last executing test programs: 17.904141644s ago: executing program 4 (id=1942): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='aufs\x00', 0x9010, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1", 0x43}], 0x1}, 0x40) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}}) 13.792704391s ago: executing program 4 (id=1952): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x8, 0x4, 0x4, 0x8, 0x1014}, 0x50) setsockopt(r0, 0x84, 0x82, &(0x7f0000000280)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(0x3) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x8010) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009042900000202010005"], 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) 12.272129527s ago: executing program 5 (id=1957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.069303069s ago: executing program 5 (id=1961): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file0\x00', 0x0, 0x9010, &(0x7f0000000300)='eth0\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1", 0x43}], 0x1}, 0x40) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}}) 10.961383234s ago: executing program 4 (id=1962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_setup(0x9, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) 10.771980698s ago: executing program 1 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r2 = dup(r1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 9.57634348s ago: executing program 4 (id=1964): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 8.390239448s ago: executing program 4 (id=1967): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000880)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002380)={0x24, &(0x7f0000001080)={0x40, 0x17, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.287963334s ago: executing program 3 (id=1968): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4d82b502a5854a42458456d300260033186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085062f11", 0x30}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x2e, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.911286828s ago: executing program 2 (id=1969): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = getpid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x54, &(0x7f0000000100), 0x4) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a45320, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x3) r4 = syz_pidfd_open(r2, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, 0x0, 0x0) setns(r4, 0x24020000) r7 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r7, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba40", 0x21) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) r8 = dup3(r1, r0, 0x0) fchdir(r8) creat(&(0x7f0000000040)='./bus\x00', 0x0) 7.872968541s ago: executing program 5 (id=1970): bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$alg(0x26, 0x5, 0x0) personality(0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f807570", 0x2d}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) 7.352794674s ago: executing program 0 (id=1971): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fffffffedbdf2500070000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 7.066735941s ago: executing program 3 (id=1972): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 6.919904369s ago: executing program 1 (id=1973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.820061771s ago: executing program 2 (id=1974): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r3, &(0x7f0000000280)=@xdp, 0x0, 0x80800) 6.648740278s ago: executing program 5 (id=1975): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000880)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002380)={0x24, &(0x7f0000001080)={0x40, 0x17, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.363594906s ago: executing program 3 (id=1976): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) 5.248052168s ago: executing program 2 (id=1977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_setup(0x9, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) 5.224514825s ago: executing program 0 (id=1978): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='aufs\x00', 0x9010, &(0x7f0000000300)='eth0\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}}) 5.196764022s ago: executing program 3 (id=1979): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 5.136796709s ago: executing program 1 (id=1980): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 3.876514787s ago: executing program 2 (id=1981): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f0}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) 3.340591336s ago: executing program 1 (id=1982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 3.321049989s ago: executing program 3 (id=1983): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r3, &(0x7f0000000280)=@xdp, 0x0, 0x80800) 2.934424702s ago: executing program 4 (id=1984): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10000008, 0xc0f7, 0x48e, 0x1, 0x7fff, 0x0, 0x0, 0x80, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a180)="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", 0x2000, &(0x7f00000042c0)={&(0x7f00000020c0)={0x50, 0x0, 0x4, {0x7, 0x29, 0xfffffffe, 0x4f96568cb9d6f756, 0x1002, 0xfffe, 0x8, 0x8000, 0x0, 0x0, 0x40, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1ca1, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000"], 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x503d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1f, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0xbd, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0x7c2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x6, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7, 0xfa, 0x2}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8b, 0x2, 0xf, 0xff, 0x3}, 0x29, &(0x7f0000000080)={0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x20, "1e0e6377487d81f757611eb725f871a4"}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x6, 0xf, 0x3ff, [0xc0]}]}, 0x15555555555556b0, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40b}}]}) mount_setattr(r4, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) write$cgroup_subtree(r4, &(0x7f0000002140)={[{0x6, 'pids'}]}, 0x6) 2.168921594s ago: executing program 2 (id=1985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r2 = dup(r1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 2.089675166s ago: executing program 3 (id=1986): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x8, 0x4, 0x4, 0x8, 0x1014}, 0x50) setsockopt(r0, 0x84, 0x82, &(0x7f0000000280)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(0x3) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009042900000202010005"], 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) socket(0x10, 0x3, 0x4) 1.879786533s ago: executing program 1 (id=1987): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r2, &(0x7f0000000400)="1113687780fefab361d94a0dd7a95379ac0c0fc249f56b53ef19017a44f186ed885373f8d443e66e17ac32c4f3b60d8625d9fd6479f5fab5700bcfe817c722624f3bdf32404846e404cd8fe797ba8bbf9edf29167c5450b2b0888b8d33a629239d0c4d325c76ceedc47f4718084ba57ead2e225957b3e1a773d78304551ac0b60f2f0003071204d5c52ddeca97cc637a60df6b7cc1038f67100f4ac283388c1c8ce3d147a7b2e794872a7c5fdc86", 0xae) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) socket$nl_route(0x10, 0x3, 0x0) 1.864070184s ago: executing program 5 (id=1988): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 1.853095528s ago: executing program 0 (id=1989): bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$alg(0x26, 0x5, 0x0) personality(0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f807570", 0x2d}], 0x2}}], 0x1, 0x2090) 1.306870221s ago: executing program 0 (id=1990): clock_adjtime(0x17, &(0x7f00000001c0)={0x4008b8d, 0x40, 0xb, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x9, 0x0, 0xe5e, 0x6, 0x5, 0x2, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) 592.567732ms ago: executing program 5 (id=1991): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fffffffedbdf2500070000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 539.894113ms ago: executing program 1 (id=1992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) 376.979675ms ago: executing program 0 (id=1993): bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80", 0x2b}, {&(0x7f0000001400)="9e74720b4949dd14b726badb57f016c3874d42340685e5af37d9d352ac739667546ab1897ec0f2fca33e402e62684d6f1f7bd3b281c17ff2b9575e88ed0264d35a6a10a5635b3b95fdd129d8a7f19bfc456f92098237f0e6fadce260d131a520b26d86390dbb99fcfbb9c5716a8134f0e1df76c45f10c57c8c658c3b76a7f84ff9d6d0964edecac3bc88d2b73051513a74ac758e7bb09e11f4cf999a486c5a8c34406d79ce51b790ac546521582bc2a9ad6167d7c5b9edd962d693e080a314bd31180ff59d7ec6b77bd6036817ab9e6f175736046c9f1d0997b9902c1a1201a446bf707bd2af47ec19dc8c97dfa73e532cada9a36f3bee55f1008ead64c640830d5eb5f047ad731713100ee3aa8d7c1fb0619c254d98ac0267df6e1dd3838cb31020af60b073376c1a08800fdf3d35720041f2aa74795ed3dbdb87631bfaddbb2da8f08fcde8d868070fbe7776073fe53b582e60b2bc1a84ba46c13227852dc9a65944e9186b7278973a36d17afa6181a2cc7539b32bfb64baceffbe3fd05efc088099d1ac62d2d5b062ecb3dc9dfdae20400a0ac09418013f02eeb3407e816534b4179810e59b4382cc59b86171586b1790257fed1b9ff27748a7d90d9407380e85a21faf357ac75a5821c581b34ca0a5531d527676f4e377f056a6dd574c7ac05d16fed626083bd8206ed32289bf5d94c3ba54f9c611ba2bbfc0cc66c0aee6bd32af449860a3969680bed537c3afe4128aa9984db297894bd01b69b1ffff4c86abdb946349deb1ee92013afd9d08d933431e41dd86648bd57965e6d9452542bd09411954ea4b0c27fe46203c8fcd8a1dc462d95003420f170bed4f4353ffde59ad6378aa90d1d2aa752218233d49b416e98d4a6ffd1baa526a8ce3451162b5eb5355f3faa6289ea2fbfd61278d407e77dc321b922c548c2d0eebd9b64071581830e66d65fb2a16d268db95a4db7bc7d4c7bd9ad000cb9520642c2bea06910ad99eca323b86189aab3db9125b4285e818854a012f74b2062de694986c7a03457775e96b30403ab06c4aa786f82e92c02635ec91ae7437fc0b71bbb73f7d15f39e023c88a5b156bd0f91e119f729695c48250975fe853a056c2a603f794b80e0fc22804616136912604e3833154f6f16a4bdaf48338152756a7fbf1b4cff414e98a4bff1f024727e676210448d189952ef67acb055433f3d0cb5abaae77c12dbe9d3b4a986c31b562025ef97dcc073b03ff6d3b010569238b11892f59caff159d4c54a3ebda66936b2d37a6c207a8362f7defeca6d5879037a2a5f195c04486d27686bff036b955c9beb8561e1f625acb04791992a8080e45c939a021bd2a4212018b0d605437962cf5736a7264b8734d74ed87e5e36ebd369aafbf9e2ba3f8d69b156f763024a6268199a70356a2824868180a9ff494179b35afde7047a94c7753dcefd7649b8b9c8642a1c2998e82d83c4812aa445a3ce06b76befadfe6278e1ea44b9ab784d945e8df0e2f3c6ec25341975f6bc0af7e102b6f5168b62c92f74babb856e3bbd2a96d952e1a40c5dd61252f8b9b701df9e3d272e77043cff57849fac4511f8d9d6bdcb8be26d96612565926b025c1d4d66263c8fa097dc0dfa5b1b8a36f9ef0881cbb3538f93a488259df30727c422313faf17ba54b246bd416b38f853b4b965a101c04a9ba8298f66318a41bc03467bac68893bc9b5e1d47f5913bf3b29fb522a597facbd406486bb0bae631fd321eecccc5c3a7bb8880073882c42d22487d58ece660c23862239b7699ccde923b88f777053f351b1a6c241546cefe6a52a6013e18ef0a2c37f41688e33d79efe41dfd81df58f1423baa3c1cc4ef7bcb1bde04e0bc0c9c63233e77afd2ceb742e5e7e7a7af2265c5cf70c639b1d84a637f7bb632baa3cee451e23f065614c6afaa637c89c5191925ebafffcd84fdb9e6a0ebfee2f1f4026a16e98477c8e15aacb4bfe45011e0a052eee775d48e6d88216c52fadb55f6fa4ef07f3b1b70b63beb74c6473008bcfa08fd4f320c95de4f74c37a098a1c05c486c4b98ada818e94d96f4f67257ad6a3218ba047839e634c8801e9c9bd157211889299114752cc3cf92bc340443eb74486d32be5b8055ed20c53d58a0a047c85bf63ceaf75286f6af2b9e8a50b82d7f6828cf90611fd59cd155b8152b63f6b5d447d6527288e5051966250ebda77c910b7468a162813f09dde277a4ae30539db55fabee7a10a4cc55f39c9049f907baac8171c0502c54234f7679c1e79415635cc6851b92e51cc784f078706ebe29924169d9e5982d335ec2b4b35f002cc66eba2b47e883c05a7980e30dddc6a59a0fee2403e77a31c147c12319e05cd3f101fecb1a14ab77bddd958d0da63263aa75fb07b936686c7391d1f97576fb4d526d73acecab0573c2179cf92bd5dec0d03861846ca31d4c555efa4670cab43de38fd8c979e06a0ba5e990e5cd84c3d760f8b8f59623ed2f0063bdbe9b3d00b7967b08edf6575c4f887db243f77d07b85a9b7aa2b37d562f4adaab6891408c1003c82891b736c2eb61919f17d0657eb49fbf6bb51c56ac8547212f15b950683c533ad170fb23ac11e55eddffd044710a6bcf563e601e77a75277f1dcc92a5fb0052b41cebb282aecf93d460706f1323b8766140389c66ffed5026daf508c52fcaecb55c1aa4273cb05d25d04938c7df6bcda9174cf08b4d2b7172a3dc45ce9866e6141210c7ee5a61d35751fa2945a4ff94e5df5d77eb0c9fc63148c4871d2dca098bb192aa99ccab8dd8b78313d124cdfe5cc2eabe884554f6081abb91904fe01f6d9d01cb320ab62002a4644b5ccd248e8bec740d72851e328ff55157b3923", 0x7e9}], 0x2, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 155.141398ms ago: executing program 2 (id=1994): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r3, &(0x7f0000000280)=@xdp, 0x0, 0x80800) 0s ago: executing program 0 (id=1995): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.1.622'. [ 215.782631][ T8064] lec:lec_atm_close: lec0: Shut down! [ 216.017732][ T8090] fuse: Bad value for 'fd' [ 216.175135][ T8088] syzkaller0: entered promiscuous mode [ 216.197394][ T8088] syzkaller0: entered allmulticast mode [ 216.207336][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 216.209537][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 216.214268][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 216.219638][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 216.225458][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 216.231705][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 218.110074][ T8113] fuse: Bad value for 'user_id' [ 218.114992][ T8113] fuse: Bad value for 'user_id' [ 218.293619][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.637'. [ 218.305423][ T8120] netlink: 32 bytes leftover after parsing attributes in process `syz.5.637'. [ 218.893229][ T790] IPVS: starting estimator thread 0... [ 219.000905][ T8123] IPVS: using max 22 ests per chain, 52800 per kthread [ 219.092087][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 219.417281][ T790] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 219.431547][ T8134] tipc: Enabled bearer , priority 0 [ 219.456139][ T8134] syzkaller0: entered promiscuous mode [ 219.477876][ T8134] syzkaller0: entered allmulticast mode [ 219.584623][ T8134] tipc: Resetting bearer [ 219.597611][ T790] usb 1-1: Using ep0 maxpacket: 8 [ 219.608744][ T8132] tipc: Resetting bearer [ 219.610703][ T790] usb 1-1: config 0 has an invalid interface number: 199 but max is 0 [ 219.634101][ T790] usb 1-1: config 0 has no interface number 0 [ 219.649966][ T790] usb 1-1: too many endpoints for config 0 interface 199 altsetting 33: 31, using maximum allowed: 30 [ 219.668575][ T8132] tipc: Disabling bearer [ 219.672879][ T790] usb 1-1: config 0 interface 199 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 219.709547][ T790] usb 1-1: config 0 interface 199 has no altsetting 0 [ 219.724436][ T790] usb 1-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 219.746491][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.773475][ T790] usb 1-1: config 0 descriptor?? [ 219.817583][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 219.980792][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.003802][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.020601][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 220.048497][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.061033][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.096948][ T24] usb 4-1: config 0 descriptor?? [ 220.115273][ T790] usb 1-1: string descriptor 0 read error: -71 [ 220.145772][ T790] usblcd 1-1:0.199: USBLCD model not supported. [ 220.197422][ T790] usb 1-1: USB disconnect, device number 6 [ 220.372173][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 220.393195][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 220.432323][ T24] usb 4-1: USB disconnect, device number 4 [ 220.490179][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.654'. [ 220.504541][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.654'. [ 220.705444][ T8173] loop1: detected capacity change from 0 to 2048 [ 220.789112][ T5805] GPT:first_usable_lbas don't match. [ 220.801824][ T5805] GPT:34 != 290 [ 220.808829][ T5805] GPT: Use GNU Parted to correct GPT errors. [ 220.821894][ T5805] loop1: p1 p2 p3 [ 220.917435][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 220.930693][ T8173] GPT:first_usable_lbas don't match. [ 220.938985][ T8173] GPT:34 != 290 [ 220.946843][ T8173] GPT: Use GNU Parted to correct GPT errors. [ 221.008267][ T8173] loop1: p1 p2 p3 [ 221.010606][ T8186] fuse: Bad value for 'fd' [ 221.194068][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 221.247218][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5470 ms [ 221.256102][ C1] lec:lec_tx_timeout: lec0 [ 221.261087][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 221.468579][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.734668][ T24] usb 4-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 221.771312][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.823115][ T24] usb 4-1: config 0 descriptor?? [ 222.164001][ T790] IPVS: starting estimator thread 0... [ 222.259875][ T8202] IPVS: using max 24 ests per chain, 57600 per kthread [ 222.267022][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 222.290090][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 222.299024][ T5805] udevd[5805]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 222.302068][ T5808] udevd[5808]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 222.384071][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 222.391893][ T24] usb 4-1: USB disconnect, device number 5 [ 222.883510][ T8218] syzkaller0: entered promiscuous mode [ 222.889358][ T8218] syzkaller0: entered allmulticast mode [ 223.148072][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 223.158565][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 223.207529][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 223.217597][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 223.767387][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 223.903332][ T8181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.915184][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 223.917527][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 223.971119][ T24] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 223.989196][ T24] usb 4-1: config 0 has no interface number 0 [ 223.997614][ T24] usb 4-1: too many endpoints for config 0 interface 199 altsetting 33: 31, using maximum allowed: 30 [ 224.016567][ T24] usb 4-1: config 0 interface 199 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 224.093992][ T24] usb 4-1: config 0 interface 199 has no altsetting 0 [ 224.117304][ T24] usb 4-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 224.151619][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.208465][ T24] usb 4-1: config 0 descriptor?? [ 224.426837][ T8234] loop5: detected capacity change from 0 to 2048 [ 224.458368][ T8227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.508264][ T8227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.517602][ T8234] GPT:first_usable_lbas don't match. [ 224.535447][ T8234] GPT:34 != 290 [ 224.539757][ T8234] GPT: Use GNU Parted to correct GPT errors. [ 224.567481][ T8234] loop5: p1 p2 p3 [ 224.696146][ T8246] fuse: Unknown parameter '0x0000000000000004' [ 225.005920][ T5805] udevd[5805]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 225.030328][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 225.058396][ T5808] udevd[5808]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 225.248389][ T8251] syzkaller0: entered promiscuous mode [ 225.294346][ T8251] syzkaller0: entered allmulticast mode [ 225.844826][ T8262] fuse: Bad value for 'fd' [ 226.267213][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 226.275366][ C1] lec:lec_tx_timeout: lec0 [ 226.280244][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 226.499862][ T24] usb 4-1: string descriptor 0 read error: -71 [ 226.529480][ T24] usblcd 4-1:0.199: USBLCD model not supported. [ 226.561701][ T24] usb 4-1: USB disconnect, device number 6 [ 226.602544][ T8281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'. [ 226.621570][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'. [ 226.676144][ T8283] netlink: 'syz.3.691': attribute type 61 has an invalid length. [ 226.690220][ T8283] netlink: 'syz.3.691': attribute type 3 has an invalid length. [ 226.863114][ T8287] fuse: Unknown parameter '0x0000000000000004' [ 227.082663][ T8296] netlink: 176 bytes leftover after parsing attributes in process `syz.1.697'. [ 227.249490][ T8303] syzkaller0: entered promiscuous mode [ 227.266453][ T8303] syzkaller0: entered allmulticast mode [ 227.390979][ T5916] IPVS: starting estimator thread 0... [ 227.404787][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.702'. [ 227.491588][ T8310] IPVS: using max 23 ests per chain, 55200 per kthread [ 227.767344][ T5827] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 227.957685][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 227.965067][ T5827] usb 2-1: config 0 has an invalid interface number: 199 but max is 0 [ 227.987359][ T5827] usb 2-1: config 0 has no interface number 0 [ 228.003744][ T5827] usb 2-1: too many endpoints for config 0 interface 199 altsetting 33: 31, using maximum allowed: 30 [ 228.035273][ T5827] usb 2-1: config 0 interface 199 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 228.057220][ T5827] usb 2-1: config 0 interface 199 has no altsetting 0 [ 228.066908][ T5827] usb 2-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 228.097558][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.130572][ T5827] usb 2-1: config 0 descriptor?? [ 228.152146][ T8331] fuse: Bad value for 'fd' [ 228.277652][ T8328] pim6reg: entered allmulticast mode [ 228.293934][ T8328] pim6reg: left allmulticast mode [ 228.352792][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.391841][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.439505][ T5827] usb 2-1: string descriptor 0 read error: -71 [ 228.498258][ T5827] usblcd 2-1:0.199: USBLCD model not supported. [ 228.549380][ T5827] usb 2-1: USB disconnect, device number 7 [ 228.623854][ T8339] netlink: 176 bytes leftover after parsing attributes in process `syz.0.713'. [ 228.826282][ T8341] loop4: detected capacity change from 0 to 2048 [ 228.897848][ T5805] GPT:first_usable_lbas don't match. [ 228.906585][ T5805] GPT:34 != 290 [ 228.948647][ T5805] GPT: Use GNU Parted to correct GPT errors. [ 228.967010][ T5805] loop4: p1 p2 p3 [ 229.078808][ T8341] GPT:first_usable_lbas don't match. [ 229.097340][ T8341] GPT:34 != 290 [ 229.100866][ T8341] GPT: Use GNU Parted to correct GPT errors. [ 229.125484][ T8341] loop4: p1 p2 p3 [ 229.179954][ T8351] netlink: 76 bytes leftover after parsing attributes in process `syz.5.717'. [ 229.433604][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'. [ 229.800423][ T8368] fuse: Bad value for 'fd' [ 229.804137][ T5807] udevd[5807]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 229.819321][ T5805] udevd[5805]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 229.833059][ T5809] udevd[5809]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 229.952978][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 229.976915][ T5807] udevd[5807]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 229.983166][ T5805] udevd[5805]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 230.509328][ T8394] fuse: Unknown parameter '0x0000000000000006' [ 231.287238][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 231.295394][ C1] lec:lec_tx_timeout: lec0 [ 231.300387][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 231.375656][ T8397] netlink: 108 bytes leftover after parsing attributes in process `syz.2.732'. [ 231.972170][ T8419] fuse: Bad value for 'fd' [ 233.465754][ T8439] netlink: 'syz.4.744': attribute type 12 has an invalid length. [ 233.479840][ T8439] netlink: 'syz.4.744': attribute type 29 has an invalid length. [ 233.488864][ T8439] netlink: 148 bytes leftover after parsing attributes in process `syz.4.744'. [ 233.582310][ T8445] fuse: Unknown parameter '0x0000000000000006' [ 233.714875][ T8446] syzkaller0: entered promiscuous mode [ 233.755626][ T8446] syzkaller0: entered allmulticast mode [ 234.242360][ T8449] netlink: 108 bytes leftover after parsing attributes in process `syz.4.747'. [ 234.346239][ T8451] netlink: 'syz.4.748': attribute type 12 has an invalid length. [ 234.364410][ T8451] netlink: 'syz.4.748': attribute type 29 has an invalid length. [ 234.372661][ T8451] netlink: 148 bytes leftover after parsing attributes in process `syz.4.748'. [ 234.383811][ T8451] netlink: 51 bytes leftover after parsing attributes in process `syz.4.748'. [ 234.576634][ T8407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.644358][ T8459] netlink: 592 bytes leftover after parsing attributes in process `syz.3.751'. [ 234.675760][ T5916] IPVS: starting estimator thread 0... [ 234.755169][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.752'. [ 234.787297][ T8460] IPVS: using max 24 ests per chain, 57600 per kthread [ 235.033736][ T8465] syzkaller0: entered promiscuous mode [ 235.052521][ T8465] syzkaller0: entered allmulticast mode [ 235.065276][ T8471] syzkaller0: entered promiscuous mode [ 235.073900][ T8471] syzkaller0: entered allmulticast mode [ 235.380486][ T8478] tipc: Enabled bearer , priority 0 [ 235.450393][ T8475] tipc: Disabling bearer [ 235.574137][ T8486] netlink: 108 bytes leftover after parsing attributes in process `syz.3.760'. [ 235.798722][ T8495] fuse: Unknown parameter '0x0000000000000006' [ 236.307205][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 236.315348][ C1] lec:lec_tx_timeout: lec0 [ 236.327251][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 236.793129][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 237.125800][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 237.409373][ T8535] netlink: 168 bytes leftover after parsing attributes in process `syz.2.773'. [ 237.766153][ T8529] syzkaller0: entered promiscuous mode [ 237.783692][ T8529] syzkaller0: entered allmulticast mode [ 237.852307][ T8548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.774'. [ 239.193894][ T8528] pim6reg: entered allmulticast mode [ 239.208914][ T8528] pim6reg: left allmulticast mode [ 239.300637][ T8560] netlink: 'syz.4.780': attribute type 12 has an invalid length. [ 239.322308][ T8560] netlink: 'syz.4.780': attribute type 29 has an invalid length. [ 239.339270][ T8560] __nla_validate_parse: 1 callbacks suppressed [ 239.339294][ T8560] netlink: 148 bytes leftover after parsing attributes in process `syz.4.780'. [ 240.358015][ T8603] fuse: Unknown parameter 'user_id00000000000000000000' [ 240.632476][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.795'. [ 241.010890][ T8614] tipc: Enabled bearer , priority 0 [ 241.080065][ T8614] tipc: Resetting bearer [ 241.197869][ T8613] tipc: Disabling bearer [ 241.328430][ T8622] fuse: Unknown parameter 'fd0x0000000000000006' [ 241.337324][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 241.345370][ C1] lec:lec_tx_timeout: lec0 [ 241.350846][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.162666][ T24] tipc: Node number set to 888599558 [ 242.482821][ T8577] pim6reg: entered allmulticast mode [ 242.511874][ T8577] pim6reg: left allmulticast mode [ 242.896417][ T8637] fuse: Bad value for 'rootmode' [ 242.952332][ T8639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.809'. [ 243.751039][ T8658] tipc: Enabled bearer , priority 0 [ 243.824765][ T8665] syzkaller0: entered promiscuous mode [ 243.836982][ T8665] syzkaller0: entered allmulticast mode [ 243.900024][ T8667] fuse: Unknown parameter 'fd0x0000000000000006' [ 244.945824][ T8657] tipc: Resetting bearer [ 245.052562][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 245.213270][ T8657] tipc: Disabling bearer [ 245.328383][ T8684] fuse: Bad value for 'rootmode' [ 245.680210][ T8683] syzkaller0: entered promiscuous mode [ 245.695927][ T8683] syzkaller0: entered allmulticast mode [ 246.367343][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 246.375384][ C1] lec:lec_tx_timeout: lec0 [ 246.380414][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 246.465033][ T8728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.833'. [ 246.812628][ T8731] syzkaller0: entered promiscuous mode [ 246.823197][ T8737] fuse: Bad value for 'rootmode' [ 246.832467][ T8731] syzkaller0: entered allmulticast mode [ 246.983301][ T8741] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 247.119789][ T8739] tipc: Started in network mode [ 247.124774][ T8739] tipc: Node identity 0e2575e6e004, cluster identity 4711 [ 247.144976][ T8739] tipc: Enabled bearer , priority 0 [ 247.269654][ T8744] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 247.283423][ T8744] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 247.462885][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 247.472905][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 247.477045][ T8745] bond1: (slave gretap1): making interface the new active one [ 247.528258][ T8745] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 247.590269][ T8730] tipc: Resetting bearer [ 247.641686][ T8730] tipc: Disabling bearer [ 247.670678][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 247.701526][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 247.982499][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.849'. [ 248.139301][ T8778] syzkaller0: entered promiscuous mode [ 248.167276][ T8778] syzkaller0: entered allmulticast mode [ 248.256844][ T8785] fuse: Unknown parameter 'use00000000000000000000' [ 248.497343][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.854'. [ 248.779799][ T8800] tipc: Enabled bearer , priority 0 [ 248.851494][ T8800] tipc: Resetting bearer [ 248.967974][ T8799] tipc: Disabling bearer [ 249.038238][ T8809] netlink: 76 bytes leftover after parsing attributes in process `syz.4.860'. [ 249.061457][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.864'. [ 250.193818][ T8840] fuse: Unknown parameter 'use00000000000000000000' [ 250.518217][ T8845] netlink: 'syz.5.871': attribute type 1 has an invalid length. [ 250.685986][ T8862] __nla_validate_parse: 4 callbacks suppressed [ 250.686013][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 250.804038][ T8852] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 250.866393][ T8852] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 251.387246][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 251.395516][ C1] lec:lec_tx_timeout: lec0 [ 251.400636][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 251.515079][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.880'. [ 252.353325][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 252.362596][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 252.502901][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 252.595955][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 254.140410][ T8952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.895'. [ 255.132809][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.140125][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.182623][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 256.217872][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 256.359992][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 256.393190][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 256.417182][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 256.425278][ C1] lec:lec_tx_timeout: lec0 [ 256.430552][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 257.126937][ T9019] syzkaller0: entered promiscuous mode [ 257.158875][ T9019] syzkaller0: entered allmulticast mode [ 257.207495][ T5827] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 257.562886][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 258.157528][ T5827] usb 2-1: config 0 has an invalid interface number: 199 but max is 0 [ 258.165752][ T5827] usb 2-1: config 0 has no interface number 0 [ 258.249800][ T5827] usb 2-1: too many endpoints for config 0 interface 199 altsetting 33: 31, using maximum allowed: 30 [ 258.297285][ T5827] usb 2-1: config 0 interface 199 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 258.357338][ T5827] usb 2-1: config 0 interface 199 has no altsetting 0 [ 258.364188][ T5827] usb 2-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 258.412431][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.453613][ T5827] usb 2-1: config 0 descriptor?? [ 258.699602][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.740470][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.206578][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 259.254987][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 259.401575][ T5827] usb 2-1: string descriptor 0 read error: -71 [ 259.430966][ T5827] usblcd 2-1:0.199: USBLCD model not supported. [ 259.466141][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 259.476891][ T5827] usb 2-1: USB disconnect, device number 8 [ 259.502656][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 261.505520][ T9079] netlink: 592 bytes leftover after parsing attributes in process `syz.4.933'. [ 261.528130][ T9078] tipc: Enabling of bearer rejected, failed to enable media [ 262.186013][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 262.217186][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 262.225236][ C1] lec:lec_tx_timeout: lec0 [ 262.230179][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 262.235825][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 262.474600][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 262.515360][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 263.338625][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.944'. [ 263.502176][ T9122] fuse: Unknown parameter 'user_id00000000000000000000' [ 264.885261][ T9145] netlink: 'syz.4.949': attribute type 12 has an invalid length. [ 264.924032][ T9145] netlink: 'syz.4.949': attribute type 29 has an invalid length. [ 264.951433][ T9145] netlink: 148 bytes leftover after parsing attributes in process `syz.4.949'. [ 264.983169][ T9145] netlink: 'syz.4.949': attribute type 2 has an invalid length. [ 265.011871][ T9145] netlink: 15 bytes leftover after parsing attributes in process `syz.4.949'. [ 266.146354][ T9159] tipc: Enabling of bearer rejected, failed to enable media [ 266.954175][ T9189] syzkaller0: entered promiscuous mode [ 266.962421][ T9198] netlink: 100 bytes leftover after parsing attributes in process `syz.2.959'. [ 266.970509][ T9189] syzkaller0: entered allmulticast mode [ 267.247336][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 267.255450][ C1] lec:lec_tx_timeout: lec0 [ 267.260138][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 267.427993][ T9204] syzkaller0: entered promiscuous mode [ 267.433530][ T9204] syzkaller0: entered allmulticast mode [ 267.983990][ T9204] tipc: Enabled bearer , priority 0 [ 268.223386][ T9202] tipc: Resetting bearer [ 268.350399][ T9202] tipc: Disabling bearer [ 268.542267][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.964'. [ 268.647482][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 268.656306][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 269.039882][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 269.100171][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 269.231056][ T9253] netlink: 100 bytes leftover after parsing attributes in process `syz.5.972'. [ 269.988712][ T9273] syzkaller0: entered promiscuous mode [ 269.994806][ T9273] syzkaller0: entered allmulticast mode [ 270.942315][ T9283] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 271.123872][ T9287] netlink: 'syz.4.984': attribute type 12 has an invalid length. [ 271.157358][ T9287] netlink: 'syz.4.984': attribute type 29 has an invalid length. [ 271.178508][ T9287] netlink: 148 bytes leftover after parsing attributes in process `syz.4.984'. [ 