last executing test programs: 13m13.213641459s ago: executing program 2 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000c8", @ANYRES16=r1, @ANYBLOB="040025bd7000ffdbdf250100000014000900fe8000000000000000000000000000aa0500020002000000060001004e230000"], 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) read(r2, &(0x7f0000000100)=""/4, 0x4) keyctl$session_to_parent(0x12) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x440d0}, 0x802) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r4, 0x29, 0x18, 0x0, 0x4c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x7afd247d, 0x0, 0xfffff7ffffffffff}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x8dc, 0x0, 0x8}, {0xe8f}, 0x0, 0x6e6bb8, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x2b}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x3, 0x1e}}, 0xe8) r7 = fcntl$dupfd(r0, 0x0, r0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020101010000000000000000020000050c0019800800020005000000180002801400018008000100", @ANYRES32=r8], 0x38}, 0x1, 0x0, 0x0, 0x4008084}, 0x44080) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @random="31ff066cc57a"}) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x30, r14, 0x1, 0x20, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) write$UHID_INPUT(r7, &(0x7f0000000c00)={0x8, {"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", 0x1000}}, 0x1006) 13m9.737314435s ago: executing program 2 (id=1291): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x7ffe) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d01090050001180"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) read$usbmon(r2, &(0x7f0000000280)=""/71, 0x47) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r6 = syz_clone(0xd8200800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000380)={0x0, 0xc, 0x12, 0x2, 0x6, 0x0, 0xfffffffd}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400ff2d7cd70000150a0104000000610e0000000100000908000340000000030900010073797a300033ce8d260000000900020073797a32f4f9b80c6d2543f18f486cf1f722f7f152660c74aacf45894b466af830e8f6087e3f6607d9c1d00df8c887ab09decd1e42b00e1320de636dac8f0140505f176fb57a9f2dcd5f5442eae52b576719bc91aca8ef96e76d2e97d887b728140b53c55e2b4b89537102cca6f1c71414"], 0x34}, 0x1, 0x0, 0x0, 0x4040004}, 0x4004) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000080)={0x0, 0x300}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r8, 0xc0305302, &(0x7f0000000200)={0x80000000, 0x9, 0x80000001, 0xfff, 0x10000, 0x2}) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) recvmsg(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000080)=[{&(0x7f0000002640)=""/4094, 0x1000}]}, 0x40000122) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) 13m9.726323134s ago: executing program 2 (id=1292): mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x402}) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x80885659, 0x0) 13m9.679710388s ago: executing program 2 (id=1293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000069c0)={0x0, 0x0, &(0x7f0000006980)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x40840}, 0x24000014) 13m9.593820231s ago: executing program 2 (id=1294): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x5, 0x80) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000280)) close_range(r0, r0, 0x2) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d486100009058acf", @ANYRESOCT=0x0], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000800)) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x0, 0x11, r0, 0x83000000) 13m9.203483172s ago: executing program 2 (id=1296): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x80c4, 0x19, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000001c0), 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x4004480f, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYRES64=0x0], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 13m9.060937906s ago: executing program 32 (id=1296): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x80c4, 0x19, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000001c0), 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x4004480f, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYRES64=0x0], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 12m19.730227762s ago: executing program 3 (id=1615): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x0, {0xb9e, 0x1, "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", 0x40, 0x80, 0x1, 0x8, 0x9, 0x1, 0x7e}, r2}}, 0x128) syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x1, 0xae, 0x55, 0x20, 0x5ac, 0x259, 0xadce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0xa9, 0xa, 0x0, 0x3, 0x67, 0x2, 0x2}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) 12m19.178189817s ago: executing program 3 (id=1618): fsmount(0xffffffffffffffff, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}], 0x54) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r4, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314770026bd7000fbdbdf2509000200f3797a3200000000080041007369770014003300776c616e3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x48049}, 0x800) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 12m18.263966673s ago: executing program 3 (id=1621): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) unshare(0x6a040000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='openpromfs\x00', 0x10000, &(0x7f0000000300)='ethtool\x00') r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000200)=0x5) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000900)='@', 0x1}], 0x1) setns(r3, 0x24020000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf252800000008000700b50000001800018014000200776c616e3000000000000000000000000800084436b829687d14548f41423c4bc474d73de31c04ac88a9de310b8906f6f61029287a5fa1ccf24c083c1e94d470e71a9608c9ae3c75bd96b15838b29e598be15f09a99d4b85486c793efa7338a7196c6c54f838e66a73864e272f0f2da9df5d930cb087ea4ee115fc263988b539dfd3628ca5cc155a4cb98f06a2d0f3f70dd03c5a92f6a6b45fcdbf9f016dfaa71c1988fdef0de9f87d8a08eee99119d0b3"], 0x3c}}, 0x80081) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x200005, 0x7e}, 0x20) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140)=0x17, 0x4) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 12m17.513227579s ago: executing program 3 (id=1623): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0x6, 0x8, 0x7f, 0x7}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7}) close(r7) close_range(r3, 0xffffffffffffffff, 0x0) r8 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r8, 0xffffffff80000600, 0xee01, &(0x7f0000000300)={0x579147f3, 0x7, 0x1, 0x7}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000240)={0x2, 0x3}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000200)=0x8) 12m17.304908763s ago: executing program 3 (id=1624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380), 0x8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b0528bd7000fedbd02d74c6000008000600ac1414bb08000b", @ANYRES32=0x0, @ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0x24014000}, 0x20008801) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0xc09, 0x6548, 0x1, 0x8, 0xb, 0x5, 0x2, 0x64d9}, 0x20) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) close(r5) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x4040014) 12m15.749681799s ago: executing program 3 (id=1632): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000400000000000000008000f0001000000", 0x24) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000240)={r4, r5, 0x0, 0x0, 0x2c1}) close_range(r2, 0xffffffffffffffff, 0x0) 12m15.43689205s ago: executing program 33 (id=1632): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000400000000000000008000f0001000000", 0x24) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000240)={r4, r5, 0x0, 0x0, 0x2c1}) close_range(r2, 0xffffffffffffffff, 0x0) 3.809632224s ago: executing program 4 (id=6800): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, 0x0) 3.781424512s ago: executing program 4 (id=6801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x40c0080) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.707376431s ago: executing program 4 (id=6802): r0 = socket$netlink(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 3.682651039s ago: executing program 4 (id=6804): socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r2, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x2c, @f={0x37, 0x3, 0x2, 0x10, {0x4, 0x26, "c5ef68305d79d0e42e4c82aa1690dd5182e3022c7ff57d2c159cf3380dec4d49dd14a6af8035"}, 0x2}}, 0x30) 3.305254521s ago: executing program 1 (id=6814): r0 = socket$netlink(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 2.469203521s ago: executing program 0 (id=6817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 2.414425994s ago: executing program 0 (id=6819): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) flock(r0, 0x5) 2.405601363s ago: executing program 5 (id=6820): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, 0x0) 2.352692393s ago: executing program 5 (id=6821): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 2.27424645s ago: executing program 5 (id=6822): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000008040), 0x0, 0x86000) fadvise64(r2, 0x2, 0x80, 0x7) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000000008000400010000", 0x23) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000380)={'ipvlan0\x00', 0x1}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x2, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x40000) 2.235231721s ago: executing program 5 (id=6823): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x200fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.466047555s ago: executing program 0 (id=6824): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xc0) 1.398338241s ago: executing program 0 (id=6825): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000080000000000000000000000000008001f0003"], 0xc0}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 520.687591ms ago: executing program 0 (id=6826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x90, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @val, @void, @val={0x3, 0x1, 0xb5}, @void, @val={0x6, 0x2, 0xe}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0x30, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0xb}}, @val={0x76, 0x6, {0x4, 0x2, 0x7, 0x5}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x24000080) 368.597397ms ago: executing program 1 (id=6827): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 292.684354ms ago: executing program 4 (id=6828): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000540)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 273.459112ms ago: executing program 5 (id=6829): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f021}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0x4, [0xa8, 0x0, 0x3, 0x9, 0x6e45, 0x4, 0x4, 0x3, 0xf800, 0x8000, 0xfe01, 0x3ff, 0x817e, 0x4, 0x68d, 0xd1d, 0x9, 0x1ff, 0x8, 0x9, 0x0, 0x2454, 0x2d64, 0x81, 0x3, 0xfff7, 0x8ba7, 0x6, 0x5, 0x4, 0xed3d, 0xa, 0x5, 0x0, 0xff, 0x7ff, 0x9, 0xf, 0x7, 0x5, 0x21b, 0x2dc2, 0x0, 0x0, 0xa6, 0xb4, 0x1ff], 0xc}}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x1, 0x100, 0x0, {0x4, 0x300, 0x0, 0x800002fc}}) 249.220745ms ago: executing program 1 (id=6830): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000300)=0x5) 223.139386ms ago: executing program 0 (id=6831): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r0 = socket(0x14, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x400261f3, &(0x7f00000004c0)={'vxcan0\x00'}) 222.954489ms ago: executing program 4 (id=6832): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) flock(r3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 162.814166ms ago: executing program 1 (id=6833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x4000002) 105.960185ms ago: executing program 5 (id=6834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x5fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 92.791456ms ago: executing program 1 (id=6835): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) 0s ago: executing program 1 (id=6836): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): ed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1025.458856][ T5883] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:10:84:db:08:96 [ 1025.475788][ T5883] usb 6-1: USB disconnect, device number 126 [ 1025.483025][ T5883] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1025.498258][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 1025.505034][ T5862] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.516402][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880460cc000 (9)(eth5) start [ 1025.523417][ T5862] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1025.537014][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880460cc000 (4)(eth5) end [ 1025.557070][ T5862] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1025.570497][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.579946][ T5862] usb 2-1: Product: syz [ 1025.584942][ T5883] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1025.597601][ T5883] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1025.608575][ T5862] usb 2-1: Manufacturer: syz [ 1025.613435][ T5862] usb 2-1: SerialNumber: syz [ 1025.618242][ T5883] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1025.848006][ T5862] usb 2-1: 0:2 : does not exist [ 1025.862284][ T5862] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1025.894723][ T5862] usb 2-1: USB disconnect, device number 55 [ 1025.919251][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1026.346404][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1026.360071][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1026.370862][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1026.390609][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1026.402048][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1026.577460][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888043e84000 (13)(netdevsim3) start [ 1026.601882][T24253] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.617959][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888043e84000 (7)(netdevsim3) end [ 1026.766329][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804db70000 (16)(netdevsim2) start [ 1026.768367][T24253] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.784124][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804db70000 (9)(netdevsim2) end [ 1026.819039][T24484] wlan1 speed is unknown, defaulting to 1000 [ 1026.903886][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88802e744000 (16)(netdevsim1) start [ 1026.905247][T24253] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.933761][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88802e744000 (11)(netdevsim1) end [ 1027.023651][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f5bc000 (16)(netdevsim0) start [ 1027.025109][T24253] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.042062][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f5bc000 (11)(netdevsim0) end [ 1027.123304][T24484] chnl_net:caif_netlink_parms(): no params data found [ 1027.247655][T24484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.254970][T24484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.262617][T24484] bridge_slave_0: entered allmulticast mode [ 1027.270018][T24484] bridge_slave_0: entered promiscuous mode [ 1027.293920][T24484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.301286][T24484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.308986][T24484] bridge_slave_1: entered allmulticast mode [ 1027.317098][T24484] bridge_slave_1: entered promiscuous mode [ 1027.381177][T24484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.390985][T24253] bridge_slave_1: left allmulticast mode [ 1027.396663][T24253] bridge_slave_1: left promiscuous mode [ 1027.409404][T24253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.422535][T24253] bridge_slave_0: left allmulticast mode [ 1027.428996][T24253] bridge_slave_0: