last executing test programs: 4.131359743s ago: executing program 0 (id=1576): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00', 0x0, [0xa, 0xfffffff8, 0x8, 0x2000000, 0x80000000]}, &(0x7f0000000240)=0x54) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x21, 0x70bd27, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c01}, 0x840) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000080)) 3.949159908s ago: executing program 0 (id=1577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={"9f971bfb", 0xff, 0x6c, 0x2, 0x4f0, 0xf99, "19bc62a79d45e808cd291c2f993fe8", "7f224677", "d6c20ff3", "4b3a7ecb", ["9d5063248840f4128e315996", "b0dd95a6e2a9437236193df8", "5c7282d6ef22077c9f79f340", "fbde2894c2dff28711a83c38"]}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e9000009", @ANYRESDEC], 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000001200000000aaff020000000000000000000000000001"], 0xffe) 1.943969824s ago: executing program 3 (id=1586): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc00000000000000000000000000ff80fc00000000000000000000000000000000000000020000000a"], 0xb8}}, 0x4000) 1.752976838s ago: executing program 3 (id=1587): sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x2, 0x4, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0xfffffffe, 0x56) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x26, @mcast1, 0x23}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000000)={0x0, "4f954bc017c4c443cb7c92003ae74d9ebe0ba3c20500000000000000587ac9e1"}) 1.752555397s ago: executing program 0 (id=1588): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000400)=0xfffffffe, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b04101e8c00000001090212000100000000090401"], 0x0) 1.61392691s ago: executing program 3 (id=1590): r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd700005000000000000000f00a8007365636f6e646e616d650000080003000100000008000100706369001100020030"], 0x48}, 0x1, 0x0, 0x0, 0x4500}, 0x240001d0) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 1.407178959s ago: executing program 1 (id=1592): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x800) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x810c9365, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x7) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r7, 0x80083313, 0x0) write$6lowpan_control(r1, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 0', 0xffffffffffffffb1) 1.36946715s ago: executing program 3 (id=1593): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "521299a432289bea0a363e238732fea53f5db534deca9d0418026c1f265e3df3ced185b5cd8ab88f35d292428abfb13f16b96ea93fd0551e1d4f7b79160e9e98cd9a001d5f"}, 0x50) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000fe0100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 1.190422165s ago: executing program 1 (id=1594): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x8000001}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.079523524s ago: executing program 3 (id=1596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={"9f971bfb", 0xff, 0x6c, 0x2, 0x4f0, 0xf99, "19bc62a79d45e808cd291c2f993fe8", "7f224677", "d6c20ff3", "4b3a7ecb", ["9d5063248840f4128e315996", "b0dd95a6e2a9437236193df8", "5c7282d6ef22077c9f79f340", "fbde2894c2dff28711a83c38"]}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e9000009", @ANYRESDEC], 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000002000000000aaff020000000000000000000000000001"], 0xffe) 940.841732ms ago: executing program 2 (id=1597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000080)={0x3}) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) r2 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f0000000040)="a6", 0x1, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOCTL_VMCI_VERSION(r4, 0x79f, &(0x7f00000002c0)=0xb0000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc, 0x1}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x11) 764.147448ms ago: executing program 2 (id=1598): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000040)=0x15, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0x8}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7f, 0x0, &(0x7f0000000000)) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4045}, 0x22012) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x100000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)=' }', 0x2}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="c1", 0x1}], 0x1}}], 0x2, 0x200400c0) write$cgroup_type(r4, &(0x7f0000000180), 0x9) 657.681396ms ago: executing program 2 (id=1599): r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = msgget$private(0x0, 0x204) msgsnd(r1, &(0x7f0000000080)={0x1}, 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x5800) (async) msgrcv(r1, 0x0, 0x0, 0x2, 0x5800) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 573.322547ms ago: executing program 1 (id=1600): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r5, 0x8931, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000002a40)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@gre={{0x9, 0x4, 0x2, 0x3e, 0xfc0, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@generic={0x4a, 0xffffffffffffffe2, "d00c5260f734819495ddb9"}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x4]}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "de5856ecfb8ad953a5806d25c74b1077bc5c433cb4a71368465594877bc7a6da60313fe53dc92a58233a64d55ea4df636019a64b00cc41add0705653be07616312be4a5a3fceb96f0d6a92161e852acf234cc8c380d2eb1d56fb4ddf0960aa5bb70ff0076ff4bc8a70c6660145036675d660d7497e3d74e95b3210684369d3a0f68a372cf8493170801a7c6db3ffc6d7caa713e4c6e4d59921931a3f5e517265302a5c7e720a6dc6a10d56cd0c9a6794e14e6c43c4e4b6785e298afde9e07bdf2e0410b497db43064328159a3cd227a5206008a1e296ef6cbac7c02f41a9a74da18c5917fd7d4798dad30a9c772c0ac88341018ef7a637ec1ec0d58365e0eb208cb365df1c8386978324156b566dace69ee51155746bc8c607d829fd2299221cf7a003df96b7c006477c37f928ed10f03894efd7b4f4618eb6541f4f3f1ce9b54b6e8dc515cf6769879f151d63d8c27abd739ec8006e77d45cd6a07ab838ae6e3b423a37028f8b26248636acab40a15f85266848434b04bb6d36e0732666ced916d76998ab48adef8a97d779ef4fc5fa338e556e4571fe5a36ba0345ffef7a626cf08d35dc149bace760f138562796f2731dfc04f9ab0b70e821c33b7acd0cc7fda2b308bdc322a96fcdf9677f7f33ad5b426f05910c0f849e9ff1efd7e02465df8779e3feea4efed6320dea28b2c742d813ab038d8f9dc059ca26bc326dbb8afe8cc3f87690bcbc4612c63b21a6884a11ea70b7ea0b4940d0c7d55ba8a70ca37e40ec52cfcf49384bb9e3a2b627db2ecd6df5e7f608cdc4b382bc9e93fec704919de0a645ff453cb2bdae7260ab2c87d7b036e0642cbbe6bfcc63a267a5bfa1d313609a53dac21c55cafb67c5c9af6aca7f7eefde15f8d17cb90eb173521b0190c50ca5126ea428f5d10b3e1706c92ef2bd226965edf67d5fe0eb958050b3d8b87ee9943dffe10cc4c8d122ca2abe9eae35b30d08c732f1a83440fa9801834d0164256bf9b6357b374f23093fe142e327d5ec314531ac7ddb80363dd052202a37936e684ec37d909e1b0da5ef9db7ee0cf26b40c8d3846f92f0716b3b9a17f86d34911e0dfb553eceaf97335799019dd86acf88dc2d081be6d110af1b9d86b74f219f07922e118c68e561112dcf4c2d0386e1cfe9be3c03000ce8244c5e747dba2684f2643da1a797bd1f34ca9ec64a45922bd74c7ceb63fc884114524bccb83a3c8f5263ebc43e0ad538b910138c5d86e469d4051ba1c9f57ec81e01e8e6a60ace5e15a69f1c3f4eb3b2369f84435495809cc09a74fc5a7c14214b5b00bb159d7f823838cc567e1d74fd4e6e43cb704c5747ea03b4d33ee26443895a7898fae0e96db69d93ee5778dee1eb3a3960097469ad68b7fe72a3b118c2496f0dba59ba906d977af3213615b3f9258d964d53b88c01b4d94d1eb34aa2600c94690024de9a28475564806bd08329c892d18d8b1569398bc9196c3d5f91ea12006361ff3f8c738c4bffd678e9df38902f4e4ae1f9be273114a1b2b02c5ad538f251352bb47d6ae0ba37bc12350df611d714a14c90652a128101fefa71be7a52a18628c5d6098aa26809383276c2c362bbdb96dea3abf37a5dac2c9406e030e0601cb70a9e733738a44e54ed82d9217e45dd16b31300b5551e7363cfc20b5245356788d4f17526e1bfdfb0ae182a8781f7878892c5d35fe765f4b3164a811764f42de49e84adf19ac5c5d12808decc095209e3637a5fd84bcc95656a108790543d553af1cf810fbfd75b266775bd56d950393cac16ddfad3847171801700497976406e06d2a1213fb4bb59e27c1cc42b365308af5a92a8300f875629a0107dc1c9161f8eef3ad43241fe94a48d829b29f3434789d42cbeb9bef87cb2f81f1d09e24f798275682776f4913151cc39ffc4d6aa40411e1fbd32b43fa74e03a77831abef0c0f812284370dd73fcca909f1d1eca3230130a69167cf71241e038772de004192e50042b286a96f39947a67f15dafad4aba91804320f7e05254f96bfe6dddb95bd1da97f21a93bf1afb8ce13f1de3fcb2ce661d4d735eab43ad36593edacdc340c3cf5526c3d32933beec823a2778808b6b83ed81f7b6668ec7a7d0fccdf238afee31d8747eebe8d5b41dc2bd30d880a9d0716b41a934d3b6a27c9608b2da0c4ed92b9915339fdaef8ef5144fb7bd41b1bb5d1a8b25f488f93c47c0a51ea4cf4de899c74945c4fddfce0881fcb8fb2a2094f89ca38b30b3a246bc4fcc0a37ad9d021a42c338addf2f9165f145aa9f30a3310f771d00c312457cf32c45932ed7ce1edc4666139634ab78d12c6f0b03387a2278bbad4d507a159f5e941bf2344da3638da433dd66a6e90dfe3b17a12d4b238ca42773c6275b2065ef50a0e4afe5d8fe37fc60fe58b4f38761ef7cd5827f06eb3704a9741b91b98cb90634e1a30cc189d7f1bfb57c97ddb96ffabcf9b663a1e36ec3d0836fffbd399e1d639b442f8b2adfba2626450a5310a1c84f42ab08ecc3eee72e92f14eb897bf7008f29761559b46974d0188e582cecd0417ff3a629f14ad8b817b2753f13a0f0d7944e5a1e035684fb551eac6b1011a14c9f8288732c748711315db2a67ef5698d6390e361bef15075c7ae7561b170313281d437359b3df141547aa1e604692af6bbceb0e3676d331b6d1bc1df5c299b8587ce7368729b18477769bec5d4b884fee392123c76a5d4dedef4ce51fa222f9be0f367bd7778f4b5df1d5e258e12d1c44faf1a7cd98f5cb9d685859acec9eee14778eef27f71df52f143d0002f62fda2128c48e8e880ebb3cb74c5b5e6396abd82085c60df12f69588f26a1b5e140e2d9bc3b4848a126214979f3a99438a1907a13488eea1caa22db1e06985e4c7c9f352dfb06dac65ae101c1520c4a4479ff8decee492fbcb8930babadcb92b9270bdfe4c37a266e6ad34e55a45a11ddbc4a34f1c5710d6322ea466bb7788d58d216e2bb31d77563a0bceffefeb0df85b113c8afbab8068d5a57b0914e9df998ad0bc50229924d854df548b52299ad565ae26728fe9cc993905f56aa5ab5593d823fd7fc4b341f20f0fac93c737abb66cd8408e96341b7c00701d91ea3ee2cdbf1ef04f5bcd37df1b952840ad10574bdd373c7e42a94d9dc0f12cc617b9dd6a019e482434e5d0e033d8408c649e878d4239fe524613fb10643bc088d3262fabdf7b29d0c6e282a9a956246be350fafb41d588407085ed5edc99ae771d5130f838842742af8218d22190b2034d2fa20c03cf974b7ac02f211cb04561c530b99034bade030f8b0d206ad784987428a8502b3e4059548645e94323a57be556294affa1fe67921509bec1e49108c760b892e2022588dc41d9b644acf4fe14db6489ef5ba06601010534c25a8593976d16cc69dc50bff65c8a6fa11ce70700814d3bd63d4274ccaded132e245b040700bb774524b37ff837dfc67910410a467db6911fea4be16207f31cdc8647bc075bf052fee1a0c486916865d06cf9a2f29324b076d3f30b2f2600aac0dc6e4887e716070597160697ad686bf87b5fba3b3a734012411d8074729a90e5431ab547251041db7b6c1d388459fb9e6f3541ca18df1dcd0625275aed5f6cab9660240cb8200ad729db902191f19ab17481f5d34d5f14f9b5d2139463a8b00cc07bca277b26e30af23ce65f706a2017005086f28f86cc6e48da140de900684b57bb34a68e99a353f75322f080c6d450ff9671724d55706ce564f54939ee4f5454b90a1ee97fbc19d83a6f5a940cc0ce030540604088a94d27caace7a8b3710ce602314ca1af2900898c6ecbed742f41c29b168b9fe64898b340769d7f9e19d2381020f5546611b25c75379cf260d8b2478f5ca5e6e58b33bb41d36dab69cd3534e84bdc8d788a6ead4672e4ebcf49b0c64713e3dd8afe2af306dac9e99f677ba51f16f1d6f0d01862cfb3c49ffe9b10f2d504f429e2df60cbbab7ea60637590c6bfe2521164bc45097467d0a87b206dd85c77edea2221992f4e1085f272256301f0e6946ada914ee81828278f741cebcd495ef05726f66e24c303d8d21a13864b6c43e7fd7ad891e6994a99fb47ed01e9ded895e776d2377b3a02b51962e8651302e3a11449594ff430efc5785afaffa9b68e4ad889b476f7eb39fa57c46798529b797918a0b3e78d812f233d820694b251f79775fc9ecb0ee11e73c59c4603e2db52773432d85ace4c1cb86725d2c6c736350c69de457d52c276489237332347db26b9bca35f57846b382fe81b0ada2c4bf8dd19b95eb7a1121320d20eed7e0bda5e24af54c012ee730f12a9b00887bcbf6584a86800ba644431bbc7accb1158bedc50e48ce1b11190314942d643e28a69a28586d1eb804804a38de1534c0cdc10e46f03e127c8bf35e5bdee5e7aa0b2bc3c1107aaece26c788caab2206950068280741098f271ca420b9832ddb872bb8d265cc71b47deb71de437e957e373621ddb80b5f25e0c131b5b94a6a4145cf708e620f029331f1207c5536e2867cb7b73ee0961cb84a6a3ee3aba5487db67e8e99e08ffd50f0cb1919f1833a5dd6e5ff70876211950962e31d1af3aa9fd359a644d9fccb49fbdbfb38556a6a68a278fd1552e8c15f82da7c21d0a4552f54628884b774255e077222152e0e35927e0ec6d98aa7c32c9d8340fddf094f140b0092265ee0ae7ed735355008ea0b38240a7dda4b9faca1a6d3f9be1242c906f12a0a564c3466fb09cf2e4fdecb3101b78dac6363ffe013088c6bae99f4d2b041243eff4c1e9f20c2adf99ffcf4d55ca2fbfd9ae1301d7c34fb2203d2c995d416c350b76ba66e009ce2c822c7bfba86e7f32adef47c1736051531eee9ca309c5bbdfea0bb5b2d79b7d5a23915e16cc07165dddad40fb91782b274a3f54d78b142504ca7435306829b979b7b71cc4780e26d43cc18b83d866e5960c2b8a5010a7c74d288cfffd0350cbc020e6eb02230f00387e0551e925f483eeaf790db1a1a633ee0e1c2db8308cf018e1bc74cebcfb57d1a1f15417f64d6e0851549062f9fdda42d3f50e970b0dc8c95283a39ceaf5338b6b999a10e332abbf701d77b4837a4976ecea0e9840477d2fa5e4835b6fb3b6fdd76f1166a5c735083b14d5f7bdfa47b4c3935ff95cb8e19ae9dbcb9e3aa91ffc92049416ba04ea9deeac997f55dd76ef156e568b12922793e3ec04d9647e9a2b016c5b3748a11b5e6ddb7f524f9af8e8e5236619ad03a855f6a"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x40, 0x2, 0x0, 0x0, 0x1, 0x4}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x3, 0x1, 0x0, 0x1, 0x5, 0x4}, 0x2, {0x9, 0x8, 0x2, 0x7, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "f1522524c89b57d29527f0e7e203bb0b43f0b24349413fdec9665acfcf68d935e813c7e84a2fda04201d728132ed6bc19e0d5a9f2cd60c821827986fe06033f6441a7439b3d41d5029af96be80faf8300d9a206d62539cc283cf08536bac87b9978e8267dc6601f67c26b5b830ae7db0045cc8e1b4d54e6173aa0ef6abff6f1d6488f5add73c475039a8b920a80be00234f4ff3fd2ce7ecce1f912da248ec9a9d226f252a6152b377bc92b600b169d033a4cf7881d2f63a752fb4d2f08de25eca7d1cbe390bb5e9f74931b67dbac3b4ccb44331cf4a7acb3d14c073ecb"}}}}}, 0xfce) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x3, "0f39be"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000180)={0x40, 0x5, 0xd, "59c10b6ee10aa916dc4e43b0a0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x1e, 0x5a, {0x5a, 0x38, "9701834a5603dabd2a52fee8a8eefe80838ffe0ed246452e2e450869d79ac79187b7494f9dd140d4e4e7d6ecda2f025c1831f6b308095df100b18a3876883d6b8c9caec7bd0f1baf3a9290d99998464a9347148d8c3c2c88"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f0000000e00)={0x1c, &(0x7f0000000200)={0x40, 0x16, 0x51, "fcc257fbfa480c07558767bb4ac5779e6a7e277b068f737279d1288e43324edb07912582e3795e45c7eeed252831bb1867b1b80e489b7bfda54f7b2bd0771d7e6f1b342aff5334a90f31b0000000000000"}, &(0x7f0000000980)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000000c0)={0x21, 0x0, 0x4, '\x00\x00\x00\x00'}}) 562.572401ms ago: executing program 2 (id=1601): r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd700005000000000000000f00a8007365636f6e646e616d650000080003000100000008000100706369001100020030"], 0x48}, 0x1, 0x0, 0x0, 0x4500}, 0x240001d0) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 447.857861ms ago: executing program 1 (id=1602): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df01200004000000000000000300380001"], 0x509) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff0200000000000000000007ffffff01"], 0xfdef) 381.269783ms ago: executing program 2 (id=1603): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x86c202b096ab38df, r0, 0x7085b000) write$6lowpan_control(r0, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0xa02, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8810) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000200)) 285.470089ms ago: executing program 0 (id=1604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x300) setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000001000a003000"], 0xb8}}, 0x4000) 191.778383ms ago: executing program 2 (id=1605): pipe(0x0) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) (async) r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[]) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x17c, &(0x7f0000000080)=ANY=[]) 157.978275ms ago: executing program 1 (id=1606): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x1e, 0x2, 0x0) shutdown(r2, 0x2) (async) recvmmsg$unix(r2, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000000280)=""/51, 0x33}], 0x1}}], 0x1, 0x101, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001500010000000000fcffffff0e00000008000200091c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) (async) ioctl$CEC_S_MODE(r0, 0xc0506107, &(0x7f0000000100)) fcntl$dupfd(r1, 0x0, r0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) (async) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x222480, 0x42) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) landlock_restrict_self(r5, 0x4) (async) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 105.646396ms ago: executing program 0 (id=1607): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) inotify_init() (async) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0000}]}) 105.383276ms ago: executing program 3 (id=1608): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x5, @mcast2, 0x80000000}}, 0x24) userfaultfd(0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 23.534395ms ago: executing program 0 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101601) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003bc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003b80)={&(0x7f0000002280)={0x18fc, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x3b}}}}, [@NL80211_ATTR_NAN_FUNC={0x175c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x200, 0xd, 0x0, 0x1, [{0x9, 0x0, "98445750c9"}, {0x8e, 0x0, "2d09f3fe016b1b1e6871cb8fd08624416a139a65b0b423eca0c01473dfc4a201261e93cc4f90f4519641736f7979e4391e0fe32314fe47f53e26ff0fbae52b280f997a599f8fba5abaefd84ef4f5da5da50ba6cbb7b457a65c7c9d051a1b89642538403c5cc6e3cfc27bed924ecd4cdafe39eeb1cb47fccd369bbce32d171b0a98949d3f833581475934"}, {0x91, 0x0, "76896a338630170c493cd351d5b5c94d38bbebbcbbb16f9a6f1429958049d369678636d869317a416b3565577b2194546e5ae532854b1067fb166904bbaf283e4afaedef5bdcd61bbcf861d5fd9ff751050d029b193bb958ebe0cb7e8b633b4169d34d105efadac1ce3933f12f141ca85aa9d2409c6d5645b383c7c2933b4511d5bad42c5533212efad9491e2d"}, {0x2d, 0x0, "b9474ef52a9d36b4d3aa9adfaab020af9692b3fb764b2e77c562b7afe498c59af3027d23c32a9f271a"}, {0x10, 0x0, "95e1c2b617589eb250b3097b"}, {0x8c, 0x0, "7f48294503b95a2db0b757db7345f2b1d976ba3f837d3241945a087fbe1766537ff625e6b69908bb559825cd7ab1fde859db5618cac31476c2f4b9eed0683ec7f9c133229a7dd688430b9f8be065a8d297a94f68e7b5069dc1862be795e47a183a35f25eb1a34f64530ffc4055624629992a13ca9ec23611eec99364068d410bd8944ce70e12bf59"}]}, @NL80211_NAN_FUNC_SRF={0x118, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x10}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x141c, 0xe, 0x0, 0x1, [{0x100, 0x0, "9a6a78bc008c0818e4f762823832ce29d72b683411042ea42daedc5d865b693ecc2076c428081b444b58124f77fd483c92c51024f5a589748593c86e8b49b284ccb1b7f4db0dcb2af3d8b16e9664e0ad3f40f5719c3ee368a304975e5acf98600ae05036f5af61203e7f1ba6478ee5bf78669169ec7865e03cfe0e9eb7603a975d78bf3cbbce37eb8d945ad5d2d7e11183e0fe33452cfce590a4311fd4ea5bbd84ff991ba345c4176829610c1a23202ed7911b363d6f760f9d57ae6ac61e25dc6dda5559c5bb144e345a1497cc84005f9fc56a5bfd8ca92eb6fbd5a39f07cc9a94e69812b5cfda1ebeecf87411fabc8c9592af182e522accfedef7d8"}, {0xd1, 