271.209539][ T9287] netlink: 'syz.4.984': attribute type 2 has an invalid length. [ 271.245934][ T9287] netlink: 15 bytes leftover after parsing attributes in process `syz.4.984'. [ 271.433248][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 272.277175][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 272.285261][ C1] lec:lec_tx_timeout: lec0 [ 272.290103][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 272.871047][ T30] audit: type=1326 audit(1773670863.738:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9323 comm="syz.2.996" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f026ef9c799 code=0x0 [ 273.995456][ T9340] syzkaller0: entered promiscuous mode [ 274.026528][ T9340] syzkaller0: entered allmulticast mode [ 274.089990][ T9339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.174485][ T9350] __nla_validate_parse: 4 callbacks suppressed [ 274.174511][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 274.216712][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 274.354761][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 274.381120][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 274.518493][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 274.689388][ T9] usb 3-1: config 0 has no interfaces? [ 274.700256][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 274.715675][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.725306][ T9] usb 3-1: Product: syz [ 274.762629][ T9] usb 3-1: Manufacturer: syz [ 274.767513][ T9] usb 3-1: SerialNumber: syz [ 274.775554][ T9] usb 3-1: config 0 descriptor?? [ 274.938309][ T9370] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1009'. [ 275.181464][ T790] usb 3-1: USB disconnect, device number 4 [ 276.084532][ T9387] fuse: Unknown parameter '0x0000000000000003' [ 276.925358][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 276.968187][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 277.038021][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 277.152296][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 277.191457][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 277.297223][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 277.305342][ C1] lec:lec_tx_timeout: lec0 [ 277.310335][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 278.936679][ T9452] fuse: Unknown parameter '0x0000000000000003' [ 279.417850][ T9463] syzkaller0: entered promiscuous mode [ 279.467751][ T9463] syzkaller0: entered allmulticast mode [ 279.725166][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 279.777427][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1037'. [ 279.797110][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 279.818418][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1037'. [ 280.936558][ T9501] fuse: Unknown parameter '0x0000000000000003' [ 281.139477][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1046'. [ 281.936181][ T9525] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1053'. [ 282.317186][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 282.325289][ C1] lec:lec_tx_timeout: lec0 [ 282.330019][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 282.947274][ T5901] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 283.181595][ T5901] usb 5-1: config 0 has no interfaces? [ 283.217393][ T5901] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 283.247593][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.251858][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 283.306873][ T5901] usb 5-1: Product: syz [ 283.333842][ T5901] usb 5-1: Manufacturer: syz [ 283.356877][ T5901] usb 5-1: SerialNumber: syz [ 283.428963][ T5901] usb 5-1: config 0 descriptor?? [ 283.871615][ T5827] usb 5-1: USB disconnect, device number 2 [ 284.414489][ T9553] tipc: Enabling of bearer rejected, failed to enable media [ 284.437507][ T9557] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1064'. [ 284.461976][ T9553] syzkaller0: entered promiscuous mode [ 284.486408][ T9553] syzkaller0: entered allmulticast mode [ 285.577478][ T790] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 285.806915][ T790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.829961][ T790] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 285.875988][ T790] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 285.942345][ T790] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 285.961201][ T9582] syzkaller0: entered promiscuous mode [ 285.962526][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.991142][ T9582] syzkaller0: entered allmulticast mode [ 286.001412][ T9572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.031291][ T790] hub 4-1:1.0: bad descriptor, ignoring hub [ 286.059041][ T790] hub 4-1:1.0: probe with driver hub failed with error -5 [ 286.078819][ T790] cdc_wdm 4-1:1.0: skipping garbage [ 286.107852][ T790] cdc_wdm 4-1:1.0: skipping garbage [ 286.145756][ T790] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 286.161003][ T790] cdc_wdm 4-1:1.0: Unknown control protocol [ 286.419822][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.452254][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.458992][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.465310][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.471915][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.478243][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.484846][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.491128][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.497732][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.505970][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.512579][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.519500][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.526120][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.532677][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.539280][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.545651][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.552253][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.558533][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.563548][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.565131][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.579368][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 286.584802][ T9587] syzkaller0: entered promiscuous mode [ 286.585972][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 286.604467][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 286.627281][ T9587] syzkaller0: entered allmulticast mode [ 286.796659][ T9594] netlink: 592 bytes leftover after parsing attributes in process `syz.4.1079'. [ 286.830719][ T790] usb 4-1: USB disconnect, device number 7 [ 287.118417][ T9597] netlink: 'syz.4.1080': attribute type 12 has an invalid length. [ 287.146914][ T9597] netlink: 'syz.4.1080': attribute type 29 has an invalid length. [ 287.177419][ T9597] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1080'. [ 287.186500][ T9597] netlink: 'syz.4.1080': attribute type 2 has an invalid length. [ 287.218576][ T9597] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1080'. [ 287.337183][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 287.345278][ C1] lec:lec_tx_timeout: lec0 [ 287.350109][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 287.867609][ T24] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 288.065025][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.105536][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.147302][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 288.174347][ T24] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 288.217285][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.259328][ T9607] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.288275][ T24] hub 4-1:1.0: bad descriptor, ignoring hub [ 288.294245][ T24] hub 4-1:1.0: probe with driver hub failed with error -5 [ 288.348128][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 288.353582][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 288.399389][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 288.405380][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 289.320987][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.390952][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.499654][ T9626] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1093'. [ 289.529066][ T5827] usb 4-1: USB disconnect, device number 8 [ 289.640633][ T9630] netlink: 'syz.4.1092': attribute type 12 has an invalid length. [ 289.687211][ T9630] netlink: 'syz.4.1092': attribute type 29 has an invalid length. [ 289.703900][ T9630] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1092'. [ 289.750313][ T9632] netlink: 'syz.1.1095': attribute type 12 has an invalid length. [ 289.797363][ T9632] netlink: 'syz.1.1095': attribute type 29 has an invalid length. [ 289.826270][ T9632] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1095'. [ 289.857006][ T9632] netlink: 'syz.1.1095': attribute type 2 has an invalid length. [ 289.876658][ T9632] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1095'. [ 290.060671][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 290.335432][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 290.353948][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1101'. [ 292.202184][ T9681] __nla_validate_parse: 2 callbacks suppressed [ 292.202210][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 292.314330][ T9676] netlink: 'syz.3.1109': attribute type 12 has an invalid length. [ 292.336180][ T9676] netlink: 'syz.3.1109': attribute type 29 has an invalid length. [ 292.345019][ T9676] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1109'. [ 292.367218][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 292.375342][ C1] lec:lec_tx_timeout: lec0 [ 292.381236][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 292.811913][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1112'. [ 293.418366][ T9700] fuse: Unknown parameter 'fd0x0000000000000003' [ 293.449516][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 293.482236][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1116'. [ 293.512241][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 293.542959][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1116'. [ 294.796197][ T9721] syzkaller0: entered promiscuous mode [ 294.821912][ T9721] syzkaller0: entered allmulticast mode [ 294.881040][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1124'. [ 295.667206][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1127'. [ 295.841959][ T9737] syzkaller0: entered promiscuous mode [ 295.847775][ T9737] syzkaller0: entered allmulticast mode [ 296.680133][ T9750] Bluetooth: MGMT ver 1.23 [ 296.703968][ T9752] netlink: 'syz.2.1133': attribute type 23 has an invalid length. [ 296.732849][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 297.397179][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 297.405260][ C1] lec:lec_tx_timeout: lec0 [ 297.417228][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.380629][ T9772] syzkaller0: entered promiscuous mode [ 298.390014][ T9772] syzkaller0: entered allmulticast mode [ 301.175857][ T9775] pim6reg: entered allmulticast mode [ 301.270014][ T9775] pim6reg: left allmulticast mode [ 301.869148][ T9839] Illegal XDP return value 32768 on prog (id 32) dev syz_tun, expect packet loss! [ 302.221292][ T9849] netlink: 'syz.1.1165': attribute type 23 has an invalid length. [ 302.231837][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 302.268122][ T9847] syzkaller0: entered promiscuous mode [ 302.276930][ T9847] syzkaller0: entered allmulticast mode [ 302.427184][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 302.435376][ C1] lec:lec_tx_timeout: lec0 [ 302.440007][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 302.625473][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1166'. [ 303.617122][ T9858] syzkaller0: entered promiscuous mode [ 303.628246][ T9858] syzkaller0: entered allmulticast mode [ 308.207194][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 308.215364][ C1] lec:lec_tx_timeout: lec0 [ 308.220331][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.247227][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 313.255293][ C1] lec:lec_tx_timeout: lec0 [ 313.261345][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 314.684575][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1186'. [ 314.980732][ T9940] fuse: Unknown parameter '0x0000000000000007' [ 315.000747][ T9923] syzkaller0: entered promiscuous mode [ 315.025595][ T9923] syzkaller0: entered allmulticast mode [ 315.480992][ T9946] Set syz1 is full, maxelem 65536 reached [ 316.544663][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.551100][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.857340][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 317.048036][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 317.064533][ T9963] syzkaller0: entered promiscuous mode [ 317.082125][ T24] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 317.103073][ T9963] syzkaller0: entered allmulticast mode [ 317.119357][ T24] usb 4-1: config 0 has no interface number 0 [ 317.146943][ T24] usb 4-1: too many endpoints for config 0 interface 199 altsetting 33: 31, using maximum allowed: 30 [ 317.194967][ T24] usb 4-1: config 0 interface 199 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 317.275928][ T24] usb 4-1: config 0 interface 199 has no altsetting 0 [ 317.312912][ T24] usb 4-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 317.357338][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.410076][ T24] usb 4-1: config 0 descriptor?? [ 317.656929][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.677621][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.753332][ T24] usb 4-1: string descriptor 0 read error: -71 [ 317.781740][ T24] usblcd 4-1:0.199: USBLCD model not supported. [ 317.820875][ T24] usb 4-1: USB disconnect, device number 9 [ 318.277168][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.285448][ C1] lec:lec_tx_timeout: lec0 [ 318.290065][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.024145][ T9984] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1201'. [ 319.247357][ T9990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1202'. [ 319.557493][ T24] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 319.716836][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.732612][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 319.756794][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.770100][ T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 319.790114][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.832372][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 319.854513][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 319.874244][ T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 320.158496][ T5901] usb 2-1: USB disconnect, device number 9 [ 320.517384][ T24] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 320.689673][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.730322][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.749679][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.793314][ T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 320.813768][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.832040][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 320.846582][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 320.860718][ T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 321.007495][ T5939] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 321.177628][ T5901] usb 2-1: USB disconnect, device number 10 [ 321.179386][ T5939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.194578][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 321.207401][ T5939] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.238432][ T5939] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 321.248229][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.293267][ T5939] hub 3-1:1.0: bad descriptor, ignoring hub [ 321.306169][ T5939] hub 3-1:1.0: probe with driver hub failed with error -5 [ 321.326447][ T5939] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 321.650836][ T5939] usb 3-1: USB disconnect, device number 5 [ 321.856564][T10032] fuse: Unknown parameter '0x0000000000000007' [ 322.008765][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 322.219349][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.262990][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 322.312833][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.390559][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 322.445923][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.521375][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 322.551260][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 322.599739][ T9] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 322.651369][T10046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1216'. [ 322.917865][ T9] usb 3-1: USB disconnect, device number 6 [ 322.973288][T10047] syzkaller0: entered promiscuous mode [ 323.007625][T10047] syzkaller0: entered allmulticast mode [ 323.307211][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 323.315366][ C1] lec:lec_tx_timeout: lec0 [ 323.320674][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.064231][ T5901] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 324.247287][ T5901] usb 3-1: device descriptor read/64, error -71 [ 324.370509][T10074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.507892][ T5901] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 324.657853][ T5901] usb 3-1: device descriptor read/64, error -71 [ 324.778447][ T5901] usb usb3-port1: attempt power cycle [ 325.118463][ T5901] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 325.147923][ T5901] usb 3-1: device descriptor read/8, error -71 [ 325.537230][ T5901] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 325.580808][ T5901] usb 3-1: device descriptor read/8, error -71 [ 325.725624][ T5901] usb usb3-port1: unable to enumerate USB device [ 327.305493][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'. [ 327.690281][T10103] binder: 10102:10103 ioctl 4018620d 0 returned -22 [ 327.802010][T10111] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1240'. [ 327.819125][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1239'. [ 327.993954][T10118] syzkaller0: entered promiscuous mode [ 328.002366][T10118] syzkaller0: entered allmulticast mode [ 328.020638][T10118] tipc: Enabled bearer , priority 0 [ 328.031353][T10116] tipc: Resetting bearer [ 328.062524][T10116] tipc: Disabling bearer [ 328.108517][T10121] syzkaller0: entered promiscuous mode [ 328.114340][T10121] syzkaller0: entered allmulticast mode [ 328.327430][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 328.335646][ C1] lec:lec_tx_timeout: lec0 [ 328.341014][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.121067][T10150] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1254'. [ 329.548896][T10158] syzkaller0: entered promiscuous mode [ 329.577056][T10158] syzkaller0: entered allmulticast mode [ 329.695242][T10168] netlink: 592 bytes leftover after parsing attributes in process `syz.5.1258'. [ 329.937226][ T5939] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 330.097240][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 330.106826][ T5939] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 330.118760][ T5939] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.131188][ T5939] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.142756][ T5939] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.154011][ T5939] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.167577][ T5939] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 330.176675][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.187446][ T5901] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 330.192833][ T5939] usbtmc 4-1:16.0: bulk endpoints not found [ 330.350475][ T5901] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.372448][ T5901] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 330.385169][ T5901] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.400872][ T5901] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 330.410018][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.481402][ T5901] hub 6-1:1.0: bad descriptor, ignoring hub [ 330.497285][ T5901] hub 6-1:1.0: probe with driver hub failed with error -5 [ 330.515451][ T5901] cdc_wdm 6-1:1.0: skipping garbage [ 330.538756][ T5901] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 330.688903][T10186] syzkaller0: entered promiscuous mode [ 330.704618][T10186] syzkaller0: entered allmulticast mode [ 330.719632][T10190] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1268'. [ 330.847881][ T5939] usb 6-1: USB disconnect, device number 9 [ 331.149158][ T5827] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 331.177461][ T5939] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 331.221168][T10200] pim6reg: entered allmulticast mode [ 331.231045][T10199] syzkaller0: entered promiscuous mode [ 331.236563][T10199] syzkaller0: entered allmulticast mode [ 331.280145][T10188] pim6reg: left allmulticast mode [ 331.334779][T10198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.352047][ T5827] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 331.361292][ T5939] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.373209][ T5827] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 331.393330][ T5939] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 331.393361][ T5827] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.412879][ T5939] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.433194][ T5939] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 331.443321][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.471983][ T5827] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 331.481461][ T5939] hub 6-1:1.0: bad descriptor, ignoring hub [ 331.494072][ T5939] hub 6-1:1.0: probe with driver hub failed with error -5 [ 331.494088][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.506860][T10205] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1274'. [ 331.519930][ T5939] cdc_wdm 6-1:1.0: skipping garbage [ 331.525180][ T5939] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 331.567415][ T5827] hub 5-1:1.0: bad descriptor, ignoring hub [ 331.578271][ T5827] hub 5-1:1.0: probe with driver hub failed with error -5 [ 331.596379][ T5827] cdc_wdm 5-1:1.0: skipping garbage [ 331.605878][ T5827] cdc_wdm 5-1:1.0: skipping garbage [ 331.617499][ T5827] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 331.847582][ T5827] usb 6-1: USB disconnect, device number 10 [ 331.970908][ T5939] usb 5-1: USB disconnect, device number 3 [ 332.317559][ T5939] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 332.480100][ T5939] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 332.522000][ T5939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 332.544635][ T5939] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.598396][ T5939] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 332.623879][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.649297][T10231] pim6reg: entered allmulticast mode [ 332.683575][ T5939] hub 5-1:1.0: bad descriptor, ignoring hub [ 332.710361][ T5939] hub 5-1:1.0: probe with driver hub failed with error -5 [ 332.754964][ T5939] cdc_wdm 5-1:1.0: skipping garbage [ 332.757577][T10229] tipc: Enabled bearer , priority 0 [ 332.795633][ T5939] cdc_wdm 5-1:1.0: skipping garbage [ 332.816704][ T5939] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 332.834428][ T5827] usb 4-1: USB disconnect, device number 10 [ 332.918031][ T5939] usb 5-1: USB disconnect, device number 4 [ 332.926670][T10213] pim6reg: left allmulticast mode [ 333.044033][T10226] tipc: Resetting bearer [ 333.095582][T10230] syzkaller0: entered promiscuous mode [ 333.113445][T10230] syzkaller0: entered allmulticast mode [ 333.140290][T10222] tipc: Resetting bearer [ 333.244054][T10222] tipc: Disabling bearer [ 333.255352][ T5833] Bluetooth: hci4: Unable to find connection for big 0x00 [ 333.298165][T10248] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1282'. [ 333.347171][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 333.355341][ C1] lec:lec_tx_timeout: lec0 [ 333.360344][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 333.597389][T10256] netlink: 592 bytes leftover after parsing attributes in process `syz.5.1287'. [ 333.887518][T10262] syzkaller0: entered promiscuous mode [ 333.913445][T10262] syzkaller0: entered allmulticast mode [ 334.422637][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'. [ 336.124677][ T5833] Bluetooth: hci0: Unable to find connection for big 0x00 [ 336.144394][T10290] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1298'. [ 338.367390][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 338.375478][ C1] lec:lec_tx_timeout: lec0 [ 338.382072][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 338.530722][T10313] netlink: 'syz.0.1304': attribute type 12 has an invalid length. [ 338.549078][T10320] 9p: Bad value for 'rfdno' [ 338.558932][T10313] netlink: 'syz.0.1304': attribute type 29 has an invalid length. [ 338.570579][T10313] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1304'. [ 338.611176][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 339.037223][ T5901] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 339.058850][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 339.101260][T10340] netlink: 'syz.4.1314': attribute type 12 has an invalid length. [ 339.148074][T10340] netlink: 'syz.4.1314': attribute type 29 has an invalid length. [ 339.188522][T10340] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1314'. [ 339.200927][T10340] netlink: 'syz.4.1314': attribute type 2 has an invalid length. [ 339.209172][T10340] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1314'. [ 339.237340][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 339.254970][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.274655][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.313492][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 339.360179][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 339.377632][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.420137][ T5901] usb 3-1: Product: syz [ 339.424373][ T5901] usb 3-1: Manufacturer: syz [ 339.467496][ T5901] usb 3-1: SerialNumber: syz [ 339.510083][ T5901] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 339.543435][ T5901] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 339.561846][ T5901] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 339.774500][ T5827] usb 3-1: USB disconnect, device number 11 [ 340.272965][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 340.925839][T10374] netlink: 'syz.1.1324': attribute type 12 has an invalid length. [ 340.965674][T10374] netlink: 'syz.1.1324': attribute type 29 has an invalid length. [ 340.989260][T10374] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1324'. [ 341.209600][T10383] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1328'. [ 341.284657][T10381] netlink: 'syz.5.1329': attribute type 12 has an invalid length. [ 341.337638][T10381] netlink: 'syz.5.1329': attribute type 29 has an invalid length. [ 341.414354][T10381] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1329'. [ 341.615683][T10381] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1329'. [ 342.246284][T10402] tipc: Enabled bearer , priority 0 [ 342.289538][T10402] syzkaller0: entered promiscuous mode [ 342.316098][T10402] syzkaller0: entered allmulticast mode [ 342.372262][T10402] tipc: Resetting bearer [ 342.412486][T10400] tipc: Resetting bearer [ 342.458808][T10400] tipc: Disabling bearer [ 342.538029][T10415] warning: `syz.3.1341' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 342.763592][T10421] netlink: 'syz.2.1344': attribute type 23 has an invalid length. [ 343.397163][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 343.405246][ C1] lec:lec_tx_timeout: lec0 [ 343.410386][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 343.995486][T10446] __nla_validate_parse: 8 callbacks suppressed [ 343.995512][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 344.247322][ T5939] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 344.430055][ T5939] usb 1-1: config 0 has no interfaces? [ 344.440317][ T5939] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 344.506274][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.792723][ T5939] usb 1-1: Product: syz [ 344.807679][ T5939] usb 1-1: Manufacturer: syz [ 344.812672][ T5939] usb 1-1: SerialNumber: syz [ 345.564138][ T5939] usb 1-1: config 0 descriptor?? [ 345.955804][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'. [ 346.035332][T10470] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 346.055728][T10472] validate_nla: 5 callbacks suppressed [ 346.055752][T10472] netlink: 'syz.4.1363': attribute type 23 has an invalid length. [ 346.087673][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'. [ 346.134348][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'. [ 346.145887][T10472] netlink: 'syz.4.1363': attribute type 23 has an invalid length. [ 346.154944][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'. [ 346.180811][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1362'. [ 346.544248][T10486] netlink: 'syz.4.1366': attribute type 12 has an invalid length. [ 346.566946][T10486] netlink: 'syz.4.1366': attribute type 29 has an invalid length. [ 346.581026][T10486] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1366'. [ 348.080875][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'. [ 348.171215][T10502] syzkaller0: entered promiscuous mode [ 348.185912][ T5901] usb 1-1: USB disconnect, device number 7 [ 348.218994][T10502] syzkaller0: entered allmulticast mode [ 348.417175][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 348.425280][ C1] lec:lec_tx_timeout: lec0 [ 348.430201][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 348.617340][ T5827] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 348.619831][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 348.650387][T10525] netlink: 'syz.3.1379': attribute type 23 has an invalid length. [ 348.665118][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 348.734632][T10525] netlink: 'syz.3.1379': attribute type 23 has an invalid length. [ 348.802074][ T5827] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.827228][ T5827] usb 2-1: config 0 has no interface number 0 [ 348.838961][T10531] netlink: 'syz.5.1382': attribute type 12 has an invalid length. [ 348.872665][ T5827] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 348.887264][T10531] netlink: 'syz.5.1382': attribute type 29 has an invalid length. [ 348.905803][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.928380][ T5827] usb 2-1: Product: syz [ 348.932685][ T5827] usb 2-1: Manufacturer: syz [ 348.937904][ T5827] usb 2-1: SerialNumber: syz [ 348.968171][ T5827] usb 2-1: config 0 descriptor?? [ 349.088457][ T5901] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 349.218655][ T5827] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 349.258694][ T5973] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 349.267839][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 349.283469][ T5827] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 349.309051][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.320369][ T5827] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 349.330698][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.343290][ T5827] usb 2-1: media controller created [ 349.348854][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.380618][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 349.392190][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.400860][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.409119][ T5901] usb 3-1: Product: syz [ 349.414968][ T5901] usb 3-1: Manufacturer: syz [ 349.424164][ T5901] usb 3-1: SerialNumber: syz [ 349.461691][ T5973] usb 4-1: config 0 has no interfaces? [ 349.661957][ T5973] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 349.686914][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.737212][ T5973] usb 4-1: Product: syz [ 349.742057][ T5973] usb 4-1: Manufacturer: syz [ 349.811920][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 349.823032][ T5827] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 349.844975][ T5973] usb 4-1: SerialNumber: syz [ 350.061344][ T5901] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 350.080799][ T5973] usb 4-1: config 0 descriptor?? [ 350.096954][ T5901] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 350.109935][ T5901] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 350.144951][ T9] usb 5-1: config 0 has no interfaces? [ 350.180386][ T9] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 350.217657][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.225720][ T9] usb 5-1: Product: syz [ 350.297178][ T9] usb 5-1: Manufacturer: syz [ 350.328054][ T9] usb 5-1: SerialNumber: syz [ 350.335071][ T5827] usb 2-1: USB disconnect, device number 11 [ 350.367496][ T9] usb 5-1: config 0 descriptor?? [ 350.436317][ T5916] usb 3-1: USB disconnect, device number 12 [ 351.324124][T10535] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.358532][T10564] netlink: 'syz.1.1390': attribute type 24 has an invalid length. [ 351.451314][ T5827] usb 4-1: USB disconnect, device number 11 [ 351.580588][ T5901] usb 5-1: USB disconnect, device number 5 [ 351.833654][T10573] __nla_validate_parse: 4 callbacks suppressed [ 351.833688][T10573] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1394'. [ 351.927483][ T5916] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 352.081530][T10583] netlink: 'syz.5.1397': attribute type 12 has an invalid length. [ 352.091958][T10583] netlink: 'syz.5.1397': attribute type 29 has an invalid length. [ 352.102123][ T5916] usb 1-1: config 0 has no interfaces? [ 352.108557][T10583] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1397'. [ 352.122648][ T5916] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 352.151891][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.199313][ T5916] usb 1-1: Product: syz [ 352.211527][ T5916] usb 1-1: Manufacturer: syz [ 352.226535][ T5916] usb 1-1: SerialNumber: syz [ 352.256628][ T5916] usb 1-1: config 0 descriptor?? [ 353.645250][ T9] usb 1-1: USB disconnect, device number 8 [ 354.207207][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 354.215348][ C0] lec:lec_tx_timeout: lec0 [ 354.227304][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 359.247163][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 359.255216][ C1] lec:lec_tx_timeout: lec0 [ 359.267209][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.006783][T10670] syzkaller0: entered promiscuous mode [ 360.037190][T10670] syzkaller0: entered allmulticast mode [ 361.300336][T10701] fuse: Bad value for 'fd' [ 363.173162][T10728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1436'. [ 364.277146][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 364.285243][ C1] lec:lec_tx_timeout: lec0 [ 364.290810][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 366.657246][ T5916] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 366.847593][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 366.881095][ T5916] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 366.906629][ T5916] usb 1-1: config 0 has no interface number 0 [ 366.926778][ T5916] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 366.954192][ T5916] usb 1-1: config 0 interface 89 has no altsetting 0 [ 366.989345][ T5916] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 367.051573][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.127655][ T5916] usb 1-1: Product: syz [ 367.144157][ T5916] usb 1-1: Manufacturer: syz [ 367.180437][ T5916] usb 1-1: SerialNumber: syz [ 367.216994][ T5916] usb 1-1: config 0 descriptor?? [ 367.252709][ T5916] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 367.293183][ T5916] em28xx 1-1:0.89: Video interface 89 found: [ 367.517217][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 367.517773][ T5916] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 367.657981][ T5916] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 367.666268][ T5916] em28xx 1-1:0.89: board has no eeprom [ 367.667894][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 367.703578][ T9] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 367.722131][ T9] usb 2-1: config 0 has no interface number 0 [ 367.737871][ T9] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.758150][ T9] usb 2-1: config 0 interface 89 has no altsetting 0 [ 367.759227][ T5916] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 367.787276][ T5916] em28xx 1-1:0.89: analog set to bulk mode. [ 367.793689][ T790] em28xx 1-1:0.89: Registering V4L2 extension [ 367.794308][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 367.827483][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.865994][ T9] usb 2-1: Product: syz [ 367.886256][ T9] usb 2-1: Manufacturer: syz [ 367.903975][ T9] usb 2-1: SerialNumber: syz [ 367.938765][ T5916] usb 1-1: USB disconnect, device number 9 [ 367.940640][ T9] usb 2-1: config 0 descriptor?? [ 367.975107][ T790] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 367.989303][ T5916] em28xx 1-1:0.89: Disconnecting em28xx [ 368.007849][ T9] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 368.048014][ T790] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 368.055229][ T790] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 368.059709][ T9] em28xx 2-1:0.89: Video interface 89 found: [ 368.077568][ T790] em28xx 1-1:0.89: No AC97 audio processor [ 368.137260][ T790] usb 1-1: Decoder not found [ 368.142083][ T790] em28xx 1-1:0.89: failed to create media graph [ 368.157226][ T790] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 368.178015][ T790] em28xx 1-1:0.89: Registering snapshot button... [ 368.217037][ T790] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input5 [ 368.288152][ T9] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 368.297753][ T790] em28xx 1-1:0.89: Remote control support is not available for this card. [ 368.308849][ T5916] em28xx 1-1:0.89: Closing input extension [ 368.335495][ T5916] em28xx 1-1:0.89: Deregistering snapshot button [ 368.374097][ T9] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 368.398017][ T9] em28xx 2-1:0.89: board has no eeprom [ 368.457745][ T5916] em28xx 1-1:0.89: Freeing device [ 368.458506][ T9] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 368.472839][ T9] em28xx 2-1:0.89: analog set to bulk mode. [ 368.489219][ T5827] em28xx 2-1:0.89: Registering V4L2 extension [ 368.530587][ T9] usb 2-1: USB disconnect, device number 12 [ 368.578842][ T9] em28xx 2-1:0.89: Disconnecting em28xx [ 368.715253][ T5827] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 368.737530][ T5827] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 368.744630][ T5827] em28xx 2-1:0.89: No AC97 audio processor [ 368.777868][ T5827] usb 2-1: Decoder not found [ 368.782534][ T5827] em28xx 2-1:0.89: failed to create media graph [ 368.790006][ T5827] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 368.798849][ T5827] em28xx 2-1:0.89: Registering snapshot button... [ 368.812681][ T5827] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input6 [ 368.834491][ T5827] em28xx 2-1:0.89: Remote control support is not available for this card. [ 368.843167][ T9] em28xx 2-1:0.89: Closing input extension [ 368.852649][ T9] em28xx 2-1:0.89: Deregistering snapshot button [ 368.902520][ T9] em28xx 2-1:0.89: Freeing device [ 369.297175][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 369.305231][ C1] lec:lec_tx_timeout: lec0 [ 369.317233][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 374.327150][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 374.335272][ C1] lec:lec_tx_timeout: lec0 [ 374.340600][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 374.346725][ T5939] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 374.596899][ T5939] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.618189][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 374.777633][ T5939] usb 1-1: config 0 has no interface number 0 [ 374.903132][ T5939] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 374.937765][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 374.985839][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.999097][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.021610][ T5939] usb 1-1: Product: syz [ 375.043380][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.054520][ T5939] usb 1-1: Manufacturer: syz [ 375.075496][ T5939] usb 1-1: SerialNumber: syz [ 375.097585][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 375.123604][ T5939] usb 1-1: config 0 descriptor?? [ 375.157502][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 375.200296][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.218811][ T24] usb 2-1: Product: syz [ 375.228963][ T24] usb 2-1: Manufacturer: syz [ 375.257564][ T24] usb 2-1: SerialNumber: syz [ 375.302965][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 375.333187][ T24] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 375.341810][ T24] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 375.997233][ T5939] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 376.069570][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 376.099277][ T5901] usb 1-1: USB disconnect, device number 10 [ 376.130955][ T24] usb 2-1: USB disconnect, device number 13 [ 376.273672][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 376.426887][T10839] syzkaller0: entered promiscuous mode [ 376.443994][T10839] syzkaller0: entered allmulticast mode [ 377.776687][T10844] syzkaller0: entered promiscuous mode [ 377.792843][T10844] syzkaller0: entered allmulticast mode [ 377.982531][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.989161][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.347175][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 379.355235][ C1] lec:lec_tx_timeout: lec0 [ 379.367406][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 382.763070][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 383.800540][T10861] syzkaller0: entered promiscuous mode [ 383.806598][T10861] syzkaller0: entered allmulticast mode [ 384.377149][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 384.385317][ C1] lec:lec_tx_timeout: lec0 [ 384.390034][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.333624][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 387.127350][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 387.287300][ T24] usb 4-1: device descriptor read/64, error -71 [ 387.625370][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 387.857490][ T24] usb 4-1: device descriptor read/64, error -71 [ 388.028745][ T24] usb usb4-port1: attempt power cycle [ 388.400246][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 388.428117][ T24] usb 4-1: device descriptor read/8, error -71 [ 388.687313][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 389.397152][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 389.405336][ C1] lec:lec_tx_timeout: lec0 [ 389.410105][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 389.571871][ T24] usb 4-1: device not accepting address 15, error -71 [ 389.823758][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 389.836810][ T24] usb usb4-port1: unable to enumerate USB device [ 390.907843][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 391.736874][T10981] pim6reg: entered allmulticast mode [ 391.820766][T11016] mmap: syz.1.1508 (11016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 392.467654][T10981] pim6reg: left allmulticast mode [ 393.089576][T11012] syzkaller0: entered promiscuous mode [ 393.096201][T11012] syzkaller0: entered allmulticast mode [ 393.145747][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 393.231320][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 393.917351][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 394.109978][ T24] usb 4-1: config 0 has no interfaces? [ 394.120055][ T24] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 394.133246][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.148416][ T24] usb 4-1: Product: syz [ 394.163313][ T24] usb 4-1: Manufacturer: syz [ 394.173239][ T24] usb 4-1: SerialNumber: syz [ 394.197930][ T24] usb 4-1: config 0 descriptor?? [ 394.357201][ T5827] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 394.427211][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 394.435342][ C1] lec:lec_tx_timeout: lec0 [ 394.440029][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.538221][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.551683][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 394.598403][ T5827] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.647521][ T5827] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 394.687190][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.734773][ T5827] hub 1-1:1.0: bad descriptor, ignoring hub [ 394.737238][ T790] usb 4-1: USB disconnect, device number 16 [ 394.768872][ T5827] hub 1-1:1.0: probe with driver hub failed with error -5 [ 394.781700][ T5827] cdc_wdm 1-1:1.0: skipping garbage [ 394.797589][ T5827] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 395.050580][ T790] usb 1-1: USB disconnect, device number 11 [ 395.631226][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 395.931756][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 396.818739][ T790] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 397.187435][ T790] usb 3-1: device descriptor read/64, error -71 [ 397.279946][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1529'. [ 397.477357][ T790] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 397.561818][T11085] syzkaller0: entered promiscuous mode [ 397.567978][T11085] syzkaller0: entered allmulticast mode [ 397.727311][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 397.809146][ T790] usb 3-1: device descriptor read/64, error -71 [ 397.840510][ T5901] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 397.986851][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 398.135666][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.174727][ T5901] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 398.400419][ T790] usb usb3-port1: attempt power cycle [ 398.426255][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.436422][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 398.467495][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 398.487251][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.555672][ T5901] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 398.580568][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 398.608064][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.627023][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.659205][ T9] usb 4-1: Product: syz [ 398.667240][ T9] usb 4-1: Manufacturer: syz [ 398.682334][ T9] usb 4-1: SerialNumber: syz [ 398.699529][ T5901] hub 5-1:1.0: bad descriptor, ignoring hub [ 398.705567][ T5901] hub 5-1:1.0: probe with driver hub failed with error -5 [ 398.767316][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 398.779725][ T5901] cdc_wdm 5-1:1.0: skipping garbage [ 398.784971][ T5901] cdc_wdm 5-1:1.0: skipping garbage [ 398.805545][ T9] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 398.823649][ T5901] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 398.838948][ T9] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 398.877281][ T790] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 398.908127][ T790] usb 3-1: device descriptor read/8, error -71 [ 398.921948][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1539'. [ 398.942327][ T5901] usb 5-1: USB disconnect, device number 6 [ 399.057795][T11111] syzkaller0: entered promiscuous mode [ 399.074262][ T9] usb 4-1: USB disconnect, device number 17 [ 399.095632][T11111] syzkaller0: entered allmulticast mode [ 399.104332][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1539'. [ 399.179073][ T790] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 399.228459][ T790] usb 3-1: device descriptor read/8, error -71 [ 399.368681][ T790] usb usb3-port1: unable to enumerate USB device [ 399.802196][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'. [ 399.903458][T11127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1544'. [ 400.377136][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5940 ms [ 400.385457][ C1] lec:lec_tx_timeout: lec0 [ 403.160055][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1559'. [ 404.537948][T11186] netlink: 'syz.1.1563': attribute type 1 has an invalid length. [ 404.973754][T11197] Unsupported ieee802154 address type: 0 [ 405.873599][T11164] lec:lec_atm_close: lec0: Shut down! [ 407.349106][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 407.917887][ T5827] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 408.077503][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 408.084647][ T5827] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 408.098408][ T5827] usb 2-1: config 0 has no interface number 0 [ 408.104549][ T5827] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.148740][ T5827] usb 2-1: config 0 interface 89 has no altsetting 0 [ 408.190199][ T5827] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 408.205565][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.230339][ T5827] usb 2-1: Product: syz [ 408.245051][ T5827] usb 2-1: Manufacturer: syz [ 408.257229][ T5827] usb 2-1: SerialNumber: syz [ 408.277286][ T5901] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 408.290883][ T5827] usb 2-1: config 0 descriptor?? [ 408.305693][ T5827] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 408.348391][ T5827] em28xx 2-1:0.89: Video interface 89 found: [ 408.430286][ T5901] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.442007][ T5901] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 408.456666][ T5901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 408.471872][ T5901] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 408.497179][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.536384][T11229] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 408.569564][ T5901] hub 6-1:1.0: bad descriptor, ignoring hub [ 408.575572][ T5901] hub 6-1:1.0: probe with driver hub failed with error -5 [ 408.585774][ T5901] cdc_wdm 6-1:1.0: skipping garbage [ 408.591231][ T5901] cdc_wdm 6-1:1.0: skipping garbage [ 408.596601][ T5827] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 408.605699][ T5901] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 408.612061][ T5901] cdc_wdm 6-1:1.0: Unknown control protocol [ 408.681714][ T5827] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 408.690833][ T5827] em28xx 2-1:0.89: board has no eeprom [ 408.737300][ T790] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 408.757685][ T5827] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 408.766960][ T5827] em28xx 2-1:0.89: analog set to bulk mode. [ 408.773422][ T5901] em28xx 2-1:0.89: Registering V4L2 extension [ 408.795043][ T5827] usb 2-1: USB disconnect, device number 14 [ 408.814796][ T5827] em28xx 2-1:0.89: Disconnecting em28xx [ 408.889037][ T790] usb 1-1: Using ep0 maxpacket: 8 [ 408.935540][ T790] usb 1-1: config 0 has an invalid interface number: 199 but max is 0 [ 408.948476][ T5901] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 408.951521][ T790] usb 1-1: config 0 has no interface number 0 [ 408.979870][ T790] usb 1-1: too many endpoints for config 0 interface 199 altsetting 33: 31, using maximum allowed: 30 [ 408.980372][ T5901] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 408.995222][ T790] usb 1-1: config 0 interface 199 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 409.013521][ T790] usb 1-1: config 0 interface 199 has no altsetting 0 [ 409.020633][ T790] usb 1-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 409.030675][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.044798][ T5901] em28xx 2-1:0.89: No AC97 audio processor [ 409.068884][ T5901] usb 2-1: Decoder not found [ 409.077389][ T790] usb 1-1: config 0 descriptor?? [ 409.081394][ T5901] em28xx 2-1:0.89: failed to create media graph [ 409.094468][ T5901] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 409.112834][ T5901] em28xx 2-1:0.89: Registering snapshot button... [ 409.129222][ T5901] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7 [ 409.151748][ T5901] em28xx 2-1:0.89: Remote control support is not available for this card. [ 409.189035][ T5827] em28xx 2-1:0.89: Closing input extension [ 409.210023][ T5827] em28xx 2-1:0.89: Deregistering snapshot button [ 409.278560][ T5827] em28xx 2-1:0.89: Freeing device [ 409.306506][T11237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.328687][T11237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.780080][T11229] usb 6-1: reset low-speed USB device number 11 using dummy_hcd [ 409.953449][ T790] usb 1-1: string descriptor 0 read error: -71 [ 410.008446][ T790] usblcd 1-1:0.199: USBLCD model not supported. [ 410.073500][ T790] usb 1-1: USB disconnect, device number 12 [ 410.311864][T11246] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 410.328206][ C1] wdm_int_callback: 25 callbacks suppressed [ 410.328244][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 410.340776][ C1] wdm_int_callback: 25 callbacks suppressed [ 410.340806][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 