last executing test programs: 5.733738395s ago: executing program 2 (id=430): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0xe, 0x4a, {0x4a, 0xe, "7d1eb1070e525e4fc111e4532e806cf5f9466507bc946c37849298c01ca8b78ed7934b5a071c40332fb2ea5e6e03ee115c57d31c6912a197f4e86f4c6df8b4ed46182cfef7d787be"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x40, 0x31, 0xd0, "26df770dcab864bffd7e38a6d9f325ca1dedda31d9d197bfb1684194fbec798de3e8508ccb19cf1dbc4826e97a4a4dc9f9d909ffcf332a2509edecf0b341066c88d32c7af14a7f385ba14b6a95c98c259de90494375b7110bb032921c1fd0dea92e9c1ed2e3cefb69c257b659d00a4ac16d8d3de65acd2bc8b6186084d641cf115e8e0bb5a57116ad65f9b8707e84ee098c3b176cc6dc2021bf500e0a32d1c92a6d06d4c122fdea11c17b9f0ccac9f5000ac7339d209984d0b185ff25d33dc6040810fe27d3d68fe39346cec51651d89"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000300)={0xc0, 0xa1, 0x4}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "7281372502805b821d56494aa48614423607892c8503671ce3d4d91adc6e2bd228e11049c0eed86fa1a9f2b339b51b"}}) 5.327763079s ago: executing program 1 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="cf0426bd7000000000d03e00000008000300", @ANYRES32=r5], 0x1c}}, 0x0) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7d, &(0x7f0000000300)=0x402) 5.289324581s ago: executing program 1 (id=437): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b10102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x496d}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x397d}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @private1, 0x1000a}, 0x1c) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)={0x0, 0x3, 0x16, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0031fa0000009476ba2e06f9593f2f171a0826ddfda5efdd9a9d9f9aa77466bdace60abb6ec8b516b0a3f1b0587585324c64474649ec4be5ae2e9c5bdc59856f7e9d793fb852f0c129e673a55a578181f992be664a2e36b119a7074ab41e737a4ca2c260b759662852390da1b32c8ee6fadae76996a6dc162cd82962821493be1ffd62a5cdfa879d3fb407956e4408d27566cf7211d5abba12933ad11fdddc40d0e26a1c9aea005754b6478eb28ba85a8a56d3854df1a90de52e9ab8f59435c31d030032a08650924e8d9a1bacd5ef122f3efc5e9b446bf63020a9ad7aa1fdf5521d023fbde5e4fe4d99ce1d4f032f9c04"], &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xf7}}) r4 = syz_usb_connect$cdc_ecm(0x3, 0x60, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x9, 0x0, 0xe, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0xfe, {{0x9, 0x24, 0x6, 0x0, 0x0, "d356984f"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x87, 0x7, 0xa0}, [@ncm={0x6, 0x24, 0x1a, 0x3ff, 0x21}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x40, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xfc, 0x45, 0x86}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xc4, 0x1, 0xe5}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x200, 0x97, 0x6, 0x4e, 0x8, 0xfd}, 0x1e, &(0x7f00000006c0)={0x5, 0xf, 0x1e, 0x1, [@generic={0x19, 0x10, 0xb, "78621da75fbe570da221fa47d4320f1b34ea96131aad"}]}, 0x5, [{0x1a, &(0x7f0000000700)=@string={0x1a, 0x3, "1a0649492ac90fb18cd80e338742976ddcbaac50ba8b2713"}}, {0x1e, &(0x7f0000000740)=@string={0x1e, 0x3, "3f5bda438dfee9bebf1bb4f1102528189f48f9733de3804e27f73cd3"}}, {0xe2, &(0x7f0000000780)=@string={0xe2, 0x3, "6a55ce2ff8e06de76eaf42a19e017043f93d1f2778ab7a14a96fbeeb46d38d2fe5431bba52455a4121e181817628d09a422b00ace9daf14ec7a1906fb321646e915fd945ef73c73a4705b9d8001c3c93f19a43afd8090898946d726bdc648de7704214659f3bd2b39f89006aea249b30011ae994b10d44eedda104d36b49759fbd2a1d19c786790eec5f157fccb6f7b8e2ac4d596b7513d22499bcb1590556680f868eaa94b7783aa2a3aca06f8eb69dd747228be923f9b136bebf03e5990313c41f08165d8c1f94317917faee0abee2a0b566ed3eee275c54d83614c40ade9b"}}, {0xe1, &(0x7f0000000880)=@string={0xe1, 0x3, "ce99dfe647c37d5aaa318ed845ce70e6eaa88074cfb23e7abb1faec290423919b8bf9bdd775d5f4c1bf8a1faa8ffd5eb99c259fa4f60164ed733f6c21dbb7f8359e1ff63279cecc0a3c689cd58c1e4ae3309382f2dedd1faa9b4c4c11ae64ce97cf6d73cea1bf12feb8be8ea78cc127473d43656bb9f5aaaa596ef932b402f09c07639390f192451e2cae2d5c90a60e8e386502a0627f93d62abcbeffdfc6a57ba4b505ca6872115090e1a72bb29af19f544d6e22f5ef1b09fd5faaf6110cc220a75ed600bf69dcfd0883efdbd89fdd52256755ff89b6b6a9bdc2aee5c4e30"}}, {0xa, &(0x7f0000000980)=@string={0xa, 0x3, "2b7b80414b0fa3bb"}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)={0x20, 0x11, 0x30, {0x30, 0x2, "f171ed0aabc609f79110e9f17257e2786250f5794c755b5b3d59bd6522ae998f2ec51cebcff357ed32d0e5da7a77"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000b40)={0x40, 0x11, 0x35, "c866e9dea76ceff2e30c83c35e12a327e6677e04b5295c3d0631baee4fb0794c8e92c829320471ac1dc8f74ae2dee120d1cc630a14"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xfc}}) setuid(0xee00) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000480)) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x45, &(0x7f0000000140)=0x8000000, 0x4) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000440)={0x40, 0x6, 0xbe, {0xbe, 0x11, "aa21c249490fa3ac25e687d8e3e56a75793d48658ff4174168fb38203571dc590c892ef906ebd7d99cd634b1996bcbb48589d7c632102ecbc061bdd96a77ebbef79c97666e811d8aade19982b734578e1b20399ad7516fb8379abfea28f55af1e1a2427122669fc465e22a1dc8ccb2e9366f3b89e8be69e19b661eff3b7f86b655f7b01eb1ee02629e6e4908afeef5654cb62174215279b9c181b242ffa0e3bcc62736aad94eaa255a3c6ba2f277f3cdebe747a1c7f1a3546c1265f5"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x0, 0xe, 0x1b, "83eed1d320130aad6d05137d058dc6339b4d60bc2539f709f23296"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.147824109s ago: executing program 0 (id=438): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x5}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4000021) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.83163658s ago: executing program 2 (id=441): ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x8, 0x655, 0x7}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x8, 0x975e, 0xad, 0x9}, 0x10) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r1, 0x0, 0x5, 0xfffffffffffffffc}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000001c0)={0xfff, "435cd44ba45bf96f09375008ec0c31767e13663a92de1f292c2b0aac4d97195d", 0x1, 0x1}) write$P9_RFSYNC(r0, &(0x7f0000000200)={0x7, 0x33, 0x1}, 0x7) write$P9_RATTACH(r0, &(0x7f0000000240)={0x14, 0x69, 0x1, {0x0, 0x2, 0x3}}, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000280)={0x7, 'veth0_vlan\x00', {0x9}}) mprotect(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x2000002) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000002c0)={{0x3a, @loopback, 0x4e20, 0x1, 'wrr\x00', 0x10, 0x3, 0x6d}, {@empty, 0x4e24, 0x12000, 0x8, 0x6, 0x6}}, 0x44) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000003c0)={0x28, 0x4, r1, 0x0, &(0x7f0000000340)="38fb39c59a069c7c21aaf5387803a83a6f0405393b25fc159073bf3a540709515e74fe933ec0da19cd44cac83035fbd80c0ef919b9a227dc9d4c7c239e94ebb060cad092ed2e79a1ff0e834cd5d399b979dadeb3f67d4903336c56ec58c77d40ce618f5b947b3d0531fc", 0x6a, 0x2}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000400)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)=0x0) wait4(r4, &(0x7f0000000500), 0x8, &(0x7f0000000540)) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000600)=0x73) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000640)) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, &(0x7f0000000680)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000007c0)={0x30, r3, 0x0, 0x0, 0xd, 0x5, 0x7f, &(0x7f0000000740)=""/88}) madvise(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x64) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000800)={0x76, 0xc, 0x6, 0x7, 0x8b21, 0x81}) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000007) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000840)={0x0, 0x0, 0xffffffffffffffff}) writev(r5, &(0x7f0000001980)=[{&(0x7f0000000880)="4af933908948174095385632e470b3791b6052af8fc0a9e93bfd0bb4091ea92435db4c244bce848da408e10756e0773c5ca1ad74c386822504a9cc0bd54f2bd54842b5d6030003c758bed3d4d97a4dda8c6fbf8cff9ee1f1e3f3f0ebb6a69f455c59846e483a68d5c56cb414a2e0ca0075e6751a34438180f9a9e4f7488c3f280aa66994d87d2aa5e2263f28ff2e280570022eb80f10a06fe656a7d415f56bc292be1398555eeb8a6ce052f018c1958e5a27adc31a29eeec9f2451bcd660aa16a7b57bb8658c2a5b20677bb6659e92", 0xcf}, {&(0x7f0000000980)="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", 0x1000}], 0x2) syz_genetlink_get_family_id$tipc(&(0x7f00000019c0), r0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001a00)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}}, 0x84) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 3.662580917s ago: executing program 2 (id=443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000004002c000680"], 0xa4}}, 0x0) 3.583046942s ago: executing program 2 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000200106"], 0xffe) 3.418458606s ago: executing program 2 (id=446): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef17ee60000000000001090224000100000000090400090103000200e27801000001220500090581030000000f00"], 0x0) (async) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef17ee60000000000001090224000100000000090400090103000200e27801000001220500090581030000000f00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) gettid() syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x9, "e2767803"}, @global=@item_4={0x3, 0x1, 0x0, "e6b0f620"}, @global=@item_012={0x2, 0x1, 0x1, "f431"}, @local=@item_012={0x1, 0x2, 0x5, 'j'}]}}, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ec0)="d80000001d0081044e81f782db44b904021d080500000000040000a1180002000000000000000e1208000f0100810401a8001600a40001400300000803600cfab94dcf5c0461c16f94007134cf6ee08000a0e408e8d8ef075c11503c6baace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd6bc09000000000000002483916ddf50b8b351f55551715b52facb", 0x9b}, {&(0x7f00000006c0)="54f6d4d87eb3f1c0c5", 0x9}, {&(0x7f0000000080)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d", 0x34}], 0x3, 0x0, 0x0, 0x7400}, 0xd0) r2 = syz_open_dev$I2C(&(0x7f0000003840), 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x3, 0x7, 0x0, @discrete={0x7fff, 0xdff}}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000001280)={&(0x7f0000000000)=[{0x0, 0x4c11, 0x1, &(0x7f0000001300)="e2"}], 0x1}) (async) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000001280)={&(0x7f0000000000)=[{0x0, 0x4c11, 0x1, &(0x7f0000001300)="e2"}], 0x1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x204}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000018}, 0x20040800) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x204}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000018}, 0x20040800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$RFKILL_IOC_MAX_SIZE(r6, 0x2, &(0x7f0000000100)=0x9) (async) ioctl$RFKILL_IOC_MAX_SIZE(r6, 0x2, &(0x7f0000000100)=0x9) 2.265546591s ago: executing program 1 (id=450): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="240000001e005f80004000000000000001000000010000000000080008000100000303ff", 0x24) r3 = socket(0x10, 0x803, 0x10000000) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000005e00000311bd7000fedbdf25e0000002000000000000fdffffff0000000004d30200ff00ffffffff000000000c000000000000000409000005350000"], 0x40}}, 0x90) fchdir(r1) r4 = open(&(0x7f0000000300)='./file1\x00', 0x501600, 0xc4) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r7, 0xffffffffffffffff, 0x0) write$FUSE_DIRENT(r6, 0x0, 0x0) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ftruncate(r4, 0x6) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x61, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) 2.111652915s ago: executing program 0 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xcce38bdccf4ae9e1, 0x0, 0x6}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008050}, 0x100) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xcce38bdccf4ae9e1, 0x0, 0x6}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008050}, 0x100) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) (async) 2.111454752s ago: executing program 0 (id=452): r0 = fsopen(&(0x7f00000003c0)='nilfs2\x00', 0x1) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus/file0\x00', 0x6b) chdir(&(0x7f0000000080)='./bus\x00') renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') read$FUSE(r8, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r7, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xffffffe2}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r0, 0x1, 0x80) r10 = openat$cgroup_int(r9, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) futex(&(0x7f0000000000)=0x2, 0x8, 0x1, 0x0, 0x0, 0x2) r11 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0x12) sendfile(r11, r10, 0x0, 0x1) 2.065962258s ago: executing program 0 (id=453): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "0004"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "7f08"}, @global=@item_4={0x3, 0x1, 0x8, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "24300912"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "e4004000"}]}}, 0x0}, 0x0) 1.679827018s ago: executing program 3 (id=455): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) fsetxattr(r2, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000041000900000000000008000005000000080002"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x18, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x12) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x70, &(0x7f0000000640)=ANY=[@ANYBLOB="12015002020000ff2505a1a440000102030109025e00010107c03b0904000702020600050624060000b30524000f000d240f0109000000ff00f8610906240703090007240a020806050c241b03000100efd0000402090581031000b6050809058202400008f700090507020800030c919d20531595c934cfbf62410102aeef14264b10aac999b3da0fa9478a34e0ca2d68a65a31e6a6ad744aabe751d085e5b59a0a34e026ee6fdbfc5a530be22d0e0ef575cec3b11266545d105f3e3813d37110180d7fcc703e7b82cb94cff44be853bfd11d635e8a052b5cf181af36ec832893fd7c1b79b7c7cfaa150a724a15228cc4253dca4f445eb9a9ce2bf247b87fa2fdebdc605446b8954ce62ee0ab5a4f4d3e58ae6cb38725f8433cb9c40338a69c3d00"/302], &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x10, 0x2, 0x8, 0xff, 0x5}, 0x2b, &(0x7f0000000100)={0x5, 0xf, 0x2b, 0x1, [@generic={0x26, 0x10, 0xf, "cf5fb1152457703960abbd1b5c2c3cf6282ebbe95c2e5ec57e0105899ff767458e16a2"}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x445}}]}) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6003) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000040)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1.165498553s ago: executing program 3 (id=456): r0 = fsopen(&(0x7f00000003c0)='nfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r2, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x4) recvmmsg(r5, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10021, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) 1.097476797s ago: executing program 3 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x1}}) linkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0xc0f85403, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0xc0f85403, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r6 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r7 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) 1.011450621s ago: executing program 3 (id=458): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000380)={{&(0x7f0000000300)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x8ce0}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '4', 'RingAsymTx\x00'}, {"d58b452ed492882d1cdad941cba5bd449cc0f0ebaf2707c12b48d79a8dde3ca6b0e2948cb117c45771d60abf500105b7df46aeb71e87f8b80e36e4d08728ad22"}}}}}, {&(0x7f0000000280)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"4befa7325b365bb330fb0af29fcc9d3b2ec4d778cb661a6a49737678bcaeff72d47c13bddab684a154330c3115fa08916f26e6d12859194edc33b671a0f09270"}}}}}}}, 0xd}) 848.030067ms ago: executing program 1 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x1000000}, 0x0) 828.153427ms ago: executing program 3 (id=460): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e14", 0x1a}, {&(0x7f0000000600)="9084f1c3d5fa9e1cf6086296b34162dc239aa8dd", 0x14}], 0x2}, 0x4000840) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES32=0x0, @ANYRES16=r0], 0x20}], 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="cd"], 0x0) 727.682924ms ago: executing program 1 (id=461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000010000000010000000900010073797a310000000854000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000a00051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}}, 0x10) 691.019371ms ago: executing program 1 (id=462): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0xd8, 0x32, 0x4f, 0xdf, 0x1b3d, 0x103, 0xddbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x80, 0x5b, [{{0x9, 0x4, 0xf5, 0xbc, 0x0, 0xcc, 0xff, 0x40, 0xf7}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x2, 0xac, 0x2, 0x20, 0x3}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "f2efd021107618321b971c4471daff36"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x445}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 428.358682ms ago: executing program 0 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000008002c000680"], 0xa4}}, 0x0) 331.700624ms ago: executing program 0 (id=464): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) socket$inet6(0xa, 0x803, 0xfffff000) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) socket$inet6(0xa, 0x803, 0xfffff000) (async) 331.409384ms ago: executing program 2 (id=465): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(xts(cbc(aes-ce)),blake2s-224-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_register(r1, &(0x7f0000002300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3ff, 0x3a, '.', 0x3a, '#:', 0x3a, './file0'}, 0x2a) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000030000000000000001701000002000000eb7c"], 0x340, 0x80}], 0x1, 0x4000000) 0s ago: executing program 3 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000306"], 0xffe) kernel console output (not intermixed with test programs): 2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.385257][ T5825] Bluetooth: hci0: command tx timeout [ 71.394098][ T5146] Bluetooth: hci1: command tx timeout [ 71.397260][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.399979][ T5828] Bluetooth: hci3: command tx timeout [ 71.411670][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.411747][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.441738][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.449236][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.475533][ T5828] Bluetooth: hci2: command tx timeout [ 71.475939][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.612931][ T5822] hsr_slave_0: entered promiscuous mode [ 71.619395][ T5822] hsr_slave_1: entered promiscuous mode [ 71.625742][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 71.631485][ T5822] Cannot create hsr debugfs directory [ 71.663991][ T5830] hsr_slave_0: entered promiscuous mode [ 71.670646][ T5830] hsr_slave_1: entered promiscuous mode [ 71.677583][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 71.683472][ T5830] Cannot create hsr debugfs directory [ 72.049699][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.061811][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.076845][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.092421][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.187331][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.198271][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.228417][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.249249][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.270337][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.281413][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.308415][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.328114][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.399032][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.409160][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.420315][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.431438][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.530792][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.602639][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.638206][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.645572][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.676500][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.683756][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.705503][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.762836][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.777794][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.798212][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.815499][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.822621][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.841991][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.865185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.872408][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.904038][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.912386][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.919524][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.931234][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.938410][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.011602][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.018859][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.073143][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.080380][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.294605][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.370290][ T5826] veth0_vlan: entered promiscuous mode [ 73.409549][ T5826] veth1_vlan: entered promiscuous mode [ 73.466307][ T5828] Bluetooth: hci3: command tx timeout [ 73.471761][ T5828] Bluetooth: hci0: command tx timeout [ 73.477351][ T5825] Bluetooth: hci1: command tx timeout [ 73.530829][ T5826] veth0_macvtap: entered promiscuous mode [ 73.545496][ T5828] Bluetooth: hci2: command tx timeout [ 73.558038][ T5826] veth1_macvtap: entered promiscuous mode [ 73.578718][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.631128][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.654185][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.671558][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.708720][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.721200][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.731221][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.752154][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.761617][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.815908][ T5830] veth0_vlan: entered promiscuous mode [ 73.853276][ T5830] veth1_vlan: entered promiscuous mode [ 73.916906][ T5832] veth0_vlan: entered promiscuous mode [ 73.939884][ T5822] veth0_vlan: entered promiscuous mode [ 73.959341][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.964584][ T5832] veth1_vlan: entered promiscuous mode [ 73.976609][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.000108][ T5822] veth1_vlan: entered promiscuous mode [ 74.017580][ T5830] veth0_macvtap: entered promiscuous mode [ 74.056948][ T5830] veth1_macvtap: entered promiscuous mode [ 74.073753][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.081810][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.111941][ T5832] veth0_macvtap: entered promiscuous mode [ 74.125823][ T5832] veth1_macvtap: entered promiscuous mode [ 74.152667][ T5822] veth0_macvtap: entered promiscuous mode [ 74.169949][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.174450][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.187820][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.214505][ T5822] veth1_macvtap: entered promiscuous mode [ 74.232220][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.260331][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.277647][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.287520][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.307199][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.321664][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.363242][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.372249][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.373342][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.382494][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.400073][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.420618][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.445611][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.475250][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.480215][ T5912] netlink: 'syz.3.5': attribute type 1 has an invalid length. [ 74.536489][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.554194][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.568900][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.581773][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.594179][ T5914] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.663351][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.677737][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.749440][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.762054][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.803635][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.817713][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.865797][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.878521][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.939504][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.948789][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.986378][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.011990][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.244375][ T5919] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.280997][ T5919] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 75.298347][ T5919] 0ªî{X¹¦: entered allmulticast mode [ 75.310515][ T5919] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 75.431294][ T5924] kvm: kvm [5922]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1201ba41f1f636b2 [ 75.552347][ T5828] Bluetooth: hci0: command tx timeout [ 75.553959][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.558021][ T5146] Bluetooth: hci1: command tx timeout [ 75.574310][ T5825] Bluetooth: hci3: command tx timeout [ 75.625001][ T5146] Bluetooth: hci2: command tx timeout [ 75.648727][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 75.659036][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 75.766810][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.781773][ T5870] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 75.795521][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.825819][ T5870] usb 2-1: config 0 descriptor?? [ 75.990386][ T5947] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 76.153681][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.354044][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 76.361702][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 76.373220][ T9] usb 4-1: config 0 has no interface number 0 [ 76.382844][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 76.398465][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 76.410680][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.422800][ T9] usb 4-1: Product: syz [ 76.430738][ T9] usb 4-1: Manufacturer: syz [ 76.435916][ T9] usb 4-1: SerialNumber: syz [ 76.444493][ T9] usb 4-1: config 0 descriptor?? [ 76.597179][ T5971] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 76.855553][ T5870] video4linux radio48: keene_cmd_set failed (-71) [ 76.862350][ T5870] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 76.876340][ T5870] usb 2-1: USB disconnect, device number 2 [ 77.048196][ T5986] ISOFS: Unable to identify CD-ROM format. [ 77.073465][ T9] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 77.101301][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 77.109578][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 77.119855][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 77.162303][ T9] usb 4-1: USB disconnect, device number 2 [ 77.285207][ T5994] fuse: Bad value for 'fd' [ 77.623580][ T5828] Bluetooth: hci0: command tx timeout [ 77.629033][ T5828] Bluetooth: hci3: command tx timeout [ 77.635980][ T5146] Bluetooth: hci1: command tx timeout [ 77.650196][ T6012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.663819][ T5870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.672047][ T6012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.704899][ T5828] Bluetooth: hci2: command tx timeout [ 77.824035][ T5870] usb 1-1: device descriptor read/64, error -71 [ 77.844739][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 77.848243][ T6020] process 'syz.3.35' launched './file0' with NULL argv: empty string added [ 77.893542][ T5884] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 78.015877][ T24] usb 2-1: config 3 has an invalid interface number: 179 but max is 0 [ 78.024322][ T24] usb 2-1: config 3 has no interface number 0 [ 78.030525][ T24] usb 2-1: config 3 interface 179 has no altsetting 0 [ 78.044594][ T24] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 78.054100][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.062411][ T24] usb 2-1: Product: syz [ 78.067905][ T24] usb 2-1: Manufacturer: syz [ 78.072647][ T5884] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 78.081279][ T5870] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.088824][ T24] usb 2-1: SerialNumber: syz [ 78.093501][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.108533][ T5884] usb 3-1: config 0 has no interface number 0 [ 78.114787][ T5884] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 78.126527][ T5884] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 78.133588][ T5915] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.139884][ T5884] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 78.155870][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.165380][ T5884] usb 3-1: Product: syz [ 78.171318][ T5884] usb 3-1: Manufacturer: syz [ 78.176579][ T5884] usb 3-1: SerialNumber: syz [ 78.185327][ T5884] usb 3-1: config 0 descriptor?? [ 78.190906][ T6011] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 78.198289][ T6011] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 78.211068][ T5884] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 78.233533][ T5870] usb 1-1: device descriptor read/64, error -71 [ 78.313469][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 78.320565][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 78.330473][ T5915] usb 4-1: config 2 has an invalid interface number: 227 but max is 0 [ 78.340299][ T5915] usb 4-1: config 2 has no interface number 0 [ 78.344952][ T24] go7007 2-1:3.179: probe with driver go7007 failed with error -12 [ 78.352640][ T5915] usb 4-1: config 2 interface 227 has no altsetting 0 [ 78.357217][ T5870] usb usb1-port1: attempt power cycle [ 78.363741][ T5915] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=60.04 [ 78.377015][ T24] usb 2-1: USB disconnect, device number 3 [ 78.388660][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.398178][ T5915] usb 4-1: Product: syz [ 78.402374][ T5915] usb 4-1: Manufacturer: syz [ 78.407092][ T5915] usb 4-1: SerialNumber: syz [ 78.411748][ T5884] usb 3-1: USB disconnect, device number 2 [ 78.631874][ T5915] usb 4-1: USB disconnect, device number 3 [ 78.723625][ T5870] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.745069][ T5870] usb 1-1: device descriptor read/8, error -71 [ 78.983629][ T5870] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.012938][ T6032] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 79.014102][ T5870] usb 1-1: device descriptor read/8, error -71 [ 79.022085][ T6032] cramfs: wrong magic [ 79.123732][ T5915] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.135424][ T5870] usb usb1-port1: unable to enumerate USB device [ 79.285650][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.308826][ T5915] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 79.329804][ T5915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 79.340080][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.350743][ T5915] usb 2-1: Product: syz [ 79.355534][ T5915] usb 2-1: Manufacturer: syz [ 79.360127][ T5915] usb 2-1: SerialNumber: syz [ 79.403530][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.557804][ T9] usb 3-1: too many configurations: 237, using maximum allowed: 8 [ 79.580769][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.590361][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.602476][ T9] usb 3-1: Product: syz [ 79.607768][ T9] usb 3-1: Manufacturer: syz [ 79.612481][ T9] usb 3-1: SerialNumber: syz [ 79.632011][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 79.667272][ T5857] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.983583][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.153729][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 80.171832][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.184497][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 80.194359][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.214510][ T9] usb 4-1: config 0 descriptor?? [ 80.234335][ T5915] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 80.309493][ T5870] usb 3-1: USB disconnect, device number 3 [ 80.398929][ T5915] usb 2-1: device firmware changed [ 80.409430][ T5915] usb 2-1: USB disconnect, device number 4 [ 80.554389][ T5915] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.693711][ T9] hid-picolcd 0003:04D8:C002.0001: No report with id 0x11 found [ 80.707378][ T5915] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 80.745373][ T5857] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 80.752552][ T5915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 80.764070][ T5857] ath9k_htc: Failed to initialize the device [ 80.773167][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.776360][ T5870] usb 3-1: ath9k_htc: USB layer deinitialized [ 80.782438][ T5915] usb 2-1: Product: syz [ 80.802175][ T5915] usb 2-1: Manufacturer: syz [ 80.808044][ T5915] usb 2-1: SerialNumber: syz [ 80.840884][ T980] usb 4-1: USB disconnect, device number 4 [ 80.970473][ T6075] Zero length message leads to an empty skb [ 81.293560][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.306941][ T6085] netlink: 32 bytes leftover after parsing attributes in process `syz.0.59'. [ 81.396776][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.447456][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.460612][ T5870] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 81.480592][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.489087][ T5870] usb 3-1: Product: syz [ 81.496120][ T5870] usb 3-1: Manufacturer: syz [ 81.500769][ T5870] usb 3-1: SerialNumber: syz [ 81.510120][ T5870] usb 3-1: config 0 descriptor?? [ 