left promiscuous mode [ 1027.437885][T24253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.485445][T24500] serio: Serial port ptm0 [ 1027.494265][T24501] FAULT_INJECTION: forcing a failure. [ 1027.494265][T24501] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.513700][T24501] CPU: 1 UID: 0 PID: 24501 Comm: syz.1.6450 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.513726][T24501] Tainted: [L]=SOFTLOCKUP [ 1027.513731][T24501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1027.513741][T24501] Call Trace: [ 1027.513747][T24501] [ 1027.513755][T24501] dump_stack_lvl+0xe8/0x150 [ 1027.513781][T24501] should_fail_ex+0x412/0x560 [ 1027.513805][T24501] should_failslab+0xa8/0x100 [ 1027.513822][T24501] ? security_inode_alloc+0x39/0x310 [ 1027.513847][T24501] kmem_cache_alloc_noprof+0x87/0x650 [ 1027.513879][T24501] security_inode_alloc+0x39/0x310 [ 1027.513905][T24501] inode_init_always_gfp+0x9ed/0xdc0 [ 1027.513934][T24501] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1027.513952][T24501] alloc_inode+0x82/0x1b0 [ 1027.513975][T24501] new_inode+0x22/0x170 [ 1027.514000][T24501] shmem_get_inode+0x347/0xe60 [ 1027.514025][T24501] shmem_tmpfile+0x58/0x150 [ 1027.514046][T24501] vfs_tmpfile+0x3ff/0x890 [ 1027.514068][T24501] kernel_tmpfile_open+0x4d/0x90 [ 1027.514086][T24501] ovl_fill_super+0x3c2c/0x5e60 [ 1027.514124][T24501] ? stack_depot_save_flags+0x33/0x810 [ 1027.514148][T24501] ? __lock_acquire+0x6b5/0x2cf0 [ 1027.514176][T24501] ? __lock_acquire+0x6b5/0x2cf0 [ 1027.514199][T24501] ? __pfx_ovl_fill_super+0x10/0x10 [ 1027.514229][T24501] ? __mutex_trylock_common+0x158/0x260 [ 1027.514255][T24501] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1027.514281][T24501] ? rcu_is_watching+0x15/0xb0 [ 1027.514304][T24501] ? trace_contention_end+0x3d/0x150 [ 1027.514337][T24501] ? shrinker_register+0x124/0x230 [ 1027.514361][T24501] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1027.514386][T24501] ? __pfx___mutex_lock+0x10/0x10 [ 1027.514409][T24501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1027.514435][T24501] ? __raw_spin_lock_init+0x45/0x100 [ 1027.514464][T24501] ? sget_fc+0x962/0xa40 [ 1027.514491][T24501] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1027.514506][T24501] ? __pfx_ovl_fill_super+0x10/0x10 [ 1027.514541][T24501] get_tree_nodev+0xbb/0x150 [ 1027.514560][T24501] vfs_get_tree+0x92/0x2a0 [ 1027.514582][T24501] do_new_mount+0x341/0xd30 [ 1027.514602][T24501] ? apparmor_capable+0x126/0x170 [ 1027.514626][T24501] ? __pfx_do_new_mount+0x10/0x10 [ 1027.514648][T24501] ? ns_capable+0x89/0xe0 [ 1027.514671][T24501] ? path_mount+0x690/0x10e0 [ 1027.514697][T24501] ? user_path_at+0xd4/0x160 [ 1027.514724][T24501] __se_sys_mount+0x31d/0x420 [ 1027.514753][T24501] ? __pfx___se_sys_mount+0x10/0x10 [ 1027.514785][T24501] ? __x64_sys_mount+0x20/0xc0 [ 1027.514810][T24501] do_syscall_64+0x14d/0xf80 [ 1027.514833][T24501] ? trace_irq_disable+0x3b/0x150 [ 1027.514856][T24501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.514875][T24501] ? clear_bhb_loop+0x40/0x90 [ 1027.514896][T24501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.514914][T24501] RIP: 0033:0x7ff10e99aeb9 [ 1027.514932][T24501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.514948][T24501] RSP: 002b:00007ff10f7ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.514967][T24501] RAX: ffffffffffffffda RBX: 00007ff10ec15fa0 RCX: 00007ff10e99aeb9 [ 1027.514981][T24501] RDX: 0000200000000b80 RSI: 0000200000000280 RDI: 0000000000000000 [ 1027.514993][T24501] RBP: 00007ff10f7ec090 R08: 0000200000000a80 R09: 0000000000000000 [ 1027.515005][T24501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.515016][T24501] R13: 00007ff10ec16038 R14: 00007ff10ec15fa0 R15: 00007ffe955ac318 [ 1027.515047][T24501] [ 1027.515177][T24501] overlayfs: upper fs does not support tmpfile. [ 1027.884769][T24501] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1027.950713][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807d780000 (15)(ip6gretap0) start [ 1027.973215][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807d780000 (12)(ip6gretap0) end [ 1028.076365][T24510] netlink: 'syz.0.6452': attribute type 10 has an invalid length. [ 1028.138781][ T2148] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1028.148746][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805ed4e000 (12)(erspan0) start [ 1028.173938][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805ed4e000 (5)(erspan0) end [ 1028.211412][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88803667e000 (7)(gretap0) start [ 1028.231809][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88803667e000 (7)(gretap0) end [ 1028.276195][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888052d64000 (14)(geneve1) start [ 1028.294236][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888052d64000 (7)(geneve1) end [ 1028.315557][ T2148] usb 5-1: device descriptor read/64, error -71 [ 1028.327303][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888039e5c000 (14)(geneve0) start [ 1028.346302][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888039e5c000 (7)(geneve0) end [ 1028.377385][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806c604000 (16)(bridge0) start [ 1028.396649][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806c604000 (12)(bridge0) end [ 1028.454998][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f668000 (16)(bond0) start [ 1028.472785][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f668000 (13)(bond0) end [ 1028.473217][T24253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.503179][T24253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.514573][T24253] bond0 (unregistering): Released all slaves [ 1028.527298][T24484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.539916][T24510] veth1_vlan: entered allmulticast mode [ 1028.550493][T24510] team0: Device veth1_vlan failed to register rx_handler [ 1028.593612][ T2148] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1028.598947][ T5818] Bluetooth: hci4: command tx timeout [ 1028.664564][T24484] team0: Port device team_slave_0 added [ 1028.676534][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888043d48000 (9)(wlan0) start [ 1028.706072][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888043d48000 (3)(wlan0) end [ 1028.707308][T24484] team0: Port device team_slave_1 added [ 1028.748442][ T2148] usb 5-1: device descriptor read/64, error -71 [ 1028.847294][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888068300000 (15)(wlan1) start [ 1028.864660][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805d5c0000 (7)(syz2) start [ 1028.874968][ T2148] usb usb5-port1: attempt power cycle [ 1028.884200][ T9] wlan1 speed is unknown, defaulting to 1000 [ 1028.898804][ T9] syz2: Port: 1 Link DOWN [ 1028.909699][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888068300000 (6)(wlan1) end [ 1028.941014][T24484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.948987][T24484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.005903][T24484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.025482][T24484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.044037][T24484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.056994][T24235] infiniband: Removed from hash: ib_dev=ffff88805d5c0000 (0)(syz2) ndev=ffff888068300000 (3)(wlan1) [ 1029.080974][T24484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.091965][T24525] input: syz0 as /devices/virtual/input/input85 [ 1029.117184][T24525] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6456'. [ 1029.129336][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805d5c0000 (0)(syz2) end [ 1029.142435][T24525] openvswitch: netlink: Flow key attr not present in new flow. [ 1029.286296][T24484] hsr_slave_0: entered promiscuous mode [ 1029.291972][ T2148] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1029.294396][T24484] hsr_slave_1: entered promiscuous mode [ 1029.307437][T24484] debugfs: 'hsr0' already exists in 'hsr' [ 1029.313368][T24484] Cannot