASAN: slab-out-of-bounds Read in ucan_probe simplifying C reproducer testing compiled C program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm program crashed: KASAN: slab-out-of-bounds Read in ucan_probe testing compiled C program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm program crashed: KASAN: slab-out-of-bounds Read in ucan_probe testing compiled C program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm program crashed: KASAN: slab-out-of-bounds Read in ucan_probe testing compiled C program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm program crashed: KASAN: slab-out-of-bounds Read in ucan_probe testing compiled C program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm program crashed: KASAN: slab-out-of-bounds Read in ucan_probe testing compiled C program (duration=16m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$tmpfs-syz_usb_connect-syz_usb_control_io$cdc_ncm-syz_usb_control_io$cdc_ncm-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm program crashed: KASAN: slab-out-of-bounds Read in ucan_probe reproducing took 9h14m0.944274398s repro crashed as (corrupted=false): usb 1-1: ucan: probing device on interface #0 ================================================================== BUG: KASAN: slab-out-of-bounds in sized_strscpy+0x2a2/0x2cc lib/string.c:182 Read of size 1 at addr ffffaf801ba334c0 by task kworker/0:1/9 CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 Hardware name: riscv-virtio,qemu (DT) Workqueue: usb_hub_wq hub_event Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:132 [] show_stack+0x30/0x3c arch/riscv/kernel/stacktrace.c:138 [] __dump_stack lib/dump_stack.c:94 [inline] [] dump_stack_lvl+0x12e/0x1a6 lib/dump_stack.c:120 [] print_address_description mm/kasan/report.c:378 [inline] [] print_report+0x28e/0x5aa mm/kasan/report.c:489 [] kasan_report+0xf0/0x214 mm/kasan/report.c:602 [] __asan_report_load1_noabort+0x12/0x1a mm/kasan/report_generic.c:378 [] sized_strscpy+0x2a2/0x2cc lib/string.c:182 [] ucan_probe+0x1682/0x178c drivers/net/can/usb/ucan.c:1535 [] usb_probe_interface+0x2d6/0x8c4 drivers/usb/core/driver.c:396 [] call_driver_probe drivers/base/dd.c:579 [inline] [] really_probe+0x232/0x9be drivers/base/dd.c:658 [] __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:800 [] driver_probe_device+0x60/0x1ce drivers/base/dd.c:830 [] __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:958 [] bus_for_each_drv+0x142/0x1da drivers/base/bus.c:462 [] __device_attach+0x1c4/0x462 drivers/base/dd.c:1030 [] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1079 [] bus_probe_device+0x15c/0x192 drivers/base/bus.c:537 [] device_add+0x10da/0x181c drivers/base/core.c:3665 [] usb_set_configuration+0xf08/0x19dc drivers/usb/core/message.c:2210 [] usb_generic_driver_probe+0xae/0x128 drivers/usb/core/generic.c:250 [] usb_probe_device+0xd6/0x360 drivers/usb/core/driver.c:291 [] call_driver_probe drivers/base/dd.c:579 [inline] [] really_probe+0x232/0x9be drivers/base/dd.c:658 [] __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:800 [] driver_probe_device+0x60/0x1ce drivers/base/dd.c:830 [] __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:958 [] bus_for_each_drv+0x142/0x1da drivers/base/bus.c:462 [] __device_attach+0x1c4/0x462 drivers/base/dd.c:1030 [] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1079 [] bus_probe_device+0x15c/0x192 drivers/base/bus.c:537 [] device_add+0x10da/0x181c drivers/base/core.c:3665 [] usb_new_device+0x964/0x1778 drivers/usb/core/hub.c:2652 [] hub_port_connect drivers/usb/core/hub.c:5523 [inline] [] hub_port_connect_change drivers/usb/core/hub.c:5663 [inline] [] port_event drivers/usb/core/hub.c:5823 [inline] [] hub_event+0x2716/0x48de drivers/usb/core/hub.c:5905 [] process_one_work+0x96a/0x1f3a kernel/workqueue.c:3236 [] process_scheduled_works kernel/workqueue.c:3317 [inline] [] worker_thread+0x5be/0xdc6 kernel/workqueue.c:3398 [] kthread+0x37e/0x7b6 kernel/kthread.c:464 [] ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:327 Allocated by task 9: stack_trace_save+0xa0/0xd2 