81.525948][ T5870] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 81.544059][ T5870] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 81.616642][ T6097] capability: warning: `syz.1.64' uses 32-bit capabilities (legacy support in use) [ 81.728271][ T5870] usb 3-1: USB disconnect, device number 4 [ 81.732442][ T5857] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 81.814207][ T5915] usb 2-1: USB disconnect, device number 5 [ 81.902104][ T5857] usb 4-1: too many endpoints for config 0 interface 0 altsetting 7: 34, using maximum allowed: 30 [ 81.934457][ T5857] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.954323][ T5857] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 81.989494][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 82.003820][ T5857] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 82.024659][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.045362][ T5857] usb 4-1: config 0 descriptor?? [ 82.264634][ T5884] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 82.286543][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 82.296317][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 82.430894][ T5884] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 82.439325][ T5884] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 82.450775][ T5884] usb 2-1: config 8 has no interface number 0 [ 82.463498][ T5884] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 82.490107][ T5884] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.511054][ T5884] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 82.521119][ T6123] input: syz1 as /devices/virtual/input/input5 [ 82.531354][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.541567][ T5884] usb 2-1: Product: syz [ 82.546948][ T5884] usb 2-1: Manufacturer: syz [ 82.553525][ T5884] usb 2-1: SerialNumber: syz [ 82.603554][ T5870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.664187][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.673060][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.700942][ T5857] usbhid 4-1:0.0: can't add hid device: -71 [ 82.717911][ T5857] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 82.730031][ T5857] usb 4-1: USB disconnect, device number 5 [ 82.765008][ T5870] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.775519][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.785825][ T5870] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 82.786586][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.796203][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.816899][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 82.833275][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 82.834572][ T5884] usb 2-1: USB disconnect, device number 6 [ 82.854387][ T5870] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.863700][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.873574][ T5870] usb 1-1: Product: syz [ 82.877766][ T5870] usb 1-1: Manufacturer: syz [ 82.896181][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 82.901422][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 82.916243][ T5870] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 82.922238][ T5870] cdc_wdm 1-1:1.0: Unknown control protocol [ 82.943491][ T980] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.103524][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 83.110272][ T980] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 83.118648][ T980] usb 3-1: config 0 has no interface number 0 [ 83.124831][ T980] usb 3-1: config 0 interface 12 has no altsetting 0 [ 83.133591][ T980] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 83.142638][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.150753][ T980] usb 3-1: Product: syz [ 83.154983][ T980] usb 3-1: Manufacturer: syz [ 83.159561][ T980] usb 3-1: SerialNumber: syz [ 83.166271][ T980] usb 3-1: config 0 descriptor?? [ 83.430442][ T6134] ======================================================= [ 83.430442][ T6134] WARNING: The mand mount option has been deprecated and [ 83.430442][ T6134] and is ignored by this kernel. Remove the mand [ 83.430442][ T6134] option from the mount to silence this warning. [ 83.430442][ T6134] ======================================================= [ 83.539616][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 83.582227][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 83.802436][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.83'. [ 83.820573][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 83.995848][ T980] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 84.004553][ T980] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 84.013597][ T980] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 84.021248][ T980] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 84.035128][ T980] usb 3-1: USB disconnect, device number 5 [ 84.083683][ T5884] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 84.189222][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 84.263513][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 84.270956][ T5884] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1023 [ 84.280988][ T5884] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.294097][ T5884] usb 2-1: config 1 interface 0 has no altsetting 0 [ 84.303058][ T5884] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 84.312168][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.321419][ T5884] usb 2-1: Product: èžì‚¯â¨©ã¶”ì„镅â¸êµ¶à­®ä«¨åŸ¨ï“…蛦䀼ᵷ륑渜駳뼜䈊⺳ꎀ䟊âºâª—ë“žä¬è¢¨ã£”㔼힆麂뷖洌ᒪᡘï¿ç¿¿ì‰é§Œæ®¨ï¬¨èŸ´é†Žê¡¨ã² ï¸†íƒšì“—澟⣿༊૪äší˜¦à¬˜ë’½ä©®î´¬å½„äꭚ㈪⫠ɴ忉ค톋힒⋟뫣뾤喱쎞需夎儼䯶ïŽëŸá…ïŽë¦›æµžâµ–竆녑 [ 84.349623][ T5884] usb 2-1: Manufacturer: Ь [ 84.354237][ T5884] usb 2-1: SerialNumber: á Œ [ 84.362201][ T6152] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.373509][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 84.380623][ T5915] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 84.389532][ T5915] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 84.398072][ T5915] usb 4-1: config 166 has no interface number 0 [ 84.404663][ T5915] usb 4-1: config 166 has no interface number 1 [ 84.410952][ T5915] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 84.422875][ T5915] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 84.434072][ T5915] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 84.444979][ T5915] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 84.456764][ T5915] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 84.468255][ T5915] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 84.478597][ T5915] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 84.489867][ T5915] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 84.500258][ T5915] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 84.515470][ T5915] usb 4-1: config 166 interface 177 has no altsetting 0 [ 84.526633][ T5915] usb 4-1: config 166 interface 34 has no altsetting 0 [ 84.536564][ T5915] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 84.545916][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.563490][ T5915] usb 4-1: Product: syz [ 84.567685][ T5915] usb 4-1: Manufacturer: syz [ 84.584972][ T5915] usb 4-1: SerialNumber: syz [ 84.898471][ T5857] usb 2-1: USB disconnect, device number 7 [ 85.389568][ T5857] usb 1-1: USB disconnect, device number 6 [ 85.470706][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 85.486208][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 85.579894][ T30] audit: type=1326 audit(1759829277.721:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ae398eec9 code=0x0 [ 85.601730][ T5884] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 85.755899][ T5884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.766105][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.776658][ T5884] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.786153][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.794255][ T5884] usb 3-1: SerialNumber: syz [ 85.883569][ T5857] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.008807][ T5884] usb 3-1: 0:2 : does not exist [ 86.030072][ T5884] usb 3-1: USB disconnect, device number 6 [ 86.045797][ T5857] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 86.057292][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.075232][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.076748][ T5857] usb 1-1: config 0 descriptor?? [ 86.109833][ T5857] cp210x 1-1:0.0: cp210x converter detected [ 86.613831][ T6192] netlink: 'syz.1.96': attribute type 46 has an invalid length. [ 86.672685][ T6197] random: crng reseeded on system resumption [ 86.729492][ T6200] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 86.736169][ T6200] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 86.748228][ T5857] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 86.751390][ T6200] vhci_hcd vhci_hcd.0: Device attached [ 86.767747][ T983] cfg80211: failed to load regulatory.db [ 86.784316][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 86.788658][ T6200] vhci_hcd vhci_hcd.0: port 0 already used [ 86.802903][ T5857] cp210x 1-1:0.0: querying part number failed [ 86.812738][ T6203] loop2: detected capacity change from 0 to 7 [ 86.831950][ T5857] usb 1-1: cp210x converter now attached to ttyUSB0 [ 86.846227][ T5838] Dev loop2: unable to read RDB block 7 [ 86.863352][ T5857] usb 1-1: USB disconnect, device number 7 [ 86.867031][ T5838] loop2: unable to read partition table [ 86.881159][ T5857] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 86.896117][ T5857] cp210x 1-1:0.0: device disconnected [ 86.906134][ T5838] loop2: partition table beyond EOD, truncated [ 86.917439][ T6203] Dev loop2: unable to read RDB block 7 [ 86.926507][ T6203] loop2: unable to read partition table [ 86.933140][ T6203] loop2: partition table beyond EOD, truncated [ 86.940962][ T6201] vhci_hcd: connection closed [ 86.942484][ T13] vhci_hcd: stop threads [ 86.948914][ T6203] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 86.967536][ T13] vhci_hcd: release socket [ 86.972741][ T13] vhci_hcd: disconnect device [ 87.026620][ T5884] usb 36-1: enqueue for inactive port 0 [ 87.035910][ T5915] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 87.113306][ T5915] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 87.182825][ T5915] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 87.197091][ T5915] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 87.206817][ T5857] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 87.214426][ T5915] uvcvideo 4-1:166.34: No valid video chain found. [ 87.232381][ T5915] usb 4-1: USB disconnect, device number 6 [ 87.340231][ T6221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.353499][ T5857] usb 1-1: device descriptor read/64, error -71 [ 87.524751][ T5884] usb usb36-port1: attempt power cycle [ 87.583496][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 87.604022][ T5857] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 87.713495][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 87.733571][ T5857] usb 1-1: device descriptor read/64, error -71 [ 87.743696][ T980] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 87.746291][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.762131][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 87.771222][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.781193][ T10] usb 3-1: config 0 descriptor?? [ 87.844217][ T5857] usb usb1-port1: attempt power cycle [ 87.876153][ T24] usb 4-1: config 2 has an invalid interface number: 201 but max is 0 [ 87.884431][ T24] usb 4-1: config 2 has no interface number 0 [ 87.890546][ T24] usb 4-1: config 2 interface 201 has no altsetting 0 [ 87.898903][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 87.906020][ T980] usb 2-1: config 0 has an invalid interface number: 6 but max is 1 [ 87.914243][ T980] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 87.922405][ T980] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 87.931517][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.941843][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=c712, bcdDevice=9d.92 [ 87.951171][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.959364][ T980] usb 2-1: config 0 has no interface number 0 [ 87.965525][ T24] usb 4-1: Product: syz [ 87.969686][ T24] usb 4-1: Manufacturer: syz [ 87.974389][ T980] usb 2-1: config 0 has no interface number 1 [ 87.980486][ T980] usb 2-1: config 0 interface 6 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 87.991121][ T24] usb 4-1: SerialNumber: syz [ 87.996988][ T980] usb 2-1: config 0 interface 6 altsetting 13 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 88.010939][ T980] usb 2-1: config 0 interface 6 altsetting 13 endpoint 0x7 has an invalid bInterval 30, changing to 8 [ 88.022917][ T980] usb 2-1: config 0 interface 6 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 88.037859][ T980] usb 2-1: config 0 interface 6 altsetting 13 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 88.049581][ T980] usb 2-1: config 0 interface 6 altsetting 13 endpoint 0x83 has invalid maxpacket 62026, setting to 64 [ 88.060969][ T980] usb 2-1: config 0 interface 6 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 88.072689][ T980] usb 2-1: config 0 interface 6 altsetting 13 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 88.086044][ T980] usb 2-1: config 0 interface 104 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 88.100318][ T5884] usb usb36-port1: unable to enumerate USB device [ 88.110585][ T980] usb 2-1: config 0 interface 6 has no altsetting 0 [ 88.117307][ T980] usb 2-1: config 0 interface 104 has no altsetting 0 [ 88.127092][ T980] usb 2-1: New USB device found, idVendor=0b3c, idProduct=c004, bcdDevice=ce.5d [ 88.136270][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.144481][ T980] usb 2-1: Product: syz [ 88.148648][ T980] usb 2-1: Manufacturer: syz [ 88.153257][ T980] usb 2-1: SerialNumber: syz [ 88.160812][ T980] usb 2-1: config 0 descriptor?? [ 88.190771][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.199826][ T5857] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 88.202705][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.227081][ T5857] usb 1-1: device descriptor read/8, error -71 [ 88.232486][ T24] usb 4-1: USB disconnect, device number 7 [ 88.240331][ T10] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 88.248369][ T10] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 88.257333][ T10] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 88.264740][ T10] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 88.271931][ T10] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 88.279283][ T10] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 88.287092][ T10] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 88.294863][ T10] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 88.301917][ T10] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 88.310105][ T10] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 88.322850][ T10] itetech 0003:06CB:73F4.0002: hidraw0: USB HID v0.00 Device [HID 06cb:73f4] on usb-dummy_hcd.2-1/input0 [ 88.368745][ T6231] comedi comedi0: dac02: I/O port conflict (0x8,8) [ 88.431672][ T6223] CIFS: VFS: Malformed UNC in devname [ 88.436218][ T5884] usb 3-1: USB disconnect, device number 7 [ 88.444903][ T6234] comedi comedi0: dac02: I/O port conflict (0x8,8) [ 88.445004][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.465875][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.483502][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 88.514148][ T5857] usb 1-1: device descriptor read/8, error -71 [ 88.525588][ T980] option 2-1:0.104: GSM modem (1-port) converter detected [ 88.555021][ T980] usb 2-1: USB disconnect, device number 8 [ 88.581081][ T980] option 2-1:0.104: device disconnected [ 88.585944][ T6237] openvswitch: netlink: Multiple metadata blocks provided [ 88.633840][ T5857] usb usb1-port1: unable to enumerate USB device [ 88.973661][ T980] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 89.043493][ T5857] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 89.135224][ T980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.144195][ T980] usb 2-1: config 1 has an invalid interface number: 159 but max is 2 [ 89.152493][ T980] usb 2-1: config 1 has an invalid interface number: 177 but max is 2 [ 89.160970][ T980] usb 2-1: config 1 has an invalid interface number: 106 but max is 2 [ 89.169396][ T980] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 89.178157][ T980] usb 2-1: config 1 has no interface number 0 [ 89.184265][ T980] usb 2-1: config 1 has no interface number 1 [ 89.190317][ T980] usb 2-1: config 1 has no interface number 2 [ 89.196482][ T980] usb 2-1: config 1 interface 159 altsetting 97 endpoint 0xC has invalid maxpacket 61965, setting to 1024 [ 89.207825][ T980] usb 2-1: config 1 interface 159 altsetting 97 bulk endpoint 0xC has invalid maxpacket 1024 [ 89.208743][ T5857] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 89.218095][ T980] usb 2-1: config 1 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 89.227725][ T5915] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 89.242320][ T980] usb 2-1: config 1 interface 106 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 89.257760][ T980] usb 2-1: config 1 interface 106 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 89.257794][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.268719][ T980] usb 2-1: config 1 