410.353231][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 410.359874][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 410.366268][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 410.372890][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 410.379253][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 410.385883][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 410.392208][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 410.398835][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 410.405688][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 410.412314][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 410.418976][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 410.425593][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 410.431944][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 410.438566][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 410.445001][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 410.451630][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 410.457965][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 410.464591][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 410.675697][T11269] Unsupported ieee802154 address type: 0 [ 411.257323][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5390 ms [ 411.265466][ C1] lec:lec_tx_timeout: lec0 [ 411.478071][ T24] usb 6-1: USB disconnect, device number 11 [ 411.528801][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1592'. [ 411.758352][ T6946] lec:lec_start_xmit: lec0:No lecd attached [ 412.614465][T11265] lec:lec_atm_close: lec0: Shut down! [ 415.267318][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 417.221140][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 417.489572][T11332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1606'. [ 418.207391][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 418.215551][ C1] lec:lec_tx_timeout: lec0 [ 419.637377][ T790] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 420.078365][ T790] usb 1-1: no configurations [ 420.083008][ T790] usb 1-1: can't read configurations, error -22 [ 420.092318][T11369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1619'. [ 420.113242][T11369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1619'. [ 420.891900][T11353] lec:lec_atm_close: lec0: Shut down! [ 420.900738][ T790] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 421.109328][ T790] usb 1-1: no configurations [ 421.113972][ T790] usb 1-1: can't read configurations, error -22 [ 421.175590][ T790] usb usb1-port1: attempt power cycle [ 422.262047][ T790] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 422.597321][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'. [ 422.693521][ T790] usb 1-1: device descriptor read/8, error -71 [ 424.722340][T11413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1634'. [ 424.731969][T11413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1634'. [ 426.087206][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 426.207150][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5320 ms [ 426.215264][ C1] lec:lec_tx_timeout: lec0 [ 426.257175][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 426.275229][ T9] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 426.303634][ T9] usb 2-1: config 0 has no interface number 0 [ 426.321191][ T9] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.348060][ T9] usb 2-1: config 0 interface 89 has no altsetting 0 [ 426.361584][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 426.371392][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.381525][ T9] usb 2-1: Product: syz [ 426.385839][ T9] usb 2-1: Manufacturer: syz [ 426.387609][ T5916] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 426.392366][ T9] usb 2-1: SerialNumber: syz [ 426.433856][ T9] usb 2-1: config 0 descriptor?? [ 426.446742][ T9] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 426.457259][ T9] em28xx 2-1:0.89: Video interface 89 found: [ 426.589395][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 426.601711][ T5916] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 426.645363][ T5916] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 426.695428][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 426.725938][ T5916] usb 6-1: Product: syz [ 426.735584][ T9] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 426.736478][ T5916] usb 6-1: Manufacturer: syz [ 426.760634][ T5916] usb 6-1: SerialNumber: syz [ 426.798547][ T5916] usb 6-1: config 0 descriptor?? [ 426.811044][T11433] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 426.854638][ T9] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 426.897653][ T9] em28xx 2-1:0.89: board has no eeprom [ 426.967220][ T9] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 427.005272][ T9] em28xx 2-1:0.89: analog set to bulk mode. [ 427.017827][ T5901] em28xx 2-1:0.89: Registering V4L2 extension [ 427.068278][ T9] usb 2-1: USB disconnect, device number 15 [ 427.118832][T11435] lec:lec_atm_close: lec0: Shut down! [ 427.146735][ T9] em28xx 2-1:0.89: Disconnecting em28xx [ 427.578504][T11453] Unsupported ieee802154 address type: 0 [ 428.220898][ T5827] usb 6-1: USB disconnect, device number 12 [ 428.637341][ T5901] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 428.644372][ T5901] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 428.720248][ T5901] em28xx 2-1:0.89: No AC97 audio processor [ 428.755591][ T5901] usb 2-1: Decoder not found [ 428.765384][T11462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1649'. [ 428.771227][ T5901] em28xx 2-1:0.89: failed to create media graph [ 428.807532][T11462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1649'. [ 429.064042][ T5901] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 429.099185][ T5901] em28xx 2-1:0.89: Registering snapshot button... [ 429.108731][ T5901] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input8 [ 429.998869][ T5901] em28xx 2-1:0.89: Remote control support is not available for this card. [ 430.017192][ T9] em28xx 2-1:0.89: Closing input extension [ 430.023115][ T9] em28xx 2-1:0.89: Deregistering snapshot button [ 430.136368][ T9] em28xx 2-1:0.89: Freeing device [ 430.195478][T11475] syzkaller0: entered promiscuous mode [ 430.206412][T11475] syzkaller0: entered allmulticast mode [ 432.207194][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 432.215490][ C1] lec:lec_tx_timeout: lec0 [ 434.369995][T11515] Unsupported ieee802154 address type: 0 [ 435.324077][T11519] syzkaller0: entered promiscuous mode [ 435.343738][T11519] syzkaller0: entered allmulticast mode [ 436.310503][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1671'. [ 437.027076][T11548] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1677'. [ 437.948177][ T5916] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 438.341253][T11528] lec:lec_atm_close: lec0: Shut down! [ 438.773286][ T5916] usb 4-1: config 0 has no interfaces? [ 438.800940][ T5916] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 439.411457][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.417896][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.647299][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.672819][ T5916] usb 4-1: Product: syz [ 439.702107][ T5916] usb 4-1: Manufacturer: syz [ 439.737159][ T5916] usb 4-1: SerialNumber: syz [ 439.824684][ T5916] usb 4-1: config 0 descriptor?? [ 440.141460][T11590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1687'. [ 440.202969][ T5916] usb 4-1: USB disconnect, device number 18 [ 441.747190][ T5973] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 441.948242][ T5973] usb 4-1: Using ep0 maxpacket: 32 [ 442.053724][ T5973] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 442.120357][ T5973] usb 4-1: config 0 has no interface number 0 [ 442.324177][ T5973] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.428806][ T5973] usb 4-1: config 0 interface 89 has no altsetting 0 [ 442.441567][T11613] syzkaller0: entered promiscuous mode [ 442.447069][T11613] syzkaller0: entered allmulticast mode [ 442.458053][ T5973] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 442.474853][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.497161][ T5973] usb 4-1: Product: syz [ 442.501367][ T5973] usb 4-1: Manufacturer: syz [ 442.517674][ T5973] usb 4-1: SerialNumber: syz [ 442.528802][ T5973] usb 4-1: config 0 descriptor?? [ 442.548987][ T5973] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 442.821161][ T5973] em28xx 4-1:0.89: Video interface 89 found: [ 442.888728][ T5973] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 443.027207][ T9] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 443.210592][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.253929][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 443.267873][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.285729][ T5973] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 443.294162][ T5973] em28xx 4-1:0.89: board has no eeprom [ 443.304385][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 443.314691][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.347150][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 443.355200][ C1] lec:lec_tx_timeout: lec0 [ 443.359843][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 443.370441][ T5973] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 443.387488][ T5973] em28xx 4-1:0.89: analog set to bulk mode. [ 443.405520][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 443.422975][ T5901] em28xx 4-1:0.89: Registering V4L2 extension [ 443.430857][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 443.476175][ T5973] usb 4-1: USB disconnect, device number 19 [ 443.540450][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 443.545706][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 443.553932][ T5973] em28xx 4-1:0.89: Disconnecting em28xx [ 443.616095][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 443.641821][ T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 443.730601][ T9] usb 6-1: USB disconnect, device number 13 [ 443.745180][ T5901] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 443.773650][T11636] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1700'. [ 443.788192][ T5901] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 443.840653][ T5901] em28xx 4-1:0.89: No AC97 audio processor [ 443.894937][ T5901] usb 4-1: Decoder not found [ 443.917402][ T5901] em28xx 4-1:0.89: failed to create media graph [ 443.945485][ T5901] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 443.973638][ T5901] em28xx 4-1:0.89: Registering snapshot button... [ 443.994927][ T5901] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input9 [ 444.252502][ T5901] em28xx 4-1:0.89: Remote control support is not available for this card. [ 444.261363][ T5973] em28xx 4-1:0.89: Closing input extension [ 444.267293][ T5973] em28xx 4-1:0.89: Deregistering snapshot button [ 445.102413][ T5973] em28xx 4-1:0.89: Freeing device [ 445.302346][T11651] overlayfs: failed to resolve './file0': -2 [ 446.377275][ T5973] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 446.541513][ T5973] usb 4-1: config 0 has no interfaces? [ 446.563471][T11628] lec:lec_atm_close: lec0: Shut down! [ 446.574010][ T5973] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 446.803780][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.812852][ T5973] usb 4-1: Product: syz [ 446.817822][ T5973] usb 4-1: Manufacturer: syz [ 446.823183][ T5973] usb 4-1: SerialNumber: syz [ 446.934174][T11675] Unsupported ieee802154 address type: 0 [ 447.690296][ T5973] usb 4-1: config 0 descriptor?? [ 449.779194][T11696] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 449.788898][T11696] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 449.815242][T11697] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1714'. [ 449.929725][T10785] usb 4-1: USB disconnect, device number 20 [ 450.128016][T11702] netlink: 'syz.2.1716': attribute type 12 has an invalid length. [ 450.175175][T11702] netlink: 'syz.2.1716': attribute type 29 has an invalid length. [ 450.197149][T11702] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1716'. [ 450.220259][T11702] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1716'. [ 450.477474][ T5916] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 450.836007][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.906269][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 450.970276][ T5916] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 451.040701][ T5916] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 30062, setting to 8 [ 451.113809][ T5916] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 451.155821][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.230735][T11705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 451.241221][ T5916] hub 2-1:1.0: bad descriptor, ignoring hub [ 451.291588][ T5916] hub 2-1:1.0: probe with driver hub failed with error -5 [ 452.017019][ T5916] cdc_wdm 2-1:1.0: skipping garbage [ 452.071265][ T5916] cdc_wdm 2-1:1.0: skipping garbage [ 452.104747][ T5916] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 452.207372][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 452.215469][ C1] lec:lec_tx_timeout: lec0 [ 452.253493][ T5916] usb 2-1: USB disconnect, device number 16 [ 453.565208][T11740] binder: BINDER_SET_CONTEXT_MGR already set [ 453.584998][T11740] binder: 11732:11740 ioctl 4018620d 200000004a80 returned -16 [ 454.616939][T11749] netlink: 'syz.0.1731': attribute type 12 has an invalid length. [ 454.646121][T11749] netlink: 'syz.0.1731': attribute type 29 has an invalid length. [ 454.673822][T11752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1729'. [ 454.711171][T11749] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1731'. [ 454.721130][T11749] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1731'. [ 456.550946][T11763] syzkaller0: entered promiscuous mode [ 456.617179][T11763] syzkaller0: entered allmulticast mode [ 460.710226][T11830] Unsupported ieee802154 address type: 0 [ 460.887597][ T5901] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 461.436292][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 461.510594][T11828] tipc: Started in network mode [ 461.515519][T11828] tipc: Node identity d625d4cd1a3a, cluster identity 4711 [ 461.573595][T11828] tipc: Enabled bearer , priority 0 [ 461.580401][ T5901] usb 2-1: device descriptor read/64, error -32 [ 461.608737][T11831] syzkaller0: entered promiscuous mode [ 461.628351][T11831] syzkaller0: entered allmulticast mode [ 461.686254][T11826] tipc: Resetting bearer [ 461.726976][T11826] tipc: Disabling bearer [ 461.820253][ T5901] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 461.994207][ T5901] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.015294][ T5901] usb 2-1: config 0 has no interface number 0 [ 462.041774][ T5901] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 462.083244][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.085832][T11845] syzkaller0: entered promiscuous mode [ 462.121355][ T5901] usb 2-1: Product: syz [ 462.122103][T11845] syzkaller0: entered allmulticast mode [ 462.125589][ T5901] usb 2-1: Manufacturer: syz [ 462.125623][ T5901] usb 2-1: SerialNumber: syz [ 462.198814][ T5901] usb 2-1: config 0 descriptor?? [ 462.391194][T11847] syzkaller0: entered promiscuous mode [ 462.410089][T11847] syzkaller0: entered allmulticast mode [ 462.535334][ T5901] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 463.887016][ T5916] usb 2-1: USB disconnect, device number 18 [ 464.716612][T11863] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 465.667008][T11875] fuse: Bad value for 'group_id' [ 465.692675][T11875] fuse: Bad value for 'group_id' [ 465.902977][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 466.352773][T11884] Unsupported ieee802154 address type: 0 [ 468.215343][T11902] syzkaller0: entered promiscuous mode [ 468.234675][T11902] syzkaller0: entered allmulticast mode [ 468.311929][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 469.071251][T11929] Unsupported ieee802154 address type: 0 [ 469.789675][T11941] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1780'. [ 474.252276][T11935] tipc: Enabling of bearer rejected, failed to enable media [ 474.283493][T11941] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1780'. [ 474.298586][T11938] syzkaller0: entered promiscuous mode [ 474.324733][T11938] syzkaller0: entered allmulticast mode [ 474.972526][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 475.779605][ T6946] lec:lec_start_xmit: lec0:No lecd attached [ 477.791991][T10785] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 478.211726][T10785] usb 3-1: Using ep0 maxpacket: 32 [ 478.287230][T10785] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 478.349579][T10785] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 478.359515][T10785] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 478.380838][T10785] usb 3-1: Product: syz [ 478.401557][T10785] usb 3-1: Manufacturer: syz [ 478.406217][T10785] usb 3-1: SerialNumber: syz [ 478.420655][T10785] usb 3-1: config 0 descriptor?? [ 478.426718][T12000] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 479.103229][T10785] usb 3-1: USB disconnect, device number 17 [ 479.414284][T12022] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1803'. [ 479.491679][T12022] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1803'. [ 479.678193][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 479.805218][T12027] tipc: Enabling of bearer rejected, failed to enable media [ 479.852122][T12027] syzkaller0: entered promiscuous mode [ 479.925453][T12027] syzkaller0: entered allmulticast mode [ 481.247133][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5470 ms [ 481.255329][ C1] lec:lec_tx_timeout: lec0 [ 482.033310][T10785] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 