kernel/stacktrace.c:122 kasan_save_stack+0x3e/0x6a mm/kasan/common.c:47 kasan_save_track+0x16/0x28 mm/kasan/common.c:68 kasan_save_alloc_info+0x30/0x3e mm/kasan/generic.c:562 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xa0/0xa6 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4294 [inline] __kmalloc_node_track_caller_noprof+0x258/0x5ec mm/slub.c:4313 alloc_dr drivers/base/devres.c:119 [inline] devm_kmalloc+0x9a/0x1fe drivers/base/devres.c:843 devm_kzalloc include/linux/device.h:328 [inline] ucan_probe+0x57e/0x178c drivers/net/can/usb/ucan.c:1401 usb_probe_interface+0x2d6/0x8c4 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x232/0x9be drivers/base/dd.c:658 __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:800 driver_probe_device+0x60/0x1ce drivers/base/dd.c:830 __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:958 bus_for_each_drv+0x142/0x1da drivers/base/bus.c:462 __device_attach+0x1c4/0x462 drivers/base/dd.c:1030 device_initial_probe+0x1c/0x26 drivers/base/dd.c:1079 bus_probe_device+0x15c/0x192 drivers/base/bus.c:537 device_add+0x10da/0x181c drivers/base/core.c:3665 usb_set_configuration+0xf08/0x19dc drivers/usb/core/message.c:2210 usb_generic_driver_probe+0xae/0x128 drivers/usb/core/generic.c:250 usb_probe_device+0xd6/0x360 drivers/usb/core/driver.c:291 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x232/0x9be drivers/base/dd.c:658 __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:800 driver_probe_device+0x60/0x1ce drivers/base/dd.c:830 __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:958 bus_for_each_drv+0x142/0x1da drivers/base/bus.c:462 __device_attach+0x1c4/0x462 drivers/base/dd.c:1030 device_initial_probe+0x1c/0x26 drivers/base/dd.c:1079 bus_probe_device+0x15c/0x192 drivers/base/bus.c:537 device_add+0x10da/0x181c drivers/base/core.c:3665 usb_new_device+0x964/0x1778 drivers/usb/core/hub.c:2652 hub_port_connect drivers/usb/core/hub.c:5523 [inline] hub_port_connect_change drivers/usb/core/hub.c:5663 [inline] port_event drivers/usb/core/hub.c:5823 [inline] hub_event+0x2716/0x48de drivers/usb/core/hub.c:5905 process_one_work+0x96a/0x1f3a kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3317 [inline] worker_thread+0x5be/0xdc6 kernel/workqueue.c:3398 kthread+0x37e/0x7b6 kernel/kthread.c:464 ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:327 The buggy address belongs to the object at ffffaf801ba33400 which belongs to the cache kmalloc-192 of size 192 The buggy address is located 0 bytes to the right of allocated 192-byte region [ffffaf801ba33400, ffffaf801ba334c0) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9ba33 flags: 0xffe000000000000(node=0|zone=0|lastcpupid=0x7ff) page_type: f5(slab) raw: 0ffe000000000000 ffffaf80114013c0 ffff8d80006dafc0 dead000000000002 raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 49582585400, free_ts 0 __set_page_owner+0xa2/0x710 mm/page_owner.c:320 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0xea/0x1e2 mm/page_alloc.c:1551 prep_new_page mm/page_alloc.c:1559 [inline] get_page_from_freelist+0xf78/0x2bd6 mm/page_alloc.c:3477 __alloc_frozen_pages_noprof+0x1e8/0x20fc mm/page_alloc.c:4739 alloc_pages_mpol+0x1fa/0x5b8 mm/mempolicy.c:2270 alloc_frozen_pages_noprof+0x174/0x2f0 mm/mempolicy.c:2341 alloc_slab_page mm/slub.c:2423 [inline] allocate_slab mm/slub.c:2587 [inline] new_slab+0x26a/0x340 mm/slub.c:2640 ___slab_alloc+0xaf4/0x1290 mm/slub.c:3826 __slab_alloc.constprop.0+0x60/0xb0 mm/slub.c:3916 __slab_alloc_node mm/slub.c:3991 [inline] slab_alloc_node mm/slub.c:4152 [inline] __kmalloc_cache_noprof+0xd4/0x3f8 mm/slub.c:4320 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] kset_create lib/kobject.c:965 [inline] kset_create_and_add+0x56/0x182 lib/kobject.c:1008 bus_register+0x29c/0x63c drivers/base/bus.c:894 fw_core_init+0x74/0x24a drivers/firewire/core-transaction.c:1334 do_one_initcall+0x1a2/0xae4 init/main.c:1257 do_initcall_level init/main.c:1319 [inline] do_initcalls init/main.c:1335 [inline] do_basic_setup init/main.c:1354 [inline] kernel_init_freeable+0x6ec/0x792 init/main.c:1568 