interface 106 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 89.287804][ T980] usb 2-1: config 1 interface 106 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 89.288077][ T5857] usb 4-1: Product: syz [ 89.298760][ T980] usb 2-1: config 1 interface 106 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 89.303858][ T5857] usb 4-1: Manufacturer: syz [ 89.316243][ T980] usb 2-1: config 1 interface 106 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 89.322261][ T5857] usb 4-1: SerialNumber: syz [ 89.332937][ T980] usb 2-1: config 1 interface 106 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 89.340406][ T5857] usb 4-1: config 0 descriptor?? [ 89.348812][ T980] usb 2-1: config 1 interface 159 has no altsetting 0 [ 89.359850][ T980] usb 2-1: config 1 interface 177 has no altsetting 0 [ 89.366840][ T980] usb 2-1: config 1 interface 106 has no altsetting 0 [ 89.376477][ T980] usb 2-1: Dual-Role OTG device on HNP port [ 89.382651][ T980] usb 2-1: New USB device found, idVendor=1b80, idProduct=e755, bcdDevice=f4.7f [ 89.391973][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.400205][ T980] usb 2-1: Product: â°Š [ 89.404610][ T980] usb 2-1: Manufacturer: ᩪ᪼淧톬洩㘼à±á¤—㱂䧢闹æŸã¼Šë‹¡ë†¯ì°ï¨¾è‚¡ä€´ç®žé™Žè©˜ä­„惼Ʋ⿺窭鯊㻼丷ꢣ糫嫜é‰ë€è¼…è¥ì»Ó˜ç”»é„¶è¢­à±·âª³ä› æŸªç„⤆ë‚䎒褡ê²êŽ©ç€¤Þ¨ [ 89.424862][ T980] usb 2-1: SerialNumber: à° [ 89.432843][ T6238] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 89.454995][ T5915] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 89.463038][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.473734][ T5915] usb 3-1: config 0 has no interface number 0 [ 89.479885][ T5915] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 89.490814][ T5915] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 89.505235][ T5915] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 89.514356][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.522373][ T5915] usb 3-1: Product: syz [ 89.526615][ T5915] usb 3-1: Manufacturer: syz [ 89.531222][ T5915] usb 3-1: SerialNumber: syz [ 89.539905][ T5915] usb 3-1: config 0 descriptor?? [ 89.545765][ T6242] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 89.553177][ T6242] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 89.567893][ T5915] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 89.681416][ T980] usb 2-1: USB disconnect, device number 9 [ 89.767509][ T5857] airspy 4-1:0.0: Board ID: 00 [ 89.768778][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.772428][ T5857] airspy 4-1:0.0: Firmware version: [ 89.784493][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.806248][ T5884] usb 3-1: USB disconnect, device number 8 [ 90.323593][ T5915] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 90.493488][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 90.501734][ T5915] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 90.510937][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.519057][ T5915] usb 1-1: Product: syz [ 90.523250][ T5915] usb 1-1: Manufacturer: syz [ 90.523477][ T5884] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 90.527950][ T5915] usb 1-1: SerialNumber: syz [ 90.542632][ T5915] usb 1-1: config 0 descriptor?? [ 90.664448][ T5884] usb 2-1: device descriptor read/64, error -71 [ 90.750506][ T5915] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 90.757761][ T5915] airspy 1-1:0.0: Could not detect board [ 90.763600][ T5915] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 90.775012][ T5915] usb 1-1: USB disconnect, device number 12 [ 90.784443][ T5857] airspy 4-1:0.0: usb_control_msg() failed -32 request 10 [ 90.794822][ T5857] airspy 4-1:0.0: Registered as swradio24 [ 90.801078][ T5857] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 90.818553][ T5857] usb 4-1: USB disconnect, device number 8 [ 90.903625][ T5884] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 91.043737][ T5884] usb 2-1: device descriptor read/64, error -71 [ 91.164166][ T5884] usb usb2-port1: attempt power cycle [ 91.203500][ T980] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 91.288255][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 91.297365][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 91.353586][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 91.365878][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.374460][ T6265] tipc: Started in network mode [ 91.383786][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.385058][ T6265] tipc: Node identity ff120000000000000000000000000001, cluster identity 4711 [ 91.394179][ T980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.402871][ T6265] tipc: Enabling of bearer rejected, failed to enable media [ 91.415573][ T980] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 91.415598][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.418810][ T980] usb 3-1: config 0 descriptor?? [ 91.513508][ T5884] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 91.535142][ T5884] usb 2-1: device descriptor read/8, error -71 [ 91.613609][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 91.649530][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.664285][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.780353][ T24] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 91.791940][ T5884] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 91.803354][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.811464][ T24] usb 1-1: Product: syz [ 91.816246][ T24] usb 1-1: Manufacturer: syz [ 91.820879][ T24] usb 1-1: SerialNumber: syz [ 91.827907][ T24] usb 1-1: config 0 descriptor?? [ 91.837217][ T5884] usb 2-1: device descriptor read/8, error -71 [ 91.874548][ T980] hid (null): invalid report_count 173034043 [ 91.895839][ T980] nzxt-kraken2 0003:1E71:170E.0003: invalid report_count 173034043 [ 91.904062][ T980] nzxt-kraken2 0003:1E71:170E.0003: item 0 4 1 9 parsing failed [ 91.912581][ T980] nzxt-kraken2 0003:1E71:170E.0003: hid parse failed with -22 [ 91.921694][ T980] nzxt-kraken2 0003:1E71:170E.0003: probe with driver nzxt-kraken2 failed with error -22 [ 91.944363][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.129'. [ 91.953878][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 91.953942][ T5884] usb usb2-port1: unable to enumerate USB device [ 92.038674][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.047680][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.079189][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.088388][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.089451][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.101906][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.126215][ T5857] usb 3-1: USB disconnect, device number 9 [ 92.233563][ T5915] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 92.235160][ T6294] "syz.2.131" (6294) uses obsolete ecb(arc4) skcipher [ 92.389373][ T5915] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 92.398789][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.407679][ T5915] usb 4-1: Product: syz [ 92.411855][ T5915] usb 4-1: Manufacturer: syz [ 92.416532][ T5915] usb 4-1: SerialNumber: syz [ 92.423642][ T5915] usb 4-1: config 0 descriptor?? [ 92.603554][ T5857] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 92.677918][ T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 92.687963][ T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 92.698817][ T24] asix 1-1:0.0: probe with driver asix failed with error -71 [ 92.709212][ T24] usb 1-1: USB disconnect, device number 13 [ 92.764929][ T5857] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 92.773216][ T5857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.784216][ T5857] usb 3-1: config 0 has no interface number 0 [ 92.790347][ T5857] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 92.800382][ T5857] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.816574][ T5857] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 92.826028][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.834446][ T5857] usb 3-1: Product: syz [ 92.838746][ T5915] airspy 4-1:0.0: Board ID: 00 [ 92.843569][ T5857] usb 3-1: Manufacturer: syz [ 92.848160][ T5857] usb 3-1: SerialNumber: syz [ 92.853503][ T5915] airspy 4-1:0.0: Firmware version: [ 92.860655][ T5857] usb 3-1: config 0 descriptor?? [ 93.469258][ T6299] netlink: 'syz.2.132': attribute type 21 has an invalid length. [ 93.485212][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.497601][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.508380][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.519121][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.547392][ T10] usb 3-1: USB disconnect, device number 10 [ 93.603508][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 93.753499][ T24] usb 1-1: device descriptor read/64, error -71 [ 93.845093][ T5915] airspy 4-1:0.0: usb_control_msg() failed -32 request 10 [ 93.868559][ T5915] airspy 4-1:0.0: Registered as swradio24 [ 93.874791][ T5915] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 93.891918][ T5915] usb 4-1: USB disconnect, device number 9 [ 94.004776][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 94.133484][ T24] usb 1-1: device descriptor read/64, error -71 [ 94.243759][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 94.243855][ T24] usb usb1-port1: attempt power cycle [ 94.374241][ T10] usb 3-1: device descriptor read/64, error -71 [ 94.593576][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 94.613595][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 94.614151][ T24] usb 1-1: device descriptor read/8, error -71 [ 94.653542][ T5857] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 94.743538][ T10] usb 3-1: device descriptor read/64, error -71 [ 94.803513][ T5857] usb 4-1: Using ep0 maxpacket: 8 [ 94.811274][ T5857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.821578][ T5857] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 94.830744][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.841038][ T980] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 94.842669][ T5857] usb 4-1: config 0 descriptor?? [ 94.855375][ T10] usb usb3-port1: attempt power cycle [ 94.863487][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 94.884207][ T24] usb 1-1: device descriptor read/8, error -71 [ 94.993533][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 94.999016][ T24] usb usb1-port1: unable to enumerate USB device [ 95.007485][ T980] usb 2-1: too many endpoints for config 0 interface 0 altsetting 1: 48, using maximum allowed: 30 [ 95.018314][ T980] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 95.031386][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.040658][ T980] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 95.049785][ T980] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 95.058062][ T980] usb 2-1: Product: syz [ 95.062227][ T980] usb 2-1: Manufacturer: syz [ 95.068184][ T980] usb 2-1: SerialNumber: syz [ 95.082574][ T980] usb 2-1: config 0 descriptor?? [ 95.213522][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 95.234136][ T10] usb 3-1: device descriptor read/8, error -71 [ 95.291166][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.301021][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.332564][ T980] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 95.344133][ T980] usb 2-1: USB disconnect, device number 14 [ 95.357684][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.483551][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 95.503869][ T10] usb 3-1: device descriptor read/8, error -71 [ 95.614113][ T10] usb usb3-port1: unable to enumerate USB device [ 95.648018][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.656852][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.862089][ T6343] netlink: 'syz.1.147': attribute type 27 has an invalid length. [ 96.313840][ T6354] pimreg: entered allmulticast mode [ 96.323354][ T6354] netlink: 104 bytes leftover after parsing attributes in process `syz.3.150'. [ 96.555876][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 96.697610][ T6343] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 96.764710][ T983] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 96.789996][ T6380] netlink: 'syz.3.162': attribute type 29 has an invalid length. [ 96.799232][ T6380] netlink: 'syz.3.162': attribute type 29 has an invalid length. [ 96.810835][ T6380] netlink: 500 bytes leftover after parsing attributes in process `syz.3.162'. [ 96.974588][ T983] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 96.989332][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.000695][ T983] usb 1-1: Product: syz [ 97.007874][ T983] usb 1-1: Manufacturer: syz [ 97.013362][ T983] usb 1-1: SerialNumber: syz [ 97.050167][ T983] usb 1-1: config 0 descriptor?? [ 97.489562][ T983] airspy 1-1:0.0: Board ID: 00 [ 97.494709][ T983] airspy 1-1:0.0: Firmware version: [ 97.498393][ T6412] netlink: 220 bytes leftover after parsing attributes in process `syz.1.173'. [ 97.515552][ T6412] unsupported nla_type 224 [ 97.703332][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.712712][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.731784][ T6417] netlink: 'syz.3.175': attribute type 21 has an invalid length. [ 98.073513][ T5857] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 98.123487][ T24] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 98.235159][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 98.246810][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 98.256726][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.267945][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 98.277405][ T24] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 98.277963][ T5857] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 98.295481][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.308551][ T5857] usb 2-1: config 0 descriptor?? [ 98.314267][ T24] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 98.320538][ T6423] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.324408][ T24] usb 3-1: config 150 has no interface number 0 [ 98.337604][ T6423] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.346708][ T24] usb 3-1: config 150 interface 204 has no altsetting 0 [ 98.354509][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.365462][ T24] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 98.372602][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.375379][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.390376][ T24] usb 3-1: Product: syz [ 98.394626][ T24] usb 3-1: Manufacturer: syz [ 98.399222][ T24] usb 3-1: SerialNumber: syz [ 98.505726][ T983] airspy 1-1:0.0: usb_control_msg() failed -32 request 10 [ 98.516975][ T983] airspy 1-1:0.0: Registered as swradio24 [ 98.522727][ T983] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 98.539420][ T983] usb 1-1: USB disconnect, device number 18 [ 98.557666][ T6423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.567218][ T6423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.596146][ T5857] usb 2-1: USB disconnect, device number 15 [ 98.641201][ T24] xr_serial 3-1:150.204: skipping garbage [ 98.663511][ T24] xr_serial 3-1:150.204: xr_serial converter detected [ 98.845668][ T6438] netlink: 220 bytes leftover after parsing attributes in process `syz.1.182'. [ 98.996550][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 99.141100][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 99.233621][ T6458] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.279237][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.298995][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.428464][ T24] usb 3-1: xr_serial converter now attached to ttyUSB0 [ 99.573514][ T983] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 99.643748][ T980] usb 3-1: USB disconnect, device number 15 [ 99.657492][ T980] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 99.667364][ T980] xr_serial 3-1:150.204: device disconnected [ 99.726117][ T983] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 99.738913][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.750773][ T983] usb 1-1: config 0 descriptor?? [ 99.767399][ T983] gspca_main: spca508-2.14.0 probing 8086:0110 [ 99.886579][ T6478] netlink: 220 bytes leftover after parsing attributes in process `syz.3.192'. [ 99.979098][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.999492][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.012003][ T983] gspca_spca508: reg_read err -71 [ 100.029041][ T983] gspca_spca508: reg_read err -71 [ 100.049268][ T983] gspca_spca508: reg_read err -71 [ 100.074738][ T983] gspca_spca508: reg_read err -71 [ 100.087269][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.104344][ T983] gspca_spca508: reg_read err -71 [ 100.108005][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.116171][ T983] gspca_spca508: reg write: error -71 [ 100.134346][ T983] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 100.153516][ T983] usb 1-1: USB disconnect, device number 19 [ 100.346871][ T980] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 100.528236][ T980] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 100.536431][ T980] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 100.553599][ T980] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 100.571155][ T980] usb 2-1: config 0 has no interface number 0 [ 100.583737][ T980] usb 2-1: config 0 has no interface number 1 [ 100.600114][ T980] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 