create hsr debugfs directory [ 1029.327927][ T2148] usb 5-1: device descriptor read/8, error -71 [ 1029.519858][T12789] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1029.607819][ T2148] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1029.638101][ T2148] usb 5-1: device descriptor read/8, error -71 [ 1029.660197][T24253] hsr_slave_0: left promiscuous mode [ 1029.666963][T24253] hsr_slave_1: left promiscuous mode [ 1029.674399][T24253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.682623][T24253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.690988][T24253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.692415][T12789] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1029.698675][T24253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.707436][T12789] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1029.724216][T12789] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1029.733579][T12789] usb 2-1: config 250 has no interface number 0 [ 1029.740192][T12789] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 1029.746626][T24253] veth1_macvtap: left promiscuous mode [ 1029.752485][T12789] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1029.764057][T24253] veth0_macvtap: left allmulticast mode [ 1029.771183][ T2148] usb usb5-port1: unable to enumerate USB device [ 1029.782177][T24253] veth0_macvtap: left promiscuous mode [ 1029.783324][T12789] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1029.801997][T24253] veth1_vlan: left promiscuous mode [ 1029.802037][T12789] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1029.815252][T24253] veth0_vlan: left promiscuous mode [ 1029.817542][T12789] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1029.830945][T12789] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1029.840497][T12789] usb 2-1: Product: syz [ 1029.845231][T12789] usb 2-1: SerialNumber: syz [ 1029.858938][T12789] hub 2-1:250.228: bad descriptor, ignoring hub [ 1029.865378][T12789] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1029.960393][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804caa4000 (15)(macsec0) start [ 1029.984666][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804caa4000 (8)(macsec0) end [ 1030.005666][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880601a0000 (14)(.30*X9&D) start [ 1030.024180][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880601a0000 (11)(.30*X9&D) end [ 1030.054999][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880515c6000 (16)(veth0_macvtap) start [ 1030.073548][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880515c6000 (9)(veth0_macvtap) end [ 1030.080687][T12789] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 56 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1030.120725][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880515c4000 (16)(veth1_macvtap) start [ 1030.146551][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880515c4000 (13)(veth1_macvtap) end [ 1030.165103][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806d084000 (9)(ipvlan1) start [ 1030.182677][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806d084000 (9)(ipvlan1) end [ 1030.203014][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888051e06000 (9)(ipvlan0) start [ 1030.220398][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888051e06000 (9)(ipvlan0) end [ 1030.242512][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888051e04000 (7)(macvlan1) start [ 1030.261062][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888051e04000 (7)(macvlan1) end [ 1030.281798][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806b2b4000 (15)(macvlan0) start [ 1030.300974][T24253] team0 (unregistering): Port device macvlan0 removed [ 1030.313229][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806b2b4000 (16)(macvlan0) end [ 1030.345561][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88803366e000 (15)(vlan1) start [ 1030.363142][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88803366e000 (8)(vlan1) end [ 1030.393457][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807c970000 (15)(vlan0) start [ 1030.413480][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807c970000 (8)(vlan0) end [ 1030.444073][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807a130000 (17)(veth0_vlan) start [ 1030.463139][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807a130000 (10)(veth0_vlan) end [ 1030.463177][ T5862] usb 2-1: USB disconnect, device number 56 [ 1030.500555][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807c976000 (17)(veth1_vlan) start [ 1030.501001][ T5862] usblp0: removed [ 1030.522994][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807c976000 (10)(veth1_vlan) end [ 1030.549741][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f8ec000 (9)(virt_wifi0) start [ 1030.567664][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f8ec000 (9)(virt_wifi0) end [ 1030.598382][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807db6e000 (15)(veth0_virt_wifi) start [ 1030.630986][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807db6e000 (8)(veth0_virt_wifi) end [ 1030.650527][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88802589a000 (15)(veth1_virt_wifi) start [ 1030.669560][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88802589a000 (8)(veth1_virt_wifi) end [ 1030.699106][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806644e000 (14)(hsr0) start [ 1030.716485][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806644e000 (7)(hsr0) end [ 1030.750679][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888063f78000 (14)(hsr_slave_1) start [ 1030.768674][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888063f78000 (5)(hsr_slave_1) end [ 1030.799930][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880467a0000 (16)(veth1_to_hsr) start [ 1030.820523][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880467a0000 (8)(veth1_to_hsr) end [ 1030.842487][ T5818] Bluetooth: hci4: command tx timeout [ 1030.858170][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888052d94000 (14)(hsr_slave_0) start [ 1030.877505][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888052d94000 (5)(hsr_slave_0) end [ 1030.895227][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888052d92000 (15)(veth0_to_hsr) start [ 1030.913346][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888052d92000 (8)(veth0_to_hsr) end [ 1030.931994][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880569ca000 (15)(batadv_slave_1) start [ 1030.951683][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880569ca000 (8)(batadv_slave_1) end [ 1030.991490][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880569c8000 (8)(veth1_to_batadv) start [ 1031.019470][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880569c8000 (8)(veth1_to_batadv) end [ 1031.058699][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f170000 (15)(batadv_slave_0) start [ 1031.099063][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f170000 (8)(batadv_slave_0) end [ 1031.146711][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807be9a000 (8)(veth0_to_batadv) start [ 1031.148308][T24543] serio: Serial port ptm0 [ 1031.165196][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807be9a000 (8)(veth0_to_batadv) end [ 1031.202394][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804d554000 (15)(team_slave_1) start [ 1031.222046][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804d554000 (17)(team_slave_1) end [ 1031.222109][T24253] team0 (unregistering): Port device team_slave_1 removed [ 1031.282072][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804d552000 (15)(veth1_to_team) start [ 1031.315952][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1031.338402][T24253] team0 (unregistering): Port device team_slave_0 removed [ 1031.346276][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804d552000 (8)(veth1_to_team) end [ 1031.367339][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888074c3e000 (10)(team_slave_0) start [ 1031.385578][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888074c3e000 (10)(team_slave_0) end [ 1031.420259][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88803a326000 (16)(veth0_to_team) start [ 1031.466778][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88803a326000 (8)(veth0_to_team) end [ 1031.485979][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805d6ee000 (4)(bond_slave_1) start [ 1031.504184][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805d6ee000 (4)(bond_slave_1) end [ 1031.537584][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1031.547792][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1031.558305][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1031.576172][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805d6ec000 (5)(veth1_to_bond) start [ 1031.576521][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1031.595249][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805d6ec000 (5)(veth1_to_bond) end [ 1031.624499][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.644300][ T9] usb 2-1: Product: syz [ 1031.649706][ T9] usb 2-1: Manufacturer: syz [ 1031.654346][ T9] usb 2-1: SerialNumber: syz [ 1031.667848][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888065e6a000 (4)(bond_slave_0) start [ 1031.700211][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888065e6a000 (4)(bond_slave_0) end [ 1031.718555][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888065e68000 (7)(veth0_to_bond) start [ 1031.740452][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888065e68000 (5)(veth0_to_bond) end [ 1031.758569][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88823bfae000 (5)(bridge_slave_1) start [ 1031.777571][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88823bfae000 (5)(bridge_slave_1) end [ 1031.823442][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804c48c000 (15)(veth1_to_bridge) start [ 1031.860833][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804c48c000 (8)(veth1_to_bridge) end [ 1031.890876][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880287ec000 (5)(bridge_slave_0) start [ 1031.912691][T24541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.929694][T24541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.931981][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880287ec000 (5)(bridge_slave_0) end [ 1031.950529][T24541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.969462][T24541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.991931][T24541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.999725][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880287ea000 (6)(veth0_to_bridge) start [ 1032.002870][T24541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.019015][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880287ea000 (6)(veth0_to_bridge) end [ 1032.136125][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805ffd0000 (15)(veth1) start [ 1032.162496][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805ffd0000 (8)(veth1) end [ 1032.198533][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807cbd8000 (10)(veth0) start [ 1032.231557][T24552] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1032.233342][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807cbd8000 (8)(veth0) end [ 1032.355574][ T9] usb 2-1: 0:2 : does not exist [ 1032.371425][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807cb9c000 (13)(batadv0) start [ 1032.400135][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807cb9c000 (7)(batadv0) end [ 1032.435606][ T9] usb 2-1: USB disconnect, device number 57 [ 1032.556180][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888049dd8000 (14)(dummy0) start [ 1032.589100][T24558] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.6464'. [ 1032.591210][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888049dd8000 (5)(dummy0) end [ 1032.628533][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888055d34000 (15)(team0) start [ 1032.646123][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888055d34000 (8)(team0) end [ 1032.914870][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888036b3c000 (12)(eth8) start [ 1032.984371][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888036b3c000 (4)(eth8) end [ 1033.049770][ T5818] Bluetooth: hci4: command tx timeout [ 1033.107288][T24570] FAULT_INJECTION: forcing a failure. [ 1033.107288][T24570] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.131378][T24253] IPVS: stop unused estimator thread 0... [ 1033.137435][T24570] CPU: 0 UID: 0 PID: 24570 Comm: syz.1.6467 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.137462][T24570] Tainted: [L]=SOFTLOCKUP [ 1033.137469][T24570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1033.137478][T24570] Call Trace: [ 1033.137486][T24570] [ 1033.137493][T24570] dump_stack_lvl+0xe8/0x150 [ 1033.137522][T24570] should_fail_ex+0x412/0x560 [ 1033.137547][T24570] ? __d_alloc+0x37/0x6f0 [ 1033.137573][T24570] should_failslab+0xa8/0x100 [ 1033.137594][T24570] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1033.137628][T24570] __d_alloc+0x37/0x6f0 [ 1033.137658][T24570] d_alloc+0x4b/0x190 [ 1033.137680][T24570] ? lookup_one_qstr_excl+0xc8/0x360 [ 1033.137705][T24570] lookup_one_qstr_excl+0xdc/0x360 [ 1033.137739][T24570] start_creating+0xce/0x100 [ 1033.137766][T24570] ovl_start_creating_temp+0x1a9/0x240 [ 1033.137788][T24570] ? __pfx_ovl_start_creating_temp+0x10/0x10 [ 1033.137812][T24570] ? __fput_deferred+0x216/0x380 [ 1033.137835][T24570] ? __pfx___fput_deferred+0x10/0x10 [ 1033.137862][T24570] ovl_create_temp+0x24/0x90 [ 1033.137884][T24570] ovl_fill_super+0x3d89/0x5e60 [ 1033.137922][T24570] ? stack_depot_save_flags+0x33/0x810 [ 1033.137946][T24570] ? __lock_acquire+0x6b5/0x2cf0 [ 1033.137974][T24570] ? __lock_acquire+0x6b5/0x2cf0 [ 1033.137996][T24570] ? __pfx_ovl_fill_super+0x10/0x10 [ 1033.138032][T24570] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1033.138061][T24570] ? trace_contention_end+0x3d/0x150 [ 1033.138095][T24570] ? shrinker_register+0x124/0x230 [ 1033.138121][T24570] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1033.138146][T24570] ? __pfx___mutex_lock+0x10/0x10 [ 1033.138169][T24570] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1033.138197][T24570] ? __raw_spin_lock_init+0x45/0x100 [ 1033.138229][T24570] ? sget_fc+0x962/0xa40 [ 1033.138254][T24570] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1033.138270][T24570] ? __pfx_ovl_fill_super+0x10/0x10 [ 1033.138294][T24570] get_tree_nodev+0xbb/0x150 [ 1033.138314][T24570] vfs_get_tree+0x92/0x2a0 [ 1033.138334][T24570] do_new_mount+0x341/0xd30 [ 1033.138354][T24570] ? apparmor_capable+0x126/0x170 [ 1033.138377][T24570] ? __pfx_do_new_mount+0x10/0x10 [ 1033.138399][T24570] ? ns_capable+0x89/0xe0 [ 1033.138421][T24570] ? path_mount+0x690/0x10e0 [ 1033.138449][T24570] ? user_path_at+0xd4/0x160 [ 1033.138475][T24570] __se_sys_mount+0x31d/0x420 [ 1033.138503][T24570] ? __pfx___se_sys_mount+0x10/0x10 [ 1033.138531][T24570] ? __x64_sys_mount+0x20/0xc0 [ 1033.138554][T24570] do_syscall_64+0x14d/0xf80 [ 1033.138576][T24570] ? trace_irq_disable+0x3b/0x150 [ 1033.138598][T24570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.138616][T24570] ? clear_bhb_loop+0x40/0x90 [ 1033.138637][T24570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.138654][T24570] RIP: 0033:0x7ff10e99aeb9 [ 1033.138671][T24570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.138686][T24570] RSP: 002b:00007ff10f7ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1033.138705][T24570] RAX: ffffffffffffffda RBX: 00007ff10ec15fa0 RCX: 00007ff10e99aeb9 [ 1033.138717][T24570] RDX: 0000200000000b80 RSI: 0000200000000280 RDI: 0000000000000000 [ 1033.138729][T24570] RBP: 00007ff10f7ec090 R08: 0000200000000a80 R09: 0000000000000000 [ 1033.138746][T24570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.138756][T24570] R13: 00007ff10ec16038 R14: 00007ff10ec15fa0 R15: 00007ffe955ac318 [ 1033.138786][T24570] [ 