0x0, "30a5ee357c1fe5c363b0c8de166c960328ac849495d9ef27f6b6bb4015fef41cbd96072e2d8ab0e10d0d436d04c0cad559b7785a0b1248779dfb12e774aa13acc0bc370c93faf2c47ac9389ccc34f4be3db7560d9815ec70ba178267c19c15c46f44f7042730d8ec14aa27480d377d9565350c41db00df71bfbde5fc530c8e2641b164b2c590a263f806908fa9f1a63d7d99f8db908fee6f0251769852702e0de85382cf5fd9d6dfb8492c0d9a15925d9946b2eb1088cde6dff82a8f22eca2277be3a099a088b1f49ce7f44c1c"}, {0xb8, 0x0, "62da99ef0af6b979e2fd68c7ae434a8b4e2e9c1a9405a81f08a881188741feaf661d8db5864c8872c18cc013364177502869583ae872ad4f7dd820db8a893e9c85ac6be7b6e5e36d410f4fe5c9c2972c77faa1b056ee4352b1e84fc97ee45ddcbd92e404c1a2b85d82d312046efed54dd4b0c8584df0ec5ad477d8eb7872715c0e4327b89b6d7b6a1611cec9cf5e37f9b7e215b1f9e3d33d50b536eb74402da356fb32cc5d86c8713082b14b049d0c2a5e145c1f"}, {0x39, 0x0, "e345909e533665a60a3b3a16352b6791da412dbd57f5717506a7ba83c72170e7db79ffaf6e0259f0c1b3c77dda7616a4fba5fa2073"}, {0x51, 0x0, "31c64d01853fb974e16409b8e4d019ff80c5af033b9f5586b3247e4e4f703111857d9f508f4bb9de794a8e417dd17b2a81ab3836c8f4f2043f9c87db1953ace2a41db0ae948ce5adeeebc75dad"}, {0x1004, 0x0, "402017169cfdfc4865de976240c0b91c11fa7a3ac50faf848e2cf32a04a3d06752c4e6f2b8b4ea5d647d70928d6d02c2ae9b2c6f7d909f9900aded7b27db94572be8c56bbcd809b9a8185f928b630c7bff1d44482d7e64cdf70bbb8e4dbc04d9f0998e7d65b32b0732d734d18485e2ae6b940bdf35427b205d5584856a27a496e93396f6aa8d593c5e106d723a042eff90ff64035e0e35ecfb0e4c7e0e1c932b3ddfa4d8a9788ec41fb3f95d18f18bb391859d5fb133228f86a9ba1117622ca2860be78293c60307a6bb1d9795aaa1e4bdb593ca48462df1a117472b01c000f57ff0c6279d290d8633e2c44d31550061638263d68e08969c36cd8e046334b08afda9d824aed1501666abfd472f21915b742715633262038b5c1a4071fc30cbafd58bdc77a38dbef2cf197b21c71e37d60f71cc8f74d13c2b5b14e48d1f42f44f4b215db92f90c6e11151d656d361c307047b659d8b976392f7459d0bfd721af25e6d5f5498134726652482b630fe13f31c434b76cd2f3210650e95c7b688478566c916dff139b07af6aa29354ec274958244070ece9506ccadbb1eb099f2a09b7bfa1675d128dd9423f4c62f94c01577fe7b2f590e94eccef1c20af58fe44f117c03b62011fc38c09cb007cf6e37ae63269541cbc82364563d0c6127d2cfc0d70f24476e0b750484e7128d4dd2bb44c716f0d8a1a09dd97c898cd38500f8d2dbd77a265e7b88280a4b0709f05194fbfd8c83e992998f365ace4b7b1747b0e6415fafc66be9e68681daab8a728382ad6b0065d695561dd74d344cebf64b49c96f0cd865be93b36dc30775679070c35fa4fee0ad42671e7c8e3ebfe06e363b3903271b92029b87e0c8718fa8deccb78e2becd9a725634798d652594e8759006565b70336042bb78d978dd5a12334b94bf6209338936f91d3b128e3265010e219a07d48afc4e6d84fafe50d4da913a66e9fb9bf4344f435f6d59fdf8314eb999906108df8950d3a9c1ea625948e7a7292baa587e2eb638d1d9515213672f613cd9797bd8ceb592260c367aa7e9c2b01ce50d77327a67c4162ff9333919c6966e782a6bac881192e61f82f83eaeb778bac646075d9d7929e18aeb3051921527d37810874067c589c96dc15ebe210c1e894a3f6f3790eb216d8289921d78c3284772c5bc78c74bf63a40a2ff99a1c4c4caa2df26faef4c72a50a4909579cbc4204e5d4ed6045b13b734e3393c060f90c897ad2b3c7fc5649f133ce3b201a40e986764b7c9514bb2213a67f0ce7a15a591d675d78393aad567e3e9ac7163c065290897177e4d68243572e402fe39fab1d4e91e1ce3e53b5c4a6a47f483194b1b2d99cc0c1813db573c5b5bf92295b312fe8cb64a5b03c6c4404a012d3ced4a16c2f8f983bc66d425140713403f5684356ba850db9ecb5b815fee0d7f855b188fcc9c494aede9f9ce5ad586f45a62265c7fdee6fdd514d71506fd52bb39787acfc69d29671695ead4ca5fb45fbbd5875801e15e174a40ce9fbdf3d4e87713b5e081c0a4c83e618584b69bbf3b276eaa47774b8d1c34692d1198df2d97037e9a151e2781a718ce2a7cef359bab9a85cb60c01ddbe037699eeb4a11032eb4534dc07609f65df1a768aceb21ede86e248526bb0367c98e5ea7688a6f6eb4dbc5c65e6f01e34e3c42275e432aea5e1401d384c5ce0778c4c0b487a0c3b1a3e36d7035ebd71139aee581c33c13dbd69c61e502aa5986a6b43d7723ef12aeb548a9efb4786344ba80602e7d51d8d7d7ce5f220362b8198cbc4fd566f8c52ff7669067674e0c25988b63b233d00ed31bcd2f6fbffd6b55098e31de2ec42f7566776e4dbff685ee73f66a2211b125a4784fc8f3ed628043b04a02f978f26075d5952dcc9a2699791ba33599f100815a7f67133eb6afd19718efe4dec6e6b62ff3cdc3d7112ff9f248e5b5835b72910fb182eef626c18287f780ef61c9949ee8a1c4bcd84998422650e6b3c23a812626ef11c51536541a00e9d7005a7f8413ba0ebffa57099ee85f2e55021e0b0c949e684ef71113099cf353fc300a51aee7bb7fd8dfc6f3d3221cde7d20d46cbc83fcedaaf2fd38cd98034eb8734a20d679f68dd8416f7e690e114ff7fff0995d56037d305e4e818bee3ac84d2a3596613b84493b8fc44b0cfad097da25740bd8ddc82e3060423b516d28097ec6c0fc9d18035734184b9d58ca776e1d69891a8a202997fc2b814c4caccf4a77bc2f635cb352e0659adfb5e55b04ff171f270d7f06a0b52c1a623742777418e6feb7f9df0d01e0db7fa20b53f81c8402e8b3389c6daa8955f31f57ef16f6c85cbccb8959c54c492afdbdbcc3eaea9e8d6bc42b2949fda4774b15d92bf6597090b5537f2e560f9e02c7a596f7f9e23e4b5c85101b444fe27d6a42ce542b0593978214b6eb3a2ca2e6e80c303a8a430c2127adf9874a935605a3408611ae0253471b0b1e7ebfb2b141f8b37441c4f6f5f621203541c46164b25d682b81d1d79fae9f677a08cc0bde42f6bdbd836e3c770b748879c04b99984a0e138a19137294588ead15ce8a80ab9ca0962d1362a6d6eeff89fc0f79efa0b81a1bf5f7df702cac948d782d39d57140ebdff9b0916650aaa63a813b338a213f879e416efee8c14fed8520d2affd06459381b1436810007b98318708b329ce104a3ea076a902aab6e017776812d322f8a3b316ddde89ec337fce7daefe3d9b111dea203d069b34a086e3b68c9f1f93d243e63c72a411fca62aa6530189d577b1417e54688e11d22229236cc74a371ca5557b71c74773eb491ade8747faebaf90dd0fceb2c182c4fc83f042986fec5712ddecd8c837ffe90709568d45a5aec476562e088e41aecdf550a1a449fcd3215e09670614e0002da2ccaa740fa73559d6530ac65a76c138a815c637617ccb71781102e6ad35f1efb52cfb6999cb772a9e9ad963c516b15f4a391f60760607c7e128988503082e682b9c2debcf30b606d08f6d6be7eb59b37be03c9bbcbf7cc6b004d2aa3b3e96c3e7c3f85efd9bde2d6787cfd31e6c728fc63b95cfa00c0a5ee75be8976aee171f143ffba29892a9cf4e79efffc2ac2801a862e22b3101dea336f0d3d07c4206b253c79363bc2c544bae357b28b3e7bcf8fb5d2485610269b1f6544cd14d851313bbd562c0d971d48d10c5ac6a88bd0fd0a814a4384c934415ac4e99d2b99c600f30c0ae1a8b961463a328b717ce22a88f9e5a8984e35443b08b1ced26017080f9297a61bde999de508ba1d7bb32197397afb68395ae3b491b42e38344519d83e360550f4d81f4d2d015b8971495b088390ac04b79284b7cb822510e1a27bc0ba7816a6f6125d76ab9254a531a56dba7dc07931636b8da0ef8fd8d4df0d923626428035afde75557c7d5c48eebbeadd3ee5194d8c7e87e467acefdb4e235c543618e5038a4498facc3790251df76db1ac3b4a2b828db6e04eabb2e739f9129fdd3a7e2e41d5ebc231e2ad43241ce6503559fd8e76612b93299df2fe6bf91c4e737912ce52c398bd179fb35f4c27a4f30caf4d24dcad2ac94cd30c3db894812a9424f769253368a2f5533966ed6d955d1009613773bb9aa29e6a789642abbe01e4eba44ae8b0db9cbf4f20a7055b41242a3224de6280821b583a506139e03a605bcb28e3eca909aead9f851b23606d3617f665098a7bd6e4ce5ae0191604b94999042604d901ed710f30f515a9c5cd58901f7230fb85df8f8c9c28c5067fa560849a9b10725dded34e54c0753a7679b5c0b7aee3bbb79b3c7d0d8d7aa3b21b09d881a4dfd72925fa8e414a7617af9e6258e9aaeb1aeaa50578eeb118755e8a5434560e28d87589174d47a28995b8aeadd78b4e37ea0dcdb82d422fd7e6d806428ea199837e501f0e79a21ae02052b0353ae7326fc853944e9b8d5e3cd5fb0926f4409ef74e65c7c7ce2461fc39e36711352a532a1c355152d65460667eb18df0824c7297733670df6d71b22b2181178d81aabdeca108d776ac2493edbbedbc826fd79840dc099dcaec54851719b5c1276add157c78a5ed5b0972792246cd366e3913f156a243dd1d1ef0d66196082f42437eacce431e561889c0ffc775b0dddcfb27c58e0f8513b48846a9a4882816eeeb8002c47b561260976c8cf4ba445ea7fbc61893bbdaf4c84dc8870ec40ebaae9a74965c626bd0f18cb3623c28936058ea7f9090fd68615097cd83e2bde308f824ad876184662678a7161c819737fed4f057b0ee065f634a35798b1e93d1b54527a7ff15f1f63476bb697d59038cb6e64e2ffaccb4514e50762bb26c3443acb5623e7c117505561663711babf54c83345ba35894f007f78335839784835501c35a8fdaf8f8aed9aa7d50702e244ddf9b06a46900b049b5ff166f83e01560d0b921ad0c74fdf6c2ea9de8924dabaad0654c62464aafe158e2be32e9669fdc1a46679a5b65023cf67b779797290d540a142de7c9957f2eab1567aa680522c6e4f80f1ff6380e91a07bfed8a7e394b28862ba1473ef7d8504bff02c87b065277a669e50df930f82bfc3132de1ad037d4853a2c0796f6e4fdce02281d90bf1f5fbf0685ca08c26dce7edfcc0928a6263438d92bfce09cf533964cd679b46f810edbf8c9f4b7ca5a18be047c2f43ec0aedb8dc6dc77c63f17f0c2c7f5df8508a1ff1fdff91b05a75956b73f274427babe97d10b60574496fe2ca35e05faa154a3fa5abf99db32a2cdc024c5655b8e6c99a78074e403495917bd534c8830a070e4830a82390431645488417c64ac69db2e97d4f9c0a45adac5be811f0fe4cc2112bc058f9f8c628ff1343f471ea958181ddc9c92ea31deab731c53fd29c2c8aa24d19bbeebd47a9e56955739fb9823e2df4954df9760d231ac5c8cd073ffc19955e9f33fcf80ec956ad00e32794ece7d9b85b38a9fb781d6dcafdec3f99f77a532cf9bd25f9ecc7db45866a122595eccdfc2e7283deab0114a817034a6651ab289423f0d9584396fd1c3c0d15a6c459b46b8e985a52307479a69c9a8dec1b83d8b4d76026d38da2210198d863a32082868fad98f608a187e08b9fe84c31a021ab3b6bc8e92d1ebaacd66c3c96a8791e95378eab27087e1920608059e5073ff6021dedf286409f54f8d9e68bcb9d1443d37dac13a8cf5b882a2a4fe7d2ec0d0ad87d40a1375e2195030dc22022abbea08a44707a8e8348c6a778479b2dea33cad19e1272c7de33a7d851d89a46d47e70679cfd83027ec94b45445abb6cddbad94c3887af1ec0c6ec90486fa7562b1ab6c69cb2655761a30cdee4d8e311befdeaa87e1fd4de604b9cecd4817665b129ccbbf46ed739be50dfb28c9b00109278c15a1d7c2072e65e941b1b67048ec8a09dd3afbfc437184f1be6491c3fd590ac17d15bd573a6538229a075d8cf79a7bd53585dee0368bcc972a0ef03c0f5f3623fe146953362feca0e555f6a6cf174d8c656e41497c4c9ca13ee432342b54b18fa2c713057a0ded2d832de65fc8828f449e3bbfa5bb903a491d3050566e9c4ed9e62c47aaba5592ad11e969e425b1567b8f4568ef7a6aba79177cd42a380cdc008df30ef6a1841ad74a3a9c49df1e6d1fc654aa561b2fc73c422ad86a01e51dc8cb89845201445940e94c95c2005327b6cc2c98823ba636e7348795a60a5a2ee2be187f5ac5e1d89a22021d84acea63f7fc872484d77fb4a03cdb2135413923bcc1ad4af5c958168364807003bb992d0a5b6ef6a75967f0a795ae3e86f448ae136fb73e3bcbd46e1a5c9e62c43d3c27786cf2c947f"}, {0xf7, 0x0, "9d6217687022107f511a14fd5584a5b8265915e68ae0303b0fb819110d00deb76c63b4d34320005a79d5eeef075fc7302b5038e87aa4cd66bb098aaad0534c7fce79f2e9a3accdfebb1b202e47a5c5936cdd68090946742e105c70b446e00b5dbe7fea73fb3613f45f1e7725c5665467e30ad94cf9eb56406edc1672975acdd52403a9a530dcd319523c2ca152506b9d0838513e3394b00a65acedf06fcebf39e3b02f0d133c53e9036abf81dbf971810a997d0b6443796f5202832fa7e4311b68bd06340170111ddae40f2baaa22355a64d5a289102a3681758b1db5fcdad7ba3c36c18746b1cde3d9f89365d6c9bc2ca8b3f"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x28}]}, @NL80211_ATTR_NAN_FUNC={0xc4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xbe, 0xb, "5dc57414c7c9923ddd04ed2954d24e34363153276aa75e4c3a4db82f2bff70a21cfa1f71f17d73e0f3af1a3e0d063e2345104c6a26c8959176293b2eafde2df9f3c2589ef29aa7f6042aedbe83dcf8b946b5962cd25c6c4927bac344bf6f7e55366bc82a705f4bc28cf708f7e241efd955978a26bf2564f318c771c67cf545708cac3a218bd2997ac08e13adf62f45e42470a36e22162bd2f774841151461b41ed56d7250c4475cc30aa77fa116b296c713fc4ad1a4acc6d23a9"}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x29}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0xa0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x28}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x80}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x7c, 0xb, "6e2abf880fd9c92759055e57b2b44abfd53b847d3e318fe1fd7803022ab82ec6aa0ae9fc00e38fb57b5ea9dc6793d6fc53e8e4ed2c3d903ee83f1b61a2beba9ece4f1eed9024700763bdb875564501bbd8619d716c0fac125d3d9c843773dd55cc6f5d0ca2ce7cfeb47f4c1d06ccf7e6eaa1b60980e8c30f"}]}]}, 0x18fc}, 0x1, 0x0, 0x0, 0x15a90a70e94c4160}, 0x8000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r9, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x4, 0x2, 0x2000000, 0x20, 0x20, 0x1, 0x2000000, &(0x7f0000000600)=[0x7], 0x1, 0x0}) (async) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) recvmsg(r8, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=1610): landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000024000480050003fa0100000005000300000000000500030000000000050003000700000008000ae80622c83526ba7cdf024ae56c4abe96ddd1eab2b7a3a5a4f152fb1e393d514a6021a2be68d3204b7f89b6c0d635903e1580e0f46eff5cf2c4cbae23bd31bf4c600ea12fec4375b3667abf0031e0f5996e70e790fe16c690220a29761227c1e91f9dd872a6e24d2b58c49712dbd1c988ecbf4f379d6ffa4092da966ef00418b209bd6832af4a8d36fe2f0805180d0ba15ded94ca31374563788a7c668b5ba800"/230], 0x48}}, 0x40000) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = accept$alg(r0, 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/220, 0xdc) accept4$alg(r0, 0x0, 0x0, 0x800) r4 = dup(r3) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000100)=0xfff, 0x4) r5 = open(&(0x7f0000000380)='./cgroup/file0\x00', 0x1298c2, 0x6) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001900010000000000000000001c"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) r7 = syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x20, 0x5, 0x4, "6dbb7fcb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x20, 0x5, 0x6, "62b316c91ca8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r7, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x29, 0x43, {0x43, 0xa, "6317779aecfa8e9ca311d313334e172e3fdef8fdaae208390aaee89bf3c3a819925da5db53bdcbede73d3573eed3db08441d973f3d415d9595276103541ca7b285"}}, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x0, 0x16, 0x64, "1959bcb858c0f6348bbfabed6bdf95811e267cca2e847fecf5b234e136dd64560f693ed59521ee1e1acbbcfa37553c5779a00ed25a15c77aa5fc49c03414b7a7abb46c5dcf1a549ddff3de81b8518af6dc09585b086c6889eb2575fd62b5bf25834e14d8"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2b}, &(0x7f0000000280)={0x20, 0x81, 0x3, "013ff3"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "e4b7"}, &(0x7f0000000300)={0x20, 0x83, 0x3, ';zW'}, 0x0, 0x0}) ftruncate(r5, 0x200004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x800, &(0x7f0000000800)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xfb}}, {@rq={'rq', 0x3d, 0x607bff5a}}, {@rq={'rq', 0x3d, 0x80000001}}, {@sq={'sq', 0x3d, 0x26f}}]}}) sendfile(r4, r5, 0x0, 0x80001d00c0d5) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r9, &(0x7f0000000700)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34dcf74b5c85cd6d59f50000f5a81543b0c1", 0x32}, {&(0x7f0000000040)="a12600000000", 0x6}, {&(0x7f0000000680)="37bcb3", 0x3}], 0x3) kernel console output (not intermixed with test programs): [ T8309] syzkaller1: entered allmulticast mode [ 236.175905][ T5927] usb 2-1: Product: syz [ 236.186302][ T5927] usb 2-1: Manufacturer: syz [ 236.190968][ T5927] usb 2-1: SerialNumber: syz [ 236.220011][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 236.228930][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.240354][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.251273][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 236.261763][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.270058][ T9] usb 4-1: Product: syz [ 236.274288][ T9] usb 4-1: Manufacturer: syz [ 236.278914][ T9] usb 4-1: SerialNumber: syz [ 236.309744][ T9] usb 4-1: 0:1 : does not exist [ 236.318256][ T9] usb 4-1: unit 1 not found! [ 236.412640][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 236.424735][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 236.435372][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 236.447524][ T5927] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 236.525747][ T9] usb 4-1: USB disconnect, device number 58 [ 236.557475][ T7217] udevd[7217]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.585900][ T5888] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 236.743055][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 236.755378][ T5888] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 236.764943][ T5888] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 236.773067][ T5888] usb 1-1: Manufacturer: syz [ 236.778043][ T5888] usb 1-1: SerialNumber: syz [ 236.786014][ T5888] usb 1-1: config 0 descriptor?? [ 236.795235][ T5888] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 236.804421][ T5888] usb 1-1: Detected SIO [ 236.811924][ T5888] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 236.858858][ T8325] netlink: 272 bytes leftover after parsing attributes in process `syz.2.779'. [ 237.007378][ T5846] usb 1-1: USB disconnect, device number 57 [ 237.032484][ T5846] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 237.049648][ T5846] ftdi_sio 1-1:0.0: device disconnected [ 237.059439][ T8333] syzkaller1: entered promiscuous mode [ 237.065315][ T8333] syzkaller1: entered allmulticast mode [ 237.192480][ T8336] netlink: 'syz.3.783': attribute type 40 has an invalid length. [ 237.453033][ T5888] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 237.605569][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 237.613339][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 237.626262][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.637832][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 32770, setting to 1024 [ 237.651573][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 237.660862][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.668926][ T5888] usb 4-1: Product: syz [ 237.674078][ T5888] usb 4-1: Manufacturer: syz [ 237.678695][ T5888] usb 4-1: SerialNumber: syz [ 237.685366][ T5888] usb 4-1: config 0 descriptor?? [ 237.695652][ T5888] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 237.706893][ T5888] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 237.833089][ T5846] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 237.985236][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.996363][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.006245][ T5846] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 238.015471][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.026526][ T5846] usb 1-1: config 0 descriptor?? [ 238.296616][ T5888] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 238.303662][ T5888] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 238.444268][ T5846] isku 0003:1E7D:319C.0011: item fetching failed at offset 5/7 [ 238.452472][ T5846] isku 0003:1E7D:319C.0011: parse failed [ 238.458876][ T5846] isku 0003:1E7D:319C.0011: probe with driver isku failed with error -22 [ 238.513537][ T5888] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 238.528025][ T5888] em28xx 4-1:0.0: No AC97 audio processor [ 238.540167][ T5888] usb 4-1: USB disconnect, device number 59 [ 238.550141][ T5888] em28xx 4-1:0.0: Disconnecting em28xx [ 238.560841][ T5888] em28xx 4-1:0.0: Freeing device [ 238.640828][ T8345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.786'. [ 238.652966][ T5846] usb 1-1: USB disconnect, device number 58 [ 238.896269][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 239.230044][ T5901] usb 2-1: USB disconnect, device number 51 [ 239.392982][ T5846] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 239.442916][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 239.548892][ T5846] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 239.564459][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.572505][ T5846] usb 4-1: Product: syz [ 239.577091][ T5846] usb 4-1: Manufacturer: syz [ 239.581916][ T5846] usb 4-1: SerialNumber: syz [ 239.592278][ T5846] r8152-cfgselector 4-1: Unknown version 0x0000 [ 239.598717][ T5846] r8152-cfgselector 4-1: config 0 descriptor?? [ 239.606186][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 239.617368][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.627283][ T5901] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 239.637320][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 239.647045][ T24] usb 1-1: string descriptor 0 read error: -22 [ 239.654043][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 239.663183][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.792983][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 239.799651][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.810115][ T5901] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 239.819505][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.835319][ T5901] usb 2-1: config 0 descriptor?? [ 239.850090][ T5901] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 239.880404][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.889844][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.030741][ T8373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.039651][ T8373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.050244][ T5846] r8152-cfgselector 4-1: USB disconnect, device number 60 [ 240.075140][ T5901] gspca_vc032x: reg_r err -71 [ 240.085408][ T5901] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 240.103005][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.107933][ T5901] usb 2-1: USB disconnect, device number 52 [ 240.140735][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.362158][ T24] usbhid 1-1:1.0: can't add hid device: -71 [ 240.371604][ T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 240.397040][ T24] usb 1-1: USB disconnect, device number 59 [ 240.608150][ T8412] syzkaller1: entered promiscuous mode [ 240.614024][ T8412] syzkaller1: entered allmulticast mode [ 240.709110][ T8414] loop8: detected capacity change from 0 to 7 [ 240.718607][ T8414] Dev loop8: unable to read RDB block 7 [ 240.725157][ T8414] loop8: unable to read partition table [ 240.731055][ T8414] loop8: partition table beyond EOD, truncated [ 240.737375][ T5927] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 240.737782][ T8414] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 240.903985][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 240.916494][ T5927] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 240.944045][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.972346][ T5927] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 240.983563][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.007314][ T5927] usb 2-1: Product: syz [ 241.011811][ T5927] usb 2-1: Manufacturer: syz [ 241.016716][ T5927] usb 2-1: SerialNumber: syz [ 241.025642][ T5927] usb 2-1: config 0 descriptor?? [ 241.033944][ T5927] appledisplay 2-1:0.0: Could not find int-in endpoint [ 241.041989][ T5927] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 241.063893][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 241.232869][ T5888] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 241.236364][ T8409] syzkaller1: entered promiscuous mode [ 241.246156][ T8409] syzkaller1: entered allmulticast mode [ 241.247610][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 241.261744][ T5901] usb 2-1: USB disconnect, device number 53 [ 241.269283][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 241.286945][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.293740][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 241.303587][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.318115][ T24] usb 4-1: config 0 descriptor?? [ 241.362843][ T5888] usb 1-1: device descriptor read/64, error -71 [ 241.602807][ T5888] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 241.732757][ T5888] usb 1-1: device descriptor read/64, error -71 [ 241.844103][ T5888] usb usb1-port1: attempt power cycle [ 241.915949][ T8435] syzkaller1: entered promiscuous mode [ 241.921485][ T8435] syzkaller1: entered allmulticast mode [ 242.038829][ T8437] loop8: detected capacity change from 0 to 7 [ 242.048274][ T8437] Dev loop8: unable to read RDB block 7 [ 242.055183][ T8437] loop8: unable to read partition table [ 242.061268][ T8437] loop8: partition table beyond EOD, truncated [ 242.067897][ T8437] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 242.108433][ T24] corsair-cpro 0003:1B1C:0C10.0012: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 242.195751][ T5888] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 242.233673][ T5888] usb 1-1: device descriptor read/8, error -71 [ 242.283097][ T8416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.294281][ T8416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.309795][ T24] corsair-cpro 0003:1B1C:0C10.0012: probe with driver corsair-cpro failed with error -61 [ 242.483858][ T5888] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 242.503564][ T5888] usb 1-1: device descriptor read/8, error -71 [ 242.511525][ T24] usb 4-1: USB disconnect, device number 61 [ 242.613241][ T5888] usb usb1-port1: unable to enumerate USB device [ 243.117227][ T8452] XFS (nullb0): Invalid superblock magic number [ 243.266608][ T8463] syzkaller1: entered promiscuous mode [ 243.272131][ T8463] syzkaller1: entered allmulticast mode [ 243.457126][ T8470] loop8: detected capacity change from 0 to 7 [ 243.472496][ T8470] Dev loop8: unable to read RDB block 7 [ 243.478951][ T8470] loop8: unable to read partition table [ 243.485039][ T8470] loop8: partition table beyond EOD, truncated [ 243.485284][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 243.491272][ T8470] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 243.703038][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 243.712019][ T9] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 243.723680][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.741156][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 243.756224][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.765147][ T9] usb 4-1: Product: syz [ 243.769359][ T9] usb 4-1: Manufacturer: syz [ 243.774315][ T9] usb 4-1: SerialNumber: syz [ 243.781761][ T9] usb 4-1: config 0 descriptor?? [ 243.794867][ T9] appledisplay 4-1:0.0: Could not find int-in endpoint [ 243.807594][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 243.824158][ T993] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 244.008771][ T993] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 244.020431][ T8461] syzkaller1: entered promiscuous mode [ 244.030011][ T8461] syzkaller1: entered allmulticast mode [ 244.035709][ T993] usb 2-1: config 0 has no interface number 0 [ 244.041930][ T993] usb 2-1: config 0 interface 41 has no altsetting 0 [ 244.050719][ T5927] usb 4-1: USB disconnect, device number 62 [ 244.051732][ T993] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 244.066861][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.075302][ T993] usb 2-1: Product: syz [ 244.081767][ T993] usb 2-1: Manufacturer: syz [ 244.086991][ T993] usb 2-1: SerialNumber: syz [ 244.097371][ T993] usb 2-1: config 0 descriptor?? [ 244.372706][ T9] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 244.539064][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 244.549496][ T9] usb 1-1: config 129 has an invalid interface number: 147 but max is 0 [ 244.561544][ T9] usb 1-1: config 129 has no interface number 0 [ 244.569783][ T9] usb 1-1: config 129 interface 147 altsetting 3 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 244.581342][ T9] usb 1-1: config 129 interface 147 altsetting 3 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 244.592635][ T9] usb 1-1: config 129 interface 147 has no altsetting 0 [ 244.714118][ T993] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -32 [ 244.914132][ T8512] syzkaller1: entered promiscuous mode [ 244.919743][ T8512] syzkaller1: entered allmulticast mode [ 245.078127][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.847'. [ 245.279781][ T8525] misc userio: The device must be registered before sending interrupts [ 245.421076][ T8526] netlink: 277 bytes leftover after parsing attributes in process `syz.1.830'. [ 245.522629][ T5901] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 245.676748][ T5901] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 245.686074][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.695250][ T5901] usb 4-1: Product: syz [ 245.699473][ T5901] usb 4-1: Manufacturer: syz [ 245.704385][ T5901] usb 4-1: SerialNumber: syz [ 245.914941][ T5901] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 245.926945][ T5901] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 245.937551][ T5901] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 245.948513][ T5901] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 246.817321][ T5888] usb 2-1: USB disconnect, device number 54 [ 246.868944][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.850'. [ 246.883936][ T8531] block nbd0: Unsupported socket: should be TCP or UNIX. [ 247.022573][ T9] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice=26.79 [ 247.045621][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.080627][ T9] usb 1-1: can't set config #129, error -71 [ 247.102310][ T9] usb 1-1: USB disconnect, device number 64 [ 247.252498][ T5888] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 247.270201][ T8546] syzkaller1: entered promiscuous mode [ 247.276989][ T8546] syzkaller1: entered allmulticast mode [ 247.412467][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 247.419333][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.429701][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 247.438672][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 247.451156][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 247.462515][ T5888] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 247.471582][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.486363][ T5888] hub 2-1:1.0: bad descriptor, ignoring hub [ 247.495089][ T5888] hub 2-1:1.0: probe with driver hub failed with error -5 [ 247.512906][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 247.518622][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 247.527302][ T5888] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 247.534354][ T5888] cdc_wdm 2-1:1.0: Unknown control protocol [ 247.545805][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 247.588895][ T8551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.856'. [ 247.651839][ T8557] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 247.660415][ T8557] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 247.676170][ T8557] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 247.686898][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.699798][ T8558] misc userio: The device must be registered before sending interrupts [ 247.709083][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.812646][ T24] usb 2-1: USB disconnect, device number 55 [ 247.953468][ T8560] overlayfs: failed to resolve './file2': -2 [ 248.152429][ T5888] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 248.184227][ T8563] 9p: Bad value for 'aname' [ 248.265449][ T8567] overlayfs: failed to clone lowerpath [ 248.322432][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 248.329790][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 248.341664][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.353862][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 248.366646][ T5888] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 248.377193][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 248.388970][ T5888] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 248.402193][ T5888] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 248.412057][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.420520][ T5888] usb 2-1: Product: syz [ 248.426541][ T5888] usb 2-1: Manufacturer: syz [ 248.431354][ T5888] usb 2-1: SerialNumber: syz [ 248.440991][ T5888] usb 2-1: config 0 descriptor?? [ 248.471881][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 248.479439][ T5888] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 248.486753][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 248.659544][ C0] mcba_usb 2-1:0.0 can0: format error [ 248.793539][ T10] usb 4-1: USB disconnect, device number 63 [ 248.954221][ T5888] usb 2-1: USB disconnect, device number 56 [ 248.977641][ T5888] mcba_usb 2-1:0.0 can0: device disconnected [ 249.680215][ T8603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.868'. [ 249.816831][ T8607] netlink: 'syz.3.869': attribute type 4 has an invalid length. [ 249.863691][ T8607] netlink: 'syz.3.869': attribute type 4 has an invalid length. [ 249.928389][ T8611] netlink: 'syz.3.869': attribute type 4 has an invalid length. [ 249.946868][ T8610] netlink: 56 bytes leftover after parsing attributes in process `syz.1.871'. [ 250.269394][ T8625] syzkaller1: entered promiscuous mode [ 250.297737][ T8625] syzkaller1: entered allmulticast mode [ 250.507898][ T8633] program syz.3.877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.703420][ T8638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.879'. [ 250.710941][ T8636] netlink: 52 bytes leftover after parsing attributes in process `syz.2.878'. [ 250.960998][ T8645] netlink: 'syz.2.881': attribute type 4 has an invalid length. [ 250.985242][ T8645] netlink: 'syz.2.881': attribute type 4 has an invalid length. [ 251.007629][ T5888] lo speed is unknown, defaulting to 1000 [ 251.014510][ T5888] syz0: Port: 1 Link ACTIVE [ 251.028482][ T5888] lo speed is unknown, defaulting to 1000 [ 251.035957][ T8645] netlink: 'syz.2.881': attribute type 4 has an invalid length. [ 251.059520][ T5888] lo speed is unknown, defaulting to 1000 [ 251.073724][ T5888] syz0: Port: 1 Link DOWN [ 251.093397][ T10] lo speed is unknown, defaulting to 1000 [ 251.123689][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 251.230210][ T5927] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 251.319961][ T8651] misc userio: The device must be registered before sending interrupts [ 251.341152][ T24] usb 4-1: device descriptor read/64, error -71 [ 251.383086][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 251.399639][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.417715][ T5927] usb 2-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 251.429931][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.438345][ T5927] usb 2-1: Product: 縯 [ 251.444551][ T5927] usb 2-1: SerialNumber: syz [ 251.525591][ T8654] vlan0: entered allmulticast mode [ 251.530797][ T8654] veth0_vlan: entered allmulticast mode [ 251.590651][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 251.635557][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 251.668235][ T8643] batadv_slave_0: entered promiscuous mode [ 251.694808][ T8642] batadv_slave_0: left promiscuous mode [ 251.748199][ T5927] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 251.755450][ T5927] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 251.770633][ T5927] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 251.781377][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 251.783279][ T24] usb 4-1: device descriptor read/64, error -71 [ 251.797831][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.821753][ T10] usb 1-1: Product: syz [ 251.826018][ T10] usb 1-1: Manufacturer: syz [ 251.830636][ T10] usb 1-1: SerialNumber: syz [ 251.841728][ T5927] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 251.870465][ T5927] usb 2-1: USB disconnect, device number 57 [ 251.890393][ T7616] udevd[7616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.913854][ T24] usb usb4-port1: attempt power cycle [ 252.057915][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 252.070460][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 252.081313][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.094786][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 252.229350][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'. [ 252.264258][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 252.304096][ T24] usb 4-1: device descriptor read/8, error -71 [ 252.418434][ T8675] netlink: 'syz.2.891': attribute type 4 has an invalid length. [ 252.429055][ T5901] lo speed is unknown, defaulting to 1000 [ 252.435882][ T5901] syz0: Port: 1 Link ACTIVE [ 252.441068][ T10] lo speed is unknown, defaulting to 1000 [ 252.447633][ T10] syz0: Port: 1 Link DOWN [ 252.447661][ T5846] lo speed is unknown, defaulting to 1000 [ 252.542218][ T993] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 252.550039][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 252.583476][ T24] usb 4-1: device descriptor read/8, error -71 [ 252.694412][ T24] usb usb4-port1: unable to enumerate USB device [ 252.702277][ T993] usb 2-1: Using ep0 maxpacket: 8 [ 252.715948][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.727134][ T993] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.744320][ T993] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 252.754287][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.758598][ T8692] dvmrp1: entered allmulticast mode [ 252.763088][ T993] usb 2-1: Product: syz [ 252.772472][ T993] usb 2-1: Manufacturer: syz [ 252.778134][ T993] usb 2-1: SerialNumber: syz [ 252.786159][ T993] usb 2-1: config 0 descriptor?? [ 252.797803][ T993] radioshark 2-1:0.0: Invalid radioSHARK device [ 252.804512][ T993] radioshark 2-1:0.0: probe with driver radioshark failed with error -22 [ 252.813899][ T993] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 252.935869][ T8701] validate_nla: 2 callbacks suppressed [ 252.935881][ T8701] netlink: 'syz.2.901': attribute type 4 has an invalid length. [ 252.950412][ T8701] netlink: 'syz.2.901': attribute type 4 has an invalid length. [ 252.962743][ T10] lo speed is unknown, defaulting to 1000 [ 252.968678][ T10] syz0: Port: 1 Link ACTIVE [ 252.972864][ T8701] netlink: 'syz.2.901': attribute type 4 has an invalid length. [ 252.973536][ T9] lo speed is unknown, defaulting to 1000 [ 252.989118][ T993] lo speed is unknown, defaulting to 1000 [ 253.003648][ T993] syz0: Port: 1 Link DOWN [ 253.018071][ T9] usb 2-1: USB disconnect, device number 58 [ 253.079880][ T5163] Bluetooth: hci3: unexpected event for opcode 0x2023 [ 253.841484][ T8735] misc userio: The device must be registered before sending interrupts [ 253.965177][ T8737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.912'. [ 