last executing test programs: 2m1.555471221s ago: executing program 0 (id=505): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200, 0x80, 0x4}, 0x18) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000100)={@id={0x2, 0x0, @d}, 0x40, 0x0, '\x00', @a}) 2m1.441149553s ago: executing program 0 (id=506): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x85e3de2d9e84f7a5) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="09000000010001", 0x7) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80002) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m1.173188289s ago: executing program 0 (id=510): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f00000006c0)={0x0, 0x7, 0x55, "066ccb8061e361eef6f07014ee47f3c8cb24ec7878c5524349908b0d758ad345c40588740e121ee82ad96ee2f4bad532f90e1428be756adfa299791c918c4ae9fc1c98306105fca37a5e20f46d616e4dcf7f76c53b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e40)={0x6e4, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0x6d0, 0x23, 0x0, 0x1, [@nested={0x6cb, 0x15a, 0x0, 0x1, [@nested={0x544, 0x129, 0x0, 0x1, [@typed={0x8, 0x159, 0x0, 0x0, @ipv4=@local}, @nested={0x203, 0x61, 0x0, 0x1, [@nested={0x4, 0xc}, @generic="e015a9155b3876415960170d6c6b7e23fd6809b77ee14af2723311f4076436be42bdd4862a41cf223db651b2fab1def8df2436b4d7c3ec3fc4175566d2f3bfa4a80b5b2bdc4ce371903f41bc35cfbb16b0d7d9a225ec1e1b13d4a449c239125edaff45929ec2ceae0695e62dc1c14769a2eeda5375d09bdf40168a37e61209e2a428d06e5ef6d4a0ac3dae978af69c02b1759beb51ed00e0ef22f0570d8e901b283686f9682d", @generic="dc2b7cbf7bd4bdaf3efe01fda460df99513e51237259a15554be030fbeb148645df56686458a902ab4f8b66862de5c30d20d70b8dc15fd26bac7a51405c8732a6c9853804d7328e0a5d5b1b030c3c3fea0161ba71b0a920549134297f0df44804233660348f17c5d6a76ab3772d2ce38def50c116d32e91947cea5cfa63b3ad144015306869d16b16628e40754a69b4ee00c", @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x99}, @generic="fb22e528ba4f941ff9d3e8e7745ecc1808d58e7d4a1d6769022c7a4d0ea6c17a0c73aab1f8d5ca6761dac075acd64401dee9711b8091dba30dd3d2b1cbb0df11638879b9e0255c5b583a3d41fc39b81c559aea3a9173aedd98c1de193f7bbaa5a78505c154a96a234d51ade0665a01a7ab44f14f4bb613d6b094810fbe751db92723e273eccf9d06b889f512dbdc9cbffab72a31b6715370533f64970ddf13ae4126669fd10a2d40174f97e2fe1bbb7e16117d", @nested={0x4, 0x13f}]}, @nested={0x296, 0x137, 0x0, 0x1, [@generic="656ac7b60f6b3e03ca81fc0592da6ef5eb77b75f82f6fcd01f5db34bca621153e347d15c645ee5362191fc8642415c5c8197d2f2f1ff2e8dce8fa47814c62fe8df73ad97eb13132f519439739188038b66c8be503f4c19c996e280dba927d6b2a58edec8ff315d26a463d6cdaa8b988e9738981609193450440f403683af68ffaffdaf216f50a544af899c3c0c3331dd622d1a55cbf1f9e3ad74a3d189ddde537cdc0d29c13a8db3c6839b12", @nested={0x4, 0x76}, @generic="98b7ff8002df069216c9f7d5bb6c6989d24f7c547447ffdcbc8be2ea0e38bf478d7ca6d938ccc4d293a58b6ca2251aa6c8dc7e165194865ffb55cf5562a1929140e26b83d9e6610c1ee1632457dfef600d4bafc8", @nested={0x4, 0x87}, @typed={0x8, 0x13e, 0x0, 0x0, @u32=0x2}, @generic="db2b6f37c303140b955b047401de3d9c8e8c8c559ef47277177234329491178120d67f3ddb1f52457cd0c9081f40bec6228cd956a95b0c04f821834e6dcf1c7f978d104fbbb9fa347917df3edc851d11a0e1bfd49d1786a0381fbe2e6a691643f2bb5633a336048f631d9135cefeff1dbc36e01b1851c0fa335da080772ecadb0dd4b6582b62239d883535e53fab9b4d0374e8d29d52f9f603182b2e51fd6a3df8a68bd231ce90e5a37a51718f9c92c5e52a89b9957181b8f91125cd24a0ab6e24263e85f377487f773b2a902ef6cf84ca", @nested={0x4, 0xaa}, @generic="57a568f077ed93975c7ec64605459744af8d67c6d4a5da84f164081d9e0caa642dfb074d6bb03920e904ed6cb0562d215b9911f37b0619c11fcf89ac6d8295397dcab3536263f9facbef7d45648ddc6b0d387cf0c92ca345e70955e80ecdd3a13dc458fdface4220126c86ef1d546dcb826749fa9e6333038b5799d7fd155f6e81a454e23d1b5634e97991374d4bfcfa0d8f58b8eb3e1217e49c7a7730c187623772af443a6b82e11011398077"]}, @nested={0x9b, 0x7f, 0x0, 0x1, [@generic="5b8aa28269f78e0c776ad5eb0fff1d4d7c72603da0c0a70f8a812f7eb155f41f95211839cfd2185c671cc38bd783ea0b097a98447df702049201d0857240b2c8de56b192e192dc3ed34ea7b928cac3dc15990702f05d677179cc99297248be1bc1b200cd81dce31b49ecda60adefea08ac4469abbb78ae27a37dfef27da979d9527b47c823759009cc9aa0201b245901cf2327", @nested={0x4, 0x85}]}]}, @nested={0x9d, 0x3e, 0x0, 0x1, [@nested={0x4, 0x124}, @nested={0x4, 0xcc}, @generic="9c394c84d741e0b45af8ddf8ec4a605dfce670a439fce8509701017d064f982076b0ab1c5f2c04546e98225057e18f5fe34fed045aa7ccb5e9bd3c13cb9f8ff343493ca1aa7be96db4e01f0d1534cf75e905f6ab059f08ded6ee1fcd3a9f3b79cde924a05afecbb0ed4870cfa0f45260e08b586f5433866aa914d50908c26275ba27a9ba28f2441e272269d871d5a4218d"]}, @generic="64d1c449ee4374d8595e43315973e1f814541261cea37e7fff076c1f13a1db41b31bed307308027c5ad06a9427a7d59dec722cf601d0e22283aabd080873de7643d7dbde64417d0a13a54127c35a3aaa92c2670b1ce1d622edcdea9e6e0c1c5dc5287c08524b03bf2d6018d5a41f3b3b99d43d4339c0be0157b99e93c63f976ccfee87fc71d036c0899b541250f37f1be2056260395b4ed9fb1fa9cc2d33b0b306e739473f8a0df4116bfd8e94dba566246a19bd72682ab22fac721bf4cb285ed092b915a4495bc606c5dd683a2f340c761c60bc4071ee720e998f", @typed={0x8, 0x6f, 0x0, 0x0, @pid=r3}]}]}, @nested={0x4, 0x1b}]}, 0x6e4}], 0x1}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000040)={0x20, 0x0, 0x3a, {0x3a, 0x22, "e9b6c82aeaf930f30c4fa761a058af3762ce54c60c8d040c9ba04e499e91f9b710de1df6081f26052a0073c4b7fa5b92fe074c937530ee2f"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f00000004c0)={0x20, 0x31, 0xa7, "f77a4d19dbb83ec306ba4d0aad4d09da8e82a23189490f3d410a46f97137697c2427025a7ababf2aee392c0494d84975293d572be04f451ffab4ca5e37de478963ff321c811650870193cbaf1c39b513820c1a3ea7d64abf57b42fff36555e12a0b82fd2b7297ee2e7240434843b46913650f46343832f6c6d3e89ce21a4b4d2d320c1bdc9fa214388c407f50167b17f9848dd2fe3c8d19e06952d8446213a00b14b9a878fe1bc"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}}) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001000000102505a8a440000102030109021b0001010840d10904000001070103080905010208006403e32ef46ca3dc8b5ba1630a322a0f5e4962df27ad64b7a4262bc303e34bb7a6e647596db84297f10622eb07b11719424388cac94e657377f4893fe1b606e48492e42df058b08c9395c667e0f688e659433c33fec7c185825f9224e522afaa7d6cfd4996381eee"], &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xdf, 0xb, 0x3, 0x8, 0xc}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xba, &(0x7f0000000180)=@string={0xba, 0x3, "dbe590af0525ec7bc09f6f6795939fcb75ea0e5b6e928e3ff6bbaf24f760a09fbdf052345a5eb68702af1ffb54d0e347906f17b83200ec3ac6225bf6df73ed1a41f7bdc76d018ff0cc8fa62c8c8882e99c11cfa5e3c8113135645bdba7cd7e0fa824754b9a801caa60683f7a20727ddac9b43cb61b127b98f18678e779bb7211b21d986598e0035dde432dd7dbeec5e2c228df8d164edf2dd8a3e57cbfb2fa7a0a8b6e340ca41cb4bffae55912a965a8ab77778fab065248"}}, {0x74, &(0x7f0000000240)=@string={0x74, 0x3, "b738d3d88d8cd147baa6accf39f3a5563d3a03dd4481bdac84e41f07118825fe5729d3b6a388201ad8f2f1210d4ca6c65b64f5ec4207baf46556bc0581a9acded6da92e090253b16e46caccc022d84b2e8de8104454b2c4c0b42da719fefa0a23486cf83a5170c13219321c217a91da7fc11"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "63210fbbee56817e37f21259564edd328a9893550589b7367711b8f3b8c624176aaf1fafd6b864"}}]}) 1m58.019746599s ago: executing program 0 (id=534): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xae, 0x6c, 0x77, 0x40, 0x1781, 0x938, 0x7a43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x3, 0x0, 0x10, [{{0x9, 0x4, 0xb0, 0xfb, 0x2, 0xce, 0xf8, 0xba, 0xff, [], [{{0x9, 0x5, 0x5, 0x1, 0x8, 0x65, 0x5, 0xa}}, {{0x9, 0x5, 0x1a, 0x3, 0x3ff, 0xa, 0x5, 0x9}}]}}]}}]}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8482c0000005e14060205cd00000e000a001000000002800000121f", 0x2e}], 0x7}, 0x0) 1m56.029139158s ago: executing program 0 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80041, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xffffffb9) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000a8, 0x0) 1m55.898624739s ago: executing program 0 (id=551): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x90, 0x92, 0xeb, 0x20, 0xb95, 0x178a, 0xb061, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xca, 0x0, 0x0, 0xff, 0xff}}]}}]}}, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x51, 0x0) (async) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xe8, 0x117, 0x2, 0xcd, "92b9dba0a6419e8bc8dfd53976fea731f4c5f7769465dcdf0a261d0a05f38bd2f96eba01b28677d2c73514eef0d75602160c562dc10b0c8f465694826b993ebb63b5aa2507ba708d3c125d2bd5a7f1465083248bf064e80ab9c73cd14de497081c10e7747ce08b0303ad42fd392d764c7240316ba38138553b162ff67a20730f6d355b1280d5a27f2ca3fa281dd697fba5d2a800b9ea62d213f06876fd84b386e67a9b85aa1968b85a5e2f899d258a87072d61d9085376d19bb20e9c393ee7cd404c47ab358faf7dc9bd3834c7"}], 0x100}, 0x800) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) (async) recvmmsg(r4, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 32) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) 1m2.975699847s ago: executing program 32 (id=551): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x90, 0x92, 0xeb, 0x20, 0xb95, 0x178a, 0xb061, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xca, 0x0, 0x0, 0xff, 0xff}}]}}]}}, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x51, 0x0) (async) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xe8, 0x117, 0x2, 0xcd, "92b9dba0a6419e8bc8dfd53976fea731f4c5f7769465dcdf0a261d0a05f38bd2f96eba01b28677d2c73514eef0d75602160c562dc10b0c8f465694826b993ebb63b5aa2507ba708d3c125d2bd5a7f1465083248bf064e80ab9c73cd14de497081c10e7747ce08b0303ad42fd392d764c7240316ba38138553b162ff67a20730f6d355b1280d5a27f2ca3fa281dd697fba5d2a800b9ea62d213f06876fd84b386e67a9b85aa1968b85a5e2f899d258a87072d61d9085376d19bb20e9c393ee7cd404c47ab358faf7dc9bd3834c7"}], 0x100}, 0x800) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) (async) recvmmsg(r4, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 32) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) 1.744113864s ago: executing program 3 (id=1321): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x501000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 1.628545084s ago: executing program 3 (id=1325): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 1.413715344s ago: executing program 3 (id=1332): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='personality\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x400) 1.102727956s ago: executing program 3 (id=1338): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0xa, 0x5, 0x0, 0x10, 0x3, 0x2}, 0x1c) 790.067162ms ago: executing program 2 (id=1343): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 739.859492ms ago: executing program 2 (id=1346): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0xff08, 0x0) 670.125942ms ago: executing program 1 (id=1347): msgsnd(0x0, &(0x7f00000009c0)={0x2}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x2}, 0x8, 0x800) 609.999885ms ago: executing program 4 (id=1348): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fremovexattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[]) 609.848733ms ago: executing program 2 (id=1349): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4058043) 561.49439ms ago: executing program 1 (id=1350): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000ff0100000010000000002000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 510.049016ms ago: executing program 4 (id=1351): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_matches\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/197, 0xc5}], 0x1, 0x8f, 0x6b8) pread64(r0, &(0x7f0000000300)=""/194, 0xc2, 0x9) 445.966096ms ago: executing program 2 (id=1352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x6, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x50, 0x0, 0x0) 401.335751ms ago: executing program 1 (id=1353): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0x17, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x4000) 389.146687ms ago: executing program 4 (id=1354): setresuid(0xee01, 0xee01, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 277.297482ms ago: executing program 3 (id=1355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000060605"], 0x34}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000010) 277.067862ms ago: executing program 1 (id=1356): unshare(0x2040400) r0 = socket$inet6(0xa, 0x3, 0x10) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0xfffffffffffffd9d) 276.963161ms ago: executing program 4 (id=1357): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x1008}) 184.384636ms ago: executing program 1 (id=1358): shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 141.742938ms ago: executing program 2 (id=1359): tkill(0x0, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 69.873789ms ago: executing program 4 (id=1360): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x3f7, 0x3, 0x0, 0x2, 0x7fff, 0x9, 0x7, {0x0, @in={{0x2, 0x4e23, @local}}, 0x3, 0x7, 0x6, 0x1, 0x9}}, &(0x7f0000000040)=0xb0) 69.747799ms ago: executing program 3 (id=1361): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, 0x0, 0x0, 0x1600, 0x0, 0x3) 69.679055ms ago: executing program 1 (id=1362): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x16) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000240)=""/122, 0x7a) 9.899491ms ago: executing program 2 (id=1363): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x9902) 0s ago: executing program 4 (id=1364): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xa0000) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) kernel console output (not intermixed with test programs): 2 [ 174.036055][ T7235] syz_tun: tun_net_xmit 42 [ 174.041047][ T7235] syz_tun: tun_net_xmit 42 [ 174.045952][ T7235] syz_tun: tun_net_xmit 42 [ 174.050973][ T7235] syz_tun: tun_net_xmit 42 [ 174.056049][ T7235] syz_tun: tun_net_xmit 42 [ 174.068553][ T7235] syz_tun: tun_net_xmit 42 [ 174.074409][ T7235] syz_tun: tun_net_xmit 42 [ 174.079522][ T7235] syz_tun: tun_net_xmit 42 [ 174.084579][ T7235] syz_tun: tun_net_xmit 42 [ 174.089804][ T7235] syz_tun: tun_net_xmit 42 [ 174.094893][ T7235] syz_tun: tun_net_xmit 42 [ 174.099896][ T7235] syz_tun: tun_net_xmit 42 [ 174.105068][ T7235] syz_tun: tun_net_xmit 42 [ 174.110095][ T7235] syz_tun: tun_net_xmit 42 [ 174.115175][ T7235] syz_tun: tun_net_xmit 42 [ 174.120227][ T7235] syz_tun: tun_net_xmit 42 [ 174.125326][ T7235] syz_tun: tun_net_xmit 42 [ 174.130344][ T7235] syz_tun: tun_net_xmit 42 [ 174.135466][ T7235] syz_tun: tun_net_xmit 42 [ 174.141922][ T7235] syz_tun: tun_net_xmit 42 [ 174.147014][ T7235] syz_tun: tun_net_xmit 42 [ 174.152156][ T7235] syz_tun: tun_net_xmit 42 [ 174.157132][ T7235] syz_tun: tun_net_xmit 42 [ 174.162174][ T7235] syz_tun: tun_net_xmit 42 [ 174.167170][ T7235] syz_tun: tun_net_xmit 42 [ 174.172216][ T7235] syz_tun: tun_net_xmit 42 [ 174.177307][ T7235] syz_tun: tun_net_xmit 42 [ 174.183429][ T7235] syz_tun: tun_net_xmit 42 [ 174.188387][ T7235] syz_tun: tun_net_xmit 42 [ 174.193619][ T7235] syz_tun: tun_net_xmit 42 [ 174.198576][ T7235] syz_tun: tun_net_xmit 42 [ 174.205243][ T7235] syz_tun: tun_net_xmit 42 [ 174.497956][ T7289] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20003 [ 174.639292][ T7299] smc: net device wlan0 applied user defined pnetid SYZ0 [ 174.711989][ T5821] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 174.730527][ T987] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 174.776782][ T7303] evm: overlay not supported [ 174.871574][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 174.880487][ T987] usb 2-1: Using ep0 maxpacket: 8 [ 174.889721][ T5821] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 174.900761][ T5821] usb 1-1: config 0 has no interface number 0 [ 174.906976][ T5821] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 174.910313][ T987] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 174.938416][ T987] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 174.955726][ T5821] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 174.960485][ T987] usb 2-1: Product: syz [ 174.970816][ T987] usb 2-1: Manufacturer: syz [ 174.975466][ T987] usb 2-1: SerialNumber: syz [ 174.976713][ T5821] usb 1-1: config 0 interface 41 has no altsetting 0 [ 174.992180][ T987] usb 2-1: config 0 descriptor?? [ 175.003420][ T5821] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 175.012528][ T987] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 175.019653][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.028290][ T5821] usb 1-1: Product: syz [ 175.032857][ T5821] usb 1-1: Manufacturer: syz [ 175.037582][ T5821] usb 1-1: SerialNumber: syz [ 175.052909][ T5821] usb 1-1: config 0 descriptor?? [ 175.060214][ T7288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.069321][ T7288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.180581][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 175.287942][ T7288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.302888][ T7288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.340539][ T9] usb 4-1: device descriptor read/64, error -71 [ 175.581384][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 175.680587][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 175.694450][ T987] gspca_zc3xx: reg_r err -71 [ 175.699261][ T987] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 175.719586][ T987] usb 2-1: USB disconnect, device number 36 [ 175.728266][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.742968][ T5821] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 175.753746][ T9] usb 4-1: device descriptor read/64, error -71 [ 175.801650][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.832330][ T24] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.842291][ T24] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.862364][ T9] usb usb4-port1: attempt power cycle [ 175.878684][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 175.887570][ T24] usb 3-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 175.896873][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.914123][ T24] usb 3-1: config 0 descriptor?? [ 176.210506][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 176.251117][ T9] usb 4-1: device descriptor read/8, error -71 [ 176.343723][ T24] hid_mf 0003:0079:1843.0005: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.2-1/input0 [ 176.375478][ T24] hid_mf 0003:0079:1843.0005: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 176.500643][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 176.529434][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.542161][ T9] usb 4-1: device descriptor read/8, error -71 [ 176.559861][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.574682][ T5821] usb 3-1: USB disconnect, device number 23 [ 176.661118][ T9] usb usb4-port1: unable to enumerate USB device [ 177.512147][ T24] usb 1-1: USB disconnect, device number 28 [ 177.908856][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.444'. [ 177.920830][ T24] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 178.060445][ T7356] infiniband: Added to hash: ib_dev=ffff888032c28000 (0)() ndev=ffff8880122e8000 (17)(vcan0) [ 178.086733][ T7356] vcan0 speed is unknown, defaulting to 1000 [ 178.094258][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.104650][ T24] usb 1-1: config 0 has no interface number 0 [ 178.111484][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 178.121818][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.135628][ T7356] vcan0 speed is unknown, defaulting to 1000 [ 178.142376][ T24] usb 1-1: config 0 descriptor?? [ 178.154999][ T24] usb 1-1: selecting invalid altsetting 1 [ 178.168846][ T7356] vcan0 speed is unknown, defaulting to 1000 [ 178.175010][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 178.182248][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 178.281222][ T24] DVB: Unable to find symbol ves1820_attach() [ 178.339955][ T24] DVB: Unable to find symbol stv0297_attach() [ 178.346907][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 178.356796][ T7344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.442'. [ 178.411986][ T24] usb 1-1: USB disconnect, device number 29 [ 178.490493][ T5821] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 178.510801][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 178.588603][ T7356] infiniband syz1: set active [ 178.595188][ T803] vcan0 speed is unknown, defaulting to 1000 [ 178.602819][ T7356] infiniband syz1: added vcan0 [ 178.634180][ T7356] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 178.649748][ T7356] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 178.670485][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 178.675839][ T7356] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 178.688783][ T5821] usb 2-1: config 0 has an invalid interface number: 138 but max is 0 [ 178.697735][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.709549][ T9] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 178.722248][ T9] usb 3-1: config 5 has no interface number 0 [ 178.735968][ T9] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 178.750585][ T5821] usb 2-1: config 0 has no interface number 0 [ 178.756748][ T5821] usb 2-1: config 0 interface 138 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.788049][ T9] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 178.802915][ T9] usb 3-1: config 5 interface 123 has no altsetting 0 [ 178.815865][ T7356] RDS/IB: syz1: added [ 178.833270][ T5821] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 178.842884][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.852167][ T7356] smc: adding ib device syz1 with port count 1 [ 178.859994][ T5821] usb 2-1: Product: syz [ 178.867624][ T9] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 178.878054][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.890912][ T7356] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 178.898707][ T5821] usb 2-1: Manufacturer: syz [ 178.904394][ T5821] usb 2-1: SerialNumber: syz [ 178.909324][ T9] usb 3-1: Product: syz [ 178.923527][ T9] usb 3-1: Manufacturer: syz [ 178.929311][ T5821] usb 2-1: config 0 descriptor?? [ 178.942338][ T9] usb 3-1: SerialNumber: syz [ 178.990970][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (15)(syz1) rdma_ndev=ffff8880122e8000 (23)(vcan0) cookie=ffff888031388000 (12)(syzkaller1) start [ 179.016240][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (15)(syz1) rdma_ndev=ffff8880122e8000 (23)(vcan0) cookie=ffff888031388000 (5)(syzkaller1) end [ 179.039870][ T803] vcan0 speed is unknown, defaulting to 1000 [ 179.048221][ T7356] vcan0 speed is unknown, defaulting to 1000 [ 179.185492][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.214782][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.235209][ T7363] befs: (nbd2): No write support. Marking filesystem read-only [ 179.301006][ T5821] usb 2-1: USB disconnect, device number 37 [ 179.363765][ T6191] udevd[6191]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.422275][ T9] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 179.474504][ T9] usb 3-1: USB disconnect, device number 24 [ 179.650902][ T7390] overlayfs: failed to resolve './file2': -2 [ 179.709018][ T7356] vcan0 speed is unknown, defaulting to 1000 [ 179.723218][ T7392] netlink: 'syz.0.457': attribute type 25 has an invalid length. [ 179.760830][ T7393] netlink: 'syz.0.457': attribute type 25 has an invalid length. [ 179.790523][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 179.973144][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.992663][ T9] usb 3-1: config 35 has an invalid interface number: 222 but max is 1 [ 180.011025][ T9] usb 3-1: config 35 has an invalid interface number: 86 but max is 1 [ 180.019701][ T9] usb 3-1: config 35 has no interface number 0 [ 180.050447][ T9] usb 3-1: config 35 has no interface number 1 [ 180.056717][ T9] usb 3-1: config 35 interface 222 has no altsetting 0 [ 180.081574][ T987] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 180.090625][ T9] usb 3-1: config 35 interface 86 has no altsetting 0 [ 180.100720][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=4a6b, bcdDevice=2a.4a [ 180.109918][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.121070][ T9] usb 3-1: Product: syz [ 180.125517][ T9] usb 3-1: Manufacturer: syz [ 180.131552][ T9] usb 3-1: SerialNumber: syz [ 180.194529][ T7356] vcan0 speed is unknown, defaulting to 1000 [ 180.264817][ T987] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 180.274254][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.283103][ T987] usb 1-1: Product: syz [ 180.287558][ T987] usb 1-1: Manufacturer: syz [ 180.292916][ T987] usb 1-1: SerialNumber: syz [ 180.307582][ T987] hub 1-1:24.0: bad descriptor, ignoring hub [ 180.320497][ T987] hub 1-1:24.0: probe with driver hub failed with error -5 [ 180.370791][ T9] usb 3-1: USB disconnect, device number 25 [ 180.506886][ T987] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 180.524074][ T987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.534675][ T987] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 180.544501][ T987] usb 1-1: media controller created [ 180.564589][ T987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.608078][ T7356] vcan0 speed is unknown, defaulting to 1000 [ 180.628769][ T987] DVB: Unable to find symbol dib7000p_attach() [ 180.638509][ T987] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 180.647306][ T24] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 180.732583][ T987] rc_core: IR keymap rc-dib0700-rc5 not found [ 180.738720][ T987] Registered IR keymap rc-empty [ 180.744386][ T987] dvb-usb: could not initialize remote control. [ 180.751808][ T987] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 180.802704][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 180.812480][ T24] usb 2-1: config 1 has no interface number 1 [ 180.820214][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 180.835122][ T24] usb 2-1: string descriptor 0 read error: -22 [ 180.841981][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.853323][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.878564][ T24] usb 2-1: low speed audio streaming not supported [ 180.951200][ T987] usb 1-1: USB disconnect, device number 30 [ 181.078738][ T9] usb 2-1: USB disconnect, device number 38 [ 181.110054][ T987] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 181.155559][ T7419] netlink: 'syz.2.466': attribute type 21 has an invalid length. [ 181.174258][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.466'. [ 181.621421][ T9] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 181.650597][ T24] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 181.760538][ T9] usb 1-1: device descriptor read/64, error -71 [ 181.791205][ T24] usb 3-1: device descriptor read/64, error -71 [ 181.850542][ T5900] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 182.000601][ T9] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 182.007415][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 182.021312][ T5900] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 182.030694][ T24] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 182.038566][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.046768][ T5900] usb 4-1: Product: syz [ 182.051516][ T5900] usb 4-1: Manufacturer: syz [ 182.056124][ T5900] usb 4-1: SerialNumber: syz [ 182.064659][ T5900] usb 4-1: config 0 descriptor?? [ 182.130648][ T9] usb 1-1: device descriptor read/64, error -71 [ 182.130648][ T987] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 182.180568][ T24] usb 3-1: device descriptor read/64, error -71 [ 182.250972][ T9] usb usb1-port1: attempt power cycle [ 182.280493][ T987] usb 2-1: Using ep0 maxpacket: 32 [ 182.287916][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.299793][ T24] usb usb3-port1: attempt power cycle [ 182.305459][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.316779][ T987] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 182.326454][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.343347][ T987] usb 2-1: config 0 descriptor?? [ 182.361152][ T987] hub 2-1:0.0: USB hub found [ 182.561258][ T5900] usb 4-1: USB disconnect, device number 35 [ 182.600681][ T9] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 182.631312][ T9] usb 1-1: device descriptor read/8, error -71 [ 182.650644][ T24] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 182.671318][ T24] usb 3-1: device descriptor read/8, error -71 [ 182.755757][ T987] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 182.771855][ T987] usbhid 2-1:0.0: can't add hid device: -71 [ 182.778193][ T987] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 182.812480][ T987] usb 2-1: USB disconnect, device number 39 [ 182.871758][ T9] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 182.901314][ T9] usb 1-1: device descriptor read/8, error -71 [ 182.930774][ T24] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 182.951119][ T24] usb 3-1: device descriptor read/8, error -71 [ 183.011838][ T9] usb usb1-port1: unable to enumerate USB device [ 183.060934][ T24] usb usb3-port1: unable to enumerate USB device [ 183.290585][ T987] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 183.440574][ T987] usb 2-1: Using ep0 maxpacket: 32 [ 183.448032][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.459219][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.469404][ T987] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.478690][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.489573][ T987] usb 2-1: config 0 descriptor?? [ 183.499755][ T987] hub 2-1:0.0: USB hub