100.619534][ T980] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 100.633318][ T980] usb 2-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 100.651354][ T980] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 100.661484][ T980] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 100.673900][ T980] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 100.703430][ T980] usb 2-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 100.726030][ T980] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 100.753454][ T980] usb 2-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 100.769477][ T980] usb 2-1: config 0 interface 66 has no altsetting 0 [ 100.779217][ T980] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 100.789351][ T6514] netlink: 220 bytes leftover after parsing attributes in process `syz.3.201'. [ 100.798931][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.830218][ T980] usb 2-1: Product: syz [ 100.837758][ T980] usb 2-1: Manufacturer: syz [ 100.842381][ T980] usb 2-1: SerialNumber: syz [ 100.878844][ T980] usb 2-1: config 0 descriptor?? [ 100.898526][ T980] ljca 2-1:0.84: bulk endpoints not found [ 100.954563][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.968957][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.134774][ T980] ljca 2-1:0.66: probe with driver ljca failed with error -71 [ 101.140171][ T6535] Bluetooth: MGMT ver 1.23 [ 101.150216][ T6535] netlink: 'syz.2.206': attribute type 13 has an invalid length. [ 101.150253][ T980] usb 2-1: USB disconnect, device number 16 [ 101.168291][ T6535] netlink: 'syz.2.206': attribute type 4 has an invalid length. [ 101.179306][ T6535] netlink: 116 bytes leftover after parsing attributes in process `syz.2.206'. [ 101.196172][ T6535] NILFS (nullb0): couldn't find nilfs on the device [ 101.673580][ T6547] netlink: 220 bytes leftover after parsing attributes in process `syz.1.211'. [ 101.697149][ T980] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 101.820067][ T6554] ALSA: mixer_oss: invalid OSS volume '^' [ 101.846616][ T6556] netlink: 'syz.1.215': attribute type 2 has an invalid length. [ 101.863544][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 101.876425][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.903479][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.915293][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.937986][ T980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.940938][ T6558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.951656][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.975443][ T980] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 102.023464][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.050889][ T980] usb 3-1: config 0 descriptor?? [ 102.393833][ T5915] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 102.460820][ T6569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.481254][ T980] hid (null): report_id 918307361 is invalid [ 102.502764][ T980] nzxt-kraken2 0003:1E71:170E.0004: report_id 918307361 is invalid [ 102.517162][ T980] nzxt-kraken2 0003:1E71:170E.0004: item 0 4 1 8 parsing failed [ 102.525822][ T980] nzxt-kraken2 0003:1E71:170E.0004: hid parse failed with -22 [ 102.533595][ T980] nzxt-kraken2 0003:1E71:170E.0004: probe with driver nzxt-kraken2 failed with error -22 [ 102.560615][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 102.568477][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 102.606679][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.626492][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.641523][ T5915] usb 1-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 102.651714][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.665021][ T5915] usb 1-1: config 0 descriptor?? [ 102.687331][ T6573] netlink: 220 bytes leftover after parsing attributes in process `syz.3.222'. [ 102.741039][ T6575] overlayfs: failed to resolve '/ÊT…ËŽÆ´_ðpo«›': -2 [ 102.760510][ T6575] binder: 6574:6575 ioctl c00c6211 0 returned -14 [ 102.774341][ T6575] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 102.840956][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.858338][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.088316][ T5915] viewsonic 0003:2133:0018.0005: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.0-1/input0 [ 103.103508][ T5857] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 103.265025][ T5857] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.277924][ T5857] usb 2-1: config 1 interface 0 has no altsetting 0 [ 103.285265][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.296281][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.299044][ T5857] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 103.313346][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.321609][ T5857] usb 2-1: Product: syz [ 103.326180][ T5857] usb 2-1: Manufacturer: syz [ 103.330789][ T5857] usb 2-1: SerialNumber: syz [ 103.543333][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.554814][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.575187][ T5857] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 103.590449][ T5181] bcm5974 2-1:1.0: could not read from device [ 103.604960][ T6593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.614959][ T5181] bcm5974 2-1:1.0: could not read from device [ 103.615117][ T6593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.626876][ T5857] usb 2-1: USB disconnect, device number 17 [ 104.343910][ T43] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 104.464551][ T980] usb 3-1: USB disconnect, device number 16 [ 104.517224][ T43] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 104.526822][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.535239][ T43] usb 2-1: Product: syz [ 104.539488][ T43] usb 2-1: Manufacturer: syz [ 104.544169][ T43] usb 2-1: SerialNumber: syz [ 104.551715][ T43] usb 2-1: config 0 descriptor?? [ 104.581243][ T6601] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 104.595140][ T6601] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 104.608579][ T6601] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 104.650291][ T6605] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 104.658832][ T6605] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 104.672365][ T6605] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 104.747491][ T6608] XFS (nbd2): SB validate failed with error -5. [ 104.973097][ T43] airspy 2-1:0.0: Board ID: 00 [ 104.979011][ T43] airspy 2-1:0.0: Firmware version: [ 105.032874][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.045145][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.103475][ T5857] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 105.174959][ T24] usb 1-1: USB disconnect, device number 20 [ 105.255284][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 105.262998][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.274913][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.292051][ T5857] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 105.301570][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.321910][ T5857] usb 3-1: config 0 descriptor?? [ 105.643571][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 105.746550][ T5857] hid-led 0003:27B8:01ED.0006: item fetching failed at offset 0/2 [ 105.764297][ T5857] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -22 [ 105.796466][ T24] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 105.806839][ T24] usb 1-1: config 0 has no interface number 0 [ 105.816573][ T24] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 105.829458][ T24] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.845576][ T24] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 105.855042][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.863078][ T24] usb 1-1: Product: syz [ 105.867862][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.868777][ T24] usb 1-1: Manufacturer: syz [ 105.882490][ T24] usb 1-1: SerialNumber: syz [ 105.888490][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.899175][ T24] usb 1-1: config 0 descriptor?? [ 105.907085][ T24] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 105.921821][ T24] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 105.947411][ T24] usb 3-1: USB disconnect, device number 17 [ 105.985865][ T43] airspy 2-1:0.0: usb_control_msg() failed -32 request 10 [ 105.998175][ T43] airspy 2-1:0.0: Registered as swradio24 [ 106.005331][ T43] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 106.017948][ T43] usb 2-1: USB disconnect, device number 18 [ 106.119876][ T5884] usb 1-1: USB disconnect, device number 21 [ 106.139431][ T5884] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 106.152840][ T5884] cyberjack 1-1:0.69: device disconnected [ 106.641288][ T6643] netlink: 276 bytes leftover after parsing attributes in process `syz.2.243'. [ 106.697273][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.711422][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.944841][ T5884] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 107.003483][ T5857] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 107.105269][ T5884] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 107.114481][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.124914][ T5884] usb 2-1: config 0 descriptor?? [ 107.134695][ T5884] gspca_main: mars-2.14.0 probing 093a:050f [ 107.166780][ T5857] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 107.175458][ T5857] usb 1-1: config 0 has no interface number 0 [ 107.181672][ T5857] usb 1-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 107.193826][ T5857] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 107.208532][ T5857] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11 [ 107.221076][ T5857] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024 [ 107.237056][ T5857] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 107.246535][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.256901][ T5857] usb 1-1: Product: syz [ 107.261555][ T5857] usb 1-1: Manufacturer: syz [ 107.268433][ T5857] usb 1-1: SerialNumber: syz [ 107.279083][ T5857] usb 1-1: config 0 descriptor?? [ 107.285072][ T6658] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.454809][ T6665] vim2m vim2m.0: vidioc_s_fmt queue busy [ 107.468493][ T6665] ALSA: mixer_oss: invalid OSS volume '^' [ 107.505796][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.515169][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.617218][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.628365][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.408611][ T6686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.258'. [ 108.458135][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.467320][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.700072][ T6690] netlink: 5 bytes leftover after parsing attributes in process `syz.2.260'. [ 108.709209][ T6690] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 108.718353][ T6690] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 109.123745][ T5915] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 109.263555][ T5915] usb 3-1: device descriptor read/64, error -71 [ 109.513472][ T5915] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 109.653496][ T5915] usb 3-1: device descriptor read/64, error -71 [ 109.703869][ T5884] usb 2-1: USB disconnect, device number 19 [ 109.757634][ T6703] netlink: 220 bytes leftover after parsing attributes in process `syz.1.265'. [ 109.767825][ T5915] usb usb3-port1: attempt power cycle [ 110.124878][ T5915] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 110.144495][ T5915] usb 3-1: device descriptor read/8, error -71 [ 110.154253][ T6706] deleting an unspecified loop device is not supported. [ 110.236420][ T6711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.268'. [ 110.335096][ T6714] netlink: 5 bytes leftover after parsing attributes in process `syz.3.269'. [ 110.344325][ T6714] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 110.352269][ T6714] 0ªî{X¹¦: entered allmulticast mode [ 110.358410][ T6714] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 110.383692][ T5915] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 110.431008][ T5915] usb 3-1: device descriptor read/8, error -71 [ 110.534191][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.543132][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.554451][ T5915] usb usb3-port1: unable to enumerate USB device [ 111.213518][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 111.239821][ T6730] netlink: 'syz.0.276': attribute type 6 has an invalid length. [ 111.287256][ T6732] sit0: entered promiscuous mode [ 111.305445][ T6732] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 111.324209][ T6732] netlink: 1 bytes leftover after parsing attributes in process `syz.3.277'. [ 111.391038][ T6734] netlink: 5 bytes leftover after parsing attributes in process `syz.0.278'. [ 111.400268][ T6734] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 111.406922][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 111.414817][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 111.416447][ T6734] 0ªî{X¹¦: entered allmulticast mode [ 111.430608][ T6734] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 111.433645][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.484267][ T24] usb 2-1: config 0 descriptor?? [ 111.545629][ T6739] netlink: 220 bytes leftover after parsing attributes in process `syz.3.280'. [ 111.621047][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.641227][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.653334][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'. [ 111.693592][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 111.768253][ T6747] netlink: 'syz.0.284': attribute type 10 has an invalid length. [ 111.777318][ T6747] netlink: 2 bytes leftover after parsing attributes in process `syz.0.284'. [ 111.786452][ T6747] bond0: entered promiscuous mode [ 111.791519][ T6747] bond_slave_0: entered promiscuous mode [ 111.797476][ T6747] bond_slave_1: entered promiscuous mode [ 111.803816][ T6747] bridge0: port 3(bond0) entered blocking state [ 111.811362][ T6747] bridge0: port 3(bond0) entered disabled state [ 111.817949][ T6747] bond0: entered allmulticast mode [ 111.823143][ T6747] bond_slave_0: entered allmulticast mode [ 111.829163][ T6747] bond_slave_1: entered allmulticast mode [ 111.843172][ T6747] bridge0: port 3(bond0) entered blocking state [ 111.849830][ T6747] bridge0: port 3(bond0) entered forwarding state [ 111.894715][ T6721] tmpfs: Unknown parameter 'ÿÿ' [ 111.902054][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 111.928365][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 111.945329][ T24] asix 2-1:0.0: probe with driver asix failed with error -71 [ 111.986403][ T6751] netlink: 'syz.2.285': attribute type 6 has an invalid length. [ 111.996995][ T24] usb 2-1: USB disconnect, device number 20 [ 112.001664][ T6751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.156201][ T6757] FAULT_INJECTION: forcing a failure. [ 112.156201][ T6757] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 112.249047][ T6757] CPU: 1 UID: 0 PID: 6757 Comm: syz.0.288 Not tainted syzkaller #0 PREEMPT(full) [ 112.249071][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.249089][ T6757] Call Trace: [ 112.249099][ T6757] [ 112.249107][ T6757] dump_stack_lvl+0x189/0x250 [ 112.249130][ T6757] ? __pfx____ratelimit+0x10/0x10 [ 112.249148][ T6757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.249165][ T6757] ? __pfx__printk+0x10/0x10 [ 112.249183][ T6757] ? fs_reclaim_acquire+0x7d/0x100 [ 112.249210][ T6757] should_fail_ex+0x414/0x560 [ 112.249235][ T6757] prepare_alloc_pages+0x213/0x610 [ 112.249260][ T6757] __alloc_frozen_pages_noprof+0x123/0x370 [ 112.249282][ T6757] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.249315][ T6757] alloc_pages_bulk_noprof+0x560/0x710 [ 112.249336][ T6757] ? trace_kmalloc+0x1f/0xd0 [ 112.249351][ T6757] ? copy_splice_read+0x143/0xa50 [ 112.249374][ T6757] copy_splice_read+0x173/0xa50 [ 112.249403][ T6757] ? __pfx_copy_splice_read+0x10/0x10 [ 112.249419][ T6757] ? look_up_lock_class+0x74/0x170 [ 112.249439][ T6757] ? register_lock_class+0x51/0x320 [ 112.249462][ T6757] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 112.249486][ T6757] ? alloc_pipe_info+0x374/0x4d0 [ 112.249502][ T6757] ? __pfx_copy_splice_read+0x10/0x10 [ 112.249519][ T6757] splice_direct_to_actor+0x4a9/0xcc0 [ 112.249557][ T6757] ? __pfx_direct_splice_actor+0x10/0x10 [ 112.249575][ T6757] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 112.249604][ T6757] do_splice_direct+0x181/0x270 [ 112.249623][ T6757] ? __pfx_do_splice_direct+0x10/0x10 [ 112.249639][ T6757] ? common_file_perm+0x1b5/0x230 [ 112.249657][ T6757] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 112.249678][ T6757] ? bpf_lsm_file_permission+0x9/0x20 [ 112.249699][ T6757] ? security_file_permission+0x75/0x290 [ 112.249720][ T6757] ? rw_verify_area+0x255/0x4d0 [ 112.249740][ T6757] do_sendfile+0x4da/0x7e0 [ 112.249766][ T6757] ? __pfx_vfs_write+0x10/0x10 [ 112.249786][ T6757] ? __pfx_do_sendfile+0x10/0x10 [ 112.249805][ T6757] ? __fget_files+0x3a0/0x420 [ 112.249834][ T6757] __se_sys_sendfile64+0x13e/0x190 [ 112.249857][ T6757] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 112.249880][ T6757] ? do_syscall_64+0xbe/0xfa0 [ 112.249901][ T6757] do_syscall_64+0xfa/0xfa0 [ 112.249917][ T6757] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.249934][ T6757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.249950][ T6757] ? clear_bhb_loop+0x60/0xb0 [ 112.249970][ T6757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.249985][ T6757] RIP: 0033:0x7fb767f8eec9 [ 112.250011][ T6757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.250022][ T6757] RSP: 002b:00007fb768eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 112.250040][ T6757] RAX: ffffffffffffffda RBX: 00007fb7681e5fa0 RCX: 00007fb767f8eec9 [ 112.250057][ T6757] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 112.250066][ T6757] RBP: 00007fb768eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.250076][ T6757] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 112.250086][ T6757] R13: 00007fb7681e6038 R14: 00007fb7681e5fa0 R15: 00007ffe835eb9e8 [ 112.250114][ T6757] [ 112.718012][ T6768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.945094][ T6768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.059235][ T6789] FAULT_INJECTION: forcing a failure. [ 113.059235][ T6789] name failslab, interval 1, probability 0, space 0, times 1 [ 113.084564][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.1.295 Not tainted syzkaller #0 PREEMPT(full) [ 113.084588][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.084597][ T6789] Call Trace: [ 113.084604][ T6789] [ 113.084611][ T6789] dump_stack_lvl+0x189/0x250 [ 113.084632][ T6789] ? __pfx____ratelimit+0x10/0x10 [ 113.084657][ T6789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.084673][ T6789] ? __pfx__printk+0x10/0x10 [ 113.084696][ T6789] ? __pfx___might_resched+0x10/0x10 [ 113.084722][ T6789] should_fail_ex+0x414/0x560 [ 113.084748][ T6789] should_failslab+0xa8/0x100 [ 113.084770][ T6789] __kmalloc_noprof+0xcb/0x7f0 [ 113.084786][ T6789] ? kfree+0x4d/0x6d0 [ 113.084809][ T6789] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 113.084833][ T6789] tomoyo_realpath_from_path+0xe3/0x5d0 [ 113.084852][ T6789] ? tomoyo_domain+0xd9/0x130 [ 113.084875][ T6789] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 113.084898][ T6789] tomoyo_path_number_perm+0x1e8/0x5a0 [ 113.084924][ T6789] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.084950][ T6789] ? __lock_acquire+0xab9/0xd20 [ 113.085005][ T6789] ? __pfx_current_check_access_path+0x10/0x10 [ 113.085027][ T6789] ? lookup_one_qstr_excl+0x1d8/0x360 [ 113.085053][ T6789] tomoyo_path_mkdir+0xa8/0xe0 [ 113.085072][ T6789] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 113.085093][ T6789] ? __pfx_filename_create+0x10/0x10 [ 113.085122][ T6789] security_path_mkdir+0x171/0x380 [ 113.085144][ T6789] do_mkdirat+0x1bd/0x590 [ 113.085162][ T6789] ? __pfx_do_mkdirat+0x10/0x10 [ 113.085181][ T6789] ? getname_flags+0x1e5/0x540 [ 113.085205][ T6789] __x64_sys_mkdir+0x6c/0x80 [ 113.085222][ T6789] do_syscall_64+0xfa/0xfa0 [ 113.085239][ T6789] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.085256][ T6789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.085271][ T6789] ? clear_bhb_loop+0x60/0xb0 [ 113.085292][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.085308][ T6789] RIP: 0033:0x7f3ae398eec9 [ 113.085323][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.085336][ T6789] RSP: 002b:00007f3ae47ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 113.085354][ T6789] RAX: ffffffffffffffda RBX: 00007f3ae3be5fa0 RCX: 00007f3ae398eec9 [ 113.085365][ T6789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 113.085374][ T6789] RBP: 00007f3ae47ba090 R08: 0000000000000000 R09: 0000000000000000 [ 113.085382][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.085392][ T6789] R13: 00007f3ae3be6038 R14: 00007f3ae3be5fa0 R15: 00007ffdb83ec6e8 [ 113.085420][ T6789] [ 113.085495][ T6789] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.146405][ T6768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.408763][ T6799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.418071][ T6799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.429869][ T6799] __nla_validate_parse: 2 callbacks suppressed [ 113.429886][ T6799] netlink: 212 bytes leftover after parsing attributes in process `syz.3.299'. [ 113.459904][ T6801] FAULT_INJECTION: forcing a failure. [ 113.459904][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 113.481669][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT(full) [ 113.481693][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.481702][ T6801] Call Trace: [ 113.481710][ T6801] [ 113.481716][ T6801] dump_stack_lvl+0x189/0x250 [ 113.481738][ T6801] ? __pfx____ratelimit+0x10/0x10 [ 113.481756][ T6801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.481775][ T6801] ? __pfx__printk+0x10/0x10 [ 113.481797][ T6801] ? __pfx___might_resched+0x10/0x10 [ 113.481817][ T6801] ? fs_reclaim_acquire+0x7d/0x100 [ 113.481840][ T6801] should_fail_ex+0x414/0x560 [ 113.481867][ T6801] should_failslab+0xa8/0x100 [ 113.481889][ T6801] __kvmalloc_node_noprof+0x158/0x910 [ 113.481905][ T6801] ? rcu_is_watching+0x15/0xb0 [ 113.481927][ T6801] ? traverse+0xde/0x580 [ 113.481957][ T6801] traverse+0xde/0x580 [ 113.481979][ T6801] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.482010][ T6801] seq_read_iter+0xd08/0xe20 [ 113.482032][ T6801] ? set_page_refcounted+0x76/0x160 [ 113.482059][ T6801] ? __asan_memset+0x22/0x50 [ 113.482088][ T6801] copy_splice_read+0x5d4/0xa50 [ 113.482119][ T6801] ? __pfx_copy_splice_read+0x10/0x10 [ 113.482135][ T6801] ? look_up_lock_class+0x74/0x170 [ 113.482154][ T6801] ? register_lock_class+0x51/0x320 [ 113.482186][ T6801] ? alloc_pipe_info+0x374/0x4d0 [ 113.482205][ T6801] ? __pfx_copy_splice_read+0x10/0x10 [ 113.482222][ T6801] splice_direct_to_actor+0x4a9/0xcc0 [ 113.482262][ T6801] ? __pfx_direct_splice_actor+0x10/0x10 [ 113.482280][ T6801] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 113.482309][ T6801] do_splice_direct+0x181/0x270 [ 113.482330][ T6801] ? __pfx_do_splice_direct+0x10/0x10 [ 113.482346][ T6801] ? common_file_perm+0x1b5/0x230 [ 113.482364][ T6801] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 113.482386][ T6801] ? bpf_lsm_file_permission+0x9/0x20 [ 113.482406][ T6801] ? security_file_permission+0x75/0x290 [ 113.482428][ T6801] ? rw_verify_area+0x255/0x4d0 [ 113.482447][ T6801] do_sendfile+0x4da/0x7e0 [ 113.482467][ T6801] ? __pfx_vfs_write+0x10/0x10 [ 113.482489][ T6801] ? __pfx_do_sendfile+0x10/0x10 [ 113.482510][ T6801] ? __fget_files+0x3a0/0x420 [ 113.482539][ T6801] __se_sys_sendfile64+0x13e/0x190 [ 113.482562][ T6801] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 113.482586][ T6801] ? do_syscall_64+0xbe/0xfa0 [ 113.482615][ T6801] do_syscall_64+0xfa/0xfa0 [ 113.482631][ T6801] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.482648][ T6801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.482665][ T6801] ? clear_bhb_loop+0x60/0xb0 [ 113.482686][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.482701][ T6801] RIP: 0033:0x7fb767f8eec9 [ 113.482717][ T6801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.482729][ T6801] RSP: 002b:00007fb768eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 113.482748][ T6801] RAX: ffffffffffffffda RBX: 00007fb7681e5fa0 RCX: 00007fb767f8eec9 [ 113.482760][ T6801] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 113.482770][ T6801] RBP: 00007fb768eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.482780][ T6801] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 113.482790][ T6801] R13: 00007fb7681e6038 R14: 00007fb7681e5fa0 R15: 00007ffe835eb9e8 [ 113.482819][ T6801] [ 113.523561][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 113.648599][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 113.803463][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 113.855470][ T6768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.879152][ T24] usb 2-1: config 5 has an invalid interface number: 17 but max is 0 [ 113.904096][ T24] usb 2-1: config 5 has no interface number 0 [ 113.919756][ T24] usb 2-1: config 5 interface 17 has no altsetting 0 [ 113.939325][ T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=53.7a [ 113.972201][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.986092][ T24] usb 2-1: Product: syz [ 113.990300][ T24] usb 2-1: Manufacturer: syz [ 114.003836][ T24] usb 2-1: SerialNumber: syz [ 114.028084][ T1153] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.036442][ T1153] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.077325][ T1153] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.107813][ T1153] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.260975][ T24] dm9601 2-1:5.17: probe with driver dm9601 failed with error -22 [ 114.277178][ T24] sr9700 2-1:5.17: probe with driver sr9700 failed with error -22 [ 114.309124][ T6815] netlink: 32 bytes leftover after parsing attributes in process `syz.0.304'. [ 114.474938][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.494162][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.505111][ T5884] usb 2-1: USB disconnect, device number 21 [ 114.637673][ T6829] netlink: 220 bytes leftover after parsing attributes in process `syz.3.312'. [ 114.656822][ T6827] netlink: 5 bytes leftover after parsing attributes in process `syz.0.311'. [ 114.666434][ T6827] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 114.675075][ T6827] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 114.733718][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.743297][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.089583][ T6839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'. [ 115.332969][ T6845] FAULT_INJECTION: forcing a failure. [ 115.332969][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.348746][ T6845] CPU: 0 UID: 0 PID: 6845 Comm: syz.3.320 Not tainted syzkaller #0 PREEMPT(full) [ 115.348770][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.348780][ T6845] Call Trace: [ 115.348787][ T6845] [ 115.348794][ T6845] dump_stack_lvl+0x189/0x250 [ 115.348817][ T6845] ? __pfx____ratelimit+0x10/0x10 [ 115.348835][ T6845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.348855][ T6845] ? __pfx__printk+0x10/0x10 [ 115.348884][ T6845] should_fail_ex+0x414/0x560 [ 115.348912][ T6845] _copy_to_user+0x31/0xb0 [ 115.348934][ T6845] simple_read_from_buffer+0xe1/0x170 [ 115.348958][ T6845] proc_fail_nth_read+0x1b3/0x220 [ 115.348984][ T6845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.349011][ T6845] ? rw_verify_area+0x2a6/0x4d0 [ 115.349026][ T6845] ? __lock_acquire+0xab9/0xd20 [ 115.349044][ T6845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.349069][ T6845] vfs_read+0x200/0xa30 [ 115.349085][ T6845] ? fdget_pos+0x247/0x320 [ 115.349107][ T6845] ? __pfx___mutex_lock+0x10/0x10 [ 115.349126][ T6845] ? __pfx_vfs_read+0x10/0x10 [ 115.349145][ T6845] ? __fget_files+0x2a/0x420 [ 115.349168][ T6845] ? __fget_files+0x3a0/0x420 [ 115.349185][ T6845] ? __fget_files+0x2a/0x420 [ 115.349213][ T6845] ksys_read+0x145/0x250 [ 115.349232][ T6845] ? __pfx_ksys_read+0x10/0x10 [ 115.349253][ T6845] ? do_syscall_64+0xbe/0xfa0 [ 115.349274][ T6845] do_syscall_64+0xfa/0xfa0 [ 115.349290][ T6845] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.349308][ T6845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.349325][ T6845] ? clear_bhb_loop+0x60/0xb0 [ 115.349346][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.349368][ T6845] RIP: 0033:0x7f5232b8d8dc [ 115.349384][ T6845] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.349397][ T6845] RSP: 002b:00007f5233aea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.349415][ T6845] RAX: ffffffffffffffda RBX: 00007f5232de5fa0 RCX: 00007f5232b8d8dc [ 115.349428][ T6845] RDX: 000000000000000f RSI: 00007f5233aea0a0 RDI: 0000000000000003 [ 115.349439][ T6845] RBP: 00007f5233aea090 R08: 0000000000000000 R09: 0000000000000000 [ 115.349449][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.349459][ T6845] R13: 00007f5232de6038 R14: 00007f5232de5fa0 R15: 00007fff4f4fb6c8 [ 115.349490][ T6845] [ 115.600504][ T5915] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 115.643139][ T6850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'. [ 115.743904][ T5915] usb 2-1: device descriptor read/64, error -71 [ 115.919232][ T6858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.928201][ T6858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.003592][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 116.123073][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 116.155016][ T5915] usb 2-1: device descriptor read/64, error -71 [ 116.180997][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 116.285531][ T5915] usb usb2-port1: attempt power cycle [ 116.643690][ T5915] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 116.664495][ T5915] usb 2-1: device descriptor read/8, error -71 [ 116.802564][ T6888] comedi comedi4: bad chanlist[0]=0x00000101 chan=257 range length=2 [ 116.817798][ T6888] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 116.834249][ T6888] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 116.843261][ T6888] VFS: Can't find a romfs filesystem on dev nullb0. [ 116.843261][ T6888] [ 116.857745][ T6888] overlayfs: failed to resolve '/ants': -2 [ 116.880866][ T6890] netlink: 220 bytes leftover after parsing attributes in process `syz.0.339'. [ 116.923622][ T5915] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 116.947465][ T5915] usb 2-1: device descriptor read/8, error -71 [ 117.065445][ T5915] usb usb2-port1: unable to enumerate USB device [ 117.192900][ T6905] ntfs3(nullb0): Primary boot signature is not NTFS. [ 117.201249][ T6905] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 117.385895][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.400664][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.411977][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.421182][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.777309][ T6951] netlink: zone id is out of range [ 118.784380][ T6951] netlink: zone id is out of range [ 118.789552][ T6951] netlink: zone id is out of range [ 118.796073][ T6951] netlink: zone id is out of range [ 118.801209][ T6951] netlink: zone id is out of range [ 118.809794][ T6951] netlink: zone id is out of range [ 118.814782][ T6949] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 118.826935][ T6951] netlink: zone id is out of range [ 118.832081][ T6951] netlink: zone id is out of range [ 118.841989][ T6951] netlink: zone id is out of range [ 119.279333][ T6968] syzkaller1: entered promiscuous mode [ 119.301043][ T6968] syzkaller1: entered allmulticast mode [ 119.772850][ T6996] usb usb8: usbfs: process 6996 (syz.3.372) did not claim interface 0 before use [ 120.691902][ T7034] __nla_validate_parse: 4 callbacks suppressed [ 120.691920][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.382'. [ 120.735551][ T7036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.383'. [ 121.284896][ T5915] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 121.428024][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'. [ 121.444047][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 121.455350][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.493725][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.509646][ T7063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.395'. [ 121.516700][ T5915] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 121.528407][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.545065][ T5915] usb 3-1: config 0 descriptor?? [ 121.878290][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 121.985692][ T5915] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 122.304952][ T5884] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 122.372382][ T5915] usb 3-1: USB disconnect, device number 22 [ 122.465092][ T5884] usb 2-1: config 3 has an invalid interface number: 3 but max is 1 [ 122.473200][ T5884] usb 2-1: config 3 has an invalid interface number: 60 but max is 1 [ 122.481418][ T5884] usb 2-1: config 3 has no interface number 0 [ 122.487577][ T5884] usb 2-1: config 3 has no interface number 1 [ 122.493911][ T5884] usb 2-1: config 3 interface 3 has no altsetting 0 [ 122.500515][ T5884] usb 2-1: config 3 interface 60 has no altsetting 0 [ 122.991412][ T7084] FAULT_INJECTION: forcing a failure. [ 122.991412][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 123.008010][ T7084] CPU: 1 UID: 0 PID: 7084 Comm: syz.2.402 Not tainted syzkaller #0 PREEMPT(full) [ 123.008034][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.008044][ T7084] Call Trace: [ 123.008052][ T7084] [ 123.008059][ T7084] dump_stack_lvl+0x189/0x250 [ 123.008085][ T7084] ? __pfx____ratelimit+0x10/0x10 [ 123.008103][ T7084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.008120][ T7084] ? __pfx__printk+0x10/0x10 [ 123.008143][ T7084] ? __pfx___might_resched+0x10/0x10 [ 123.008169][ T7084] should_fail_ex+0x414/0x560 [ 123.008197][ T7084] should_failslab+0xa8/0x100 [ 123.008219][ T7084] __kmalloc_noprof+0xcb/0x7f0 [ 123.008234][ T7084] ? rcu_read_lock_any_held+0xb3/0x120 [ 123.008257][ T7084] ? kernfs_fop_write_iter+0x158/0x540 [ 123.008276][ T7084] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 123.008304][ T7084] kernfs_fop_write_iter+0x158/0x540 [ 123.008330][ T7084] vfs_write+0x5c9/0xb30 [ 123.008352][ T7084] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 123.008373][ T7084] ? __pfx_vfs_write+0x10/0x10 [ 123.008400][ T7084] ? __fget_files+0x2a/0x420 [ 123.008429][ T7084] ksys_write+0x145/0x250 [ 123.008449][ T7084] ? __pfx_ksys_write+0x10/0x10 [ 123.008469][ T7084] ? do_syscall_64+0xbe/0xfa0 [ 123.008496][ T7084] do_syscall_64+0xfa/0xfa0 [ 123.008511][ T7084] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.008529][ T7084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.008546][ T7084] ? clear_bhb_loop+0x60/0xb0 [ 123.008566][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.008582][ T7084] RIP: 0033:0x7f6073f8eec9 [ 123.008598][ T7084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.008617][ T7084] RSP: 002b:00007f6074dc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.008636][ T7084] RAX: ffffffffffffffda RBX: 00007f60741e5fa0 RCX: 00007f6073f8eec9 [ 123.008648][ T7084] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000005 [ 123.008659][ T7084] RBP: 00007f6074dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 123.008669][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.008679][ T7084] R13: 00007f60741e6038 R14: 00007f60741e5fa0 R15: 00007ffe97da8d18 [ 123.008709][ T7084] [ 123.281096][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.290149][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.365632][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.374705][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.544195][ T24] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 123.695446][ T24] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 123.703676][ T24] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 123.714193][ T24] usb 3-1: config 8 has no interface number 0 [ 123.720341][ T24] usb 3-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 123.731999][ T24] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.744196][ T24] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 123.754029][ T24] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 123.767163][ T24] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 123.776286][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.791670][ T24] usb 3-1: NFC: intf ffff88802e26e000 id ffffffff8eb23a40 [ 123.816631][ T24] nfcmrvl 3-1:8.80: NFC: registered with nci successfully [ 123.939525][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 124.171085][ T7105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.408'. [ 124.257841][ T7109] netlink: 220 bytes leftover after parsing attributes in process `syz.3.410'. [ 124.427918][ T7115] FAULT_INJECTION: forcing a failure. [ 124.427918][ T7115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.443184][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.3.412 Not tainted syzkaller #0 PREEMPT(full) [ 124.443208][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.443218][ T7115] Call Trace: [ 124.443225][ T7115] [ 124.443232][ T7115] dump_stack_lvl+0x189/0x250 [ 124.443256][ T7115] ? __pfx____ratelimit+0x10/0x10 [ 124.443273][ T7115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.443290][ T7115] ? __pfx__printk+0x10/0x10 [ 124.443310][ T7115] ? __might_fault+0xb0/0x130 [ 124.443338][ T7115] should_fail_ex+0x414/0x560 [ 124.443364][ T7115] _copy_from_iter+0x1de/0x1790 [ 124.443393][ T7115] ? __pfx__copy_from_iter+0x10/0x10 [ 124.443411][ T7115] ? rcu_is_watching+0x15/0xb0 [ 124.443433][ T7115] ? trace_kmalloc+0x1f/0xd0 [ 124.443447][ T7115] ? __kmalloc_noprof+0x432/0x7f0 [ 124.443461][ T7115] ? rcu_read_lock_any_held+0xb3/0x120 [ 124.443484][ T7115] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 124.443512][ T7115] kernfs_fop_write_iter+0x19b/0x540 [ 124.443539][ T7115] vfs_write+0x5c9/0xb30 [ 124.443561][ T7115] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 124.443581][ T7115] ? __pfx_vfs_write+0x10/0x10 [ 124.443608][ T7115] ? __fget_files+0x2a/0x420 [ 124.443634][ T7115] ksys_write+0x145/0x250 [ 124.443654][ T7115] ? __pfx_ksys_write+0x10/0x10 [ 124.443674][ T7115] ? do_syscall_64+0xbe/0xfa0 [ 124.443696][ T7115] do_syscall_64+0xfa/0xfa0 [ 124.443712][ T7115] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.443729][ T7115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.443745][ T7115] ? clear_bhb_loop+0x60/0xb0 [ 124.443766][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.443781][ T7115] RIP: 0033:0x7f5232b8eec9 [ 124.443797][ T7115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.443810][ T7115] RSP: 002b:00007f5233aea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.443828][ T7115] RAX: ffffffffffffffda RBX: 00007f5232de5fa0 RCX: 00007f5232b8eec9 [ 124.443840][ T7115] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000005 [ 124.443851][ T7115] RBP: 00007f5233aea090 R08: 0000000000000000 R09: 0000000000000000 [ 124.443861][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.443870][ T7115] R13: 00007f5232de6038 R14: 00007f5232de5fa0 R15: 00007fff4f4fb6c8 [ 124.443899][ T7115] [ 124.493438][ T5915] usb 3-1: USB disconnect, device number 23 [ 124.712131][ T5915] usb 3-1: NFC: intf ffff88802e26e000 [ 124.821475][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.414'. [ 124.962999][ T7129] binder: BINDER_SET_CONTEXT_MGR already set [ 124.963312][ T7127] netlink: 32 bytes leftover after parsing attributes in process `syz.3.417'. [ 124.972488][ T7129] binder: 7122:7129 ioctl 4018620d 2000000000c0 returned -16 [ 125.030809][ T5884] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=fa.00 [ 125.070230][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.095233][ T5884] usb 2-1: can't set config #3, error -71 [ 125.103453][ T5915] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 125.111425][ T5884] usb 2-1: USB disconnect, device number 26 [ 125.132630][ T7131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.142171][ T7131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.297270][ T5915] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 125.306588][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.314759][ T5915] usb 3-1: Product: syz [ 125.319223][ T5915] usb 3-1: Manufacturer: syz [ 125.323983][ T5915] usb 3-1: SerialNumber: syz [ 125.331416][ T5915] usb 3-1: config 0 descriptor?? [ 125.533574][ T5884] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 125.684117][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 125.691283][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.700562][ T5884] usb 2-1: config 129 has an invalid descriptor of length 167, skipping remainder of the config [ 125.711206][ T5884] usb 2-1: config 129 has 0 interfaces, different from the descriptor's value: 1 [ 125.722543][ T5884] usb 2-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=36.2d [ 125.731654][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.739716][ T5884] usb 2-1: Product: syz [ 125.744042][ T5884] usb 2-1: Manufacturer: syz [ 125.748648][ T5884] usb 2-1: SerialNumber: syz [ 125.750732][ T5915] airspy 3-1:0.0: Board ID: 00 [ 125.759771][ T5915] airspy 3-1:0.0: Firmware version: [ 125.874371][ T7138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.883526][ T7138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.907205][ T7138] random: crng reseeded on system resumption [ 125.967105][ T5884] usb 2-1: USB disconnect, device number 27 [ 126.464414][ T7140] FAULT_INJECTION: forcing a failure. [ 126.464414][ T7140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.477755][ T7140] CPU: 1 UID: 0 PID: 7140 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT(full) [ 126.477777][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.477786][ T7140] Call Trace: [ 126.477794][ T7140] [ 126.477802][ T7140] dump_stack_lvl+0x189/0x250 [ 126.477824][ T7140] ? __pfx____ratelimit+0x10/0x10 [ 126.477843][ T7140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.477861][ T7140] ? __pfx__printk+0x10/0x10 [ 126.477890][ T7140] should_fail_ex+0x414/0x560 [ 126.477918][ T7140] _copy_to_user+0x31/0xb0 [ 126.477939][ T7140] simple_read_from_buffer+0xe1/0x170 [ 126.477962][ T7140] proc_fail_nth_read+0x1b3/0x220 [ 126.477988][ T7140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.478015][ T7140] ? rw_verify_area+0x2a6/0x4d0 [ 126.478038][ T7140] ? __lock_acquire+0xab9/0xd20 [ 126.478057][ T7140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.478082][ T7140] vfs_read+0x200/0xa30 [ 126.478097][ T7140] ? fdget_pos+0x247/0x320 [ 126.478120][ T7140] ? __pfx___mutex_lock+0x10/0x10 [ 126.478139][ T7140] ? __pfx_vfs_read+0x10/0x10 [ 126.478157][ T7140] ? __fget_files+0x2a/0x420 [ 126.478180][ T7140] ? __fget_files+0x3a0/0x420 [ 126.478198][ T7140] ? __fget_files+0x2a/0x420 [ 126.478225][ T7140] ksys_read+0x145/0x250 [ 126.478245][ T7140] ? __pfx_ksys_read+0x10/0x10 [ 126.478266][ T7140] ? do_syscall_64+0xbe/0xfa0 [ 126.478287][ T7140] do_syscall_64+0xfa/0xfa0 [ 126.478303][ T7140] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.478320][ T7140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.478336][ T7140] ? clear_bhb_loop+0x60/0xb0 [ 126.478357][ T7140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.478373][ T7140] RIP: 0033:0x7f5232b8d8dc [ 126.478389][ T7140] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.478402][ T7140] RSP: 002b:00007f5233aea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.478421][ T7140] RAX: ffffffffffffffda RBX: 00007f5232de5fa0 RCX: 00007f5232b8d8dc [ 126.478433][ T7140] RDX: 000000000000000f RSI: 00007f5233aea0a0 RDI: 0000000000000006 [ 126.478443][ T7140] RBP: 00007f5233aea090 R08: 0000000000000000 R09: 0000000000000000 [ 126.478453][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.478463][ T7140] R13: 00007f5232de6038 R14: 00007f5232de5fa0 R15: 00007fff4f4fb6c8 [ 126.478493][ T7140] [ 126.951308][ T5915] airspy 3-1:0.0: Registered as swradio24 [ 126.957993][ T5915] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 127.064259][ T980] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 127.164529][ T24] usb 3-1: USB disconnect, device number 24 [ 127.225116][ T980] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.235273][ T980] usb 2-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.248398][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.255224][ T980] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 127.264579][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.275553][ T980] usb 2-1: config 0 descriptor?? [ 127.484300][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.493157][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.502728][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.511608][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.703803][ T5857] iguanair 1-1:0.255: failed to get version [ 127.710770][ T5857] iguanair 1-1:0.255: probe with driver iguanair failed with error -110 [ 127.720066][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.426'. [ 127.724647][ T5857] usb 1-1: USB disconnect, device number 22 [ 127.749259][ T980] usbhid 2-1:0.0: can't add hid device: -71 [ 127.765819][ T980] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 127.786893][ T980] usb 2-1: USB disconnect, device number 28 [ 127.811410][ T7154] netlink: 'syz.2.427': attribute type 27 has an invalid length. [ 127.877321][ T7158] netlink: 220 bytes leftover after parsing attributes in process `syz.3.428'. [ 128.163736][ T983] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 128.323441][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 128.336460][ T983] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 128.356806][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.368135][ T983] usb 3-1: Product: syz [ 128.372821][ T983] usb 3-1: Manufacturer: syz [ 128.378051][ T983] usb 3-1: SerialNumber: syz [ 128.388753][ T7174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.436'. [ 128.390670][ T983] usb 3-1: config 0 descriptor?? [ 128.412944][ T983] gspca_main: se401-2.14.0 probing 047d:5003 [ 128.460766][ T7178] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.654092][ T5857] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 128.703526][ T980] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 128.814147][ T5857] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.825912][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.836828][ T5857] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.846835][ T980] usb 1-1: device descriptor read/64, error -71 [ 128.847042][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.864656][ T5857] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 128.874182][ T983] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 128.881571][ T983] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 128.889326][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.897562][ T5857] usb 2-1: Product: syz [ 128.901744][ T5857] usb 2-1: Manufacturer: syz [ 128.909405][ T983] usb 3-1: USB disconnect, device number 25 [ 128.915428][ T5857] usb 2-1: SerialNumber: syz [ 128.924989][ T5857] usb 2-1: config 0 descriptor?? [ 128.937574][ T5857] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 128.964952][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.981188][ T5857] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 128.994366][ T5857] usb 2-1: media controller created [ 129.033895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.108340][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.117925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.127094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.472073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.557447][ T980] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 129.563489][ T7187] netlink: 826 bytes leftover after parsing attributes in process `syz.1.437'. [ 129.773828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.900132][ T5857] DVB: Unable to find symbol tda10046_attach() [ 129.910161][ T5857] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 129.920753][ T5857] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 129.935527][ T7190] netlink: 'syz.3.442': attribute type 2 has an invalid length. [ 129.943272][ T7190] netlink: 'syz.3.442': attribute type 9 has an invalid length. [ 129.951801][ T7190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.442'. [ 129.996899][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 130.013850][ T980] usb 1-1: device descriptor read/64, error -71 [ 130.049339][ T7196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.064678][ T7196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.123856][ T980] usb usb1-port1: attempt power cycle [ 130.230018][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.238967][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.421948][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.430993][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.463668][ T24] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 130.471559][ T980] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 130.493925][ T980] usb 1-1: device descriptor read/8, error -71 [ 130.603490][ T24] usb 3-1: device descriptor read/64, error -71 [ 130.625082][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.635805][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.645386][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.655605][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.733484][ T980] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 130.753992][ T980] usb 1-1: device descriptor read/8, error -71 [ 130.845070][ T5857] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 130.861861][ T5857] usb 2-1: USB disconnect, device number 29 [ 130.868186][ T24] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 130.878397][ T980] usb usb1-port1: unable to enumerate USB device [ 131.013487][ T24] usb 3-1: device descriptor read/64, error -71 [ 131.133809][ T24] usb usb3-port1: attempt power cycle [ 131.210488][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.219937][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.259071][ T7211] TCP: TCP_TX_DELAY enabled [ 131.265138][ T7211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.274045][ T7211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.473728][ T24] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 131.494746][ T24] usb 3-1: device descriptor read/8, error -71 [ 131.625322][ T980] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 131.733511][ T24] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 131.754085][ T24] usb 3-1: device descriptor read/8, error -71 [ 131.785238][ T980] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 131.794442][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.807326][ T980] usb 2-1: config 0 descriptor?? [ 131.813501][ T5884] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 131.831449][ T980] cp210x 2-1:0.0: cp210x converter detected [ 131.853693][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.454'. [ 131.864517][ T24] usb usb3-port1: unable to enumerate USB device [ 131.904169][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.912980][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.928597][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.938021][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.983469][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 131.990284][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.001792][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.011604][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.024544][ T5884] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.037368][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.053153][ T5884] usb 1-1: config 0 descriptor?? [ 132.246315][ T980] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 132.254563][ T980] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 132.262177][ T980] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 132.273519][ T980] usb 2-1: cp210x converter now attached to ttyUSB0 [ 132.286893][ T980] usb 2-1: USB disconnect, device number 30 [ 132.298934][ T980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.309571][ T980] cp210x 2-1:0.0: device disconnected [ 132.492319][ T5884] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input10 [ 132.574553][ T5884] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 132.627815][ T7235] QAT: Device 13 not found [ 132.673316][ T5884] usb 1-1: USB disconnect, device number 27 [ 132.832376][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838792][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.854600][ T7238] netlink: 14 bytes leftover after parsing attributes in process `syz.3.460'. [ 132.892210][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.461'. [ 133.009043][ T7245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.019461][ T7245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.203497][ T5884] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 133.218945][ T7247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.463'. [ 133.315432][ T7249] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.374824][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.387191][ T5884] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.399104][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.410292][ T5884] usb 2-1: config 0 descriptor?? [ 133.436019][ T7249] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.488403][ T7249] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.548276][ T7249] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.593461][ T983] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 133.679359][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.687789][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.708733][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.746047][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.754639][ T983] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.767393][ T983] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.769226][ T7253] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.779321][ T983] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.779370][ T983] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 133.779392][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.820270][ T7258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.840427][ T5884] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 133.850361][ T13] ================================================================== [ 133.858451][ T13] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 133.866005][ T13] Read of size 8 at addr ffff888032f8b0b0 by task kworker/u8:1/13 [ 133.873805][ T13] [ 133.876129][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 133.876150][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.876161][ T13] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 133.876185][ T13] Call Trace: [ 133.876193][ T13] [ 133.876200][ T13] dump_stack_lvl+0x189/0x250 [ 133.876218][ T13] ? __kasan_check_byte+0x12/0x40 [ 133.876238][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.876254][ T13] ? lock_release+0x4b/0x3e0 [ 133.876276][ T13] ? __virt_addr_valid+0x4a5/0x5c0 [ 133.876294][ T13] print_report+0xca/0x240 [ 133.876308][ T13] ? __mutex_lock+0x147/0x1350 [ 133.876319][ T13] kasan_report+0x118/0x150 [ 133.876328][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 133.876337][ T13] ? __mutex_lock+0x147/0x1350 [ 133.876348][ T13] __mutex_lock+0x147/0x1350 [ 133.876360][ T13] ? __mutex_lock+0x5bb/0x1350 [ 133.876377][ T13] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 133.876396][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 133.876415][ T13] ? __lock_acquire+0xab9/0xd20 [ 133.876439][ T13] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 133.876456][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 133.876469][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 133.876480][ T13] process_scheduled_works+0xae1/0x17b0 [ 133.876496][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 133.876510][ T13] worker_thread+0x8a0/0xda0 [ 133.876539][ T13] kthread+0x711/0x8a0 [ 133.876556][ T13] ? __pfx_worker_thread+0x10/0x10 [ 133.876576][ T13] ? __pfx_kthread+0x10/0x10 [ 133.876592][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 133.876606][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.876615][ T13] ? __pfx_kthread+0x10/0x10 [ 133.876623][ T13] ret_from_fork+0x4bc/0x870 [ 133.876635][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 133.876646][ T13] ? __switch_to_asm+0x39/0x70 [ 133.876656][ T13] ? __switch_to_asm+0x33/0x70 [ 133.876667][ T13] ? __pfx_kthread+0x10/0x10 [ 133.876682][ T13] ret_from_fork_asm+0x1a/0x30 [ 133.876707][ T13] [ 133.876714][ T13] [ 134.079055][ T13] Allocated by task 7249: [ 134.083368][ T13] kasan_save_track+0x3e/0x80 [ 134.088051][ T13] __kasan_kmalloc+0x93/0xb0 [ 134.092629][ T13] __kmalloc_noprof+0x411/0x7f0 [ 134.097467][ T13] udp_tunnel_nic_netdevice_event+0x4c3/0x1820 [ 134.103603][ T13] notifier_call_chain+0x1b6/0x3e0 [ 134.108712][ T13] register_netdevice+0x1608/0x1ae0 [ 134.113909][ T13] nsim_create+0xae8/0xf10 [ 134.118326][ T13] __nsim_dev_port_add+0x6b6/0xb10 [ 134.123422][ T13] nsim_dev_port_add_all+0x37/0xf0 [ 134.128513][ T13] nsim_dev_reload_up+0x451/0x780 [ 134.133528][ T13] devlink_reload+0x4ec/0x8d0 [ 134.138191][ T13] devlink_nl_reload_doit+0xb35/0xd50 [ 134.143559][ T13] genl_family_rcv_msg_doit+0x215/0x300 [ 134.149110][ T13] genl_rcv_msg+0x60e/0x790 [ 134.153606][ T13] netlink_rcv_skb+0x208/0x470 [ 134.158363][ T13] genl_rcv+0x28/0x40 [ 134.162334][ T13] netlink_unicast+0x82f/0x9e0 [ 134.167080][ T13] netlink_sendmsg+0x805/0xb30 [ 134.171824][ T13] __sock_sendmsg+0x21c/0x270 [ 134.176494][ T13] ____sys_sendmsg+0x505/0x830 [ 134.181236][ T13] ___sys_sendmsg+0x21f/0x2a0 [ 134.185898][ T13] __x64_sys_sendmsg+0x19b/0x260 [ 134.190824][ T13] do_syscall_64+0xfa/0xfa0 [ 134.195318][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.201194][ T13] [ 134.203505][ T13] Freed by task 7253: [ 134.207463][ T13] kasan_save_track+0x3e/0x80 [ 134.212125][ T13] __kasan_save_free_info+0x46/0x50 [ 134.217322][ T13] __kasan_slab_free+0x5c/0x80 [ 134.222076][ T13] kfree+0x19a/0x6d0 [ 134.225961][ T13] udp_tunnel_nic_netdevice_event+0x11b8/0x1820 [ 134.232181][ T13] notifier_call_chain+0x1b6/0x3e0 [ 134.237280][ T13] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 134.243680][ T13] unregister_netdevice_queue+0x33c/0x380 [ 134.249383][ T13] nsim_destroy+0x1dd/0x670 [ 134.253873][ T13] __nsim_dev_port_del+0x14d/0x1b0 [ 134.258967][ T13] nsim_dev_reload_destroy+0x288/0x490 [ 134.264406][ T13] nsim_dev_reload_down+0x8a/0xc0 [ 134.269417][ T13] devlink_reload+0x1b6/0x8d0 [ 134.274088][ T13] devlink_nl_reload_doit+0xb35/0xd50 [ 134.279464][ T13] genl_family_rcv_msg_doit+0x215/0x300 [ 134.285008][ T13] genl_rcv_msg+0x60e/0x790 [ 134.289499][ T13] netlink_rcv_skb+0x208/0x470 [ 134.294251][ T13] genl_rcv+0x28/0x40 [ 134.298216][ T13] netlink_unicast+0x82f/0x9e0 [ 134.302962][ T13] netlink_sendmsg+0x805/0xb30 [ 134.307706][ T13] __sock_sendmsg+0x21c/0x270 [ 134.312367][ T13] ____sys_sendmsg+0x505/0x830 [ 134.317112][ T13] ___sys_sendmsg+0x21f/0x2a0 [ 134.321767][ T13] __x64_sys_sendmsg+0x19b/0x260 [ 134.326684][ T13] do_syscall_64+0xfa/0xfa0 [ 134.331169][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.337043][ T13] [ 134.339350][ T13] Last potentially related work creation: [ 134.345071][ T13] kasan_save_stack+0x3e/0x60 [ 134.349731][ T13] kasan_record_aux_stack+0xbd/0xd0 [ 134.354916][ T13] insert_work+0x3d/0x330 [ 134.359230][ T13] __queue_work+0xbaf/0xfb0 [ 134.363718][ T13] queue_work_on+0x181/0x270 [ 134.368295][ T13] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 134.373914][ T13] udp_tunnel_push_rx_port+0x180/0x200 [ 134.379360][ T13] geneve_offload_rx_ports+0xd7/0x160 [ 134.384715][ T13] geneve_netdevice_event+0x6a/0x80 [ 134.389902][ T13] notifier_call_chain+0x1b6/0x3e0 [ 134.395005][ T13] call_netdevice_notifiers+0x88/0xc0 [ 134.400368][ T13] udp_tunnel_nic_netdevice_event+0xe0c/0x1820 [ 134.406504][ T13] notifier_call_chain+0x1b6/0x3e0 [ 134.411603][ T13] register_netdevice+0x1608/0x1ae0 [ 134.416786][ T13] nsim_create+0xae8/0xf10 [ 134.421185][ T13] __nsim_dev_port_add+0x6b6/0xb10 [ 134.426277][ T13] nsim_dev_port_add_all+0x37/0xf0 [ 134.431369][ T13] nsim_dev_reload_up+0x451/0x780 [ 134.436377][ T13] devlink_reload+0x4ec/0x8d0 [ 134.441042][ T13] devlink_nl_reload_doit+0xb35/0xd50 [ 134.446405][ T13] genl_family_rcv_msg_doit+0x215/0x300 [ 134.451931][ T13] genl_rcv_msg+0x60e/0x790 [ 134.456417][ T13] netlink_rcv_skb+0x208/0x470 [ 134.461167][ T13] genl_rcv+0x28/0x40 [ 134.465133][ T13] netlink_unicast+0x82f/0x9e0 [ 134.469883][ T13] netlink_sendmsg+0x805/0xb30 [ 134.474625][ T13] __sock_sendmsg+0x21c/0x270 [ 134.479286][ T13] ____sys_sendmsg+0x505/0x830 [ 134.484033][ T13] ___sys_sendmsg+0x21f/0x2a0 [ 134.488692][ T13] __x64_sys_sendmsg+0x19b/0x260 [ 134.493616][ T13] do_syscall_64+0xfa/0xfa0 [ 134.498111][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.503993][ T13] [ 134.506304][ T13] Second to last potentially related work creation: [ 134.512867][ T13] kasan_save_stack+0x3e/0x60 [ 134.517527][ T13] kasan_record_aux_stack+0xbd/0xd0 [ 134.522712][ T13] insert_work+0x3d/0x330 [ 134.527023][ T13] __queue_work+0xcd2/0xfb0 [ 134.531514][ T13] queue_work_on+0x181/0x270 [ 134.536087][ T13] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 134.541704][ T13] udp_tunnel_push_rx_port+0x180/0x200 [ 134.547147][ T13] geneve_offload_rx_ports+0xd7/0x160 [ 134.552501][ T13] geneve_netdevice_event+0x6a/0x80 [ 134.557680][ T13] notifier_call_chain+0x1b6/0x3e0 [ 134.562776][ T13] call_netdevice_notifiers+0x88/0xc0 [ 134.568137][ T13] udp_tunnel_nic_netdevice_event+0xe0c/0x1820 [ 134.574274][ T13] notifier_call_chain+0x1b6/0x3e0 [ 134.579374][ T13] register_netdevice+0x1608/0x1ae0 [ 134.584554][ T13] nsim_create+0xae8/0xf10 [ 134.588946][ T13] __nsim_dev_port_add+0x6b6/0xb10 [ 134.594038][ T13] nsim_dev_port_add_all+0x37/0xf0 [ 134.599134][ T13] nsim_dev_reload_up+0x451/0x780 [ 134.604142][ T13] devlink_reload+0x4ec/0x8d0 [ 134.608808][ T13] devlink_nl_reload_doit+0xb35/0xd50 [ 134.614166][ T13] genl_family_rcv_msg_doit+0x215/0x300 [ 134.619702][ T13] genl_rcv_msg+0x60e/0x790 [ 134.624187][ T13] netlink_rcv_skb+0x208/0x470 [ 134.628937][ T13] genl_rcv+0x28/0x40 [ 134.632909][ T13] netlink_unicast+0x82f/0x9e0 [ 134.637657][ T13] netlink_sendmsg+0x805/0xb30 [ 134.642407][ T13] __sock_sendmsg+0x21c/0x270 [ 134.647068][ T13] ____sys_sendmsg+0x505/0x830 [ 134.651817][ T13] ___sys_sendmsg+0x21f/0x2a0 [ 134.656471][ T13] __x64_sys_sendmsg+0x19b/0x260 [ 134.661389][ T13] do_syscall_64+0xfa/0xfa0 [ 134.665874][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.671747][ T13] [ 134.674055][ T13] The buggy address belongs to the object at ffff888032f8b000 [ 134.674055][ T13] which belongs to the cache kmalloc-256 of size 256 [ 134.688090][ T13] The buggy address is located 176 bytes inside of [ 134.688090][ T13] freed 256-byte region [ffff888032f8b000, ffff888032f8b100) [ 134.701867][ T13] [ 134.704183][ T13] The buggy address belongs to the physical page: [ 134.710585][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32f8a [ 134.719334][ T13] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 134.727809][ T13] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 134.735330][ T13] page_type: f5(slab) [ 134.739293][ T13] raw: 00fff00000000040 ffff88813fe26b40 ffffea0000cc1100 dead000000000004 [ 134.747863][ T13] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 134.756436][ T13] head: 00fff00000000040 ffff88813fe26b40 ffffea0000cc1100 dead000000000004 [ 134.765130][ T13] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 134.773787][ T13] head: 00fff00000000001 ffffea0000cbe281 00000000ffffffff 00000000ffffffff [ 134.782440][ T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 134.791087][ T13] page dumped because: kasan: bad access detected [ 134.797476][ T13] page_owner tracks the page as allocated [ 134.803177][ T13] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5822, tgid 5822 (syz-executor), ts 74108175349, free_ts 73839157408 [ 134.824527][ T13] post_alloc_hook+0x240/0x2a0 [ 134.829284][ T13] get_page_from_freelist+0x2365/0x2440 [ 134.834818][ T13] __alloc_frozen_pages_noprof+0x181/0x370 [ 134.840606][ T13] alloc_pages_mpol+0x232/0x4a0 [ 134.845446][ T13] allocate_slab+0x96/0x3a0 [ 134.849937][ T13] ___slab_alloc+0xe94/0x18a0 [ 134.854595][ T13] __slab_alloc+0x65/0x100 [ 134.858993][ T13] __kmalloc_noprof+0x471/0x7f0 [ 134.863822][ T13] fib_create_info+0x172d/0x3210 [ 134.868747][ T13] fib_table_insert+0xc6/0x1b50 [ 134.873585][ T13] fib_magic+0x2c4/0x390 [ 134.877812][ T13] fib_add_ifaddr+0x3fb/0x5f0 [ 134.882473][ T13] fib_netdev_event+0x382/0x490 [ 134.887309][ T13] notifier_call_chain+0x1b6/0x3e0 [ 134.892414][ T13] __dev_notify_flags+0x18d/0x2e0 [ 134.897418][ T13] netif_change_flags+0xe8/0x1a0 [ 134.902341][ T13] page last free pid 5822 tgid 5822 stack trace: [ 134.908646][ T13] __free_frozen_pages+0xbc4/0xd30 [ 134.913748][ T13] __slab_free+0x2e7/0x390 [ 134.918160][ T13] qlist_free_all+0x97/0x140 [ 134.922735][ T13] kasan_quarantine_reduce+0x148/0x160 [ 134.928178][ T13] __kasan_slab_alloc+0x22/0x80 [ 134.933012][ T13] __kmalloc_cache_noprof+0x36f/0x6f0 [ 134.938369][ T13] netdevice_event+0x3a1/0x8c0 [ 134.943124][ T13] notifier_call_chain+0x1b6/0x3e0 [ 134.948224][ T13] call_netdevice_notifiers+0x88/0xc0 [ 134.953581][ T13] vlan_dev_open+0x213/0x5e0 [ 134.958158][ T13] __dev_open+0x470/0x880 [ 134.962470][ T13] __dev_change_flags+0x1ea/0x6d0 [ 134.967478][ T13] netif_change_flags+0x88/0x1a0 [ 134.972394][ T13] dev_change_flags+0x130/0x260 [ 134.977232][ T13] vlan_device_event+0x1bc2/0x1ef0 [ 134.982325][ T13] notifier_call_chain+0x1b6/0x3e0 [ 134.987424][ T13] [ 134.989732][ T13] Memory state around the buggy address: [ 134.995356][ T13] ffff888032f8af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.003399][ T13] ffff888032f8b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.011449][ T13] >ffff888032f8b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.019497][ T13] ^ [ 135.025117][ T13] ffff888032f8b100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.033163][ T13] ffff888032f8b180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.041203][ T13] ================================================================== [ 135.056543][ T5884] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input12 [ 135.086274][ T7262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.099283][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.106512][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 135.115801][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.125864][ T13] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 135.133162][ T13] Call Trace: [ 135.136446][ T13] [ 135.139378][ T13] dump_stack_lvl+0x99/0x250 [ 135.143985][ T13] ? __asan_memcpy+0x40/0x70 [ 135.148586][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.153790][ T13] ? __pfx__printk+0x10/0x10 [ 135.158392][ T13] vpanic+0x237/0x6d0 [ 135.162388][ T13] ? __pfx_vpanic+0x10/0x10 [ 135.166899][ T13] ? preempt_schedule+0xae/0xc0 [ 135.171761][ T13] ? __pfx_preempt_schedule+0x10/0x10 [ 135.177147][ T13] panic+0xb9/0xc0 [ 135.180887][ T13] ? __pfx_panic+0x10/0x10 [ 135.185311][ T13] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 135.191211][ T13] ? __mutex_lock+0x147/0x1350 [ 135.195989][ T13] check_panic_on_warn+0x89/0xb0 [ 135.200934][ T13] ? __mutex_lock+0x147/0x1350 [ 135.205714][ T13] end_report+0x78/0x160 [ 135.209958][ T13] kasan_report+0x129/0x150 [ 135.214475][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 135.220366][ T13] ? __mutex_lock+0x147/0x1350 [ 135.225145][ T13] __mutex_lock+0x147/0x1350 [ 135.229751][ T13] ? __mutex_lock+0x5bb/0x1350 [ 135.234521][ T13] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 135.240772][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 135.245826][ T13] ? __lock_acquire+0xab9/0xd20 [ 135.250694][ T13] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 135.256768][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 135.262495][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 135.268203][ T13] process_scheduled_works+0xae1/0x17b0 [ 135.273774][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 135.279756][ T13] worker_thread+0x8a0/0xda0 [ 135.284366][ T13] kthread+0x711/0x8a0 [ 135.288433][ T13] ? __pfx_worker_thread+0x10/0x10 [ 135.293535][ T13] ? __pfx_kthread+0x10/0x10 [ 135.298135][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 135.303329][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.308525][ T13] ? __pfx_kthread+0x10/0x10 [ 135.313117][ T13] ret_from_fork+0x4bc/0x870 [ 135.317717][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 135.322823][ T13] ? __switch_to_asm+0x39/0x70 [ 135.327591][ T13] ? __switch_to_asm+0x33/0x70 [ 135.332352][ T13] ? __pfx_kthread+0x10/0x10 [ 135.336929][ T13] ret_from_fork_asm+0x1a/0x30 [ 135.341706][ T13] [ 135.345004][ T13] Kernel Offset: disabled [ 135.349314][ T13] Rebooting in 86400 seconds..