482.252159][T10785] usb 4-1: config 0 has no interfaces? [ 482.351256][T12066] Unsupported ieee802154 address type: 0 [ 482.516647][T10785] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 482.839427][T10785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.900078][T10785] usb 4-1: Product: syz [ 482.930596][T10785] usb 4-1: Manufacturer: syz [ 482.977027][T10785] usb 4-1: SerialNumber: syz [ 483.093703][T10785] usb 4-1: config 0 descriptor?? [ 483.873987][T12090] Unsupported ieee802154 address type: 0 [ 486.064897][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1822'. [ 488.522977][ T790] usb 4-1: USB disconnect, device number 21 [ 488.838796][T12118] Unsupported ieee802154 address type: 0 [ 490.397844][T12130] tipc: Enabling of bearer rejected, failed to enable media [ 490.418037][T12130] syzkaller0: entered promiscuous mode [ 490.423554][T12130] syzkaller0: entered allmulticast mode [ 490.427399][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 492.029760][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 492.367782][T12155] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1839'. [ 492.830503][ T790] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 493.842260][ T790] usb 4-1: device descriptor read/64, error -71 [ 494.177472][ T790] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 494.927901][ T790] usb 4-1: device descriptor read/64, error -71 [ 495.163932][ T790] usb usb4-port1: attempt power cycle [ 495.323182][T12181] Unsupported ieee802154 address type: 0 [ 496.077243][ T790] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 496.292921][ T790] usb 4-1: device descriptor read/8, error -71 [ 497.767465][ T5939] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 497.797761][T12199] tipc: Enabling of bearer rejected, failed to enable media [ 497.974013][ T5939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.014994][ T5939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.121522][ T5939] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 498.220003][ T5939] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 498.281386][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.331048][T12202] syzkaller0: entered promiscuous mode [ 498.366865][T12202] syzkaller0: entered allmulticast mode [ 498.409389][T12192] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 498.584269][ T5939] hub 5-1:1.0: bad descriptor, ignoring hub [ 498.646237][ T5939] hub 5-1:1.0: probe with driver hub failed with error -5 [ 498.701402][ T5939] cdc_wdm 5-1:1.0: skipping garbage [ 498.761387][ T5939] cdc_wdm 5-1:1.0: skipping garbage [ 498.779212][T12189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.801708][ T5939] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 498.834898][T12189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.851204][ T5939] cdc_wdm 5-1:1.0: Unknown control protocol [ 498.946221][ T5939] usb 5-1: USB disconnect, device number 7 [ 499.119281][T12217] tipc: Enabling of bearer rejected, failed to enable media [ 500.385691][T12232] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1860'. [ 500.853514][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.860120][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.025946][ T1294] lec:lec_start_xmit: lec0:No lecd attached [ 506.207125][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 506.215179][ C1] lec:lec_tx_timeout: lec0 [ 506.887260][ T10] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 507.073849][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.133527][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 507.251645][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 507.407353][ T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 507.416453][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.594984][T12286] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 507.691514][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 507.792203][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 507.888177][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 508.017232][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 508.137830][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 508.143784][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 508.472474][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1875'. [ 508.743502][ T10] usb 1-1: reset low-speed USB device number 17 using dummy_hcd [ 509.447178][ T10] usb 1-1: device descriptor read/all, error -71 [ 511.142997][ T10] usb 1-1: USB disconnect, device number 17 [ 512.176768][T12332] ======================================================= [ 512.176768][T12332] WARNING: The mand mount option has been deprecated and [ 512.176768][T12332] and is ignored by this kernel. Remove the mand [ 512.176768][T12332] option from the mount to silence this warning. [ 512.176768][T12332] ======================================================= [ 513.478040][ T5901] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 513.740677][ T5901] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 513.902094][ T5901] usb 1-1: config 0 has no interface number 0 [ 513.991584][ T5901] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 514.074737][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.175661][ T5901] usb 1-1: Product: syz [ 514.214274][ T5901] usb 1-1: Manufacturer: syz [ 514.281372][ T5901] usb 1-1: SerialNumber: syz [ 514.368470][ T5901] usb 1-1: config 0 descriptor?? [ 514.717687][ T5901] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 514.856405][ T5901] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 514.947296][ T5901] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 515.121102][ T5901] usb 1-1: media controller created [ 515.442383][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.797308][ T5901] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 516.167265][ T5901] usb 1-1: USB disconnect, device number 18 [ 518.128499][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1897'. [ 523.137199][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 523.458843][ T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 523.577265][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.782319][ T24] usb 3-1: config 0 has no interface number 0 [ 523.861203][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 523.962559][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.115160][ T24] usb 3-1: Product: syz [ 524.297468][ T24] usb 3-1: Manufacturer: syz [ 524.344095][ T24] usb 3-1: SerialNumber: syz [ 524.446533][ T24] usb 3-1: config 0 descriptor?? [ 524.539092][ T24] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 524.616664][ T24] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 525.018728][ T24] usb 3-1: USB disconnect, device number 18 [ 529.033802][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 529.537885][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 529.978556][ T9] usb 6-1: config 0 has no interfaces? [ 530.025067][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 530.077549][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.297189][ T9] usb 6-1: Product: syz [ 530.308583][ T9] usb 6-1: Manufacturer: syz [ 530.347217][ T9] usb 6-1: SerialNumber: syz [ 530.368436][ T9] usb 6-1: config 0 descriptor?? [ 531.077307][ T5916] usb 6-1: USB disconnect, device number 14 [ 532.389253][T12454] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 536.577891][T12505] syzkaller0: entered promiscuous mode [ 536.637440][T12505] syzkaller0: entered allmulticast mode [ 537.128608][ T5916] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 537.373119][T12517] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1939'. [ 537.473488][ T5916] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 537.562247][ T5916] usb 3-1: config 0 has no interface number 0 [ 537.689519][ T5916] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 537.784377][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.821376][ T5916] usb 3-1: Product: syz [ 537.835775][ T5916] usb 3-1: Manufacturer: syz [ 537.847212][ T5916] usb 3-1: SerialNumber: syz [ 537.868254][ T5916] usb 3-1: config 0 descriptor?? [ 538.159760][ T5916] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 538.189378][ T5916] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 538.229573][ T5916] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 538.246070][T12517] ip6_vti0: entered promiscuous mode [ 538.259211][ T5916] usb 3-1: media controller created [ 538.264840][T12517] ip6_vti0: entered allmulticast mode [ 538.353439][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.465714][ T6946] lec:lec_start_xmit: lec0:No lecd attached [ 538.539835][ T5916] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 539.969738][ T5916] usb 3-1: USB disconnect, device number 19 [ 543.062496][ T5901] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 543.527181][ T5901] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 543.535338][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.567167][ T5901] usb 5-1: config 0 has no interface number 0 [ 543.580661][ T5901] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 543.591074][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.954348][ T5901] usb 5-1: Product: syz [ 543.988143][ T5901] usb 5-1: Manufacturer: syz [ 544.013801][ T5901] usb 5-1: SerialNumber: syz [ 544.048567][ T5901] usb 5-1: config 0 descriptor?? [ 544.110543][ T5901] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 544.170701][ T5901] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 544.207461][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 544.215596][ C1] lec:lec_tx_timeout: lec0 [ 544.249284][T12579] syzkaller0: entered promiscuous mode [ 544.278962][T12579] syzkaller0: entered allmulticast mode [ 544.492495][ T5901] usb 5-1: USB disconnect, device number 8 [ 545.042956][T12590] Unsupported ieee802154 address type: 0 [ 548.438104][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 548.698241][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 548.721245][ T10] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 548.986137][ T10] usb 5-1: config 0 has no interface number 0 [ 549.250448][ T10] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 549.262561][ T10] usb 5-1: config 0 interface 89 has no altsetting 0 [ 549.276723][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 549.307860][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.315962][ T10] usb 5-1: Product: syz [ 549.351735][ T10] usb 5-1: Manufacturer: syz [ 549.373003][ T10] usb 5-1: SerialNumber: syz [ 549.398381][ T10] usb 5-1: config 0 descriptor?? [ 549.465960][ T10] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 549.512549][ T10] em28xx 5-1:0.89: Video interface 89 found: [ 549.565118][T12638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1971'. [ 549.635789][T12638] ip_vti0: entered promiscuous mode [ 549.669662][T12638] ip_vti0: entered allmulticast mode [ 549.689828][T12639] syzkaller0: entered promiscuous mode [ 549.695468][T12639] syzkaller0: entered allmulticast mode [ 550.729886][ T10] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 551.377146][ T5939] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 552.238201][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 552.522029][ T5939] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 552.630348][ T10] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 552.672837][ T5939] usb 6-1: config 0 has no interface number 0 [ 552.678309][ T10] em28xx 5-1:0.89: board has no eeprom [ 552.767514][ T10] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 552.884061][ T10] em28xx 5-1:0.89: analog set to bulk mode. [ 552.898269][ T5901] em28xx 5-1:0.89: Registering V4L2 extension [ 552.907725][ T5939] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 552.917125][ T10] usb 5-1: USB disconnect, device number 9 [ 552.935433][ T10] em28xx 5-1:0.89: Disconnecting em28xx [ 552.983895][ T5939] usb 6-1: config 0 interface 89 has no altsetting 0 [ 553.038999][ T5939] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 553.081723][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.106216][ T5901] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 553.119415][ T5901] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 553.120631][ T5939] usb 6-1: Product: syz [ 553.157257][ T5901] em28xx 5-1:0.89: No AC97 audio processor [ 553.158921][ T5939] usb 6-1: Manufacturer: syz [ 553.362788][ T5939] usb 6-1: SerialNumber: syz [ 553.370821][ T5939] usb 6-1: config 0 descriptor?? [ 553.381281][ T5939] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 553.392780][ T5939] em28xx 6-1:0.89: Video interface 89 found: [ 554.098732][ T5901] usb 5-1: Decoder not found [ 554.103383][ T5901] em28xx 5-1:0.89: failed to create media graph [ 554.307472][ T5901] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 554.366195][ T5901] em28xx 5-1:0.89: Registering snapshot button... [ 554.409665][ T5901] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input10 [ 554.499462][ T5901] em28xx 5-1:0.89: Remote control support is not available for this card. [ 554.518413][ T5939] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 554.530792][ T10] em28xx 5-1:0.89: Closing input extension [ 554.536756][ T10] em28xx 5-1:0.89: Deregistering snapshot button [ 554.641914][ T5939] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 554.682759][ T5939] em28xx 6-1:0.89: board has no eeprom [ 554.930540][ T10] em28xx 5-1:0.89: Freeing device [ 554.952775][ T5939] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 554.960761][ T5939] em28xx 6-1:0.89: analog set to bulk mode. [ 554.969480][T10785] em28xx 6-1:0.89: Registering V4L2 extension [ 554.997565][ T790] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 555.588470][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 555.735192][ T5939] usb 6-1: USB disconnect, device number 15 [ 555.743978][ T5939] em28xx 6-1:0.89: Disconnecting em28xx [ 555.827329][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 555.862057][ T10] usb 5-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 555.893819][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 555.894582][T10785] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 555.917792][ T10] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 555.926955][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.957201][ T790] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 555.960538][ T10] usb 5-1: config 0 descriptor?? [ 555.990753][ T790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.002346][T10785] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 556.017235][T10785] em28xx 6-1:0.89: No AC97 audio processor [ 556.026811][ T790] usb 4-1: config 0 has no interface number 0 [ 556.051081][ T790] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 556.175848][T12709] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1991'. [ 556.226792][T12709] ip6_vti0: entered promiscuous mode [ 556.246976][T12709] ip6_vti0: entered allmulticast mode [ 556.304013][T12681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.305663][T10785] usb 6-1: Decoder not found [ 556.319785][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.331728][T10785] em28xx 6-1:0.89: failed to create media graph [ 556.338147][ T790] usb 4-1: Product: syz [ 556.342365][ T790] usb 4-1: Manufacturer: syz [ 556.347207][T10785] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 556.356295][ T790] usb 4-1: SerialNumber: syz [ 556.373885][T12700] ================================================================== [ 556.381988][T12700] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 556.389502][T12700] Read of size 8 at addr ffff88807625c748 by task v4l_id/12700 [ 556.397071][T12700] [ 556.399445][T12700] CPU: 1 UID: 0 PID: 12700 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 556.399491][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.399514][T12700] Call Trace: [ 556.399526][T12700] [ 556.399539][T12700] dump_stack_lvl+0x100/0x190 [ 556.399598][T12700] print_report+0x156/0x4c9 [ 556.399652][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.399696][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.399741][T12700] ? __phys_addr+0xe8/0x180 [ 556.399794][T12700] ? v4l2_fh_init+0x27d/0x2c0 [ 556.399848][T12700] kasan_report+0xdf/0x1e0 [ 556.399921][T12700] ? v4l2_fh_init+0x27d/0x2c0 [ 556.399981][T12700] v4l2_fh_init+0x27d/0x2c0 [ 556.400035][T12700] v4l2_fh_open+0x64/0xa0 [ 556.400096][T12700] em28xx_v4l2_open+0x11e/0x570 [ 556.400150][T12700] v4l2_open+0x1d2/0x490 [ 556.400208][T12700] ? __pfx_v4l2_open+0x10/0x10 [ 556.400261][T12700] chrdev_open+0x234/0x6a0 [ 556.400314][T12700] ? __pfx_chrdev_open+0x10/0x10 [ 556.400366][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.400414][T12700] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 556.400478][T12700] do_dentry_open+0x6d8/0x1660 [ 556.400526][T12700] ? __pfx_chrdev_open+0x10/0x10 [ 556.400580][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.400628][T12700] vfs_open+0x82/0x3f0 [ 556.400682][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.400728][T12700] path_openat+0x208c/0x31a0 [ 556.400874][T12700] ? __pfx_path_openat+0x10/0x10 [ 556.400972][T12700] do_file_open+0x20e/0x430 [ 556.401205][T12700] ? __pfx_do_file_open+0x10/0x10 [ 556.401285][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.401334][T12700] ? alloc_fd+0x476/0x790 [ 556.401446][T12700] ? do_getname+0x191/0x390 [ 556.401505][T12700] do_sys_openat2+0x10d/0x1e0 [ 556.401545][T12700] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.401581][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.401646][T12700] __x64_sys_openat+0x12d/0x210 [ 556.401691][T12700] ? __pfx___x64_sys_openat+0x10/0x10 [ 556.401738][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.401801][T12700] ? do_user_addr_fault+0x8d6/0x12f0 [ 