kernel_init+0x28/0x24c init/main.c:1457 page_owner free stack trace missing Memory state around the buggy address: ffffaf801ba33380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc ffffaf801ba33400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffffaf801ba33480: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc ^ ffffaf801ba33500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffffaf801ba33580: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc ================================================================== final repro crashed as (corrupted=false): usb 1-1: ucan: probing device on interface #0 ================================================================== BUG: KASAN: slab-out-of-bounds in sized_strscpy+0x2a2/0x2cc lib/string.c:182 Read of size 1 at addr ffffaf801ba334c0 by task kworker/0:1/9 CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.14.0-rc1-syzkaller-g245aece3750d #0 Hardware name: riscv-virtio,qemu (DT) Workqueue: usb_hub_wq hub_event Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:132 [] show_stack+0x30/0x3c arch/riscv/kernel/stacktrace.c:138 [] __dump_stack lib/dump_stack.c:94 [inline] [] dump_stack_lvl+0x12e/0x1a6 lib/dump_stack.c:120 [] print_address_description mm/kasan/report.c:378 [inline] [] print_report+0x28e/0x5aa mm/kasan/report.c:489 [] kasan_report+0xf0/0x214 mm/kasan/report.c:602 [] __asan_report_load1_noabort+0x12/0x1a mm/kasan/report_generic.c:378 [] sized_strscpy+0x2a2/0x2cc lib/string.c:182 [] ucan_probe+0x1682/0x178c drivers/net/can/usb/ucan.c:1535 [] usb_probe_interface+0x2d6/0x8c4 drivers/usb/core/driver.c:396 [] call_driver_probe drivers/base/dd.c:579 [inline] [] really_probe+0x232/0x9be drivers/base/dd.c:658 [] __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:800 [] driver_probe_device+0x60/0x1ce drivers/base/dd.c:830 [] __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:958 [] bus_for_each_drv+0x142/0x1da drivers/base/bus.c:462 [] __device_attach+0x1c4/0x462 drivers/base/dd.c:1030 [] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1079 [] bus_probe_device+0x15c/0x192 drivers/base/bus.c:537 [] device_add+0x10da/0x181c drivers/base/core.c:3665 [] usb_set_configuration+0xf08/0x19dc drivers/usb/core/message.c:2210 [] usb_generic_driver_probe+0xae/0x128 drivers/usb/core/generic.c:250 [] usb_probe_device+0xd6/0x360 drivers/usb/core/driver.c:291 [] call_driver_probe drivers/base/dd.c:579 [inline] [] really_probe+0x232/0x9be drivers/base/dd.c:658 [] __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:800 [] driver_probe_device+0x60/0x1ce drivers/base/dd.c:830 [] __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:958 [] bus_for_each_drv+0x142/0x1da drivers/base/bus.c:462 [] __device_attach+0x1c4/0x462 drivers/base/dd.c:1030 [] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1079 [] bus_probe_device+0x15c/0x192 drivers/base/bus.c:537 [] device_add+0x10da/0x181c drivers/base/core.c:3665 [] usb_new_device+0x964/0x1778 drivers/usb/core/hub.c:2652 [] hub_port_connect drivers/usb/core/hub.c:5523 [inline] [] hub_port_connect_change drivers/usb/core/hub.c:5663 [inline] [] port_event drivers/usb/core/hub.c:5823 [inline] [] hub_event+0x2716/0x48de drivers/usb/core/hub.c:5905 [] process_one_work+0x96a/0x1f3a kernel/workqueue.c:3236 [] process_scheduled_works kernel/workqueue.c:3317 [inline] [] worker_thread+0x5be/0xdc6 kernel/workqueue.c:3398 [] kthread+0x37e/0x7b6 kernel/kthread.c:464 [] ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:327 Allocated by task 9: stack_trace_save+0xa0/0xd2 kernel/stacktrace.c:122 kasan_save_stack+0x3e/0x6a mm/kasan/common.c:47 kasan_save_track+0x16/0x28 mm/kasan/common.c:68 kasan_save_alloc_info+0x30/0x3e mm/kasan/generic.c:562 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xa0/0xa6 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4294 [inline] __kmalloc_node_track_caller_noprof+0x258/0x5ec mm/slub.c:4313 alloc_dr drivers/base/devres.c:119 [inline] devm_kmalloc+0x9a/0x1fe drivers/base/devres.c:843 devm_kzalloc include/linux/device.h:328 [inline] ucan_probe+0x57e/0x178c