254.520449][ T8748] syzkaller1: entered promiscuous mode [ 254.530182][ T8748] syzkaller1: entered allmulticast mode [ 254.878191][ T8756] netlink: 56 bytes leftover after parsing attributes in process `syz.2.921'. [ 254.915691][ T5927] usb 1-1: USB disconnect, device number 65 [ 255.010955][ T8761] netlink: 'syz.2.923': attribute type 4 has an invalid length. [ 255.019620][ T8760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 255.026065][ T8761] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.923'. [ 255.172067][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 255.185166][ T8767] syzkaller1: entered promiscuous mode [ 255.192912][ T8767] syzkaller1: entered allmulticast mode [ 255.262835][ T8771] comedi comedi3: comedi_config --init_data is deprecated [ 255.299460][ T8771] overlay: Unknown parameter '€' [ 255.336596][ T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 255.349694][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 255.363544][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.373631][ T8775] misc userio: No port type given on /dev/userio [ 255.387871][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 255.434677][ T8778] misc userio: The device must be registered before sending interrupts [ 255.435933][ T8777] netlink: 168 bytes leftover after parsing attributes in process `syz.0.931'. [ 255.692859][ T993] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 255.693876][ T5927] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 255.715145][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.721579][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.845363][ T993] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 255.854727][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.863586][ T993] usb 2-1: Product: syz [ 255.867847][ T993] usb 2-1: Manufacturer: syz [ 255.872642][ T993] usb 2-1: SerialNumber: syz [ 255.881980][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 255.888996][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.901543][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.911449][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.924423][ T5927] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.933659][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.944509][ T5927] usb 1-1: config 0 descriptor?? [ 256.081743][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 256.094151][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 256.106238][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 256.119005][ T993] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 256.367025][ T5927] hid_parser_main: 28 callbacks suppressed [ 256.367042][ T5927] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 256.381757][ T5927] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 256.389256][ T5927] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 256.396640][ T5927] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 256.404078][ T5927] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 256.412169][ T5927] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 256.420095][ T5927] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 256.434418][ T10] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 256.460740][ T5927] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0013/input/input23 [ 256.496839][ T5927] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 256.575245][ T993] usb 1-1: USB disconnect, device number 66 [ 256.601813][ T8788] fido_id[8788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 256.952106][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 256.960443][ T10] stv0680 4-1:4.0: last error: 86, command = 0x5f [ 257.286050][ T8800] syzkaller1: entered promiscuous mode [ 257.291765][ T8800] syzkaller1: entered allmulticast mode [ 257.445970][ T8807] overlayfs: failed to resolve './cgroup': -2 [ 257.659469][ T8822] 9p: Could not find request transport: fR¼fdno=í_æQ'RÀ 4ømg{³»‡|{”vþ²ú4Ì4+Üuàˆ-VÞ9\YV’9o‰¥Î¦cJòê}=þ²wš [ 257.801928][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 257.846681][ T993] usb 4-1: USB disconnect, device number 68 [ 257.885312][ T8833] misc userio: The device must be registered before sending interrupts [ 257.931891][ T10] usb 1-1: device descriptor read/64, error -71 [ 258.181873][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 258.273872][ T993] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 258.311884][ T10] usb 1-1: device descriptor read/64, error -71 [ 258.422188][ T10] usb usb1-port1: attempt power cycle [ 258.431960][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 258.444192][ T993] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 258.461824][ T993] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.477700][ T993] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 258.499395][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.508487][ T993] usb 4-1: Product: syz [ 258.512812][ T993] usb 4-1: Manufacturer: syz [ 258.517458][ T993] usb 4-1: SerialNumber: syz [ 258.525811][ T993] usb 4-1: config 0 descriptor?? [ 258.527219][ T8841] tmpfs: Invalid gid '0x00000000ffffffff' [ 258.539267][ T8842] tmpfs: Invalid gid '0x00000000ffffffff' [ 258.539912][ T993] appledisplay 4-1:0.0: Could not find int-in endpoint [ 258.553330][ T993] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 258.604584][ T29] audit: type=1326 audit(2000055120.303:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.2.952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f181179c819 code=0x0 [ 258.743574][ T8835] syzkaller1: entered promiscuous mode [ 258.749192][ T8835] syzkaller1: entered allmulticast mode [ 258.757605][ T9] usb 4-1: USB disconnect, device number 69 [ 258.765301][ T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 258.802561][ T10] usb 1-1: device descriptor read/8, error -71 [ 258.928680][ T5927] usb 2-1: USB disconnect, device number 59 [ 258.976256][ T8848] netlink: 'syz.1.953': attribute type 4 has an invalid length. [ 258.984797][ T8848] netlink: 'syz.1.953': attribute type 4 has an invalid length. [ 258.997010][ T8848] netlink: 'syz.1.953': attribute type 4 has an invalid length. [ 259.041824][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 259.083113][ T10] usb 1-1: device descriptor read/8, error -71 [ 259.192153][ T10] usb usb1-port1: unable to enumerate USB device [ 259.387285][ T8855] syzkaller1: entered promiscuous mode [ 259.393723][ T8855] syzkaller1: entered allmulticast mode [ 259.421897][ T5927] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 259.572069][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 259.580324][ T5927] usb 2-1: config 4 has an invalid interface number: 85 but max is 0 [ 259.590836][ T5927] usb 2-1: config 4 has no interface number 0 [ 259.597712][ T5927] usb 2-1: config 4 interface 85 has no altsetting 0 [ 259.608348][ T5927] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=91.53 [ 259.617843][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.629866][ T8864] sctp: [Deprecated]: syz.2.959 (pid 8864) Use of int in max_burst socket option deprecated. [ 259.629866][ T8864] Use struct sctp_assoc_value instead [ 259.633298][ T5927] usb 2-1: Product: syz [ 259.656548][ T5927] usb 2-1: Manufacturer: syz [ 259.661290][ T5927] usb 2-1: SerialNumber: syz [ 259.876091][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.886328][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.909174][ T5927] usb 2-1: USB disconnect, device number 60 [ 260.431172][ T8877] netlink: 'syz.3.963': attribute type 4 has an invalid length. [ 260.444156][ T8877] netlink: 'syz.3.963': attribute type 4 has an invalid length. [ 260.458261][ T8877] netlink: 'syz.3.963': attribute type 4 has an invalid length. [ 260.506449][ T8881] loop8: detected capacity change from 0 to 7 [ 260.516119][ T8881] Dev loop8: unable to read RDB block 7 [ 260.525069][ T8881] loop8: unable to read partition table [ 260.535962][ T8881] loop8: partition table beyond EOD, truncated [ 260.545898][ T8881] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 260.656814][ T8885] syzkaller1: entered promiscuous mode [ 260.663217][ T8885] syzkaller1: entered allmulticast mode [ 260.782601][ T8891] misc userio: No port type given on /dev/userio [ 260.843186][ T8894] misc userio: The device must be registered before sending interrupts [ 261.021730][ T993] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 261.101701][ T5846] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 261.121777][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 261.171901][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 261.179030][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.189050][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.202774][ T993] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 261.211927][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.223774][ T993] usb 1-1: config 0 descriptor?? [ 261.232698][ T993] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 261.255099][ T5846] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 261.264490][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.273007][ T5846] usb 4-1: Product: syz [ 261.277217][ T5846] usb 4-1: Manufacturer: syz [ 261.281881][ T5846] usb 4-1: SerialNumber: syz [ 261.296952][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.308251][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.319570][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 261.329420][ T24] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 261.338334][ T24] usb 2-1: Manufacturer: syz [ 261.345823][ T24] usb 2-1: config 0 descriptor?? [ 261.485764][ T8902] netlink: 'syz.2.975': attribute type 4 has an invalid length. [ 261.497615][ T5846] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 261.498084][ T8902] netlink: 'syz.2.975': attribute type 4 has an invalid length. [ 261.521113][ T5846] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 261.525360][ T10] lo speed is unknown, defaulting to 1000 [ 261.540316][ T8903] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 261.548468][ T5846] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 261.552873][ T10] syz0: Port: 1 Link ACTIVE [ 261.564218][ T5846] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 261.567919][ T8902] netlink: 'syz.2.975': attribute type 4 has an invalid length. [ 261.573915][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.581603][ T10] lo speed is unknown, defaulting to 1000 [ 261.603535][ T9] lo speed is unknown, defaulting to 1000 [ 261.609745][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.611324][ T9] syz0: Port: 1 Link DOWN [ 261.690168][ T8908] netlink: 'syz.2.976': attribute type 7 has an invalid length. [ 261.717866][ T9] usb 1-1: USB disconnect, device number 71 [ 261.733919][ T8908] : entered promiscuous mode [ 261.975305][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 261.985615][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 261.996725][ T24] usb 2-1: USB disconnect, device number 61 [ 262.261492][ T8917] loop8: detected capacity change from 0 to 7 [ 262.272920][ T8917] Dev loop8: unable to read RDB block 7 [ 262.281378][ T8917] loop8: unable to read partition table [ 262.291455][ T8917] loop8: partition table beyond EOD, truncated [ 262.297779][ T8917] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 262.537884][ T8930] syzkaller1: entered promiscuous mode [ 262.547368][ T8930] syzkaller1: entered allmulticast mode [ 262.563085][ T8930] FAULT_INJECTION: forcing a failure. [ 262.563085][ T8930] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 262.576751][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.1.981 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.576778][ T8930] Tainted: [L]=SOFTLOCKUP [ 262.576785][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.576803][ T8930] Call Trace: [ 262.576810][ T8930] [ 262.576817][ T8930] dump_stack_lvl+0xe8/0x150 [ 262.576857][ T8930] should_fail_ex+0x412/0x560 [ 262.576885][ T8930] _copy_from_iter+0x1d3/0x1670 [ 262.576905][ T8930] ? unwind_next_frame+0xa6/0x2550 [ 262.576928][ T8930] ? __lock_acquire+0x6b5/0x2cf0 [ 262.576951][ T8930] ? __pfx__copy_from_iter+0x10/0x10 [ 262.576988][ T8930] tun_get_user+0x267/0x4300 [ 262.577009][ T8930] ? aa_file_perm+0x192/0x15e0 [ 262.577037][ T8930] ? aa_file_perm+0x192/0x15e0 [ 262.577085][ T8930] ? aa_file_perm+0x50e/0x15e0 [ 262.577101][ T8930] ? __pfx_tun_get_user+0x10/0x10 [ 262.577119][ T8930] ? __lock_acquire+0x6b5/0x2cf0 [ 262.577141][ T8930] ? kstrtoull+0x12f/0x1d0 [ 262.577164][ T8930] ? ref_tracker_alloc+0x35c/0x4c0 [ 262.577188][ T8930] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 262.577212][ T8930] ? tun_get+0x1c/0x2f0 [ 262.577229][ T8930] ? tun_get+0x1c/0x2f0 [ 262.577248][ T8930] ? tun_get+0x1c/0x2f0 [ 262.577263][ T8930] ? tun_get+0x1c/0x2f0 [ 262.577283][ T8930] tun_chr_write_iter+0x113/0x200 [ 262.577300][ T8930] vfs_write+0x61d/0xb90 [ 262.577324][ T8930] ? __pfx_vfs_write+0x10/0x10 [ 262.577350][ T8930] ? __fget_files+0x2a/0x420 [ 262.577377][ T8930] ksys_write+0x150/0x270 [ 262.577402][ T8930] ? __pfx_ksys_write+0x10/0x10 [ 262.577424][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.577441][ T8930] do_syscall_64+0x15f/0xf80 [ 262.577461][ T8930] ? trace_irq_disable+0x3b/0x140 [ 262.577480][ T8930] ? clear_bhb_loop+0x40/0x90 [ 262.577497][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.577512][ T8930] RIP: 0033:0x7ff524d9c819 [ 262.577535][ T8930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.577548][ T8930] RSP: 002b:00007ff525bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.577565][ T8930] RAX: ffffffffffffffda RBX: 00007ff525015fa0 RCX: 00007ff524d9c819 [ 262.577577][ T8930] RDX: 0000000000000ffe RSI: 0000200000000000 RDI: 0000000000000003 [ 262.577588][ T8930] RBP: 00007ff525bd2090 R08: 0000000000000000 R09: 0000000000000000 [ 262.577596][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.577606][ T8930] R13: 00007ff525016038 R14: 00007ff525015fa0 R15: 00007ffc6d5442c8 [ 262.577634][ T8930] [ 262.591653][ T5846] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 263.007021][ T5846] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 263.018290][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.033106][ T5846] usb 1-1: config 0 descriptor?? [ 263.271542][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 263.284943][ T8958] misc userio: The device must be registered before sending interrupts [ 263.431537][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 263.441583][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.449346][ T5846] razer 0003:1532:011B.0014: unknown main item tag 0x0 [ 263.458584][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.466879][ T5846] razer 0003:1532:011B.0014: unknown main item tag 0x0 [ 263.479510][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.484460][ T5846] razer 0003:1532:011B.0014: unknown main item tag 0x0 [ 263.499166][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 263.501260][ T5846] razer 0003:1532:011B.0014: unknown main item tag 0x0 [ 263.516027][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.516053][ T9] usb 2-1: Product: syz [ 263.516066][ T9] usb 2-1: Manufacturer: syz [ 263.516080][ T9] usb 2-1: SerialNumber: syz [ 263.560277][ T5846] razer 0003:1532:011B.0014: unknown main item tag 0x0 [ 263.568193][ T5846] razer 0003:1532:011B.0014: unknown main item tag 0x0 [ 263.577098][ T5846] razer 0003:1532:011B.0014: unknown main item tag 0x0 [ 263.584485][ T5846] razer 0003:1532:011B.0014: unknown main item tag 0x0 [ 263.591681][ T5846] razer 0003:1532:011B.0014: unknown main item tag 0x0 [ 263.598808][ T5846] razer 0003:1532:011B.0014: unknown main item tag 0x0 [ 263.619829][ T5846] razer 0003:1532:011B.0014: hidraw0: USB HID v0.20 Device [HID 1532:011b] on usb-dummy_hcd.0-1/input0 [ 263.751013][ T8949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.769831][ T8949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.806471][ T9] usb 2-1: cannot find UAC_HEADER [ 263.869961][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 263.888183][ T9] usb 2-1: USB disconnect, device number 62 [ 263.923458][ T7616] udevd[7616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.022085][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.030786][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.355408][ T5846] usb 4-1: USB disconnect, device number 70 [ 264.407255][ T8979] loop8: detected capacity change from 0 to 7 [ 264.433035][ T8979] Dev loop8: unable to read RDB block 7 [ 264.438687][ T8979] loop8: unable to read partition table [ 264.447163][ T8979] loop8: partition table beyond EOD, truncated [ 264.453838][ T8979] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 264.581947][ T8988] netlink: 'syz.1.1002': attribute type 4 has an invalid length. [ 264.607386][ T8988] netlink: 'syz.1.1002': attribute type 4 has an invalid length. [ 264.619308][ T8988] netlink: 'syz.1.1002': attribute type 4 has an invalid length. [ 264.972198][ T5927] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 265.018387][ T9011] capability: warning: `syz.3.1007' uses 32-bit capabilities (legacy support in use) [ 265.146065][ T5927] usb 2-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 265.155849][ T5927] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 265.165736][ T5927] usb 2-1: Product: syz [ 265.170184][ T5927] usb 2-1: Manufacturer: syz [ 265.175396][ T5927] usb 2-1: SerialNumber: syz [ 265.184679][ T5927] usb 2-1: config 0 descriptor?? [ 265.365864][ T5927] usb 1-1: USB disconnect, device number 72 [ 265.397061][ T8990] : renamed from virt_wifi0 [ 265.513318][ T9038] loop8: detected capacity change from 0 to 7 [ 265.524539][ T9038] Dev loop8: unable to read RDB block 7 [ 265.530467][ T9038] loop8: unable to read partition table [ 265.537272][ T9038] loop8: partition table beyond EOD, truncated [ 265.543838][ T9038] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 266.051421][ T993] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 266.074322][ T9051] batadv0: entered promiscuous mode [ 266.079678][ T9051] batadv0: entered allmulticast mode [ 266.227983][ T993] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 266.251454][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 266.264765][ T993] usb 4-1: Product: syz [ 266.271430][ T993] usb 4-1: Manufacturer: syz [ 266.276314][ T993] usb 4-1: SerialNumber: syz [ 266.284982][ T993] usb 4-1: config 0 descriptor?? [ 266.287760][ T9053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1024'. [ 266.294844][ T993] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 266.307207][ T993] dvb-usb: bulk message failed: -22 (2/0) [ 266.317663][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.329259][ T993] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 266.337579][ T993] usb 4-1: media controller created [ 266.403590][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.494084][ T993] dvb-usb: bulk message failed: -22 (1/0) [ 266.551091][ T993] DVB: Unable to find symbol mt352_attach() [ 266.562575][ T993] dvb-usb: bulk message failed: -22 (5/0) [ 266.578196][ T993] zl10353_read_register: readreg error (reg=127, ret==-121) [ 266.589191][ T993] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 266.681399][ T993] rc_core: IR keymap rc-dvico-mce not found [ 266.688306][ T993] Registered IR keymap rc-empty [ 266.724900][ T993] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 266.749002][ T993] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input24 [ 266.775811][ T993] dvb-usb: schedule remote query interval to 100 msecs. [ 266.786291][ T993] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 266.805366][ T993] usb 4-1: USB disconnect, device number 71 [ 266.930416][ T993] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 267.321423][ T24] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 267.473293][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 267.482010][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 267.492541][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 267.501637][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 267.512677][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 267.525099][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 267.534337][ T993] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 267.542177][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 267.550489][ T24] usb 1-1: Product: syz [ 267.555548][ T24] usb 1-1: Manufacturer: syz [ 267.565570][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 267.571634][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 267.578059][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 267.584087][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 267.678207][ T9] usb 2-1: USB disconnect, device number 63 [ 267.703114][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.714979][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.725797][ T9080] netlink: 'syz.1.1034': attribute type 4 has an invalid length. [ 267.727090][ T993] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 267.744492][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.746710][ T9080] netlink: 'syz.1.1034': attribute type 4 has an invalid length. [ 267.756482][ T993] usb 4-1: config 0 descriptor?? [ 267.788450][ T9080] netlink: 'syz.1.1034': attribute type 4 has an invalid length. [ 267.819532][ T9082] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.1035'. [ 268.013072][ T24] usb 1-1: USB disconnect, device number 73 [ 268.191304][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 268.193513][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.208473][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.224855][ T993] usbhid 4-1:0.0: can't add hid device: -71 [ 268.230908][ T993] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 268.241766][ T993] usb 4-1: USB disconnect, device number 72 [ 268.351327][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 268.359001][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.370109][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice= 0.40 [ 268.379408][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.387467][ T9] usb 2-1: Product: syz [ 268.392595][ T9] usb 2-1: Manufacturer: syz [ 268.397222][ T9] usb 2-1: SerialNumber: syz [ 268.640262][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 268.652942][ T9] usb 2-1: 2:1 : bogus bTerminalLink 4 [ 268.720962][ T9101] lo speed is unknown, defaulting to 1000 [ 268.745804][ T9] usb 2-1: USB disconnect, device number 64 [ 268.838541][ T9109] netlink: 'syz.3.1044': attribute type 4 has an invalid length. [ 268.849705][ T9109] netlink: 'syz.3.1044': attribute type 4 has an invalid length. [ 268.866803][ T9109] netlink: 'syz.3.1044': attribute type 4 has an invalid length. [ 268.869605][ T7616] udevd[7616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.999461][ T9112] netlink: 'syz.3.1045': attribute type 10 has an invalid length. [ 269.010710][ T9112] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.092116][ T5927] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 269.272684][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 269.303923][ T5927] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 269.319688][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 269.330157][ T5927] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 269.346105][ T5927] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 269.355563][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.367917][ T5927] usb 1-1: Product: syz [ 269.373183][ T5927] usb 1-1: Manufacturer: syz [ 269.378696][ T9119] loop8: detected capacity change from 0 to 7 [ 269.386069][ T9119] Dev loop8: unable to read RDB block 7 [ 269.392612][ T5927] usb 1-1: SerialNumber: syz [ 269.399173][ T9119] loop8: unable to read partition table [ 269.405516][ T9119] loop8: partition table beyond EOD, truncated [ 269.418543][ T5927] usb 1-1: config 0 descriptor?? [ 269.425778][ T9119] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 269.455492][ T5927] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 269.626434][ T9106] faux_driver vgem: [drm] Unknown color mode 727; guessing buffer size. [ 269.649651][ T9124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.674694][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.677123][ T9124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.694841][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.727031][ T5927] scsi host1: usb-storage 1-1:0.0 [ 269.751222][ T993] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 269.849021][ T9134] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 269.857982][ T9134] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 269.859664][ T9136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1052'. [ 269.880769][ T24] lo speed is unknown, defaulting to 1000 [ 269.880814][ T9136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1052'. [ 269.887308][ T24] syz0: Port: 1 Link ACTIVE [ 269.901320][ T5901] lo speed is unknown, defaulting to 1000 [ 269.908137][ T9134] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 269.919510][ T5901] lo speed is unknown, defaulting to 1000 [ 269.927818][ T993] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 269.950968][ T5901] syz0: Port: 1 Link DOWN [ 269.961428][ T5901] lo speed is unknown, defaulting to 1000 [ 269.967257][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 269.978265][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 269.989146][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 270.002438][ T993] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 270.012148][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.022007][ T993] usb 2-1: Product: syz [ 270.026787][ T993] usb 2-1: Manufacturer: syz [ 270.032050][ T993] usb 2-1: SerialNumber: syz [ 270.045357][ T993] usb 2-1: config 0 descriptor?? [ 270.056616][ T993] iguanair 2-1:0.0: failed to get version [ 270.063028][ T993] iguanair 2-1:0.0: probe with driver iguanair failed with error -90 [ 270.266999][ T993] usb 2-1: USB disconnect, device number 65 [ 270.836283][ T5901] usb 1-1: USB disconnect, device number 74 [ 271.111190][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 271.118842][ T5927] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 271.301126][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 271.306234][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 271.313363][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 271.324055][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.335158][ T5927] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 271.344377][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.353809][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.364346][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.373427][ T5927] usb 2-1: config 0 descriptor?? [ 271.378627][ T9] usb 4-1: Product: syz [ 271.382916][ T9] usb 4-1: Manufacturer: syz [ 271.389543][ T9] usb 4-1: SerialNumber: syz [ 271.399213][ T9] usb 4-1: config 0 descriptor?? [ 271.411754][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.421111][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 271.594226][ T5927] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 271.674282][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 271.683145][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 271.690371][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 271.696770][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 271.799789][ T5901] usb 2-1: USB disconnect, device number 66 [ 271.806048][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 271.873737][ T9165] ceph: No mds server is up or the cluster is laggy [ 272.002523][ T9173] netlink: 'syz.2.1066': attribute type 4 has an invalid length. [ 272.011245][ T9173] netlink: 'syz.2.1066': attribute type 4 has an invalid length. [ 272.024208][ T5901] lo speed is unknown, defaulting to 1000 [ 272.030107][ T5901] syz0: Port: 1 Link ACTIVE [ 272.035484][ T5846] lo speed is unknown, defaulting to 1000 [ 272.046951][ T9173] netlink: 'syz.2.1066': attribute type 4 has an invalid length. [ 272.058312][ T5901] lo speed is unknown, defaulting to 1000 [ 272.070586][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 272.076094][ T5901] syz0: Port: 1 Link DOWN [ 272.101212][ T5901] lo speed is unknown, defaulting to 1000 [ 272.241287][ T9180] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1067'. [ 272.852120][ T5927] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 273.035148][ T5927] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.054039][ T5927] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.079644][ T5927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.097307][ T5927] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 273.118538][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.138165][ T5927] usb 1-1: Product: syz [ 273.145182][ T5927] usb 1-1: Manufacturer: syz [ 273.149871][ T5927] usb 1-1: SerialNumber: syz [ 273.168117][ T9194] syzkaller1: entered promiscuous mode [ 273.173840][ T9194] syzkaller1: entered allmulticast mode [ 273.244716][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.267159][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.379887][ T5927] usb 1-1: Unsupported UAC3 BADD profile [ 273.418071][ T5927] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 273.435188][ T5927] usb 1-1: USB disconnect, device number 75 [ 273.452550][ T7217] udevd[7217]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.542860][ T9] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 273.552361][ T9] em28xx 4-1:0.0: board has no eeprom [ 273.571000][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 273.622402][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 273.630445][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 273.636113][ T5927] em28xx 4-1:0.0: Binding DVB extension [ 273.711633][ T5927] em28xx 4-1:0.0: Registering input extension [ 273.720968][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 273.729625][ T10] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 273.743738][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.759526][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 273.768845][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.777131][ T10] usb 2-1: Product: syz [ 273.777319][ T9202] netlink: 'syz.2.1076': attribute type 4 has an invalid length. [ 273.781988][ T10] usb 2-1: Manufacturer: syz [ 273.794404][ T10] usb 2-1: SerialNumber: syz [ 273.802841][ T9202] netlink: 'syz.2.1076': attribute type 4 has an invalid length. [ 273.804007][ T10] usb 2-1: config 0 descriptor?? [ 273.821806][ T10] appledisplay 2-1:0.0: Could not find int-in endpoint [ 273.829847][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 273.833424][ T5901] lo speed is unknown, defaulting to 1000 [ 273.851343][ T5901] syz0: Port: 1 Link ACTIVE [ 273.858328][ T9202] netlink: 'syz.2.1076': attribute type 4 has an invalid length. [ 273.875596][ T5901] lo speed is unknown, defaulting to 1000 [ 273.912741][ T5901] lo speed is unknown, defaulting to 1000 [ 273.929371][ T5901] syz0: Port: 1 Link DOWN [ 273.935081][ T9205] sctp: [Deprecated]: syz.3.1077 (pid 9205) Use of int in maxseg socket option. [ 273.935081][ T9205] Use struct sctp_assoc_value instead [ 273.939573][ T993] lo speed is unknown, defaulting to 1000 [ 274.012685][ T9208] random: crng reseeded on system resumption [ 274.055676][ T9199] syzkaller1: entered promiscuous mode [ 274.067074][ T9199] syzkaller1: entered allmulticast mode [ 274.108765][ T993] usb 2-1: USB disconnect, device number 67 [ 274.186991][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.197584][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.017180][ T9237] netlink: 'syz.0.1088': attribute type 4 has an invalid length. [ 275.025612][ T9237] netlink: 'syz.0.1088': attribute type 4 has an invalid length. [ 275.038677][ T9237] netlink: 'syz.0.1088': attribute type 4 has an invalid length. [ 275.631341][ T993] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 275.673218][ T9265] netlink: 'syz.3.1098': attribute type 4 has an invalid length. [ 275.683289][ T9265] netlink: 'syz.3.1098': attribute type 4 has an invalid length. [ 275.695725][ T9265] netlink: 'syz.3.1098': attribute type 4 has an invalid length. [ 275.700992][ T5901] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 275.790888][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 275.797690][ T993] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 275.808557][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.823949][ T993] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 275.836568][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.847409][ T993] usb 1-1: Product: syz [ 275.852191][ T993] usb 1-1: Manufacturer: syz [ 275.856828][ T993] usb 1-1: SerialNumber: syz [ 275.876512][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 275.889718][ T993] usb 1-1: config 0 descriptor?? [ 275.901318][ T5901] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 275.912256][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.923312][ T993] appledisplay 1-1:0.0: Could not find int-in endpoint [ 275.930293][ T5901] usb 2-1: Product: syz [ 275.936356][ T993] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 275.944353][ T5901] usb 2-1: Manufacturer: syz [ 275.949129][ T5901] usb 2-1: SerialNumber: syz [ 275.984506][ T5901] usb 2-1: selecting invalid altsetting 1 [ 276.002889][ T5901] usb 2-1: unit 6 not found! [ 276.026094][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.035636][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.046464][ T9272] syzkaller1: entered promiscuous mode [ 276.052955][ T9272] syzkaller1: entered allmulticast mode [ 276.125678][ T9257] syzkaller1: entered promiscuous mode [ 276.131321][ T9257] syzkaller1: entered allmulticast mode [ 276.139831][ T993] usb 1-1: USB disconnect, device number 76 [ 276.173377][ T5901] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 276.185875][ T5901] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 276.198603][ T5901] usb 2-1: selecting invalid altsetting 1 [ 276.205342][ T5901] usb 2-1: unit 6 not found! [ 276.386359][ T5901] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 276.394416][ T5901] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 276.406372][ T5901] usb 2-1: selecting invalid altsetting 1 [ 276.413071][ T5901] usb 2-1: unit 6 not found! [ 276.418059][ T5901] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 276.450089][ T5901] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 276.463058][ T5901] usb 2-1: USB disconnect, device number 68 [ 276.504861][ T7616] udevd[7616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.778513][ T9287] Bluetooth: MGMT ver 1.23 [ 276.849436][ T9293] netlink: 'syz.3.1108': attribute type 4 has an invalid length. [ 276.858703][ T9293] netlink: 'syz.3.1108': attribute type 4 has an invalid length. [ 276.873075][ T9293] netlink: 'syz.3.1108': attribute type 4 has an invalid length. [ 276.931895][ T9297] netlink: 'syz.3.1109': attribute type 1 has an invalid length. [ 276.941524][ T9297] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1109'. [ 276.951568][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 276.961161][ T9296] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1109'. [ 276.973765][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 276.983159][ T9297] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 276.983159][ T9297] program syz.3.1109 not setting count and/or reply_len properly [ 277.003617][ T9299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.084891][ T9306] syzkaller1: entered promiscuous mode [ 277.086389][ T9304] 9p: Unknown access argument Š: -22 [ 277.090466][ T9306] syzkaller1: entered allmulticast mode [ 277.160109][ T9308] loop8: detected capacity change from 0 to 7 [ 277.176013][ T9308] Dev loop8: unable to read RDB block 7 [ 277.190812][ T9308] loop8: unable to read partition table [ 277.199501][ T9308] loop8: partition table beyond EOD, truncated [ 277.212678][ T9308] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 277.294198][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'. [ 277.315052][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'. [ 277.512073][ T9330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.524534][ T9330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.693950][ T9337] syzkaller1: entered promiscuous mode [ 277.699536][ T9337] syzkaller1: entered allmulticast mode [ 277.803853][ T9339] : entered promiscuous mode [ 277.879756][ T9344] fuse: Bad value for 'fd' [ 277.900808][ T10] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 278.223002][ T9350] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1128'. [ 278.238729][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.247658][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 278.256947][ T10] usb 1-1: config 253 has an invalid interface number: 249 but max is 0 [ 278.265542][ T10] usb 1-1: config 253 has no interface number 0 [ 278.271900][ T10] usb 1-1: config 253 interface 249 has no altsetting 0 [ 278.296404][ T10] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 