1033.572231][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f148000 (5)(eth7) start [ 1033.605223][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f148000 (3)(eth7) end [ 1033.642506][T24582] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1033.704782][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806c93c000 (12)(eth6) start [ 1033.756833][T24242] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806c93c000 (4)(eth6) end [ 1033.846211][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888035b80000 (14)(eth5) start [ 1033.869814][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888035b80000 (4)(eth5) end [ 1034.040702][T24484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1034.055248][T24484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1034.064033][ T5883] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1034.077387][T24484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1034.090806][T24484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1034.223772][T24484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.233392][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.254555][ T5883] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1034.271396][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.285177][T24484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.294957][ T5883] usb 5-1: config 0 descriptor?? [ 1034.311705][T24253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.318936][T24253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.346172][T24240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.353386][T24240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.697777][ T9] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1034.743266][ T5883] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 1034.776348][T24484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.783993][ T5883] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0032/input/input86 [ 1034.877207][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1034.897210][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.931587][ T9] usb 2-1: Product: syz [ 1034.935907][ T9] usb 2-1: Manufacturer: syz [ 1034.940697][ T9] usb 2-1: SerialNumber: syz [ 1034.954441][ T5883] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1034.973957][T24590] x_tables: duplicate underflow at hook 2 [ 1035.038138][ T9] usb 2-1: config 0 descriptor?? [ 1035.075424][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1035.272648][ T5818] Bluetooth: hci4: command tx timeout [ 1035.332279][ T5883] usb 5-1: USB disconnect, device number 12 [ 1035.484371][T24484] veth0_vlan: entered promiscuous mode [ 1035.506482][T24484] veth1_vlan: entered promiscuous mode [ 1035.560182][T24484] veth0_macvtap: entered promiscuous mode [ 1035.582002][T24484] veth1_macvtap: entered promiscuous mode [ 1035.627922][T24484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.650202][T24484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.675500][T24240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.691806][T24240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.718764][T24240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.750360][T24240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.862278][T24241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.870574][T24241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.983436][T24241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.002904][T24241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.189418][ T9] gspca_stk1135: reg_w 0x7 err -71 [ 1036.196866][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.206264][ T9] gspca_stk1135: Sensor write failed [ 1036.211562][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.221427][ T9] gspca_stk1135: Sensor write failed [ 1036.226889][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.233373][ T9] gspca_stk1135: Sensor read failed [ 1036.239435][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.246014][ T9] gspca_stk1135: Sensor read failed [ 1036.246058][ T5883] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 1036.251218][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 1036.251253][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.251263][ T9] gspca_stk1135: Sensor read failed [ 1036.251287][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.283748][ T9] gspca_stk1135: Sensor read failed [ 1036.289106][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.295476][ T9] gspca_stk1135: Sensor write failed [ 1036.302849][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.309206][ T9] gspca_stk1135: Sensor write failed [ 1036.314696][ T9] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1036.326160][ T9] usb 2-1: USB disconnect, device number 58 [ 1036.418914][ T5883] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1036.430383][ T5883] usb 5-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1036.443697][ T5883] usb 5-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.454058][ T5883] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1036.467842][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1036.475139][ T5883] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1036.484383][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.494527][ T5883] usb 5-1: config 0 descriptor?? [ 1036.553817][T24658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6476'. [ 1036.781441][T24665] FAULT_INJECTION: forcing a failure. [ 1036.781441][T24665] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.795107][T24665] CPU: 0 UID: 0 PID: 24665 Comm: syz.1.6479 Tainted: G L syzkaller #0 PREEMPT(full) [ 1036.795135][T24665] Tainted: [L]=SOFTLOCKUP [ 1036.795143][T24665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1036.795150][T24665] Call Trace: [ 1036.795156][T24665] [ 1036.795161][T24665] dump_stack_lvl+0xe8/0x150 [ 1036.795181][T24665] should_fail_ex+0x412/0x560 [ 1036.795197][T24665] should_failslab+0xa8/0x100 [ 1036.795218][T24665] __kmalloc_noprof+0xe8/0x760 [ 1036.795238][T24665] ? tomoyo_encode+0x28b/0x550 [ 1036.795268][T24665] tomoyo_encode+0x28b/0x550 [ 1036.795297][T24665] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1036.795333][T24665] tomoyo_check_open_permission+0x229/0x470 [ 1036.795358][T24665] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1036.795393][T24665] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1036.795431][T24665] ? __lock_acquire+0x6b5/0x2cf0 [ 1036.795458][T24665] ? mnt_get_write_access+0x66/0x280 [ 1036.795473][T24665] security_file_open+0xa9/0x240 [ 1036.795486][T24665] do_dentry_open+0x384/0x14e0 [ 1036.795512][T24665] vfs_tmpfile+0x3ff/0x890 [ 1036.795542][T24665] kernel_tmpfile_open+0x4d/0x90 [ 1036.795563][T24665] ovl_fill_super+0x3c2c/0x5e60 [ 1036.795596][T24665] ? stack_depot_save_flags+0x33/0x810 [ 1036.795612][T24665] ? __lock_acquire+0x6b5/0x2cf0 [ 1036.795629][T24665] ? __lock_acquire+0x6b5/0x2cf0 [ 1036.795642][T24665] ? __pfx_ovl_fill_super+0x10/0x10 [ 1036.795669][T24665] ? __mutex_trylock_common+0x158/0x260 [ 1036.795697][T24665] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1036.795725][T24665] ? rcu_is_watching+0x15/0xb0 [ 1036.795744][T24665] ? trace_contention_end+0x3d/0x150 [ 1036.795763][T24665] ? shrinker_register+0x124/0x230 [ 1036.795778][T24665] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1036.795794][T24665] ? __pfx___mutex_lock+0x10/0x10 [ 1036.795815][T24665] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1036.795844][T24665] ? __raw_spin_lock_init+0x45/0x100 [ 1036.795876][T24665] ? sget_fc+0x962/0xa40 [ 1036.795895][T24665] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1036.795904][T24665] ? __pfx_ovl_fill_super+0x10/0x10 [ 1036.795919][T24665] get_tree_nodev+0xbb/0x150 [ 1036.795930][T24665] vfs_get_tree+0x92/0x2a0 [ 1036.795942][T24665] do_new_mount+0x341/0xd30 [ 1036.795959][T24665] ? apparmor_capable+0x126/0x170 [ 1036.795983][T24665] ? __pfx_do_new_mount+0x10/0x10 [ 1036.796006][T24665] ? ns_capable+0x89/0xe0 [ 1036.796029][T24665] ? path_mount+0x690/0x10e0 [ 1036.796046][T24665] ? user_path_at+0xd4/0x160 [ 1036.796061][T24665] __se_sys_mount+0x31d/0x420 [ 1036.796078][T24665] ? __pfx___se_sys_mount+0x10/0x10 [ 1036.796095][T24665] ? __x64_sys_mount+0x20/0xc0 [ 1036.796124][T24665] do_syscall_64+0x14d/0xf80 [ 1036.796152][T24665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.796170][T24665] ? clear_bhb_loop+0x40/0x90 [ 1036.796187][T24665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.796197][T24665] RIP: 0033:0x7ff10e99aeb9 [ 1036.796209][T24665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.796217][T24665] RSP: 002b:00007ff10f7ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1036.796229][T24665] RAX: ffffffffffffffda RBX: 00007ff10ec15fa0 RCX: 00007ff10e99aeb9 [ 1036.796236][T24665] RDX: 0000200000000b80 RSI: 0000200000000280 RDI: 0000000000000000 [ 1036.796245][T24665] RBP: 00007ff10f7ec090 R08: 0000200000000a80 R09: 0000000000000000 [ 1036.796256][T24665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1036.796267][T24665] R13: 00007ff10ec16038 R14: 00007ff10ec15fa0 R15: 00007ffe955ac318 [ 1036.796298][T24665] [ 1036.796374][T24665] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1036.953524][ T29] audit: type=1326 audit(2000000091.433:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.5.6445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecf79aeb9 code=0x7fc00000 [ 1036.964753][T24665] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1036.974946][ T5883] koneplus 0003:1E7D:2E22.0033: hidraw0: USB HID vf4.f6 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 1037.212041][T24652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.262750][T24652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.355864][T24242] bridge_slave_1: left allmulticast mode [ 1037.367467][T24242] bridge_slave_1: left promiscuous mode [ 1037.373856][T24242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.386290][T24242] bridge_slave_0: left allmulticast mode [ 1037.392139][T24242] bridge_slave_0: left promiscuous mode [ 1037.397889][T24242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.478664][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888052f3c000 (15)(ip6gretap0) start [ 1037.497505][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888052f3c000 (7)(ip6gretap0) end [ 1037.593770][T12789] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1037.633626][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888051f4e000 (12)(erspan0) start [ 1037.652491][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888051f4e000 (7)(erspan0) end [ 1037.653902][ T5883] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1037.682266][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807b20c000 (12)(gretap0) start [ 1037.700348][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807b20c000 (7)(gretap0) end [ 1037.763577][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806b980000 (14)(geneve1) start [ 1037.786430][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806b980000 (7)(geneve1) end [ 1037.807134][T12789] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 1037.815935][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888058078000 (7)(geneve0) start [ 1037.833430][T12789] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 1037.840159][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888058078000 (7)(geneve0) end [ 1037.842296][T12789] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1037.876065][T12789] usb 6-1: config 250 has no interface number 0 [ 1037.876790][ T5883] usb 2-1: not running at top speed; connect to a high speed hub [ 1037.882611][T12789] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 1037.891727][ T5883] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1037.902177][T12789] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1037.902206][T12789] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1037.902232][T12789] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1037.904326][T12789] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1037.923634][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888060cfc000 (12)(bridge0) start [ 1037.937740][T12789] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1037.957607][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1037.973055][T12789] usb 6-1: Product: syz [ 1037.982533][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888060cfc000 (12)(bridge0) end [ 1038.010988][T12789] usb 6-1: SerialNumber: syz [ 1038.016074][ T5883] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1038.026002][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.034478][ T5883] usb 2-1: Product: syz [ 1038.038834][ T5883] usb 2-1: Manufacturer: syz [ 1038.043788][ T5883] usb 2-1: SerialNumber: syz [ 1038.065991][T12789] hub 6-1:250.228: bad descriptor, ignoring hub [ 1038.073176][T12789] hub 6-1:250.228: probe with driver hub failed with error -5 [ 1038.083944][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888033c24000 (16)(bond0) start [ 1038.102201][T24242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.102309][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888033c24000 (13)(bond0) end [ 1038.132564][T24242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.144874][T24242] bond0 (unregistering): Released all slaves [ 1038.222417][T24242] : left promiscuous mode [ 1038.229741][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880297e4000 (11)() start [ 1038.247512][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880297e4000 (3)() end [ 1038.286995][T24672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.297299][T12789] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 127 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1038.303089][T24672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.325098][T24672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.344120][T24672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.363434][T24672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.383647][T24672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.429169][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804a9cc000 (19)(wlan1) start [ 1038.447059][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88804a9cc000 (14)(wlan1) end [ 1038.578537][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888043dbc000 (10)(wlan0) start [ 1038.596723][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888043dbc000 (9)(wlan0) end [ 1038.652233][T12789] usb 6-1: USB disconnect, device number 127 [ 1038.666068][T12789] usblp0: removed [ 1038.689792][ T5883] usb 2-1: 0:2 : does not exist [ 1038.785663][ T5883] usb 2-1: USB disconnect, device number 59 [ 1038.905949][T24242] hsr_slave_0: left promiscuous mode [ 1038.921501][T24242] hsr_slave_1: left promiscuous mode [ 1038.928077][T24242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.936327][T24242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.945033][T24242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.953767][T24242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.977748][T24242] veth1_macvtap: left promiscuous mode [ 1038.984287][T24242] veth0_macvtap: left promiscuous mode [ 1038.990097][T24242] veth1_vlan: left promiscuous mode [ 1038.995763][T24242] veth0_vlan: left promiscuous mode [ 1039.103794][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f8ea000 (15)(macsec0) start [ 1039.151510][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f8ea000 (8)(macsec0) end [ 1039.170190][T24253] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888055d30000 (14)(macvtap0) start [ 1039.197389][T24253] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888055d30000 (11)(macvtap0) end [ 1039.228004][ T5901] usb 5-1: USB disconnect, device number 13 [ 1039.298289][T24253] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888033264000 (16)(veth0_macvtap) start [ 1039.355228][T24253] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888033264000 (9)(veth0_macvtap) end [ 