drivers/net/can/usb/ucan.c:1401 usb_probe_interface+0x2d6/0x8c4 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x232/0x9be drivers/base/dd.c:658 __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:800 driver_probe_device+0x60/0x1ce drivers/base/dd.c:830 __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:958 bus_for_each_drv+0x142/0x1da drivers/base/bus.c:462 __device_attach+0x1c4/0x462 drivers/base/dd.c:1030 device_initial_probe+0x1c/0x26 drivers/base/dd.c:1079 bus_probe_device+0x15c/0x192 drivers/base/bus.c:537 device_add+0x10da/0x181c drivers/base/core.c:3665 usb_set_configuration+0xf08/0x19dc drivers/usb/core/message.c:2210 usb_generic_driver_probe+0xae/0x128 drivers/usb/core/generic.c:250 usb_probe_device+0xd6/0x360 drivers/usb/core/driver.c:291 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x232/0x9be drivers/base/dd.c:658 __driver_probe_device+0x1d4/0x3f2 drivers/base/dd.c:800 driver_probe_device+0x60/0x1ce drivers/base/dd.c:830 __device_attach_driver+0x1e2/0x2fc drivers/base/dd.c:958 bus_for_each_drv+0x142/0x1da drivers/base/bus.c:462 __device_attach+0x1c4/0x462 drivers/base/dd.c:1030 device_initial_probe+0x1c/0x26 drivers/base/dd.c:1079 bus_probe_device+0x15c/0x192 drivers/base/bus.c:537 device_add+0x10da/0x181c drivers/base/core.c:3665 usb_new_device+0x964/0x1778 drivers/usb/core/hub.c:2652 hub_port_connect drivers/usb/core/hub.c:5523 [inline] hub_port_connect_change drivers/usb/core/hub.c:5663 [inline] port_event drivers/usb/core/hub.c:5823 [inline] hub_event+0x2716/0x48de drivers/usb/core/hub.c:5905 process_one_work+0x96a/0x1f3a kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3317 [inline] worker_thread+0x5be/0xdc6 kernel/workqueue.c:3398 kthread+0x37e/0x7b6 kernel/kthread.c:464 ret_from_fork+0xe/0x18 arch/riscv/kernel/entry.S:327 The buggy address belongs to the object at ffffaf801ba33400 which belongs to the cache kmalloc-192 of size 192 The buggy address is located 0 bytes to the right of allocated 192-byte region [ffffaf801ba33400, ffffaf801ba334c0) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9ba33 flags: 0xffe000000000000(node=0|zone=0|lastcpupid=0x7ff) page_type: f5(slab) raw: 0ffe000000000000 ffffaf80114013c0 ffff8d80006dafc0 dead000000000002 raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 49582585400, free_ts 0 __set_page_owner+0xa2/0x710 mm/page_owner.c:320 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0xea/0x1e2 mm/page_alloc.c:1551 prep_new_page mm/page_alloc.c:1559 [inline] get_page_from_freelist+0xf78/0x2bd6 mm/page_alloc.c:3477 __alloc_frozen_pages_noprof+0x1e8/0x20fc mm/page_alloc.c:4739 alloc_pages_mpol+0x1fa/0x5b8 mm/mempolicy.c:2270 alloc_frozen_pages_noprof+0x174/0x2f0 mm/mempolicy.c:2341 alloc_slab_page mm/slub.c:2423 [inline] allocate_slab mm/slub.c:2587 [inline] new_slab+0x26a/0x340 mm/slub.c:2640 ___slab_alloc+0xaf4/0x1290 mm/slub.c:3826 __slab_alloc.constprop.0+0x60/0xb0 mm/slub.c:3916 __slab_alloc_node mm/slub.c:3991 [inline] slab_alloc_node mm/slub.c:4152 [inline] __kmalloc_cache_noprof+0xd4/0x3f8 mm/slub.c:4320 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] kset_create lib/kobject.c:965 [inline] kset_create_and_add+0x56/0x182 lib/kobject.c:1008 bus_register+0x29c/0x63c drivers/base/bus.c:894 fw_core_init+0x74/0x24a drivers/firewire/core-transaction.c:1334 do_one_initcall+0x1a2/0xae4 init/main.c:1257 do_initcall_level init/main.c:1319 [inline] do_initcalls init/main.c:1335 [inline] do_basic_setup init/main.c:1354 [inline] kernel_init_freeable+0x6ec/0x792 init/main.c:1568 kernel_init+0x28/0x24c init/main.c:1457 page_owner free stack trace missing Memory state around the buggy address: ffffaf801ba33380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc ffffaf801ba33400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffffaf801ba33480: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc ^ ffffaf801ba33500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffffaf801ba33580: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc ==================================================================