found [ 183.697977][ T987] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 183.911825][ T987] usbhid 2-1:0.0: can't add hid device: -71 [ 183.918422][ T987] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 183.951241][ T987] usb 2-1: USB disconnect, device number 40 [ 184.433308][ T7468] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 184.447013][ T7468] IPVS: set_ctl: invalid protocol: 25972 95.100.117.105:28025 [ 184.480576][ T803] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 184.586985][ T7476] netlink: 'syz.2.487': attribute type 10 has an invalid length. [ 184.595088][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.607470][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.624342][ T7476] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 184.661337][ T803] usb 4-1: Invalid ep0 maxpacket: 9 [ 184.752598][ T7482] 9p: Bad value for 'rfdno' [ 184.803309][ T803] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 184.962057][ T803] usb 4-1: Invalid ep0 maxpacket: 9 [ 184.974639][ T803] usb usb4-port1: attempt power cycle [ 185.331389][ T803] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 185.340602][ T5900] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 185.361640][ T803] usb 4-1: Invalid ep0 maxpacket: 9 [ 185.423360][ T7511] fuse: Unknown parameter 'f' [ 185.477529][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 185.491193][ T803] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 185.510512][ T987] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 185.512474][ T803] usb 4-1: Invalid ep0 maxpacket: 9 [ 185.525634][ T803] usb usb4-port1: unable to enumerate USB device [ 185.545244][ T7517] program syz.0.500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.673062][ T987] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 185.681980][ T987] usb 3-1: config 0 has no interface number 0 [ 185.688244][ T987] usb 3-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 185.698329][ T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.719004][ T987] usb 3-1: config 0 descriptor?? [ 185.732202][ T987] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 186.082428][ T7523] ADFS-fs (loop0): error: unable to read block 3, try 0 [ 186.102653][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c7c8000 (16)(syzkaller1) start [ 186.121317][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c7c8000 (12)(syzkaller1) end [ 186.221822][ T7526] netlink: 'syz.0.503': attribute type 11 has an invalid length. [ 186.490523][ T803] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 186.640516][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 186.648209][ T803] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.656623][ T803] usb 1-1: config 179 has no interface number 0 [ 186.664212][ T803] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 186.675839][ T803] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 186.687165][ T803] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.698465][ T803] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 186.708658][ T803] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.722038][ T803] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.731162][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.745198][ T7526] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 186.756234][ T803] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 186.954174][ T7527] /dev/sg0: Can't lookup blockdev [ 186.954679][ T7526] /dev/sg0: Can't lookup blockdev [ 186.984945][ T803] usb 1-1: USB disconnect, device number 35 [ 187.024300][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805ae60000 (9)(s) start [ 187.066754][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805ae60000 (6)(s) end [ 187.166418][ T7535] netlink: 64 bytes leftover after parsing attributes in process `syz.0.505'. [ 187.324545][ T7542] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20002 [ 187.392034][ T7547] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 187.451645][ T987] gspca_ov534_9: reg_r err -71 [ 187.504527][ T7552] netlink: 48 bytes leftover after parsing attributes in process `syz.3.509'. [ 187.519543][ T7552] netlink: 92 bytes leftover after parsing attributes in process `syz.3.509'. [ 187.720614][ T987] gspca_ov534_9: Unknown sensor 0000 [ 187.720743][ T987] ov534_9 3-1:0.111: probe with driver ov534_9 failed with error -22 [ 187.741897][ T987] usb 3-1: USB disconnect, device number 30 [ 187.810557][ T42] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 187.970646][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 187.980483][ T42] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 187.999143][ T42] usb 1-1: config 0 has no interface number 0 [ 188.014173][ T42] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 188.023895][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.033355][ T42] usb 1-1: Product: syz [ 188.039347][ T42] usb 1-1: Manufacturer: syz [ 188.039369][ T42] usb 1-1: SerialNumber: syz [ 188.052501][ T42] usb 1-1: config 0 descriptor?? [ 188.145909][ T5900] usb 2-1: unable to read config index 0 descriptor/all [ 188.153870][ T5900] usb 2-1: can't read configurations, error -71 [ 188.462508][ T42] radio-si470x 1-1:0.35: DeviceID=0x6ccb ChipID=0x8061 [ 188.508012][ T7577] 9p: Bad value for 'port' [ 188.571844][ T5900] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 188.732361][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.750942][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.762044][ T5900] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 188.772859][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.794935][ T5900] usb 2-1: config 0 descriptor?? [ 188.800250][ T42] radio-si470x 1-1:0.35: software version 122, hardware version 77 [ 188.840830][ T7589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.013655][ T7599] FAULT_INJECTION: forcing a failure. [ 189.013655][ T7599] name failslab, interval 1, probability 0, space 0, times 0 [ 189.027302][ T7599] CPU: 0 UID: 0 PID: 7599 Comm: syz.3.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.027337][ T7599] Tainted: [L]=SOFTLOCKUP [ 189.027346][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.027359][ T7599] Call Trace: [ 189.027368][ T7599] [ 189.027377][ T7599] dump_stack_lvl+0xe8/0x150 [ 189.027412][ T7599] should_fail_ex+0x412/0x560 [ 189.027449][ T7599] should_failslab+0xa8/0x100 [ 189.027477][ T7599] __kmalloc_noprof+0xe8/0x760 [ 189.027501][ T7599] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 189.027529][ T7599] tomoyo_realpath_from_path+0xe3/0x5d0 [ 189.027563][ T7599] ? tomoyo_path_number_perm+0x219/0x630 [ 189.027593][ T7599] tomoyo_path_number_perm+0x246/0x630 [ 189.027626][ T7599] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.027658][ T7599] ? __lock_acquire+0x6b5/0x2cf0 [ 189.027698][ T7599] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 189.027740][ T7599] ? __fget_files+0x2a/0x420 [ 189.027774][ T7599] ? __fget_files+0x2a/0x420 [ 189.027803][ T7599] ? __fget_files+0x3a0/0x420 [ 189.027839][ T7599] ? __fget_files+0x2a/0x420 [ 189.027872][ T7599] security_file_ioctl+0xc3/0x2a0 [ 189.027902][ T7599] __se_sys_ioctl+0x47/0x170 [ 189.027929][ T7599] do_syscall_64+0x14d/0xf80 [ 189.027948][ T7599] ? trace_irq_disable+0x3b/0x150 [ 189.027977][ T7599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.027998][ T7599] ? clear_bhb_loop+0x40/0x90 [ 189.028023][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.028045][ T7599] RIP: 0033:0x7f3537b9c629 [ 189.028065][ T7599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.028083][ T7599] RSP: 002b:00007f3538b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.028103][ T7599] RAX: ffffffffffffffda RBX: 00007f3537e15fa0 RCX: 00007f3537b9c629 [ 189.028117][ T7599] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 189.028130][ T7599] RBP: 00007f3538b03090 R08: 0000000000000000 R09: 0000000000000000 [ 189.028142][ T7599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.028153][ T7599] R13: 00007f3537e16038 R14: 00007f3537e15fa0 R15: 00007ffc296c9aa8 [ 189.028187][ T7599] [ 189.028196][ T7599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.291664][ T5900] arvo 0003:1E7D:30D4.0006: item fetching failed at offset 5/7 [ 189.300326][ T5900] arvo 0003:1E7D:30D4.0006: parse failed [ 189.306778][ T5900] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -22 [ 189.330778][ T42] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -110 [ 189.340123][ T42] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -32 [ 189.355480][ T42] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -22 [ 189.390930][ T42] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 189.491245][ T42] usb 2-1: USB disconnect, device number 42 [ 189.613805][ T5821] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 189.770548][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 189.778197][ T5821] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.790736][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.797478][ T5821] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 189.807106][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.817550][ T5821] usb 4-1: config 0 descriptor?? [ 189.970556][ T42] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 190.031447][ T7601] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 190.120677][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 190.128026][ T42] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 190.136702][ T42] usb 3-1: config 0 has no interface number 0 [ 190.147844][ T42] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 190.157466][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.165753][ T42] usb 3-1: Product: syz [ 190.169970][ T42] usb 3-1: Manufacturer: syz [ 190.174668][ T42] usb 3-1: SerialNumber: syz [ 190.182495][ T42] usb 3-1: config 0 descriptor?? [ 190.279225][ T5821] smartjoyplus 0003:6666:8804.0007: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.3-1/input0 [ 190.300082][ T5821] smartjoyplus 0003:6666:8804.0007: Force feedback for SmartJoy PLUS PS2/USB adapter [ 190.391637][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.405742][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.418240][ T42] radio-si470x 3-1:0.35: DeviceID=0x6ccb ChipID=0x8061 [ 190.457992][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.484613][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.524558][ T5821] usb 4-1: USB disconnect, device number 40 [ 190.571497][ T7629] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.583430][ T803] usb 1-1: USB disconnect, device number 36 [ 190.659377][ T42] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 190.677755][ T42] radio-si470x 3-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 190.689416][ T7631] FAULT_INJECTION: forcing a failure. [ 190.689416][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 190.711951][ T42] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 190.724350][ T7631] CPU: 1 UID: 0 PID: 7631 Comm: syz.3.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.724383][ T7631] Tainted: [L]=SOFTLOCKUP [ 190.724391][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.724404][ T7631] Call Trace: [ 190.724411][ T7631] [ 190.724419][ T7631] dump_stack_lvl+0xe8/0x150 [ 190.724454][ T7631] should_fail_ex+0x412/0x560 [ 190.724489][ T7631] should_failslab+0xa8/0x100 [ 190.724516][ T7631] __kmalloc_noprof+0xe8/0x760 [ 190.724539][ T7631] ? tomoyo_encode+0x28b/0x550 [ 190.724566][ T7631] tomoyo_encode+0x28b/0x550 [ 190.724593][ T7631] tomoyo_realpath_from_path+0x58d/0x5d0 [ 190.724625][ T7631] ? tomoyo_path_number_perm+0x219/0x630 [ 190.724670][ T7631] tomoyo_path_number_perm+0x246/0x630 [ 190.724702][ T7631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 190.724734][ T7631] ? __lock_acquire+0x6b5/0x2cf0 [ 190.724774][ T7631] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 190.724816][ T7631] ? __fget_files+0x2a/0x420 [ 190.724849][ T7631] ? __fget_files+0x2a/0x420 [ 190.724877][ T7631] ? __fget_files+0x3a0/0x420 [ 190.724904][ T7631] ? __fget_files+0x2a/0x420 [ 190.724937][ T7631] security_file_ioctl+0xc3/0x2a0 [ 190.724967][ T7631] __se_sys_ioctl+0x47/0x170 [ 190.724994][ T7631] do_syscall_64+0x14d/0xf80 [ 190.725013][ T7631] ? trace_irq_disable+0x3b/0x150 [ 190.725043][ T7631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.725072][ T7631] ? clear_bhb_loop+0x40/0x90 [ 190.725098][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.725119][ T7631] RIP: 0033:0x7f3537b9c629 [ 190.725138][ T7631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.725157][ T7631] RSP: 002b:00007f3538b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.725180][ T7631] RAX: ffffffffffffffda RBX: 00007f3537e15fa0 RCX: 00007f3537b9c629 [ 190.725195][ T7631] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 190.725208][ T7631] RBP: 00007f3538b03090 R08: 0000000000000000 R09: 0000000000000000 [ 190.725221][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.725233][ T7631] R13: 00007f3537e16038 R14: 00007f3537e15fa0 R15: 00007ffc296c9aa8 [ 190.725266][ T7631] [ 190.725286][ T7631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.737438][ T7633] program syz.2.532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.833594][ T42] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 191.015535][ T42] usb 3-1: USB disconnect, device number 31 [ 191.260512][ T803] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 191.268537][ T5821] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 191.310520][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 191.342388][ T5844] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 191.351809][ T5844] Bluetooth: hci0: Injecting HCI hardware error event [ 191.360305][ T5844] Bluetooth: hci0: hardware error 0x00 [ 191.443013][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 191.449592][ T803] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 191.458285][ T803] usb 1-1: config 0 has no interface number 0 [ 191.466333][ T5821] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 191.476300][ T803] usb 1-1: config 0 interface 176 altsetting 251 endpoint 0x5 has an invalid bInterval 101, changing to 4 [ 191.488656][ T5821] usb 2-1: config 0 has no interface number 0 [ 191.494912][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 191.502266][ T5821] usb 2-1: config 0 interface 184 has no altsetting 0 [ 191.509579][ T803] usb 1-1: config 0 interface 176 altsetting 251 has an endpoint descriptor with address 0x1A, changing to 0xA [ 191.531386][ T10] usb 4-1: config 111 has an invalid interface number: 71 but max is 0 [ 191.540409][ T10] usb 4-1: config 111 has no interface number 0 [ 191.547412][ T803] usb 1-1: config 0 interface 176 altsetting 251 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 191.559515][ T10] usb 4-1: config 111 interface 71 has no altsetting 0 [ 191.567456][ T5821] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 191.577581][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.587147][ T803] usb 1-1: config 0 interface 176 has no altsetting 0 [ 191.596118][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=50.12 [ 191.605862][ T5821] usb 2-1: Product: syz [ 191.611241][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.620709][ T803] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=7a.43 [ 191.630272][ T5821] usb 2-1: Manufacturer: syz [ 191.634979][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.643453][ T5821] usb 2-1: SerialNumber: syz [ 191.649826][ T10] usb 4-1: Product: syz [ 191.654658][ T803] usb 1-1: Product: syz [ 191.658877][ T803] usb 1-1: Manufacturer: syz [ 191.663913][ T10] usb 4-1: Manufacturer: syz [ 191.669776][ T5821] usb 2-1: config 0 descriptor?? [ 191.678898][ T10] usb 4-1: SerialNumber: syz [ 191.689953][ T803] usb 1-1: SerialNumber: syz [ 191.711272][ T803] usb 1-1: config 0 descriptor?? [ 191.717495][ T7637] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 191.912413][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:111.71/input/input14 [ 191.927987][ T7637] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 191.931802][ T5182] bcm5974 4-1:111.71: could not read from device [ 191.947212][ T5182] bcm5974 4-1:111.71: could not read from device [ 191.949981][ T7637] team0: Device xfrm0 is of different type [ 191.964188][ T10] usb 4-1: USB disconnect, device number 41 [ 191.972538][ T5182] bcm5974 4-1:111.71: could not read from device [ 191.981668][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 192.024326][ T803] iguanair 1-1:0.176: probe with driver iguanair failed with error -12 [ 192.053322][ T803] usb 1-1: USB disconnect, device number 37 [ 192.090816][ T5821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 192.112854][ T5821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 192.131275][ T5821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 192.159691][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 192.169653][ T5821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 192.193406][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.203085][ T5821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 192.205001][ T7659] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 192.214140][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.233886][ T5821] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 192.244916][ T5821] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 192.253641][ T9] usb 3-1: Product: syz [ 192.257860][ T9] usb 3-1: Manufacturer: syz [ 192.270690][ T9] usb 3-1: SerialNumber: syz [ 192.277343][ T5821] usb 2-1: USB disconnect, device number 43 [ 192.308153][ T9] usb 3-1: config 0 descriptor?? [ 192.725424][ T7654] netlink: 9872 bytes leftover after parsing attributes in process `syz.2.542'. [ 192.763999][ T5900] usb 3-1: USB disconnect, device number 32 [ 193.421431][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 193.589267][ T7711] mmap: syz.2.560 (7711): VmData 37474304 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 193.590945][ T5900] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 193.772760][ T5900] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 193.781040][ T5900] usb 4-1: config 0 has no interface number 0 [ 193.787197][ T5900] usb 4-1: config 0 interface 29 has no altsetting 0 [ 193.796092][ T5900] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 193.805461][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.813532][ T5900] usb 4-1: Product: syz [ 193.817723][ T5900] usb 4-1: Manufacturer: syz [ 193.822586][ T5900] usb 4-1: SerialNumber: syz [ 193.829828][ T5900] usb 4-1: config 0 descriptor?? [ 193.970509][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 194.039883][ T5900] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 194.093106][ T7722] sg_write: data in/out 44713/8 bytes for SCSI command 0xcf-- guessing data in; [ 194.093106][ T7722] program syz.1.565 not setting count and/or reply_len properly [ 194.130536][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 194.139012][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.148576][ T9] usb 3-1: config 9 has an invalid interface number: 5 but max is 1 [ 194.157773][ T9] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 194.168313][ T9] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 194.177452][ T9] usb 3-1: config 9 has no interface number 0 [ 194.183745][ T9] usb 3-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 194.194440][ T9] usb 3-1: config 9 interface 5 has no altsetting 0 [ 194.203816][ T9] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 194.213063][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.221338][ T9] usb 3-1: Product: syz [ 194.225567][ T9] usb 3-1: Manufacturer: syz [ 194.230205][ T9] usb 3-1: SerialNumber: syz [ 194.242037][ T5900] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 194.252644][ T5900] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 194.259593][ T5900] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 194.313048][ T5900] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 194.370573][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 194.454829][ T9] usb 3-1: USB disconnect, device number 33 [ 194.475862][ T42] usb 4-1: USB disconnect, device number 42 [ 194.532898][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 194.542995][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 194.553588][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 194.563812][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 194.576407][ T10] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 194.585731][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.593812][ T10] usb 2-1: Product: syz [ 194.598126][ T10] usb 2-1: Manufacturer: syz [ 194.603258][ T10] usb 2-1: SerialNumber: syz [ 194.610460][ T10] usb 2-1: config 0 descriptor?? [ 194.619015][ T10] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 194.827611][ T10] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 195.024346][ T42] usb 2-1: USB disconnect, device number 44 [ 195.454743][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 195.621074][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 195.624499][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.624545][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.624571][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.624608][ T9] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 195.624633][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.627583][ T9] usb 4-1: config 0 descriptor?? [ 195.630478][ T803] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 195.785249][ T803] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 195.797002][ T803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.807499][ T803] usb 3-1: config 0 has no interface number 0 [ 195.813813][ T803] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.831965][ T803] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 195.841994][ T803] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 195.851816][ T803] usb 3-1: Product: syz [ 195.856159][ T803] usb 3-1: SerialNumber: syz [ 195.882345][ T803] usb 3-1: config 0 descriptor?? [ 195.903283][ T803] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 196.056928][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 196.069266][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 196.104125][ T9] usb 4-1: USB disconnect, device number 43 [ 196.114064][ T5900] usb 3-1: USB disconnect, device number 34 [ 196.491376][ T7776] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 196.546488][ T7779] @0tend#: renamed from bond_slave_1 (while UP) [ 208.578769][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888034cd0000 (23)(syz_tun) start [ 208.595974][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888034cd0000 (21)(syz_tun) end [ 208.767222][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802a2f0000 (16)(netdevsim3) start [ 208.776316][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.784413][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802a2f0000 (12)(netdevsim3) end [ 208.846278][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c2f4000 (16)(netdevsim2) start [ 208.849717][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.864230][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c2f4000 (12)(netdevsim2) end [ 208.913382][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c8a0000 (16)(netdevsim1) start [ 208.916890][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.931609][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c8a0000 (12)(netdevsim1) end [ 208.995019][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802a2f4000 (21)(netdevsim0) start [ 209.002350][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.012304][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802a2f4000 (19)(netdevsim0) end [ 209.186934][ T13] bridge_slave_1: left allmulticast mode [ 209.194380][ T13] bridge_slave_1: left promiscuous mode [ 209.201762][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.215401][ T13] bridge_slave_0: left allmulticast mode [ 209.223620][ T13] bridge_slave_0: left promiscuous mode [ 209.229380][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.298659][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888075bbc000 (15)(ip6gretap0) start [ 209.315812][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888075bbc000 (7)(ip6gretap0) end [ 209.355826][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880787c8000 (12)(erspan0) start [ 209.373074][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880787c8000 (7)(erspan0) end [ 209.396608][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802ab62000 (12)(gretap0) start [ 209.413761][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802ab62000 (7)(gretap0) end [ 209.437413][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c0e6000 (14)(geneve1) start [ 209.454209][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c0e6000 (7)(geneve1) end [ 209.473160][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c0b8000 (7)(geneve0) start [ 209.489930][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c0b8000 (7)(geneve0) end [ 209.508491][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807d9a0000 (10)(bridge0) start [ 209.525747][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807d9a0000 (6)(bridge0) end [ 209.542717][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880122fc000 (13)(bond0) start [ 209.544013][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.559537][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880122fc000 (13)(bond0) end [ 209.587789][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.598090][ T13] bond0 (unregistering): Released all slaves [ 209.689089][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805b31c000 (16)(wlan1) start [ 209.717109][ T187] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805b31c000 (9)(wlan1) end [ 209.803025][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805b1f8000 (17)(wlan0) start [ 209.829641][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805b1f8000 (11)(wlan0) end [ 210.225963][ T13] hsr_slave_0: left promiscuous mode [ 210.250827][ T13] hsr_slave_1: left promiscuous mode [ 210.257808][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.280342][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.290477][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.298164][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.335839][ T13] veth1_macvtap: left promiscuous mode [ 210.345732][ T13] veth0_macvtap: left promiscuous mode [ 210.351487][ T13] veth1_vlan: left promiscuous mode [ 210.356784][ T13] veth0_vlan: left promiscuous mode [ 210.447960][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88801249e000 (15)(macsec0) start [ 210.489021][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88801249e000 (6)(macsec0) end [ 210.506068][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807bc24000 (14)(macvtap0) start [ 210.524625][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807bc24000 (10)(macvtap0) end [ 210.544208][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888077b8e000 (9)(veth0_macvtap) start [ 210.561901][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888077b8e000 (9)(veth0_macvtap) end [ 210.579498][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888077b8c000 (9)(veth1_macvtap) start [ 210.597807][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888077b8c000 (9)(veth1_macvtap) end [ 210.615499][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802b280000 (9)(ipvlan1) start [ 210.632653][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802b280000 (9)(ipvlan1) end [ 210.649321][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802d3e8000 (6)(ipvlan0) start [ 210.668097][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802d3e8000 (6)(ipvlan0) end [ 210.686011][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807b74a000 (5)(macvlan1) start [ 210.703066][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807b74a000 (5)(macvlan1) end [ 210.719877][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880124ba000 (5)(macvlan0) start [ 210.737346][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880124ba000 (5)(macvlan0) end [ 210.755175][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807bb9c000 (6)(vlan1) start [ 210.773699][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807bb9c000 (6)(vlan1) end [ 210.790136][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88801245c000 (7)(veth0_vlan) start [ 210.807586][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88801245c000 (7)(veth0_vlan) end [ 210.825532][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88801245a000 (8)(veth1_vlan) start [ 210.843606][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88801245a000 (8)(veth1_vlan) end [ 210.861473][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88801245e000 (6)(virt_wifi0) start [ 210.878494][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88801245e000 (6)(virt_wifi0) end [ 210.897377][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807b6f0000 (6)(veth0_virt_wifi) start [ 210.914777][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807b6f0000 (6)(veth0_virt_wifi) end [ 210.932534][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807bb98000 (6)(veth1_virt_wifi) start [ 210.953905][ T13] team0 (unregistering): Port device team_slave_1 removed [ 210.956243][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807bb98000 (6)(veth1_virt_wifi) end [ 210.982236][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c626000 (5)(hsr0) start [ 210.998864][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c626000 (5)(hsr0) end [ 211.016161][ T13] team0 (unregistering): Port device team_slave_0 removed [ 211.019486][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c582000 (5)(hsr_slave_1) start [ 211.041033][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c582000 (5)(hsr_slave_1) end [ 211.058023][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c580000 (6)(veth1_to_hsr) start [ 211.076320][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c580000 (6)(veth1_to_hsr) end [ 211.093598][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807b9ac000 (5)(hsr_slave_0) start [ 211.111124][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807b9ac000 (5)(hsr_slave_0) end [ 211.133304][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807b9aa000 (6)(veth0_to_hsr) start [ 211.150742][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807b9aa000 (6)(veth0_to_hsr) end [ 211.167890][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807c3a4000 (6)(batadv_slave_1) start [ 211.187634][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807c3a4000 (6)(batadv_slave_1) end [ 211.205555][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807c3a2000 (6)(veth1_to_batadv) start [ 211.222948][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807c3a2000 (6)(veth1_to_batadv) end [ 211.240299][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807be78000 (6)(batadv_slave_0) start [ 211.259710][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807be78000 (6)(batadv_slave_0) end [ 211.277146][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888034154000 (6)(veth0_to_batadv) start [ 211.295502][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888034154000 (6)(veth0_to_batadv) end [ 211.313176][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888078cd0000 (10)(team_slave_1) start [ 211.330650][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888078cd0000 (10)(team_slave_1) end [ 211.353920][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880774c6000 (6)(veth1_to_team) start [ 211.373102][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880774c6000 (6)(veth1_to_team) end [ 211.390549][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88803218c000 (10)(team_slave_0) start [ 211.408990][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88803218c000 (10)(team_slave_0) end [ 211.426245][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888032188000 (6)(veth0_to_team) start [ 211.443976][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888032188000 (6)(veth0_to_team) end [ 211.461313][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c854000 (4)(bond_slave_1) start [ 211.502458][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c854000 (3)(bond_slave_1) end [ 211.521504][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c8c2000 (4)(veth1_to_bond) start [ 211.539684][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c8c2000 (4)(veth1_to_bond) end [ 211.567750][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802c196000 (3)(bond_slave_0) start [ 211.587260][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802c196000 (3)(bond_slave_0) end [ 211.606938][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802c194000 (4)(veth0_to_bond) start [ 211.624319][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802c194000 (4)(veth0_to_bond) end [ 211.642935][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888036f64000 (3)(bridge_slave_1) start [ 211.666518][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888036f64000 (3)(bridge_slave_1) end [ 211.684706][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888036f62000 (4)(veth1_to_bridge) start [ 211.702482][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888036f62000 (4)(veth1_to_bridge) end [ 211.724578][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888033796000 (3)(bridge_slave_0) start [ 211.742985][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888033796000 (3)(bridge_slave_0) end [ 211.761516][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888033794000 (4)(veth0_to_bridge) start [ 211.780621][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888033794000 (4)(veth0_to_bridge) end [ 211.800266][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807c194000 (4)(veth1) start [ 211.822610][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807c194000 (4)(veth1) end [ 211.843325][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880779d6000 (4)(veth0) start [ 211.860776][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880779d6000 (4)(veth0) end [ 211.896723][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807c14c000 (4)(batadv0) start [ 211.916303][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 211.934019][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807c14c000 (4)(batadv0) end [ 211.955958][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807c4e2000 (4)(dummy0) start [ 211.973552][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807c4e2000 (4)(dummy0) end [ 211.998378][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807dbc8000 (4)(team0) start [ 212.015723][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807dbc8000 (4)(team0) end [ 245.907638][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.910252][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.916824][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.917814][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.919257][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.989933][ T7927] vcan0 speed is unknown, defaulting to 1000 [ 246.040516][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 246.177305][ T7934] program syz.2.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.214090][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.243143][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.260455][ T9] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 246.270228][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.284935][ T9] usb 2-1: config 0 descriptor?? [ 246.537128][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 246.563374][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 246.576371][ T9] usb 2-1: USB disconnect, device number 45 [ 246.601181][ T7927] chnl_net:caif_netlink_parms(): no params data found [ 246.881608][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.907478][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.917812][ T7927] bridge_slave_0: entered allmulticast mode [ 246.929827][ T7927] bridge_slave_0: entered promiscuous mode [ 246.943406][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.953012][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.960589][ T7927] bridge_slave_1: entered allmulticast mode [ 246.969843][ T7927] bridge_slave_1: entered promiscuous mode [ 247.067569][ T7927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.089915][ T7927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.100598][ T5821] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 247.154932][ T7963] loop6: detected capacity change from 0 to 2560 [ 247.183244][ T7927] team0: Port device team_slave_0 added [ 247.189103][ T7921] buffer_io_error: 27 callbacks suppressed [ 247.189120][ T7921] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.206813][ T7927] team0: Port device team_slave_1 added [ 247.222969][ T7921] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.239152][ T7921] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.247426][ T5821] usb 2-1: device descriptor read/64, error -71 [ 247.264586][ T7921] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.274101][ T7921] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.283832][ T7921] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.303619][ T7921] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.318477][ T7921] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.331371][ T7927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.337188][ T7921] ldm_validate_partition_table(): Disk read failed. [ 247.338774][ T7927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.346822][ T7921] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.371358][ T7927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.395354][ T7927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.396902][ T7921] Buffer I/O error on dev loop6, logical block 0, async page read [ 247.402552][ T7927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.402586][ T7927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.454074][ T7921] Dev loop6: unable to read RDB block 0 [ 247.460118][ T7921] loop6: unable to read partition table [ 247.468255][ T7963] ldm_validate_partition_table(): Disk read failed. [ 247.478273][ T7963] Dev loop6: unable to read RDB block 0 [ 247.486493][ T7963] loop6: unable to read partition table [ 247.495495][ T7963] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5) [ 247.529732][ T5197] ldm_validate_partition_table(): Disk read failed. [ 247.537258][ T5821] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 247.547450][ T5197] Dev loop6: unable to read RDB block 0 [ 247.554689][ T5197] loop6: unable to read partition table [ 247.597174][ T7927] hsr_slave_0: entered promiscuous mode [ 247.610043][ T7927] hsr_slave_1: entered promiscuous mode [ 247.680577][ T5821] usb 2-1: device descriptor read/64, error -71 [ 247.773715][ T7976] tipc: MTU too low for tipc bearer [ 247.790839][ T5821] usb usb2-port1: attempt power cycle [ 247.924121][ T7927] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.940236][ T7927] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.954324][ T7927] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.968124][ T7927] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.980527][ T5844] Bluetooth: hci2: command tx timeout [ 248.143641][ T5821] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 248.155229][ T7927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.183323][ T5821] usb 2-1: device descriptor read/8, error -71 [ 248.199680][ T7927] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.218023][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.225375][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.249970][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.257266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.432991][ T5821] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 248.471428][ T5821] usb 2-1: device descriptor read/8, error -71 [ 248.579635][ T7927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.596989][ T5821] usb usb2-port1: unable to enumerate USB device [ 248.978105][ T7927] veth0_vlan: entered promiscuous mode [ 249.011779][ T7927] veth1_vlan: entered promiscuous mode [ 249.050472][ T5821] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 249.087045][ T7927] veth0_macvtap: entered promiscuous mode [ 249.104847][ T7927] veth1_macvtap: entered promiscuous mode [ 249.132396][ T7927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.153496][ T7927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.188315][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.201076][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.215082][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.224057][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 249.229415][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.243363][ T5821] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 249.254376][ T5821] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 249.270460][ T5821] usb 3-1: Product: syz [ 249.275073][ T5821] usb 3-1: Manufacturer: syz [ 249.279898][ T5821] usb 3-1: SerialNumber: syz [ 249.303482][ T5821] usb 3-1: config 0 descriptor?? [ 249.314345][ T5821] usb 3-1: selecting invalid altsetting 1 [ 249.377701][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.386375][ T5821] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 249.401563][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.446228][ T7921] udevd[7921]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.466165][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.477316][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.512771][ T5900] usb 3-1: USB disconnect, device number 35 [ 249.668097][ T8026] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 249.804831][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 249.872260][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 250.060946][ T5844] Bluetooth: hci2: command tx timeout [ 250.183738][ T8047] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 250.298811][ T8054] : renamed from veth0_to_bond (while UP) [ 250.450545][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 250.610449][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 250.617370][ T10] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 250.627375][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.646614][ T10] usb 4-1: config 0 has no interface number 0 [ 250.653129][ T10] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 250.665270][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 250.677102][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 250.688281][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 250.696466][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 250.707464][ T5900] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 250.715997][ T10] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 250.729916][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 250.763851][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.776521][ T10] usb 4-1: config 0 descriptor?? [ 250.783993][ T8049] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 250.802742][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.873637][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 250.879221][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 250.891604][ T24] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 250.903645][ T24] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 250.913779][ T5900] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 250.925996][ T24] usb 3-1: config 0 has an invalid interface number: 220 but max is 0 [ 250.941169][ T5900] usb 2-1: config 0 has no interface number 0 [ 250.953621][ T5900] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.964894][ T24] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 250.976398][ T24] usb 3-1: config 0 has no interface number 0 [ 250.983242][ T5900] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 250.996123][ T24] usb 3-1: config 0 has no interface number 1 [ 251.003036][ T24] usb 3-1: config 0 has no interface number 2 [ 251.013882][ T5900] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 251.030430][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.041716][ T24] usb 3-1: config 0 interface 125 altsetting 196 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 251.053897][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.062740][ T5900] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 251.084374][ T24] usb 3-1: config 0 interface 125 altsetting 196 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 251.097600][ T5900] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 251.110107][ T24] usb 3-1: config 0 interface 125 altsetting 196 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 251.123598][ T5900] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.134141][ T24] usb 3-1: config 0 interface 125 altsetting 196 has an endpoint descriptor with address 0x28, changing to 0x8 [ 251.147447][ T5900] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 251.158783][ T24] usb 3-1: config 0 interface 125 altsetting 196 endpoint 0x8 has invalid maxpacket 21800, setting to 1024 [ 251.170977][ T5900] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 26159, setting to 1024 [ 251.183709][ T24] usb 3-1: config 0 interface 125 altsetting 196 bulk endpoint 0x8 has invalid maxpacket 1024 [ 251.194823][ T5900] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 251.205981][ T24] usb 3-1: config 0 interface 125 altsetting 196 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 251.219031][ T5900] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.232994][ T24] usb 3-1: config 0 interface 125 altsetting 196 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 251.246999][ T24] usb 3-1: too many endpoints for config 0 interface 78 altsetting 102: 89, using maximum allowed: 30 [ 251.261398][ T24] usb 3-1: config 0 interface 78 altsetting 102 has an invalid descriptor for endpoint zero, skipping [ 251.273768][ T5900] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 251.284914][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.294160][ T5900] usb 2-1: Product: syz [ 251.298485][ T5900] usb 2-1: Manufacturer: syz [ 251.304434][ T24] usb 3-1: config 0 interface 78 altsetting 102 has an endpoint descriptor with address 0x2D, changing to 0xD [ 251.316760][ T5900] usb 2-1: SerialNumber: syz [ 251.326299][ T24] usb 3-1: config 0 interface 78 altsetting 102 endpoint 0xD has an invalid bInterval 230, changing to 7 [ 251.334023][ T10] usb 4-1: USB disconnect, device number 44 [ 251.339762][ T24] usb 3-1: config 0 interface 78 altsetting 102 endpoint 0xD has invalid maxpacket 17562, setting to 1024 [ 251.356286][ T24] usb 3-1: config 0 interface 78 altsetting 102 has an invalid descriptor for endpoint zero, skipping [ 251.368721][ T24] usb 3-1: config 0 interface 78 altsetting 102 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 251.381173][ T24] usb 3-1: config 0 interface 78 altsetting 102 has a duplicate endpoint with address 0x8F, skipping [ 251.400104][ T24] usb 3-1: config 0 interface 78 altsetting 102 has a duplicate endpoint with address 0xB, skipping [ 251.413372][ T5900] usb 2-1: config 0 descriptor?? [ 251.421856][ T8062] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 251.429287][ T8062] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 251.444355][ T5900] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 251.460592][ T5900] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 251.469776][ T24] usb 3-1: config 0 interface 78 altsetting 102 has a duplicate endpoint with address 0x7, skipping [ 251.490046][ T5900] scsi host1: microtekX6 [ 251.504874][ T24] usb 3-1: config 0 interface 78 altsetting 102 has a duplicate endpoint with address 0x4, skipping [ 251.517733][ T24] usb 3-1: config 0 interface 78 altsetting 102 has a duplicate endpoint with address 0x4, skipping [ 251.530019][ T24] usb 3-1: config 0 interface 78 altsetting 102 has 10 endpoint descriptors, different from the interface descriptor's value: 89 [ 251.543994][ T24] usb 3-1: too many endpoints for config 0 interface 220 altsetting 229: 170, using maximum allowed: 30 [ 251.555603][ T24] usb 3-1: config 0 interface 220 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 251.572217][ T24] usb 3-1: config 0 interface 125 has no altsetting 0 [ 251.581760][ T24] usb 3-1: config 0 interface 78 has no altsetting 0 [ 251.588495][ T24] usb 3-1: config 0 interface 220 has no altsetting 0 [ 251.618175][ T24] usb 3-1: New USB device found, idVendor=19d2, idProduct=1065, bcdDevice=b6.ce [ 251.640479][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.648543][ T24] usb 3-1: Product: syz [ 251.669763][ T24] usb 3-1: Manufacturer: syz [ 251.684668][ T24] usb 3-1: SerialNumber: syz [ 251.718476][ T5900] usb 2-1: USB disconnect, device number 50 [ 251.738215][ T24] usb 3-1: config 0 descriptor?? [ 251.759004][ T8060] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 251.991295][ T24] option 3-1:0.125: GSM modem (1-port) converter detected [ 252.062382][ T24] usb 3-1: USB disconnect, device number 36 [ 252.082475][ T24] option 3-1:0.125: device disconnected [ 252.142725][ T5844] Bluetooth: hci2: command tx timeout [ 252.255232][ T8085] pim6reg1: entered promiscuous mode [ 252.260800][ T8085] pim6reg1: entered allmulticast mode [ 252.421964][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.623'. [ 252.584819][ T8104] netlink: 4116 bytes leftover after parsing attributes in process `syz.4.625'. [ 252.980461][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 253.004176][ T803] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 253.016016][ T8132] netlink: 'syz.3.634': attribute type 19 has an invalid length. [ 253.025857][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.634'. [ 253.130444][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 253.137624][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 253.146414][ T10] usb 5-1: config 179 has no interface number 0 [ 253.153337][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 253.164511][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 253.176112][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.187863][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 253.198629][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 253.212428][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 253.221808][ T803] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 253, using maximum allowed: 30 [ 253.233086][ T803] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.243091][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.251172][ T803] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 253.266003][ T803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 253.274572][ T8120] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.280832][ T803] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 253.291646][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.302145][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 253.303351][ T10] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 253.322381][ T803] usb 2-1: config 0 descriptor?? [ 253.440587][ T24] usb 4-1: device descriptor read/64, error -71 [ 253.496989][ T8120] random: crng reseeded on system resumption [ 253.680507][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 253.714367][ T29] audit: type=1326 audit(1771483668.033:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c72f9c629 code=0x0 [ 253.737878][ T8118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.753367][ T803] usbhid 2-1:0.0: can't add hid device: -71 [ 253.759557][ T803] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 253.769382][ T8137] netlink: 'syz.2.635': attribute type 83 has an invalid length. [ 253.783680][ T803] usb 2-1: USB disconnect, device number 51 [ 253.805615][ T5900] usb 5-1: USB disconnect, device number 2 [ 253.831344][ T24] usb 4-1: device descriptor read/64, error -71 [ 253.940872][ T24] usb usb4-port1: attempt power cycle [ 254.220851][ T5844] Bluetooth: hci2: command tx timeout [ 254.280470][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 254.303099][ T24] usb 4-1: device descriptor read/8, error -71 [ 254.362515][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 254.551559][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 254.582633][ T24] usb 4-1: device descriptor read/8, error -71 [ 254.618101][ T8152] random: crng reseeded on system resumption [ 254.693549][ T24] usb usb4-port1: unable to enumerate USB device [ 254.711930][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 254.725843][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 254.735313][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 254.744938][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 254.770455][ T803] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 254.921802][ T803] usb 5-1: Using ep0 maxpacket: 32 [ 254.929086][ T803] usb 5-1: config 0 has an invalid interface number: 72 but max is 0 [ 254.937456][ T803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.947779][ T803] usb 5-1: config 0 has no interface number 0 [ 254.954000][ T803] usb 5-1: config 0 interface 72 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.967039][ T803] usb 5-1: config 0 interface 72 has no altsetting 0 [ 254.976727][ T803] usb 5-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 254.985908][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.994198][ T803] usb 5-1: Product: syz [ 254.998395][ T803] usb 5-1: Manufacturer: syz [ 255.003079][ T803] usb 5-1: SerialNumber: syz [ 255.010126][ T803] usb 5-1: config 0 descriptor?? [ 255.100855][ T24] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 255.227235][ T8146] syzkaller1: entered promiscuous mode [ 255.232924][ T8146] syzkaller1: entered allmulticast mode [ 255.244495][ T8146] usb usb8: usbfs: process 8146 (syz.4.639) did not claim interface 0 before use [ 255.262962][ T24] usb 3-1: config 6 has an invalid interface number: 179 but max is 3 [ 255.271708][ T24] usb 3-1: config 6 has an invalid interface number: 129 but max is 3 [ 255.280137][ T24] usb 3-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 255.309370][ T24] usb 3-1: config 6 has an invalid interface number: 96 but max is 3 [ 255.317876][ T24] usb 3-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 255.328751][ T8169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.340483][ T24] usb 3-1: config 6 has 3 interfaces, different from the descriptor's value: 4 [ 255.345677][ T8169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.359592][ T24] usb 3-1: config 6 has no interface number 0 [ 255.367863][ T24] usb 3-1: config 6 has no interface number 1 [ 255.374185][ T24] usb 3-1: config 6 has no interface number 2 [ 255.380735][ T24] usb 3-1: config 6 interface 179 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 255.392387][ T24] usb 3-1: config 6 interface 129 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 255.403646][ T24] usb 3-1: config 6 interface 129 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 255.417065][ T24] usb 3-1: too many endpoints for config 6 interface 96 altsetting 87: 181, using maximum allowed: 30 [ 255.441759][ T24] usb 3-1: config 6 interface 96 altsetting 87 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 255.472203][ T24] usb 3-1: config 6 interface 96 altsetting 87 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 255.494668][ T24] usb 3-1: config 6 interface 96 altsetting 87 has a duplicate endpoint with address 0xB, skipping [ 255.518501][ T24] usb 3-1: config 6 interface 96 altsetting 87 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 255.542817][ T24] usb 3-1: config 6 interface 96 altsetting 87 has 7 endpoint descriptors, different from the interface descriptor's value: 181 [ 255.570471][ T24] usb 3-1: config 6 interface 179 has no altsetting 0 [ 255.577356][ T24] usb 3-1: config 6 interface 129 has no altsetting 0 [ 255.600399][ T24] usb 3-1: config 6 interface 96 has no altsetting 0 [ 255.618122][ T24] usb 3-1: New USB device found, idVendor=1110, idProduct=9022, bcdDevice=27.a2 [ 255.627502][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.635608][ T24] usb 3-1: Product: syz [ 255.639804][ T24] usb 3-1: Manufacturer: syz [ 255.644484][ T24] usb 3-1: SerialNumber: syz [ 255.871895][ T24] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9022) Rev (0X27A2): Eagle II [ 256.280787][ T8188] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 256.280787][ T8188] The task syz.3.651 (8188) triggered the difference, watch for misbehavior. [ 256.756821][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'. [ 256.878517][ T24] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 256.966639][ T24] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 256.980656][ T5900] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 257.005154][ T5900] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 257.137667][ T24] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9022) Rev (0X27A2): Eagle II [ 257.160993][ T24] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 257.179188][ T24] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 257.197644][ T24] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9022) Rev (0X27A2): Eagle II [ 257.208217][ T24] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 257.233091][ T24] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 257.267813][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 257.281031][ T24] usb 3-1: USB disconnect, device number 37 [ 257.929665][ T24] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 258.097013][ T24] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 258.120811][ T24] usb 3-1: config 0 has no interface number 0 [ 258.157374][ T24] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 258.172273][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.200466][ T24] usb 3-1: Product: syz [ 258.215040][ T24] usb 3-1: Manufacturer: syz [ 258.219720][ T24] usb 3-1: SerialNumber: syz [ 258.261550][ T24] usb 3-1: config 0 descriptor?? [ 258.375090][ T803] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.382639][ T803] usb 5-1: MIDIStreaming interface descriptor not found [ 258.511153][ T803] usb 5-1: USB disconnect, device number 3 [ 258.604936][ T8216] udevd[8216]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.72/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.685418][ T24] usb 3-1: Firmware: major: 0, minor: 6, hardware type: ATUSB (0) [ 258.721699][ T5869] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 258.787358][ T8219] IPv6: syztnl0: Disabled Multicast RS [ 258.895643][ T24] usb 3-1: failed to fetch extended address, random address set [ 258.909184][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 258.935410][ T5869] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 258.957913][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.969998][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 258.980116][ T5869] usb 2-1: Product: syz [ 258.988127][ T5869] usb 2-1: Manufacturer: syz [ 258.997845][ T5869] usb 2-1: SerialNumber: syz [ 259.014155][ T5869] usb 2-1: config 0 descriptor?? [ 259.030568][ T24] usb 3-1: USB disconnect, device number 38 [ 259.053882][ T5869] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 259.094724][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 259.124762][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 259.149627][ T8233] netlink: 116 bytes leftover after parsing attributes in process `syz.4.665'. [ 259.160155][ T5869] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 259.169857][ T5869] usb 2-1: media controller created [ 259.250222][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.304032][ T5869] cxusb: set interface failed [ 259.308822][ T5869] dvb-usb: bulk message failed: -22 (1/0) [ 259.447048][ T5869] DVB: Unable to find symbol mt352_attach() [ 259.464352][ T5869] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 259.602055][ T5869] rc_core: IR keymap rc-dvico-portable not found [ 259.614178][ T5869] Registered IR keymap rc-empty [ 259.631547][ T5869] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 259.683733][ T5869] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input18 [ 259.722840][ T5869] dvb-usb: schedule remote query interval to 100 msecs. [ 259.734962][ T5869] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 259.764103][ T5869] usb 2-1: USB disconnect, device number 52 [ 259.996356][ T5869] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 260.287289][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 260.446827][ T5844] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 261.864886][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88803138c000 (11)(syzkaller0) start [ 261.889496][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88803138c000 (6)(syzkaller0) end [ 262.056968][ T8282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.077336][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.088341][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.312864][ T803] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 262.450523][ T803] usb 3-1: device descriptor read/64, error -71 [ 262.550462][ T5821] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 262.616836][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 262.700745][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 262.706048][ T803] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 262.716667][ T5821] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 262.727777][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.739711][ T8298] tipc: Enabling of bearer rejected, media not registered [ 262.749061][ T5821] usb 5-1: config 0 descriptor?? [ 262.762007][ T5821] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 262.778993][ T5821] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 262.798801][ T5821] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 262.806202][ T5821] usb 5-1: media controller created [ 262.827209][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.850438][ T803] usb 3-1: device descriptor read/64, error -71 [ 262.858977][ T5821] usb 5-1: selecting invalid altsetting 1 [ 262.869771][ T5821] set interface failed [ 262.870192][ T5821] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 262.882265][ T5821] error writing reg: 0xff, val: 0x00 [ 262.933827][ T5821] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 262.971726][ T803] usb usb3-port1: attempt power cycle [ 263.034681][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 263.247787][ T8316] usb usb7: usbfs: process 8316 (syz.3.692) did not claim interface 0 before use [ 263.300793][ T5869] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 263.310529][ T803] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 263.331096][ T803] usb 3-1: device descriptor read/8, error -71 [ 263.441493][ T5869] usb 2-1: device descriptor read/64, error -71 [ 263.500541][ T24] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 263.581561][ T803] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 263.601192][ T803] usb 3-1: device descriptor read/8, error -71 [ 263.652171][ T24] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 263.660677][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.671271][ T24] usb 4-1: config 0 has no interface number 0 [ 263.677652][ T24] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 263.689493][ T24] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 263.699652][ T5869] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 263.707399][ T24] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 263.719441][ T24] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 263.722009][ T803] usb usb3-port1: unable to enumerate USB device [ 263.733214][ T24] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 263.749247][ T24] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 263.762293][ T24] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 263.771482][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.779705][ T24] usb 4-1: Product: syz [ 263.784204][ T24] usb 4-1: Manufacturer: syz [ 263.788863][ T24] usb 4-1: SerialNumber: syz [ 263.796910][ T24] usb 4-1: config 0 descriptor?? [ 263.804832][ T8316] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 263.815073][ T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 130 is not bulk. [ 263.825071][ T24] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 263.860551][ T5869] usb 2-1: device descriptor read/64, error -71 [ 263.970883][ T5869] usb usb2-port1: attempt power cycle [ 264.310462][ T5869] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 264.330967][ T5869] usb 2-1: device descriptor read/8, error -71 [ 264.560816][ T24] usb 4-1: USB disconnect, device number 49 [ 264.570498][ T5869] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 264.612265][ T5869] usb 2-1: device descriptor read/8, error -71 [ 264.720746][ T5869] usb usb2-port1: unable to enumerate USB device [ 265.103333][ T58] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805af38000 (13)(syzkaller1) start [ 265.123896][ T58] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805af38000 (10)(syzkaller1) end [ 265.254883][ T24] usb 5-1: USB disconnect, device number 4 [ 265.410653][ T803] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 265.564592][ T803] usb 4-1: config 0 has an invalid interface number: 158 but max is 0 [ 265.573528][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.588951][ T803] usb 4-1: config 0 has no interface number 0 [ 265.595908][ T803] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=be.65 [ 265.606212][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.631203][ T803] usb 4-1: config 0 descriptor?? [ 265.648733][ T803] usb 4-1: unknown interface protocol 0xea, assuming v1 [ 265.656363][ T803] usb 4-1: 158:1 : does not exist [ 265.661936][ T803] usb 4-1: 158:0 : does not exist [ 265.848069][ T5869] usb 4-1: USB disconnect, device number 50 [ 265.930610][ T803] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 266.080410][ T803] usb 5-1: Using ep0 maxpacket: 32 [ 266.089873][ T803] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 266.099594][ T803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.099623][ T803] usb 5-1: config 0 has no interface number 0 [ 266.099666][ T803] usb 5-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.099695][ T803] usb 5-1: config 0 interface 12 has no altsetting 0 [ 266.102697][ T803] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 266.102727][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.102749][ T803] usb 5-1: Product: syz [ 266.102765][ T803] usb 5-1: Manufacturer: syz [ 266.102780][ T803] usb 5-1: SerialNumber: syz [ 266.114428][ T803] usb 5-1: config 0 descriptor?? [ 266.135967][ T803] f81534 5-1:0.12: required endpoints missing [ 266.327406][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.343855][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.356708][ T803] usb 5-1: USB disconnect, device number 5 [ 266.703123][ T29] audit: type=1326 audit(1771483681.013:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847259c629 code=0x7ffc0000 [ 266.740623][ T29] audit: type=1326 audit(1771483681.013:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847259c629 code=0x7ffc0000 [ 266.764486][ T29] audit: type=1326 audit(1771483681.053:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f847259c629 code=0x7ffc0000 [ 266.809754][ T29] audit: type=1326 audit(1771483681.053:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847259c629 code=0x7ffc0000 [ 266.833057][ T29] audit: type=1326 audit(1771483681.053:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847259c629 code=0x7ffc0000 [ 267.060052][ T8378] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 269.720484][ T8365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.883282][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 270.164523][ T8441] netlink: 14 bytes leftover after parsing attributes in process `syz.4.745'. [ 270.601640][ T8464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'. [ 272.171178][ T29] audit: type=1326 audit(1771483686.493:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c72f9c629 code=0x7ffc0000 [ 272.244971][ T29] audit: type=1326 audit(1771483686.493:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c72f9c629 code=0x7ffc0000 [ 272.289961][ T8515] batadv_slave_1: entered promiscuous mode [ 272.301504][ T8514] batadv_slave_1: left promiscuous mode [ 272.323362][ T29] audit: type=1326 audit(1771483686.523:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c72f9c629 code=0x7ffc0000 [ 272.375379][ T29] audit: type=1326 audit(1771483686.523:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c72f9c629 code=0x7ffc0000 [ 272.415792][ T29] audit: type=1326 audit(1771483686.523:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c72f9c629 code=0x7ffc0000 [ 272.438741][ T29] audit: type=1326 audit(1771483686.523:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c72f9c629 code=0x7ffc0000 [ 272.469128][ T29] audit: type=1326 audit(1771483686.523:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c72f9c629 code=0x7ffc0000 [ 272.493044][ T29] audit: type=1326 audit(1771483686.523:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c72f9c629 code=0x7ffc0000 [ 272.520851][ T8520] sctp: [Deprecated]: syz.3.781 (pid 8520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.520851][ T8520] Use struct sctp_sack_info instead [ 272.540595][ T29] audit: type=1326 audit(1771483686.523:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0c72f9c629 code=0x7ffc0000 [ 272.581919][ T29] audit: type=1326 audit(1771483686.523:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0c72f9c629 code=0x7ffc0000 [ 272.699890][ T8526] usb usb7: usbfs: process 8526 (syz.4.783) did not claim interface 63 before use [ 272.855477][ T8534] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.787' resets device [ 272.888139][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'. [ 274.420614][ T5821] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 274.595102][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 274.602913][ T5821] usb 5-1: no configurations [ 274.607568][ T5821] usb 5-1: can't read configurations, error -22 [ 274.760425][ T5821] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 274.935278][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 274.943521][ T5821] usb 5-1: no configurations [ 274.948187][ T5821] usb 5-1: can't read configurations, error -22 [ 274.961393][ T5821] usb usb5-port1: attempt power cycle [ 275.320492][ T5821] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 275.351031][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 275.357457][ T5821] usb 5-1: no configurations [ 275.362413][ T5821] usb 5-1: can't read configurations, error -22 [ 275.511376][ T5821] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 275.531134][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 275.537713][ T5821] usb 5-1: no configurations [ 275.542503][ T5821] usb 5-1: can't read configurations, error -22 [ 275.549214][ T5821] usb usb5-port1: unable to enumerate USB device [ 276.917883][ T8591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.930559][ T8649] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.838'. [ 277.174616][ T8661] team0: No ports can be present during mode change [ 277.426637][ T987] IPVS: starting estimator thread 0... [ 277.520567][ T8675] IPVS: using max 29 ests per chain, 69600 per kthread [ 277.594593][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802a6d4000 (14)(netdevsim3) start [ 277.629109][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802a6d4000 (14)(netdevsim3) end [ 277.651230][ T8681] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.757978][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807d928000 (16)(netdevsim2) start [ 277.775663][ T8681] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.788595][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807d928000 (11)(netdevsim2) end [ 277.899156][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807d92c000 (16)(netdevsim1) start [ 277.911137][ T8681] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.968776][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807d92c000 (4)(netdevsim1) end [ 278.072672][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c2ec000 (13)(netdevsim0) start [ 278.094385][ T8681] team0: Port device netdevsim0 removed [ 278.114106][ T8681] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.126758][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805c2ec000 (12)(netdevsim0) end [ 278.191731][ T8705] netlink: 'syz.1.865': attribute type 4 has an invalid length. [ 278.207536][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 278.295513][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.339514][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.415037][ T35] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.454796][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.698995][ T8726] delete_channel: no stack [ 278.899290][ T8739] program syz.2.880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.226510][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888077620000 (7)(syzkaller1) start [ 279.261819][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888077620000 (5)(syzkaller1) end [ 279.668255][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807cc14000 (12)(rose0) start [ 279.711561][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88807cc14000 (4)(rose0) end [ 280.241335][ T8794] netlink: 128 bytes leftover after parsing attributes in process `syz.4.906'. [ 280.250920][ T8794] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 280.505382][ T8806] netlink: 'syz.3.912': attribute type 3 has an invalid length. [ 280.516478][ T8806] netlink: 'syz.3.912': attribute type 3 has an invalid length. [ 280.526225][ T8806] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 280.559196][ T8806] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.598171][ T8806] bond0: (slave team0): Enslaving as an active interface with an up link [ 280.644350][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 280.704938][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 280.825352][ T8821] vcan0 speed is unknown, defaulting to 1000 [ 281.090873][ T5869] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 281.240457][ T5869] usb 2-1: device descriptor read/64, error -71 [ 281.327180][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.929'. [ 281.480460][ T5869] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 281.631071][ T5869] usb 2-1: device descriptor read/64, error -71 [ 281.760842][ T5869] usb usb2-port1: attempt power cycle [ 282.130722][ T5869] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 282.151132][ T5869] usb 2-1: device descriptor read/8, error -71 [ 282.390790][ T5869] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 282.434522][ T5869] usb 2-1: device descriptor read/8, error -71 [ 282.557018][ T5869] usb usb2-port1: unable to enumerate USB device [ 283.836431][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880678ca000 (11)(erspan0) start [ 283.896506][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880678ca000 (4)(erspan0) end [ 283.940822][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888025c46000 (3)(gretap0) start [ 283.983552][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888025c46000 (3)(gretap0) end [ 284.806707][ T8975] tipc: Started in network mode [ 284.811795][ T8975] tipc: Node identity 7f000001, cluster identity 4711 [ 284.819200][ T8975] tipc: Enabling of bearer rejected, failed to enable media [ 285.230962][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88806b144000 (15)(syzkaller1) start [ 285.259068][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88806b144000 (7)(syzkaller1) end [ 285.596663][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88806b144000 (15)(syzkaller0) start [ 285.630474][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88806b144000 (4)(syzkaller0) end [ 286.199558][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'. [ 286.213915][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 287.926231][ T8980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.524494][ T9090] netlink: 'syz.3.1041': attribute type 6 has an invalid length. [ 290.105891][ T9160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1073'. [ 290.748229][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 291.288537][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 291.288559][ T29] audit: type=1326 audit(2000000010.860:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54af9c629 code=0x7ffc0000 [ 291.323120][ T29] audit: type=1326 audit(2000000010.860:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54af9c629 code=0x7ffc0000 [ 291.421310][ T29] audit: type=1326 audit(2000000010.860:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fb54af9c629 code=0x7ffc0000 [ 291.444123][ T29] audit: type=1326 audit(2000000010.860:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54af9c629 code=0x7ffc0000 [ 291.707829][ T29] audit: type=1326 audit(2000000010.860:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54af9c629 code=0x7ffc0000 [ 292.835354][ T9279] vcan0 speed is unknown, defaulting to 1000 [ 293.053308][ T9294] netlink: 412 bytes leftover after parsing attributes in process `syz.3.1137'. [ 293.820561][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 293.993868][ T9329] tipc: Started in network mode [ 293.998813][ T9329] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 294.016756][ T9329] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 294.028638][ T9329] tipc: Enabled bearer , priority 10 [ 294.142672][ T5821] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 294.340408][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 294.349297][ T5821] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 294.373820][ T5821] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 294.393680][ T5821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.408531][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1158'. [ 294.410513][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.437042][ T5821] usb 2-1: Product: ꤯賱厹ᨨ⽢㴵錜壛糤↎䁹㖇ꟾ酇祉㯲ยỻ킔윆膫⼙봡ꦤɄ嫓窲六ἢ퇘㒭墝䀋▤❉埒ᶉ嶒줆ダᔃ쐺⾒뷚噕瓚፶鸢䈱掝휞凝藨팣蠔ὀᆂ媇쵬⏠꺮ꮨ丂룓呐품蘀攖趫吆툏䘌郎駹ꕿ睔 [ 294.486181][ T5821] usb 2-1: Manufacturer: 、 [ 294.510771][ T5821] usb 2-1: SerialNumber: syz [ 294.694616][ T9358] binfmt_misc: register: failed to install interpreter file ./file0 [ 294.759822][ T29] audit: type=1326 audit(2000000014.340:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.4.1165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb54af9c629 code=0x0 [ 294.956560][ T5821] cdc_ncm 2-1:1.0: bind() failure [ 294.974359][ T5821] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 294.990431][ T5821] cdc_ncm 2-1:1.1: bind() failure [ 295.018307][ T5821] usb 2-1: USB disconnect, device number 61 [ 295.140517][ T987] tipc: Node number set to 1 [ 295.165047][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880791e0000 (11)(pimreg0) start [ 295.194569][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff8880791e0000 (3)(pimreg0) end [ 296.777506][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888033528000 (11)(erspan0) start [ 296.819537][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888033528000 (4)(erspan0) end [ 296.847510][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805849c000 (4)(gretap0) start [ 296.877196][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88805849c000 (3)(gretap0) end [ 298.699757][ T9492] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1224'. [ 300.015500][ T29] audit: type=1326 audit(2000000019.600:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.4.1240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb54af9c629 code=0x0 [ 302.213099][ T9565] syzkaller1: entered promiscuous mode [ 302.228137][ T9565] syzkaller1: entered allmulticast mode [ 304.014342][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1265'. [ 304.474518][ T9598] vcan0 speed is unknown, defaulting to 1000 [ 305.118976][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802a126000 (11)(erspan0) start [ 305.152339][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff88802a126000 (4)(erspan0) end [ 305.193461][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888076c30000 (3)(gretap0) start [ 305.216168][ T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888032c28000 (14)(syz1) rdma_ndev=ffff8880122e8000 (19)(vcan0) cookie=ffff888076c30000 (3)(gretap0) end [ 305.346830][ T9607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.368991][ T9607] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 305.432580][ T9607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 305.450533][ T9607] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 305.479259][ T9607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 305.490558][ T9607] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 305.561604][ T9607] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 305.594808][ T9646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1286'. [ 306.620502][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 307.502667][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 307.508856][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 308.458877][ T9793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1355'. [ 308.700863][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 308.730132][ T9807] ------------[ cut here ]------------ [ 308.735751][ T9807] old_ns_root->mnt_id_unique != 1 [ 308.735787][ T9807] WARNING: fs/namespace.c:3112 at vfs_open_tree+0xf35/0xfb0, CPU#0: syz.2.1363/9807 [ 308.750557][ T9807] Modules linked in: [ 308.754551][ T9807] CPU: 0 UID: 0 PID: 9807 Comm: syz.2.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.765504][ T9807] Tainted: [L]=SOFTLOCKUP [ 308.769998][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.780159][ T9807] RIP: 0010:vfs_open_tree+0xf35/0xfb0 [ 308.785682][ T9807] Code: 36 78 ff 49 bf 00 00 00 00 00 fc ff df e9 1e fb ff ff e8 2e 36 78 ff 4d 63 ee 4c 8b 64 24 08 e9 64 ff ff ff e8 1c 36 78 ff 90 <0f> 0b 90 e9 d1 f5 ff ff e8 0e 36 78 ff 90 0f 0b 90 e9 18 f6 ff ff [ 308.805424][ T9807] RSP: 0018:ffffc9000ced7d80 EFLAGS: 00010283 [ 308.811581][ T9807] RAX: ffffffff824dbc74 RBX: 0000000080000065 RCX: 0000000000080000 [ 308.819649][ T9807] RDX: ffffc9000c8b9000 RSI: 00000000000000fc RDI: 00000000000000fd [ 308.828032][ T9807] RBP: ffffc9000ced7eb0 R08: ffffffff8e7fa2eb R09: 1ffffffff1cff45d [ 308.836568][ T9807] R10: dffffc0000000000 R11: fffffbfff1cff45e R12: ffff888034f8e000 [ 308.844894][ T9807] R13: 0000000000009902 R14: ffff888079580900 R15: dffffc0000000000 [ 308.852979][ T9807] FS: 00007f0c73e4b6c0(0000) GS:ffff888124fff000(0000) knlGS:0000000000000000 [ 308.862017][ T9807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.868674][ T9807] CR2: 000000110c30540f CR3: 000000005ba06000 CR4: 00000000003526f0 [ 308.876850][ T9807] Call Trace: [ 308.880292][ T9807] [ 308.883338][ T9807] ? __pfx_vfs_open_tree+0x10/0x10 [ 308.888599][ T9807] ? _raw_spin_unlock+0x28/0x50 [ 308.893561][ T9807] ? alloc_fd+0x64b/0x6c0 [ 308.897972][ T9807] __x64_sys_open_tree+0x96/0x110 [ 308.903119][ T9807] do_syscall_64+0x14d/0xf80 [ 308.907761][ T9807] ? trace_irq_disable+0x3b/0x150 [ 308.912896][ T9807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.919135][ T9807] ? clear_bhb_loop+0x40/0x90 [ 308.923948][ T9807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.930073][ T9807] RIP: 0033:0x7f0c72f9c629 [ 308.934943][ T9807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.954694][ T9807] RSP: 002b:00007f0c73e4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 308.963229][ T9807] RAX: ffffffffffffffda RBX: 00007f0c73215fa0 RCX: 00007f0c72f9c629 [ 308.971396][ T9807] RDX: 0000000000009902 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 308.979430][ T9807] RBP: 00007f0c73032b39 R08: 0000000000000000 R09: 0000000000000000 [ 308.987824][ T9807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.996043][ T9807] R13: 00007f0c73216038 R14: 00007f0c73215fa0 R15: 00007fffb985dbf8 [ 309.004154][ T9807] [ 309.007233][ T9807] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 309.014562][ T9807] CPU: 0 UID: 0 PID: 9807 Comm: syz.2.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.025512][ T9807] Tainted: [L]=SOFTLOCKUP [ 309.029890][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.039990][ T9807] Call Trace: [ 309.043314][ T9807] [ 309.046283][ T9807] vpanic+0x56c/0xa60 [ 309.050424][ T9807] ? __pfx__printk+0x10/0x10 [ 309.055152][ T9807] ? __pfx_vpanic+0x10/0x10 [ 309.059714][ T9807] ? is_bpf_text_address+0x292/0x2b0 [ 309.065046][ T9807] ? is_bpf_text_address+0x26/0x2b0 [ 309.070330][ T9807] panic+0xc5/0xd0 [ 309.074110][ T9807] ? __pfx_panic+0x10/0x10 [ 309.078595][ T9807] __warn+0x315/0x4f0 [ 309.082621][ T9807] ? vfs_open_tree+0xf35/0xfb0 [ 309.087444][ T9807] ? vfs_open_tree+0xf35/0xfb0 [ 309.092289][ T9807] __report_bug+0x29a/0x540 [ 309.096863][ T9807] ? vfs_open_tree+0xf35/0xfb0 [ 309.101674][ T9807] ? __pfx___report_bug+0x10/0x10 [ 309.106779][ T9807] ? ida_alloc_range+0x832/0x870 [ 309.111772][ T9807] ? __pfx_ida_alloc_range+0x10/0x10 [ 309.117184][ T9807] ? vfs_open_tree+0xf35/0xfb0 [ 309.121969][ T9807] report_bug+0x16a/0x220 [ 309.126337][ T9807] ? vfs_open_tree+0xf35/0xfb0 [ 309.131117][ T9807] ? vfs_open_tree+0xf37/0xfb0 [ 309.135910][ T9807] handle_bug+0x98/0x200 [ 309.140192][ T9807] exc_invalid_op+0x1a/0x50 [ 309.144739][ T9807] asm_exc_invalid_op+0x1a/0x20 [ 309.149624][ T9807] RIP: 0010:vfs_open_tree+0xf35/0xfb0 [ 309.155039][ T9807] Code: 36 78 ff 49 bf 00 00 00 00 00 fc ff df e9 1e fb ff ff e8 2e 36 78 ff 4d 63 ee 4c 8b 64 24 08 e9 64 ff ff ff e8 1c 36 78 ff 90 <0f> 0b 90 e9 d1 f5 ff ff e8 0e 36 78 ff 90 0f 0b 90 e9 18 f6 ff ff [ 309.174676][ T9807] RSP: 0018:ffffc9000ced7d80 EFLAGS: 00010283 [ 309.180867][ T9807] RAX: ffffffff824dbc74 RBX: 0000000080000065 RCX: 0000000000080000 [ 309.188928][ T9807] RDX: ffffc9000c8b9000 RSI: 00000000000000fc RDI: 00000000000000fd [ 309.196925][ T9807] RBP: ffffc9000ced7eb0 R08: ffffffff8e7fa2eb R09: 1ffffffff1cff45d [ 309.204919][ T9807] R10: dffffc0000000000 R11: fffffbfff1cff45e R12: ffff888034f8e000 [ 309.212933][ T9807] R13: 0000000000009902 R14: ffff888079580900 R15: dffffc0000000000 [ 309.220935][ T9807] ? vfs_open_tree+0xf34/0xfb0 [ 309.225751][ T9807] ? __pfx_vfs_open_tree+0x10/0x10 [ 309.230882][ T9807] ? _raw_spin_unlock+0x28/0x50 [ 309.235783][ T9807] ? alloc_fd+0x64b/0x6c0 [ 309.240155][ T9807] __x64_sys_open_tree+0x96/0x110 [ 309.245917][ T9807] do_syscall_64+0x14d/0xf80 [ 309.250538][ T9807] ? trace_irq_disable+0x3b/0x150 [ 309.255606][ T9807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.261699][ T9807] ? clear_bhb_loop+0x40/0x90 [ 309.266400][ T9807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.272321][ T9807] RIP: 0033:0x7f0c72f9c629 [ 309.276847][ T9807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.296480][ T9807] RSP: 002b:00007f0c73e4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 309.304952][ T9807] RAX: ffffffffffffffda RBX: 00007f0c73215fa0 RCX: 00007f0c72f9c629 [ 309.312949][ T9807] RDX: 0000000000009902 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 309.320954][ T9807] RBP: 00007f0c73032b39 R08: 0000000000000000 R09: 0000000000000000 [ 309.328947][ T9807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.337025][ T9807] R13: 00007f0c73216038 R14: 00007f0c73215fa0 R15: 00007fffb985dbf8 [ 309.345032][ T9807] [ 309.348779][ T9807] Kernel Offset: disabled [ 309.353113][ T9807] Rebooting in 86400 seconds..