278.306161][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.314465][ T10] usb 1-1: Product: syz [ 278.317258][ T9364] usb usb9: usbfs: process 9364 (syz.3.1133) did not claim interface 0 before use [ 278.318714][ T10] usb 1-1: Manufacturer: syz [ 278.333752][ T10] usb 1-1: SerialNumber: syz [ 278.334154][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.361371][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.555344][ T10] usb-storage 1-1:253.249: USB Mass Storage device detected [ 278.620224][ T10] usb 1-1: USB disconnect, device number 77 [ 278.896366][ T9375] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1135'. [ 279.162294][ T9390] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 279.173668][ T10] lo speed is unknown, defaulting to 1000 [ 279.181148][ T5927] lo speed is unknown, defaulting to 1000 [ 279.189345][ T993] lo speed is unknown, defaulting to 1000 [ 279.328751][ T9394] binder: BINDER_SET_CONTEXT_MGR already set [ 279.338755][ T9394] binder: 9392:9394 ioctl 4018620d 200000004a80 returned -16 [ 279.351840][ T9394] syzkaller1: entered promiscuous mode [ 279.357385][ T9394] syzkaller1: entered allmulticast mode [ 279.643933][ T9407] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1146'. [ 279.731724][ T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 279.880153][ T9423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.889863][ T9423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.894888][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 279.908742][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.923044][ T10] pwc: Logitech/Cisco VT Camera webcam detected. [ 280.131897][ T10] pwc: Failed to set LED on/off time (-71) [ 280.144735][ T10] pwc: send_video_command error -71 [ 280.150270][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 280.157992][ T10] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 280.174338][ T10] usb 1-1: USB disconnect, device number 78 [ 280.211215][ T9425] validate_nla: 12 callbacks suppressed [ 280.211227][ T9425] netlink: 'syz.1.1151': attribute type 4 has an invalid length. [ 280.226684][ T9425] netlink: 'syz.1.1151': attribute type 4 has an invalid length. [ 280.239019][ T9425] netlink: 'syz.1.1151': attribute type 4 has an invalid length. [ 280.428451][ T29] audit: type=1326 audit(2000055142.125:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.1.1155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff524d9c819 code=0x0 [ 280.682122][ T9449] netlink: 'syz.2.1160': attribute type 4 has an invalid length. [ 280.704382][ T9449] netlink: 'syz.2.1160': attribute type 4 has an invalid length. [ 280.733090][ T10] lo speed is unknown, defaulting to 1000 [ 280.743889][ T9449] netlink: 'syz.2.1160': attribute type 4 has an invalid length. [ 280.757241][ T10] syz0: Port: 1 Link ACTIVE [ 280.764395][ T993] lo speed is unknown, defaulting to 1000 [ 280.772957][ T993] syz0: Port: 1 Link DOWN [ 280.772980][ T10] lo speed is unknown, defaulting to 1000 [ 280.875501][ T9452] batadv_slave_1: entered promiscuous mode [ 280.895397][ T9451] batadv_slave_1: left promiscuous mode [ 281.250556][ T5927] psmouse serio5: Failed to reset mouse on : -5 [ 281.664071][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.676195][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.706353][ T9473] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 281.715167][ T9473] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 281.724344][ T9473] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 281.771048][ T9475] netlink: 'syz.2.1170': attribute type 4 has an invalid length. [ 281.779537][ T9475] netlink: 'syz.2.1170': attribute type 4 has an invalid length. [ 281.798055][ T10] lo speed is unknown, defaulting to 1000 [ 281.807515][ T9475] netlink: 'syz.2.1170': attribute type 4 has an invalid length. [ 281.816443][ T10] syz0: Port: 1 Link ACTIVE [ 281.821566][ T5888] lo speed is unknown, defaulting to 1000 [ 281.832971][ T10] lo speed is unknown, defaulting to 1000 [ 281.840145][ T10] syz0: Port: 1 Link DOWN [ 281.845071][ T5888] lo speed is unknown, defaulting to 1000 [ 282.698135][ T9489] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 282.727312][ T9489] CIFS: Unable to determine destination address [ 282.904288][ T9505] netlink: 'syz.1.1182': attribute type 4 has an invalid length. [ 282.990028][ T9511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.006721][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.015583][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.277133][ T5901] lo speed is unknown, defaulting to 1000 [ 284.298182][ T5901] lo speed is unknown, defaulting to 1000 [ 284.311417][ T5846] lo speed is unknown, defaulting to 1000 [ 285.020432][ T5927] misc userio: Buffer overflowed, userio client isn't keeping up [ 285.082792][ T9541] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 285.899711][ T9555] validate_nla: 5 callbacks suppressed [ 285.899731][ T9555] netlink: 'syz.2.1203': attribute type 4 has an invalid length. [ 285.915530][ T9555] netlink: 'syz.2.1203': attribute type 4 has an invalid length. [ 285.928090][ T9] lo speed is unknown, defaulting to 1000 [ 285.935556][ T9] syz0: Port: 1 Link ACTIVE [ 285.942471][ T9555] netlink: 'syz.2.1203': attribute type 4 has an invalid length. [ 285.950417][ T9] lo speed is unknown, defaulting to 1000 [ 285.959338][ T9] lo speed is unknown, defaulting to 1000 [ 285.970276][ T9] syz0: Port: 1 Link DOWN [ 285.980609][ T9] lo speed is unknown, defaulting to 1000 [ 286.074433][ T5927] input: PS/2 Generic Mouse as /devices/serio5/input/input28 [ 286.165400][ T9561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.199954][ T9561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.217240][ T9567] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1207'. [ 286.226473][ T9561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.238402][ T9561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.254388][ T9569] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1207'. [ 286.268759][ T9566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1207'. [ 286.279706][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1207'. [ 286.370314][ T5927] psmouse serio5: Failed to enable mouse on [ 286.498680][ T9581] netlink: 'syz.1.1212': attribute type 4 has an invalid length. [ 286.508537][ T9581] netlink: 'syz.1.1212': attribute type 4 has an invalid length. [ 286.526679][ T9581] netlink: 'syz.1.1212': attribute type 4 has an invalid length. [ 286.534660][ T9583] netlink: 'syz.0.1213': attribute type 11 has an invalid length. [ 286.770348][ T5901] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 286.794606][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.805375][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.910320][ T5901] usb 1-1: device descriptor read/64, error -71 [ 286.962474][ T9605] netlink: 'syz.2.1222': attribute type 4 has an invalid length. [ 286.971575][ T9605] netlink: 'syz.2.1222': attribute type 4 has an invalid length. [ 286.983528][ T5927] lo speed is unknown, defaulting to 1000 [ 286.987262][ T9605] netlink: 'syz.2.1222': attribute type 4 has an invalid length. [ 286.989472][ T5927] syz0: Port: 1 Link ACTIVE [ 286.989553][ T5927] lo speed is unknown, defaulting to 1000 [ 287.009919][ T993] lo speed is unknown, defaulting to 1000 [ 287.020233][ T993] syz0: Port: 1 Link DOWN [ 287.134726][ T9613] netlink: 'syz.2.1224': attribute type 46 has an invalid length. [ 287.150314][ T5901] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 287.290464][ T5901] usb 1-1: device descriptor read/64, error -71 [ 287.400684][ T5901] usb usb1-port1: attempt power cycle [ 287.595102][ T9629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.605438][ T9629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.760305][ T5901] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 287.788679][ T9632] overlay: ./file0 is not a directory [ 287.795919][ T5901] usb 1-1: device descriptor read/8, error -71 [ 287.803230][ T9632] 9p: Bad value for 'wfdno' [ 287.815607][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.831361][ T9629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.844601][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.855021][ T9629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.931967][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.950997][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.040957][ T5901] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 288.063067][ T5901] usb 1-1: device descriptor read/8, error -71 [ 288.171404][ T5901] usb usb1-port1: unable to enumerate USB device [ 289.494352][ T5901] lo speed is unknown, defaulting to 1000 [ 289.501179][ T5901] syz0: Port: 1 Link ACTIVE [ 289.506978][ T5901] lo speed is unknown, defaulting to 1000 [ 289.940269][ T5901] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 290.090430][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 290.098078][ T5901] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 290.108845][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.125326][ T5901] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 290.135005][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.143447][ T5901] usb 1-1: Product: syz [ 290.147662][ T5901] usb 1-1: Manufacturer: syz [ 290.152363][ T5901] usb 1-1: SerialNumber: syz [ 290.159809][ T5901] usb 1-1: config 0 descriptor?? [ 290.167053][ T5901] appledisplay 1-1:0.0: Could not find int-in endpoint [ 290.175144][ T5901] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 290.370009][ T10] usb 1-1: USB disconnect, device number 83 [ 290.737892][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.748544][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.758760][ T9698] syzkaller1: entered promiscuous mode [ 290.764323][ T9698] syzkaller1: entered allmulticast mode [ 291.451842][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1268'. [ 291.533773][ T9715] could not allocate digest TFM handle hmac(sha1-avx2) [ 291.859667][ T9744] GUP no longer grows the stack in syz.0.1276 (9744): 200000004000-20000000a000 (200000002000) [ 291.875398][ T9744] CPU: 0 UID: 0 PID: 9744 Comm: syz.0.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.875428][ T9744] Tainted: [L]=SOFTLOCKUP [ 291.875435][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 291.875445][ T9744] Call Trace: [ 291.875453][ T9744] [ 291.875460][ T9744] dump_stack_lvl+0xe8/0x150 [ 291.875492][ T9744] __get_user_pages+0x2378/0x2720 [ 291.875534][ T9744] ? mtree_load+0x12a/0x780 [ 291.875568][ T9744] get_user_pages_remote+0x2f6/0xab0 [ 291.875591][ T9744] ? __pfx_mtree_load+0x10/0x10 [ 291.875619][ T9744] ? __pfx_get_user_pages_remote+0x10/0x10 [ 291.875642][ T9744] ? __access_remote_vm+0xa3/0x6f0 [ 291.875665][ T9744] ? __access_remote_vm+0x42c/0x6f0 [ 291.875699][ T9744] __access_remote_vm+0x222/0x6f0 [ 291.875732][ T9744] ? __pfx___access_remote_vm+0x10/0x10 [ 291.875759][ T9744] ? alloc_pages_noprof+0x13b/0x2a0 [ 291.875783][ T9744] proc_pid_cmdline_read+0x419/0x7f0 [ 291.875812][ T9744] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 291.875837][ T9744] ? rw_verify_area+0x2a6/0x4d0 [ 291.875867][ T9744] vfs_readv+0x587/0x840 [ 291.875890][ T9744] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 291.875916][ T9744] ? __pfx_vfs_readv+0x10/0x10 [ 291.875951][ T9744] ? __fget_files+0x2a/0x420 [ 291.875977][ T9744] ? __fget_files+0x3a0/0x420 [ 291.875998][ T9744] ? __fget_files+0x2a/0x420 [ 291.876028][ T9744] __x64_sys_preadv+0x19f/0x2a0 [ 291.876046][ T9744] ? __pfx___se_sys_futex+0x10/0x10 [ 291.876073][ T9744] ? __pfx___x64_sys_preadv+0x10/0x10 [ 291.876100][ T9744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.876119][ T9744] do_syscall_64+0x15f/0xf80 [ 291.876144][ T9744] ? clear_bhb_loop+0x40/0x90 [ 291.876165][ T9744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.876183][ T9744] RIP: 0033:0x7f2e4739c819 [ 291.876200][ T9744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.876214][ T9744] RSP: 002b:00007f2e4821d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 291.876233][ T9744] RAX: ffffffffffffffda RBX: 00007f2e47615fa0 RCX: 00007f2e4739c819 [ 291.876246][ T9744] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000006 [ 291.876257][ T9744] RBP: 00007f2e47432c91 R08: 00000000fffffff9 R09: 0000000000000000 [ 291.876268][ T9744] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 291.876279][ T9744] R13: 00007f2e47616038 R14: 00007f2e47615fa0 R15: 00007ffe59c20d18 [ 291.876309][ T9744] [ 291.960192][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.160878][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.173888][ T9747] syzkaller1: entered promiscuous mode [ 292.179478][ T9747] syzkaller1: entered allmulticast mode [ 292.262620][ T9753] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 292.825509][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.850387][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.867179][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.877919][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.931991][ T9770] syzkaller1: entered promiscuous mode [ 292.950717][ T9770] syzkaller1: entered allmulticast mode [ 293.111184][ T9779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.140462][ T9779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.169926][ T5846] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 294.311939][ T5846] usb 1-1: device descriptor read/64, error -71 [ 294.549841][ T5846] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 294.679898][ T5846] usb 1-1: device descriptor read/64, error -71 [ 294.790184][ T5846] usb usb1-port1: attempt power cycle [ 294.885225][ T9830] 9p: Bad value for 'rfdno' [ 294.891360][ T9830] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1308'. [ 295.059817][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 295.129836][ T5846] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 295.150283][ T5846] usb 1-1: device descriptor read/8, error -71 [ 295.163827][ T9843] kvm: Disabled LAPIC found during irq injection [ 295.293346][ T9848] validate_nla: 11 callbacks suppressed [ 295.293360][ T9848] netlink: 'syz.3.1312': attribute type 11 has an invalid length. [ 295.311376][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.320990][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.389848][ T5846] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 295.410475][ T5846] usb 1-1: device descriptor read/8, error -71 [ 295.475253][ T9853] tmpfs: Bad value for 'nr_blocks' [ 295.521203][ T5846] usb usb1-port1: unable to enumerate USB device [ 295.967540][ T9867] syzkaller1: entered promiscuous mode [ 295.973374][ T9867] syzkaller1: entered allmulticast mode [ 296.658120][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.680842][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.265418][ T9920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.278046][ T9920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.295298][ T9920] kAFS: unable to lookup cell '' [ 297.359644][ T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 297.509685][ T10] usb 1-1: device descriptor read/64, error -71 [ 297.751363][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 297.909678][ T10] usb 1-1: device descriptor read/64, error -71 [ 297.937644][ T9927] 9p: Bad value for 'rfdno' [ 297.966497][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.991308][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.010937][ T9927] fuse: Unknown parameter '' [ 298.026642][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.037298][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.040174][ T10] usb usb1-port1: attempt power cycle [ 298.050893][ T9927] overlayfs: overlapping lowerdir path [ 298.399794][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 298.440791][ T10] usb 1-1: device descriptor read/8, error -71 [ 298.553123][ T9954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.562068][ T9954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.571026][ T9954] syzkaller1: entered promiscuous mode [ 298.576561][ T9954] syzkaller1: entered allmulticast mode [ 298.679666][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 298.711154][ T10] usb 1-1: device descriptor read/8, error -71 [ 298.821119][ T10] usb usb1-port1: unable to enumerate USB device [ 298.965681][ T9958] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1348'. [ 299.285068][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.293939][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.724331][ T9983] netlink: 'syz.2.1356': attribute type 17 has an invalid length. [ 299.732623][ T9983] netlink: 'syz.2.1356': attribute type 16 has an invalid length. [ 299.742383][ T9983] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1356'. [ 299.776462][ T9986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1357'. [ 299.857423][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.874191][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.886084][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.894859][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.904473][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.913608][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.974011][ T9996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.983935][ T9996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.993839][ T9996] syzkaller1: entered promiscuous mode [ 299.999353][ T9996] syzkaller1: entered allmulticast mode [ 300.136667][ T9998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.151070][ T9999] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 300.462781][T10010] fuse: Unknown parameter 'uÎbƒser_00000000000000000000' [ 300.499549][ T10] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 300.511118][T10012] 9p: Bad value for 'rfdno' [ 300.671897][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 4 [ 300.690520][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 300.711039][ T10] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 1.06 [ 300.722513][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.730717][ T10] usb 1-1: Product: syz [ 300.734974][ T10] usb 1-1: Manufacturer: syz [ 300.740306][ T10] usb 1-1: SerialNumber: syz [ 300.928054][T10024] overlay: filesystem on ./file0 not supported as upperdir [ 300.984551][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 300.997258][T10028] netlink: 'syz.3.1370': attribute type 16 has an invalid length. [ 301.001808][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 301.008198][T10028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.023433][T10028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.056768][ T10] usb 1-1: USB disconnect, device number 92 [ 301.167197][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1371'. [ 301.574852][T10046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.586976][T10046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.769728][ T5846] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 301.919419][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 301.926328][ T5846] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 301.937143][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.952347][ T5846] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 301.962082][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.970158][ T5846] usb 1-1: Product: syz [ 301.974982][ T5846] usb 1-1: Manufacturer: syz [ 301.979728][ T5846] usb 1-1: SerialNumber: syz [ 301.988576][ T5846] usb 1-1: config 0 descriptor?? [ 301.996194][ T5846] appledisplay 1-1:0.0: Could not find int-in endpoint [ 302.003838][ T5846] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 302.197612][T10044] syzkaller1: entered promiscuous mode [ 302.203255][T10044] syzkaller1: entered allmulticast mode [ 302.212670][ T5927] usb 1-1: USB disconnect, device number 93 [ 302.425466][T10052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.435524][T10052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.055842][T10071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.073299][T10071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.090584][T10071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1388'. [ 303.109353][ T5927] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 303.127450][T10075] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1389'. [ 303.272524][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.291019][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.306404][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 303.320614][ T5927] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 303.330422][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.342478][ T5927] usb 1-1: config 0 descriptor?? [ 303.743792][T10084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.753045][T10084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.786902][ T5927] kovaplus 0003:1E7D:2D50.0015: item fetching failed at offset 3/5 [ 303.798478][ T5927] kovaplus 0003:1E7D:2D50.0015: parse failed [ 303.807303][ T5927] kovaplus 0003:1E7D:2D50.0015: probe with driver kovaplus failed with error -22 [ 303.986929][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.997446][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.104178][ T5927] usb 1-1: USB disconnect, device number 94 [ 304.434122][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'. [ 304.484718][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.514179][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.540383][T10109] syzkaller1: entered promiscuous mode [ 304.546075][T10109] syzkaller1: entered allmulticast mode [ 304.661780][T10119] Bluetooth: MGMT ver 1.23 [ 304.668271][T10119] Bluetooth: hci1: invalid length 4, exp 2 for type 11 [ 304.732229][T10125] loop8: detected capacity change from 0 to 7 [ 304.743223][T10125] Dev loop8: unable to read RDB block 7 [ 304.748849][T10125] loop8: unable to read partition table [ 304.755296][T10125] loop8: partition table beyond EOD, truncated [ 304.762535][T10125] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 305.279188][ T5927] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 305.300929][T10151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.319884][T10151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.405712][T10157] overlayfs: failed to clone upperpath [ 305.412826][T10157] overlayfs: failed to clone upperpath [ 305.420471][T10157] overlayfs: failed to clone upperpath [ 305.427519][T10157] overlayfs: failed to clone upperpath [ 305.434197][T10157] overlayfs: failed to clone upperpath [ 305.440527][T10157] overlayfs: failed to clone upperpath [ 305.446749][T10157] overlayfs: failed to clone upperpath [ 305.449326][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 305.460901][ T5927] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 305.461490][T10157] overlayfs: failed to clone upperpath [ 305.471555][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.493279][T10157] overlayfs: failed to clone upperpath [ 305.499628][ T5927] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 305.508632][T10157] overlayfs: failed to clone upperpath [ 305.509520][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.526907][ T5927] usb 1-1: Product: syz [ 305.530153][T10157] overlayfs: failed to clone upperpath [ 305.532560][ T5927] usb 1-1: Manufacturer: syz [ 305.541973][ T5927] usb 1-1: SerialNumber: syz [ 305.547674][T10157] overlayfs: failed to clone upperpath [ 305.558299][T10157] overlayfs: failed to clone upperpath [ 305.565687][ T5927] usb 1-1: config 0 descriptor?? [ 305.566090][T10157] overlayfs: failed to clone upperpath [ 305.576780][ T5927] appledisplay 1-1:0.0: Could not find int-in endpoint [ 305.586036][ T5927] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 305.587581][T10157] overlayfs: failed to clone upperpath [ 305.606034][T10157] overlayfs: failed to clone upperpath [ 305.612585][T10157] overlayfs: failed to clone upperpath [ 305.618863][T10157] overlayfs: failed to clone upperpath [ 305.626396][T10157] overlayfs: failed to clone upperpath [ 305.635302][T10157] overlayfs: failed to clone upperpath [ 305.642136][T10157] overlayfs: failed to clone upperpath [ 305.649014][T10157] overlayfs: failed to clone upperpath [ 305.656484][T10157] overlayfs: failed to clone upperpath [ 305.664938][T10157] overlayfs: failed to clone upperpath [ 305.672678][T10157] overlayfs: failed to clone upperpath [ 305.680894][T10157] overlayfs: failed to clone upperpath [ 305.687644][T10157] overlayfs: failed to clone upperpath [ 305.695425][T10157] overlayfs: failed to clone upperpath [ 305.703105][T10157] overlayfs: failed to clone upperpath [ 305.712866][T10157] overlayfs: failed to clone upperpath [ 305.720305][T10157] overlayfs: failed to clone upperpath [ 305.727514][T10157] overlayfs: failed to clone upperpath [ 305.737074][T10157] overlayfs: failed to clone upperpath [ 306.115991][ T5846] usb 1-1: USB disconnect, device number 95 [ 306.454358][T10190] loop8: detected capacity change from 0 to 7 [ 306.462333][T10190] Dev loop8: unable to read RDB block 7 [ 306.468005][T10190] loop8: unable to read partition table [ 306.474137][T10190] loop8: partition table beyond EOD, truncated [ 306.482925][T10190] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 306.546255][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.556915][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.820130][ T5163] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 309.728163][T10199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.872536][T10252] can0: slcan on ttyprintk. [ 309.981273][T10252] can0 (unregistered): slcan off ttyprintk. [ 310.108938][ T5901] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 310.268991][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 310.289931][ T5901] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 310.320098][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.357994][ T5901] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 310.376803][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.393443][ T5901] usb 1-1: Product: syz [ 310.402746][ T5901] usb 1-1: Manufacturer: syz [ 310.418280][ T5901] usb 1-1: SerialNumber: syz [ 310.427988][ T5901] usb 1-1: config 0 descriptor?? [ 310.446162][ T5901] appledisplay 1-1:0.0: Could not find int-in endpoint [ 310.459999][ T5901] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 310.490115][T10288] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1454'. [ 310.619053][T10296] netlink: 'syz.1.1455': attribute type 16 has an invalid length. [ 310.627056][T10296] netlink: 'syz.1.1455': attribute type 2 has an invalid length. [ 310.640302][T10296] netlink: 64102 bytes leftover after parsing attributes in process `syz.1.1455'. [ 310.674065][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 310.692828][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 310.771546][T10302] loop8: detected capacity change from 0 to 7 [ 310.797616][T10302] Dev loop8: unable to read RDB block 7 [ 310.809556][T10302] loop8: unable to read partition table [ 310.821939][T10302] loop8: partition table beyond EOD, truncated [ 310.841175][T10302] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 310.854273][ T5927] usb 1-1: USB disconnect, device number 96 [ 311.261551][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.302494][T10330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.312407][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.332178][T10330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.344153][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.384107][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.405316][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.431808][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.441670][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.466505][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.568515][T10344] misc userio: Invalid payload size [ 311.626596][T10345] misc userio: The device must be registered before sending interrupts [ 311.636656][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.645974][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.657178][T10345] misc userio: The device must be registered before sending interrupts [ 311.708856][ T10] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 311.879071][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 311.888032][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 311.909060][ T10] usb 1-1: config 4 has an invalid interface number: 9 but max is 0 [ 311.922445][ T10] usb 1-1: config 4 has no interface number 0 [ 311.934663][ T10] usb 1-1: config 4 interface 9 has no altsetting 0 [ 311.955640][ T10] usb 1-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=b2.1e [ 311.972270][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.986087][ T10] usb 1-1: Product: syz [ 311.993797][ T10] usb 1-1: Manufacturer: syz [ 312.003053][ T10] usb 1-1: SerialNumber: syz [ 312.248023][ T10] gspca_main: spca501-2.14.0 probing 0733:0402 [ 312.260501][ T10] gspca_spca501: reg write: error -71 [ 312.276100][ T10] spca501 1-1:4.9: Reg write failed for 0x00,0xaa,0x00 [ 312.293428][ T10] spca501 1-1:4.9: probe with driver spca501 failed with error -22 [ 312.314036][ T10] usb 1-1: USB disconnect, device number 97 [ 313.095796][T10381] loop8: detected capacity change from 0 to 7 [ 313.103431][T10381] Dev loop8: unable to read RDB block 7 [ 313.110151][T10381] loop8: unable to read partition table [ 313.116048][T10381] loop8: partition table beyond EOD, truncated [ 313.122598][T10381] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 313.386133][T10391] netlink: 'syz.0.1481': attribute type 16 has an invalid length. [ 313.394618][T10391] netlink: 'syz.0.1481': attribute type 2 has an invalid length. [ 313.403169][T10391] netlink: 64102 bytes leftover after parsing attributes in process `syz.0.1481'. [ 313.417658][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'. [ 313.446753][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'. [ 313.465388][T10391] syzkaller1: entered promiscuous mode [ 313.471109][T10391] syzkaller1: entered allmulticast mode [ 313.878789][ T5901] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 313.917824][T10401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.925425][T10401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.934367][T10401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.942825][T10401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.028705][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 314.036431][ T5901] usb 1-1: unable to get BOS descriptor or descriptor too short [ 314.045738][ T5901] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 190, changing to 7 [ 314.064881][ T5901] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 314.074640][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.082985][ T5901] usb 1-1: Product: syz [ 314.087294][ T5901] usb 1-1: Manufacturer: syz [ 314.092140][ T5901] usb 1-1: SerialNumber: syz [ 314.319518][T10399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.328563][T10399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.514435][ T5901] usb 1-1: USB disconnect, device number 98 [ 314.548067][ T9564] udevd[9564]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.075334][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.088076][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.107867][T10420] overlayfs: failed to resolve './file0': -2 [ 315.429155][T10419] netlink: 'syz.0.1489': attribute type 10 has an invalid length. [ 315.454996][T10419] team0: Device veth1_vlan failed to register rx_handler [ 315.477242][T10419] netlink: 'syz.0.1489': attribute type 10 has an invalid length. [ 315.486639][T10419] team0: Device veth1_vlan failed to register rx_handler [ 315.776053][T10505] netlink: 'syz.3.1493': attribute type 16 has an invalid length. [ 315.788180][T10505] netlink: 'syz.3.1493': attribute type 2 has an invalid length. [ 315.798244][T10505] netlink: 64102 bytes leftover after parsing attributes in process `syz.3.1493'. [ 315.816685][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 315.831360][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 315.863725][T10505] syzkaller1: entered promiscuous mode [ 315.873395][T10505] syzkaller1: entered allmulticast mode [ 316.176347][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.193325][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.210914][T10513] TCP: TCP_TX_DELAY enabled [ 316.299416][T10520] overlay: Unknown parameter 'fscontext' [ 316.333087][T10520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.348206][T10520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.353180][T10522] misc userio: Invalid payload size [ 316.359468][T10520] netlink: 'syz.3.1498': attribute type 83 has an invalid length. [ 316.432154][T10526] misc userio: The device must be registered before sending interrupts [ 316.477661][T10527] netlink: 'syz.3.1498': attribute type 83 has an invalid length. [ 316.634185][T10534] netlink: 'syz.1.1502': attribute type 3 has an invalid length. [ 316.654609][T10534] bond0: entered promiscuous mode [ 316.660491][T10534] bond_slave_0: entered promiscuous mode [ 316.666492][T10534] bond_slave_1: entered promiscuous mode [ 316.698746][ T5846] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 316.851993][ T5846] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 316.861254][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.869610][ T5846] usb 1-1: Product: syz [ 316.873904][ T5846] usb 1-1: Manufacturer: syz [ 316.878824][ T5846] usb 1-1: SerialNumber: syz [ 317.090207][ T5846] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 317.102147][ T5846] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 317.113114][ T5846] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 317.124139][ T5846] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 317.143748][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.150764][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.237842][T10541] netlink: 'syz.2.1505': attribute type 16 has an invalid length. [ 317.247453][T10541] netlink: 'syz.2.1505': attribute type 2 has an invalid length. [ 317.255280][T10541] netlink: 64102 bytes leftover after parsing attributes in process `syz.2.1505'. [ 318.450438][T10572] netlink: 'syz.1.1514': attribute type 16 has an invalid length. [ 318.459189][T10572] netlink: 'syz.1.1514': attribute type 2 has an invalid length. [ 318.466950][T10572] netlink: 64102 bytes leftover after parsing attributes in process `syz.1.1514'. [ 318.538590][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'. [ 318.859078][T10579] misc userio: The device must be registered before sending interrupts [ 319.287842][T10596] netlink: 1315 bytes leftover after parsing attributes in process `syz.1.1523'. [ 319.299912][T10596] netlink: 'syz.1.1523': attribute type 21 has an invalid length. [ 319.347463][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.359962][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.839575][T10602] sctp: [Deprecated]: syz.1.1525 (pid 10602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.839575][T10602] Use struct sctp_sack_info instead [ 319.906649][ T10] usb 1-1: USB disconnect, device number 99 [ 320.020251][T10608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 320.037083][T10608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 320.050534][T10608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1528'. [ 320.103738][T10614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.124428][T10614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.471135][T10634] mmap: syz.1.1537 (10634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 320.808901][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.818212][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.908340][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 321.043189][T10653] __nla_validate_parse: 1 callbacks suppressed [ 321.043202][T10653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1545'. [ 321.048389][ T10] usb 1-1: device descriptor read/64, error -71 [ 321.094498][T10656] validate_nla: 2 callbacks suppressed [ 321.094516][T10656] netlink: 'syz.1.1546': attribute type 10 has an invalid length. [ 321.233008][T10660] netlink: 'syz.1.1547': attribute type 16 has an invalid length. [ 321.243116][T10660] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1547'. [ 321.318335][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 321.451352][ T10] usb 1-1: device descriptor read/64, error -71 [ 321.496728][T10672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.506368][T10672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.569786][T10675] binder: 10671:10675 ioctl 801054db 200000000280 returned -22 [ 321.578575][ T10] usb usb1-port1: attempt power cycle [ 321.615909][T10677] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1555'. [ 321.929020][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 321.949007][ T10] usb 1-1: device descriptor read/8, error -71 [ 322.198298][ T10] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 322.228936][ T10] usb 1-1: device descriptor read/8, error -71 [ 322.348705][ T10] usb usb1-port1: unable to enumerate USB device [ 322.474341][T10683] netlink: 'syz.2.1557': attribute type 16 has an invalid length. [ 322.482328][T10683] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1557'. [ 322.837437][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.850254][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.859402][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.869166][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.879462][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.957867][T10694] lo speed is unknown, defaulting to 1000 [ 323.384318][T10694] chnl_net:caif_netlink_parms(): no params data found [ 323.451248][T10694] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.459492][T10694] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.466924][T10694] bridge_slave_0: entered allmulticast mode [ 323.475504][T10694] bridge_slave_0: entered promiscuous mode [ 323.493127][T10694] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.501231][T10694] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.509944][T10694] bridge_slave_1: entered allmulticast mode [ 323.517072][T10694] bridge_slave_1: entered promiscuous mode [ 323.563448][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.617004][T10694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.647829][T10694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.792100][T10716] netlink: 'syz.1.1567': attribute type 16 has an invalid length. [ 323.801241][T10716] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1567'. [ 323.804112][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.845705][T10694] team0: Port device team_slave_0 added [ 323.872491][T10694] team0: Port device team_slave_1 added [ 323.983612][T10723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1571'. [ 324.003359][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.030069][T10694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.037116][T10694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.063537][T10694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.077664][T10694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.086893][T10694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.114350][T10694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.140335][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.188734][T10694] hsr_slave_0: entered promiscuous mode [ 324.195563][T10694] hsr_slave_1: entered promiscuous mode [ 324.202935][T10694] debugfs: 'hsr0' already exists in 'hsr' [ 324.209627][T10694] Cannot create hsr debugfs directory [ 324.239208][ T10] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 324.394061][ T35] bridge_slave_1: left allmulticast mode [ 324.405699][ T35] bridge_slave_1: left promiscuous mode [ 324.413168][ T10] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 324.414923][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.422922][ T10] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 324.437392][ T10] usb 1-1: config 0 has no interface number 0 [ 324.444653][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 324.444858][ T35] bridge_slave_0: left allmulticast mode [ 324.455172][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 324.460676][ T35] bridge_slave_0: left promiscuous mode [ 324.471121][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.475743][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.497152][ T10] usb 1-1: config 0 descriptor?? [ 324.505455][T10725] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 324.522975][ T35] dvmrp1: left allmulticast mode [ 324.532398][ T35] vlan0: left allmulticast mode [ 324.539381][ T35] veth0_vlan: left allmulticast mode [ 324.755247][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.767149][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.777552][ T35] bond0 (unregistering): Released all slaves [ 324.888392][ T35] : left promiscuous mode [ 324.978383][ T5163] Bluetooth: hci4: command tx timeout [ 325.012567][T10730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.040817][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.139624][ T35] IPVS: stopping backup sync thread 6846 ... [ 325.151556][T10730] netlink: 'syz.3.1573': attribute type 11 has an invalid length. [ 325.161660][ T10] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input29 [ 325.194555][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 325.375314][ T10] usb 1-1: USB disconnect, device number 104 [ 325.381472][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 325.561427][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.578493][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.877592][T10694] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.890337][T10694] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.901489][T10694] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.916653][T10694] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 325.990868][T10756] loop8: detected capacity change from 0 to 7 [ 325.999910][T10756] Dev loop8: unable to read RDB block 7 [ 326.005864][T10756] loop8: unable to read partition table [ 326.012834][T10756] loop8: partition table beyond EOD, truncated [ 326.019725][T10756] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 326.442230][T10694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.459541][T10772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.484666][T10694] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.504510][T10772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.515173][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.522366][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.544369][T10772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.560507][T10772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.563876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.575533][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.583682][ T5927] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 326.758260][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 326.766405][ T5927] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 326.785693][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.823864][ T5927] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 326.834747][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.842933][ T35] hsr_slave_0: left promiscuous mode [ 326.850502][ T5927] usb 1-1: Product: syz [ 326.860552][ T5927] usb 1-1: Manufacturer: syz [ 326.865610][ T35] hsr_slave_1: left promiscuous mode [ 326.871120][ T5927] usb 1-1: SerialNumber: syz [ 326.879920][ T5927] usb 1-1: config 0 descriptor?? [ 326.892657][ T5927] appledisplay 1-1:0.0: Could not find int-in endpoint [ 326.902304][ T5927] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 326.912349][ T35] veth1_macvtap: left promiscuous mode [ 326.919592][ T35] veth0_macvtap: left promiscuous mode [ 326.938302][ T35] veth1_vlan: left promiscuous mode [ 327.059094][ T5163] Bluetooth: hci4: command tx timeout [ 327.275800][T10791] netlink: 'syz.3.1582': attribute type 16 has an invalid length. [ 327.307255][T10791] netlink: 'syz.3.1582': attribute type 2 has an invalid length. [ 327.328002][T10791] netlink: 64102 bytes leftover after parsing attributes in process `syz.3.1582'. [ 327.414851][ T35] team0 (unregistering): Port device team_slave_1 removed [ 327.430725][T10793] sctp: [Deprecated]: syz.3.1583 (pid 10793) Use of int in maxseg socket option. [ 327.430725][T10793] Use struct sctp_assoc_value instead [ 327.453369][ T35] team0 (unregistering): Port device team_slave_0 removed [ 327.519868][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.532029][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.621084][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.629001][ T1172] smc: removing ib device syz0 [ 327.631893][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.670181][T10764] syzkaller1: entered promiscuous mode [ 327.677801][T10764] syzkaller1: entered allmulticast mode [ 327.694890][ T993] lo speed is unknown, defaulting to 1000 [ 327.708896][ T993] syz0: Port: 1 Link DOWN [ 327.713982][ T5927] usb 1-1: USB disconnect, device number 105 [ 327.823973][ T1172] smbdirect: ib_dev[syz0] removed [ 327.864013][T10694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.945367][T10694] veth0_vlan: entered promiscuous mode [ 327.971929][T10694] veth1_vlan: entered promiscuous mode [ 328.055354][T10694] veth0_macvtap: entered promiscuous mode [ 328.079134][T10694] veth1_macvtap: entered promiscuous mode [ 328.124279][T10694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.142476][T10694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.160813][ T3549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.173447][ T3549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.194376][ T3549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.203844][ T3549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.486421][T10803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.519774][T10803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.647616][T10811] netlink: 'syz.3.1590': attribute type 16 has an invalid length. [ 328.668354][T10811] netlink: 'syz.3.1590': attribute type 2 has an invalid length. [ 328.681077][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.691149][T10811] netlink: 64102 bytes leftover after parsing attributes in process `syz.3.1590'. [ 328.705591][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.798920][ T5888] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 328.902410][T10819] loop8: detected capacity change from 0 to 7 [ 328.945568][T10819] Dev loop8: unable to read RDB block 7 [ 328.963303][T10819] loop8: unable to read partition table [ 328.980176][T10819] loop8: partition table beyond EOD, truncated [ 328.992087][T10819] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 329.004080][ T5888] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.013062][ T5888] usb 1-1: config 0 has no interface number 0 [ 329.020124][ T5888] usb 1-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 329.029937][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.077156][ T5888] usb 1-1: config 0 descriptor?? [ 329.107276][ T5888] usb 1-1: selecting invalid altsetting 1 [ 329.138576][ T5163] Bluetooth: hci4: command tx timeout [ 329.146699][ T5888] dvb_ttusb_budget: ttusb_init_controller: error [ 329.162277][ T5888] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 329.263240][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.283439][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.293156][ T5888] DVB: Unable to find symbol ves1820_attach() [ 329.313655][T10828] syzkaller1: entered promiscuous mode [ 329.340462][T10828] syzkaller1: entered allmulticast mode [ 329.394331][ T5888] DVB: Unable to find symbol stv0297_attach() [ 329.402054][ T5888] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 329.424329][ T5888] usb 1-1: USB disconnect, device number 106 [ 329.714999][T10851] netlink: 'syz.2.1601': attribute type 16 has an invalid length. [ 329.730078][T10851] netlink: 'syz.2.1601': attribute type 2 has an invalid length. [ 329.739042][T10851] netlink: 64102 bytes leftover after parsing attributes in process `syz.2.1601'. [ 330.213438][T10876] tipc: Started in network mode [ 330.221000][T10876] tipc: Node identity , cluster identity 4711 [ 330.229993][T10876] tipc: Failed to set node id, please configure manually [ 330.232150][ T1172] ================================================================== [ 330.238149][T10876] tipc: Enabling of bearer rejected, failed to enable media [ 330.245151][ T1172] BUG: KASAN: invalid-free in gid_table_release_one+0x384/0x470 [ 330.245178][ T1172] Free of addr ffff88805a1340d8 by task kworker/u8:8/1172 [ 330.245189][ T1172] [ 330.245201][ T1172] CPU: 1 UID: 0 PID: 1172 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.245220][ T1172] Tainted: [L]=SOFTLOCKUP [ 330.245227][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 330.245238][ T1172] Workqueue: ib-unreg-wq ib_unregister_work [ 330.245261][ T1172] Call Trace: [ 330.245269][ T1172] [ 330.245275][ T1172] dump_stack_lvl+0xe8/0x150 [ 330.245299][ T1172] print_address_description+0x55/0x1e0 [ 330.245322][ T1172] print_report+0x58/0x70 [ 330.245341][ T1172] ? gid_table_release_one+0x384/0x470 [ 330.245357][ T1172] kasan_report_invalid_free+0xea/0x110 [ 330.245375][ T1172] ? gid_table_release_one+0x384/0x470 [ 330.245396][ T1172] free_large_kmalloc+0x3c/0x110 [ 330.245412][ T1172] gid_table_release_one+0x384/0x470 [ 330.245435][ T1172] ib_device_release+0xd2/0x1c0 [ 330.245459][ T1172] ? __pfx_ib_device_release+0x10/0x10 [ 330.245480][ T1172] device_release+0xc4/0x1f0 [ 330.245498][ T1172] kobject_put+0x228/0x560 [ 330.245521][ T1172] ? process_scheduled_works+0xa70/0x1860 [ 330.245545][ T1172] process_scheduled_works+0xb5d/0x1860 [ 330.245578][ T1172] ? __pfx_process_scheduled_works+0x10/0x10 [ 330.245601][ T1172] ? assign_work+0x3d5/0x5e0 [ 330.245624][ T1172] worker_thread+0xa53/0xfc0 [ 330.245656][ T1172] kthread+0x388/0x470 [ 330.245673][ T1172] ? __pfx_worker_thread+0x10/0x10 [ 330.245693][ T1172] ? __pfx_kthread+0x10/0x10 [ 330.245710][ T1172] ret_from_fork+0x514/0xb70 [ 330.245734][ T1172] ? __pfx_ret_from_fork+0x10/0x10 [ 330.245754][ T1172] ? __switch_to+0xc79/0x1410 [ 330.245772][ T1172] ? __pfx_kthread+0x10/0x10 [ 330.245788][ T1172] ret_from_fork_asm+0x1a/0x30 [ 330.245809][ T1172] [ 330.245815][ T1172] [ 330.437421][ T1172] The buggy address belongs to the physical page: [ 330.443851][ T1172] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a136700 pfn:0x5a134 [ 330.453991][ T1172] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 330.462473][ T1172] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 330.470045][ T1172] page_type: f8(unknown) [ 330.474290][ T1172] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 330.482944][ T1172] raw: ffff88805a136700 0000000000000000 00000000f8000000 0000000000000000 [ 330.491684][ T1172] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 330.500340][ T1172] head: ffff88805a136700 0000000000000000 00000000f8000000 0000000000000000 [ 330.509004][ T1172] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 330.517766][ T1172] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 330.526424][ T1172] page dumped because: kasan: bad access detected [ 330.532845][ T1172] page_owner tracks the page as allocated [ 330.538544][ T1172] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 6966, tgid 6965 (syz.2.351), ts 124852188993, free_ts 124800160413 [ 330.556332][ T1172] post_alloc_hook+0x231/0x280 [ 330.561094][ T1172] get_page_from_freelist+0x24ba/0x2540 [ 330.566621][ T1172] __alloc_frozen_pages_noprof+0x18d/0x380 [ 330.572410][ T1172] alloc_pages_mpol+0x235/0x490 [ 330.577253][ T1172] ___kmalloc_large_node+0x4e/0x120 [ 330.582466][ T1172] __kmalloc_large_node_noprof+0x18/0x90 [ 330.588091][ T1172] __kmalloc_noprof+0x3e8/0x760 [ 330.592936][ T1172] ib_cache_setup_one+0x198/0x570 [ 330.597945][ T1172] ib_register_device+0xfbd/0x13e0 [ 330.603044][ T1172] rxe_register_device+0x1e3/0x350 [ 330.608164][ T1172] rxe_net_add+0x81/0x110 [ 330.612480][ T1172] rxe_newlink+0xf4/0x1c0 [ 330.616800][ T1172] nldev_newlink+0x5bc/0x650 [ 330.621381][ T1172] rdma_nl_rcv+0x6d1/0xa10 [ 330.625787][ T1172] netlink_unicast+0x80f/0x9b0 [ 330.630536][ T1172] netlink_sendmsg+0x813/0xb40 [ 330.635285][ T1172] page last free pid 5927 tgid 5927 stack trace: [ 330.641593][ T1172] __free_frozen_pages+0xbc7/0xd30 [ 330.646695][ T1172] stack_depot_save_flags+0x40e/0x810 [ 330.652060][ T1172] kasan_save_track+0x4f/0x80 [ 330.656764][ T1172] __kasan_kmalloc+0x93/0xb0 [ 330.661339][ T1172] __kmalloc_noprof+0x35c/0x760 [ 330.666180][ T1172] xfrm_hash_resize+0x62/0x2200 [ 330.671018][ T1172] process_scheduled_works+0xb5d/0x1860 [ 330.676657][ T1172] worker_thread+0xa53/0xfc0 [ 330.681244][ T1172] kthread+0x388/0x470 [ 330.685299][ T1172] ret_from_fork+0x514/0xb70 [ 330.689884][ T1172] ret_from_fork_asm+0x1a/0x30 [ 330.694636][ T1172] [ 330.696977][ T1172] Memory state around the buggy address: [ 330.702600][ T1172] ffff88805a133f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 330.710642][ T1172] ffff88805a134000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.718685][ T1172] >ffff88805a134080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.726725][ T1172] ^ [ 330.733637][ T1172] ffff88805a134100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.741683][ T1172] ffff88805a134180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.749745][ T1172] ================================================================== [ 330.821114][ T1172] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 330.828347][ T1172] CPU: 1 UID: 0 PID: 1172 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.839374][ T1172] Tainted: [L]=SOFTLOCKUP [ 330.843693][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 330.853768][ T1172] Workqueue: ib-unreg-wq ib_unregister_work [ 330.859680][ T1172] Call Trace: [ 330.862955][ T1172] [ 330.865869][ T1172] vpanic+0x56c/0xa60 [ 330.869859][ T1172] ? __pfx_vpanic+0x10/0x10 [ 330.874345][ T1172] ? __pfx___schedule+0x10/0x10 [ 330.879187][ T1172] panic+0xc5/0xd0 [ 330.882980][ T1172] ? __pfx_panic+0x10/0x10 [ 330.887377][ T1172] ? preempt_schedule_common+0x82/0xd0 [ 330.892826][ T1172] check_panic_on_warn+0x89/0xb0 [ 330.897753][ T1172] end_report+0x73/0x170 [ 330.902161][ T1172] ? gid_table_release_one+0x384/0x470 [ 330.907698][ T1172] kasan_report_invalid_free+0xfa/0x110 [ 330.913231][ T1172] ? gid_table_release_one+0x384/0x470 [ 330.918688][ T1172] free_large_kmalloc+0x3c/0x110 [ 330.923632][ T1172] gid_table_release_one+0x384/0x470 [ 330.928923][ T1172] ib_device_release+0xd2/0x1c0 [ 330.933775][ T1172] ? __pfx_ib_device_release+0x10/0x10 [ 330.939232][ T1172] device_release+0xc4/0x1f0 [ 330.943808][ T1172] kobject_put+0x228/0x560 [ 330.948233][ T1172] ? process_scheduled_works+0xa70/0x1860 [ 330.953953][ T1172] process_scheduled_works+0xb5d/0x1860 [ 330.959500][ T1172] ? __pfx_process_scheduled_works+0x10/0x10 [ 330.965482][ T1172] ? assign_work+0x3d5/0x5e0 [ 330.970073][ T1172] worker_thread+0xa53/0xfc0 [ 330.974663][ T1172] kthread+0x388/0x470 [ 330.978723][ T1172] ? __pfx_worker_thread+0x10/0x10 [ 330.983854][ T1172] ? __pfx_kthread+0x10/0x10 [ 330.988431][ T1172] ret_from_fork+0x514/0xb70 [ 330.993015][ T1172] ? __pfx_ret_from_fork+0x10/0x10 [ 330.998127][ T1172] ? __switch_to+0xc79/0x1410 [ 331.002796][ T1172] ? __pfx_kthread+0x10/0x10 [ 331.007373][ T1172] ret_from_fork_asm+0x1a/0x30 [ 331.012128][ T1172] [ 331.015896][ T1172] Kernel Offset: disabled [ 331.020304][ T1172] Rebooting in 86400 seconds..