556.401850][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.401906][T12700] do_syscall_64+0x106/0xf80 [ 556.401967][T12700] ? irqentry_exit+0x138/0x670 [ 556.402105][T12700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.402146][T12700] RIP: 0033:0x7f472fca7407 [ 556.402199][T12700] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 556.402247][T12700] RSP: 002b:00007ffd811291d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 556.402288][T12700] RAX: ffffffffffffffda RBX: 00007f47304a4880 RCX: 00007f472fca7407 [ 556.402318][T12700] RDX: 0000000000000000 RSI: 00007ffd8112af1c RDI: ffffffffffffff9c [ 556.402367][T12700] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 556.402486][T12700] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 556.402514][T12700] R13: 00007ffd81129420 R14: 00007f473060b000 R15: 0000559b9a4964d8 [ 556.402566][T12700] [ 556.402581][T12700] [ 556.705922][T12700] Allocated by task 10785: [ 556.710346][T12700] kasan_save_stack+0x30/0x50 [ 556.715145][T12700] kasan_save_track+0x14/0x30 [ 556.719854][T12700] __kasan_kmalloc+0xaa/0xb0 [ 556.724495][T12700] em28xx_v4l2_init.cold+0x94/0x3503 [ 556.729827][T12700] em28xx_init_extension+0x13a/0x200 [ 556.735132][T12700] request_module_async+0x61/0x80 [ 556.740261][T12700] process_one_work+0xa23/0x19a0 [ 556.745207][T12700] worker_thread+0x5ef/0xe50 [ 556.749802][T12700] kthread+0x370/0x450 [ 556.753899][T12700] ret_from_fork+0x754/0xd80 [ 556.758569][T12700] ret_from_fork_asm+0x1a/0x30 [ 556.763354][T12700] [ 556.765666][T12700] Freed by task 10785: [ 556.769898][T12700] kasan_save_stack+0x30/0x50 [ 556.774594][T12700] kasan_save_track+0x14/0x30 [ 556.779297][T12700] kasan_save_free_info+0x3b/0x70 [ 556.784369][T12700] __kasan_slab_free+0x5f/0x80 [ 556.789153][T12700] kfree+0x1f6/0x6b0 [ 556.793058][T12700] kref_put.isra.0+0x56/0x90 [ 556.797673][T12700] em28xx_v4l2_init.cold+0x280/0x3503 [ 556.803084][T12700] em28xx_init_extension+0x13a/0x200 [ 556.808389][T12700] request_module_async+0x61/0x80 [ 556.813435][T12700] process_one_work+0xa23/0x19a0 [ 556.818384][T12700] worker_thread+0x5ef/0xe50 [ 556.822981][T12700] kthread+0x370/0x450 [ 556.827117][T12700] ret_from_fork+0x754/0xd80 [ 556.831741][T12700] ret_from_fork_asm+0x1a/0x30 [ 556.836517][T12700] [ 556.838846][T12700] The buggy address belongs to the object at ffff88807625c000 [ 556.838846][T12700] which belongs to the cache kmalloc-8k of size 8192 [ 556.852935][T12700] The buggy address is located 1864 bytes inside of [ 556.852935][T12700] freed 8192-byte region [ffff88807625c000, ffff88807625e000) [ 556.867266][T12700] [ 556.869679][T12700] The buggy address belongs to the physical page: [ 556.876087][T12700] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76258 [ 556.884857][T12700] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 556.893366][T12700] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 556.900917][T12700] page_type: f5(slab) [ 556.904994][T12700] raw: 00fff00000000040 ffff88813fe3a280 dead000000000100 dead000000000122 [ 556.913586][T12700] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 556.922271][T12700] head: 00fff00000000040 ffff88813fe3a280 dead000000000100 dead000000000122 [ 556.931042][T12700] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 556.939818][T12700] head: 00fff00000000003 ffffea0001d89601 00000000ffffffff 00000000ffffffff [ 556.948501][T12700] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 556.957258][T12700] page dumped because: kasan: bad access detected [ 556.963677][T12700] page_owner tracks the page as allocated [ 556.969389][T12700] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5480, tgid 5480 (dhcpcd), ts 60173430022, free_ts 28926333730 [ 556.990096][T12700] post_alloc_hook+0x153/0x170 [ 556.994898][T12700] get_page_from_freelist+0x111d/0x3140 [ 557.000549][T12700] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 557.006462][T12700] new_slab+0xa6/0x6b0 [ 557.010564][T12700] refill_objects+0x26b/0x400 [ 557.015261][T12700] __pcs_replace_empty_main+0x1ab/0x660 [ 557.020826][T12700] __kvmalloc_node_noprof+0x7da/0xa00 [ 557.026219][T12700] pfifo_fast_init+0x177/0x3b0 [ 557.031003][T12700] qdisc_create_dflt+0x124/0x4c0 [ 557.035978][T12700] mq_init_common+0x1f4/0x490 [ 557.040691][T12700] mq_init+0x26/0x60 [ 557.044703][T12700] qdisc_create_dflt+0x124/0x4c0 [ 557.049744][T12700] dev_activate+0xaa9/0xce0 [ 557.054353][T12700] __dev_open+0x4f1/0x960 [ 557.058900][T12700] __dev_change_flags+0x558/0x6f0 [ 557.063974][T12700] netif_change_flags+0x8d/0x160 [ 557.069276][T12700] page last free pid 1 tgid 1 stack trace: [ 557.075080][T12700] __free_frozen_pages+0x7e1/0x10d0 [ 557.080580][T12700] free_contig_range+0xde/0x1d0 [ 557.085575][T12700] destroy_args+0xa8/0x7a0 [ 557.089999][T12700] debug_vm_pgtable+0x1b66/0x34c0 [ 557.095131][T12700] do_one_initcall+0x11d/0x760 [ 557.100025][T12700] kernel_init_freeable+0x6e5/0x7a0 [ 557.105329][T12700] kernel_init+0x1f/0x1e0 [ 557.109681][T12700] ret_from_fork+0x754/0xd80 [ 557.114405][T12700] ret_from_fork_asm+0x1a/0x30 [ 557.119220][T12700] [ 557.121541][T12700] Memory state around the buggy address: [ 557.127444][T12700] ffff88807625c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.135697][T12700] ffff88807625c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.143783][T12700] >ffff88807625c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.151952][T12700] ^ [ 557.158464][T12700] ffff88807625c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.166623][T12700] ffff88807625c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.174952][T12700] ================================================================== [ 557.524519][T10785] em28xx 6-1:0.89: Registering snapshot button... [ 558.135923][T12681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.147899][T10785] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input11 [ 559.011140][T12714] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 559.115794][ T10] usb 5-1: USB disconnect, device number 10 [ 559.154778][T12700] Disabling lock debugging due to kernel taint [ 559.161881][T10785] em28xx 6-1:0.89: Remote control support is not available for this card. [ 559.171386][ T5939] em28xx 6-1:0.89: Closing input extension [ 559.177372][ T5939] em28xx 6-1:0.89: Deregistering snapshot button [ 559.183851][T12700] ================================================================== [ 559.192009][T12700] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0xd4/0x2c0 [ 559.199520][T12700] Write of size 8 at addr ffff88807625c7b0 by task v4l_id/12700 [ 559.207343][T12700] [ 559.209688][T12700] CPU: 1 UID: 0 PID: 12700 Comm: v4l_id Tainted: G B syzkaller #0 PREEMPT(full) [ 559.209737][T12700] Tainted: [B]=BAD_PAGE [ 559.209750][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 559.209769][T12700] Call Trace: [ 559.209780][T12700] [ 559.209792][T12700] dump_stack_lvl+0x100/0x190 [ 559.209846][T12700] print_report+0x156/0x4c9 [ 559.209894][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.209934][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.209974][T12700] ? __phys_addr+0xe8/0x180 [ 559.210023][T12700] ? v4l2_fh_init+0xd4/0x2c0 [ 559.210073][T12700] kasan_report+0xdf/0x1e0 [ 559.210126][T12700] ? v4l2_fh_init+0xd4/0x2c0 [ 559.210183][T12700] kasan_check_range+0x10f/0x1e0 [ 559.210234][T12700] v4l2_fh_init+0xd4/0x2c0 [ 559.210283][T12700] v4l2_fh_open+0x64/0xa0 [ 559.210332][T12700] em28xx_v4l2_open+0x11e/0x570 [ 559.210381][T12700] v4l2_open+0x1d2/0x490 [ 559.210431][T12700] ? __pfx_v4l2_open+0x10/0x10 [ 559.210481][T12700] chrdev_open+0x234/0x6a0 [ 559.210531][T12700] ? __pfx_chrdev_open+0x10/0x10 [ 559.210579][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.210621][T12700] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 559.210680][T12700] do_dentry_open+0x6d8/0x1660 [ 559.210723][T12700] ? __pfx_chrdev_open+0x10/0x10 [ 559.210772][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.210814][T12700] vfs_open+0x82/0x3f0 [ 559.210864][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.210907][T12700] path_openat+0x208c/0x31a0 [ 559.210963][T12700] ? __pfx_path_openat+0x10/0x10 [ 559.211018][T12700] do_file_open+0x20e/0x430 [ 559.211067][T12700] ? __pfx_do_file_open+0x10/0x10 [ 559.211138][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.211177][T12700] ? alloc_fd+0x476/0x790 [ 559.211228][T12700] ? do_getname+0x191/0x390 [ 559.211262][T12700] do_sys_openat2+0x10d/0x1e0 [ 559.211297][T12700] ? __pfx_do_sys_openat2+0x10/0x10 [ 559.211329][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.211379][T12700] __x64_sys_openat+0x12d/0x210 [ 559.211410][T12700] ? __pfx___x64_sys_openat+0x10/0x10 [ 559.211444][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.211484][T12700] ? do_user_addr_fault+0x8d6/0x12f0 [ 559.211520][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.211564][T12700] do_syscall_64+0x106/0xf80 [ 559.211615][T12700] ? irqentry_exit+0x138/0x670 [ 559.211664][T12700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.211698][T12700] RIP: 0033:0x7f472fca7407 [ 559.211723][T12700] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 559.211757][T12700] RSP: 002b:00007ffd811291d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 559.211789][T12700] RAX: ffffffffffffffda RBX: 00007f47304a4880 RCX: 00007f472fca7407 [ 559.211811][T12700] RDX: 0000000000000000 RSI: 00007ffd8112af1c RDI: ffffffffffffff9c [ 559.211833][T12700] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 559.211853][T12700] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 559.211873][T12700] R13: 00007ffd81129420 R14: 00007f473060b000 R15: 0000559b9a4964d8 [ 559.211907][T12700] [ 559.211919][T12700] [ 559.524170][T12700] Allocated by task 10785: [ 559.528592][T12700] kasan_save_stack+0x30/0x50 [ 559.533288][T12700] kasan_save_track+0x14/0x30 [ 559.537984][T12700] __kasan_kmalloc+0xaa/0xb0 [ 559.542587][T12700] em28xx_v4l2_init.cold+0x94/0x3503 [ 559.547942][T12700] em28xx_init_extension+0x13a/0x200 [ 559.553236][T12700] request_module_async+0x61/0x80 [ 559.558273][T12700] process_one_work+0xa23/0x19a0 [ 559.563220][T12700] worker_thread+0x5ef/0xe50 [ 559.567826][T12700] kthread+0x370/0x450 [ 559.572026][T12700] ret_from_fork+0x754/0xd80 [ 559.576650][T12700] ret_from_fork_asm+0x1a/0x30 [ 559.581447][T12700] [ 559.583795][T12700] Freed by task 10785: [ 559.587860][T12700] kasan_save_stack+0x30/0x50 [ 559.592560][T12700] kasan_save_track+0x14/0x30 [ 559.597257][T12700] kasan_save_free_info+0x3b/0x70 [ 559.602333][T12700] __kasan_slab_free+0x5f/0x80 [ 559.607140][T12700] kfree+0x1f6/0x6b0 [ 559.611062][T12700] kref_put.isra.0+0x56/0x90 [ 559.615688][T12700] em28xx_v4l2_init.cold+0x280/0x3503 [ 559.621197][T12700] em28xx_init_extension+0x13a/0x200 [ 559.626845][T12700] request_module_async+0x61/0x80 [ 559.631994][T12700] process_one_work+0xa23/0x19a0 [ 559.636946][T12700] worker_thread+0x5ef/0xe50 [ 559.641543][T12700] kthread+0x370/0x450 [ 559.645640][T12700] ret_from_fork+0x754/0xd80 [ 559.650346][T12700] ret_from_fork_asm+0x1a/0x30 [ 559.655310][T12700] [ 559.657627][T12700] The buggy address belongs to the object at ffff88807625c000 [ 559.657627][T12700] which belongs to the cache kmalloc-8k of size 8192 [ 559.671861][T12700] The buggy address is located 1968 bytes inside of [ 559.671861][T12700] freed 8192-byte region [ffff88807625c000, ffff88807625e000) [ 559.685848][T12700] [ 559.688178][T12700] The buggy address belongs to the physical page: [ 559.694583][T12700] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76258 [ 559.703352][T12700] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 559.712033][T12700] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 559.719597][T12700] page_type: f5(slab) [ 559.723584][T12700] raw: 00fff00000000040 ffff88813fe3a280 dead000000000100 dead000000000122 [ 559.732262][T12700] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 559.740942][T12700] head: 00fff00000000040 ffff88813fe3a280 dead000000000100 dead000000000122 [ 559.749617][T12700] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 559.758294][T12700] head: 00fff00000000003 ffffea0001d89601 00000000ffffffff 00000000ffffffff [ 559.766979][T12700] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 559.775668][T12700] page dumped because: kasan: bad access detected [ 559.782174][T12700] page_owner tracks the page as allocated [ 559.787879][T12700] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5480, tgid 5480 (dhcpcd), ts 60173430022, free_ts 28926333730 [ 559.808663][T12700] post_alloc_hook+0x153/0x170 [ 559.813539][T12700] get_page_from_freelist+0x111d/0x3140 [ 559.819101][T12700] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 559.825001][T12700] new_slab+0xa6/0x6b0 [ 559.829095][T12700] refill_objects+0x26b/0x400 [ 559.833775][T12700] __pcs_replace_empty_main+0x1ab/0x660 [ 559.839338][T12700] __kvmalloc_node_noprof+0x7da/0xa00 [ 559.844778][T12700] pfifo_fast_init+0x177/0x3b0 [ 559.849554][T12700] qdisc_create_dflt+0x124/0x4c0 [ 559.854511][T12700] mq_init_common+0x1f4/0x490 [ 559.859302][T12700] mq_init+0x26/0x60 [ 559.863233][T12700] qdisc_create_dflt+0x124/0x4c0 [ 559.868187][T12700] dev_activate+0xaa9/0xce0 [ 559.872730][T12700] __dev_open+0x4f1/0x960 [ 559.877199][T12700] __dev_change_flags+0x558/0x6f0 [ 559.882262][T12700] netif_change_flags+0x8d/0x160 [ 559.887242][T12700] page last free pid 1 tgid 1 stack trace: [ 559.893053][T12700] __free_frozen_pages+0x7e1/0x10d0 [ 559.898293][T12700] free_contig_range+0xde/0x1d0 [ 559.903174][T12700] destroy_args+0xa8/0x7a0 [ 559.907794][T12700] debug_vm_pgtable+0x1b66/0x34c0 [ 559.912826][T12700] do_one_initcall+0x11d/0x760 [ 559.917684][T12700] kernel_init_freeable+0x6e5/0x7a0 [ 559.922897][T12700] kernel_init+0x1f/0x1e0 [ 559.927319][T12700] ret_from_fork+0x754/0xd80 [ 559.932045][T12700] ret_from_fork_asm+0x1a/0x30 [ 559.936838][T12700] [ 559.939255][T12700] Memory state around the buggy address: [ 559.944904][T12700] ffff88807625c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 559.952974][T12700] ffff88807625c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 559.961052][T12700] >ffff88807625c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 559.969205][T12700] ^ [ 559.974833][T12700] ffff88807625c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 559.983083][T12700] ffff88807625c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 559.991147][T12700] ================================================================== [ 560.013375][T12700] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 560.021148][T12700] CPU: 0 UID: 0 PID: 12700 Comm: v4l_id Tainted: G B syzkaller #0 PREEMPT(full) [ 560.031771][T12700] Tainted: [B]=BAD_PAGE [ 560.035926][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.046161][T12700] Call Trace: [ 560.049447][T12700] [ 560.052383][T12700] dump_stack_lvl+0x100/0x190 [ 560.057103][T12700] vpanic+0x552/0x970 [ 560.061113][T12700] ? __pfx_vpanic+0x10/0x10 [ 560.065639][T12700] ? __pfx___schedule+0x10/0x10 [ 560.070959][T12700] ? v4l2_fh_init+0xd4/0x2c0 [ 560.075679][T12700] panic+0xd1/0xe0 [ 560.079430][T12700] ? __pfx_panic+0x10/0x10 [ 560.083877][T12700] ? preempt_schedule_common+0x42/0xc0 [ 560.089481][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 560.095213][T12700] ? preempt_schedule_thunk+0x16/0x30 [ 560.100683][T12700] end_report.part.0+0x68/0x90 [ 560.105487][T12700] kasan_report.cold+0xe/0x18 [ 560.110294][T12700] ? v4l2_fh_init+0xd4/0x2c0 [ 560.114934][T12700] kasan_check_range+0x10f/0x1e0 [ 560.119928][T12700] v4l2_fh_init+0xd4/0x2c0 [ 560.124371][T12700] v4l2_fh_open+0x64/0xa0 [ 560.128724][T12700] em28xx_v4l2_open+0x11e/0x570 [ 560.133684][T12700] v4l2_open+0x1d2/0x490 [ 560.137956][T12700] ? __pfx_v4l2_open+0x10/0x10 [ 560.142749][T12700] chrdev_open+0x234/0x6a0 [ 560.147203][T12700] ? __pfx_chrdev_open+0x10/0x10 [ 560.152173][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 560.158172][T12700] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 560.164559][T12700] do_dentry_open+0x6d8/0x1660 [ 560.169349][T12700] ? __pfx_chrdev_open+0x10/0x10 [ 560.174404][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 560.180063][T12700] vfs_open+0x82/0x3f0 [ 560.184159][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 560.189812][T12700] path_openat+0x208c/0x31a0 [ 560.194449][T12700] ? __pfx_path_openat+0x10/0x10 [ 560.199420][T12700] do_file_open+0x20e/0x430 [ 560.203953][T12700] ? __pfx_do_file_open+0x10/0x10 [ 560.209050][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 560.214703][T12700] ? alloc_fd+0x476/0x790 [ 560.219063][T12700] ? do_getname+0x191/0x390 [ 560.223577][T12700] do_sys_openat2+0x10d/0x1e0 [ 560.228261][T12700] ? __pfx_do_sys_openat2+0x10/0x10 [ 560.233472][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 560.239138][T12700] __x64_sys_openat+0x12d/0x210 [ 560.244183][T12700] ? __pfx___x64_sys_openat+0x10/0x10 [ 560.249742][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 560.255479][T12700] ? do_user_addr_fault+0x8d6/0x12f0 [ 560.260776][T12700] ? srso_alias_return_thunk+0x5/0xfbef5 [ 560.266867][T12700] do_syscall_64+0x106/0xf80 [ 560.271581][T12700] ? irqentry_exit+0x138/0x670 [ 560.276468][T12700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.282373][T12700] RIP: 0033:0x7f472fca7407 [ 560.286894][T12700] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 560.306521][T12700] RSP: 002b:00007ffd811291d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 560.314967][T12700] RAX: ffffffffffffffda RBX: 00007f47304a4880 RCX: 00007f472fca7407 [ 560.322963][T12700] RDX: 0000000000000000 RSI: 00007ffd8112af1c RDI: ffffffffffffff9c [ 560.331035][T12700] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 560.339015][T12700] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 560.346995][T12700] R13: 00007ffd81129420 R14: 00007f473060b000 R15: 0000559b9a4964d8 [ 560.354999][T12700] [ 560.358599][T12700] Kernel Offset: disabled [ 560.362924][T12700] Rebooting in 86400 seconds..