1039.397334][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888033262000 (9)(veth1_macvtap) start [ 1039.461482][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888033262000 (9)(veth1_macvtap) end [ 1039.482000][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807889e000 (6)(ipvlan1) start [ 1039.512152][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807889e000 (6)(ipvlan1) end [ 1039.532459][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888029ee2000 (6)(ipvlan0) start [ 1039.551012][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888029ee2000 (6)(ipvlan0) end [ 1039.568476][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888057680000 (5)(macvlan1) start [ 1039.591492][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888057680000 (5)(macvlan1) end [ 1039.609941][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805ef9e000 (5)(macvlan0) start [ 1039.646846][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805ef9e000 (5)(macvlan0) end [ 1039.665292][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f7be000 (6)(vlan1) start [ 1039.684233][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f7be000 (6)(vlan1) end [ 1039.705698][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807b1ba000 (6)(vlan0) start [ 1039.755555][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807b1ba000 (6)(vlan0) end [ 1039.772814][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f85a000 (8)(veth0_vlan) start [ 1039.791975][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f85a000 (8)(veth0_vlan) end [ 1039.811537][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88802bd3e000 (8)(veth1_vlan) start [ 1039.841432][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88802bd3e000 (8)(veth1_vlan) end [ 1039.859444][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888060d48000 (6)(virt_wifi0) start [ 1039.877215][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888060d48000 (6)(virt_wifi0) end [ 1039.896838][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805fe3e000 (8)(veth0_virt_wifi) start [ 1039.915869][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805fe3e000 (6)(veth0_virt_wifi) end [ 1039.933987][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f46e000 (8)(veth1_virt_wifi) start [ 1039.954470][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f46e000 (8)(veth1_virt_wifi) end [ 1039.973129][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f6c4000 (7)(hsr0) start [ 1039.991062][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f6c4000 (7)(hsr0) end [ 1040.024803][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888032d1a000 (14)(hsr_slave_1) start [ 1040.046402][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888032d1a000 (5)(hsr_slave_1) end [ 1040.066224][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888032d18000 (15)(veth1_to_hsr) start [ 1040.087552][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888032d18000 (8)(veth1_to_hsr) end [ 1040.106233][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f2c0000 (12)(hsr_slave_0) start [ 1040.127216][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f2c0000 (5)(hsr_slave_0) end [ 1040.155257][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f90a000 (9)(veth0_to_hsr) start [ 1040.175865][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f90a000 (8)(veth0_to_hsr) end [ 1040.241805][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88802b0f4000 (15)(batadv_slave_1) start [ 1040.262656][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88802b0f4000 (8)(batadv_slave_1) end [ 1040.284937][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88802b0f6000 (16)(veth1_to_batadv) start [ 1040.306259][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88802b0f6000 (8)(veth1_to_batadv) end [ 1040.339978][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880596d6000 (15)(batadv_slave_0) start [ 1040.358362][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880596d6000 (8)(batadv_slave_0) end [ 1040.393454][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880596d4000 (15)(veth0_to_batadv) start [ 1040.412546][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880596d4000 (8)(veth0_to_batadv) end [ 1040.443795][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806af9e000 (15)(team_slave_1) start [ 1040.464120][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806af9e000 (15)(team_slave_1) end [ 1040.466783][T24242] team0 (unregistering): Port device team_slave_1 removed [ 1040.516229][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807c618000 (15)(veth1_to_team) start [ 1040.534985][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807c618000 (8)(veth1_to_team) end [ 1040.553053][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806af92000 (15)(team_slave_0) start [ 1040.571922][T24242] team0 (unregistering): Port device team_slave_0 removed [ 1040.571991][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806af92000 (17)(team_slave_0) end [ 1040.616661][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888056b00000 (8)(veth0_to_team) start [ 1040.634698][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888056b00000 (8)(veth0_to_team) end [ 1040.652525][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880788ca000 (13)(bond_slave_1) start [ 1040.671037][T24241] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880788ca000 (4)(bond_slave_1) end [ 1040.710903][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807d852000 (15)(veth1_to_bond) start [ 1040.734416][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807d852000 (7)(veth1_to_bond) end [ 1040.752555][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807d896000 (13)(bond_slave_0) start [ 1040.770695][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807d896000 (4)(bond_slave_0) end [ 1040.813699][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806b982000 (14)(veth0_to_bond) start [ 1040.837341][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88806b982000 (7)(veth0_to_bond) end [ 1040.882730][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f308000 (9)(bridge_slave_1) start [ 1040.918882][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805f308000 (5)(bridge_slave_1) end [ 1040.945612][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888056518000 (8)(veth1_to_bridge) start [ 1040.963933][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888056518000 (8)(veth1_to_bridge) end [ 1040.982082][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888021ed6000 (5)(bridge_slave_0) start [ 1041.018043][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888021ed6000 (5)(bridge_slave_0) end [ 1041.042624][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805ed02000 (15)(veth0_to_bridge) start [ 1041.062314][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805ed02000 (8)(veth0_to_bridge) end [ 1041.165486][T24441] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1041.177426][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807a050000 (15)(veth1) start [ 1041.195289][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807a050000 (8)(veth1) end [ 1041.222814][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88803700c000 (15)(veth0) start [ 1041.243994][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88803700c000 (8)(veth0) end [ 1041.318520][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807c64c000 (13)(batadv0) start [ 1041.337347][ T8545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807c64c000 (7)(batadv0) end [ 1041.356850][T24441] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1041.368225][T24441] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1041.377910][T24441] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1041.387332][T24441] usb 2-1: config 250 has no interface number 0 [ 1041.393806][T24441] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 1041.405712][T24441] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1041.416253][T24441] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1041.430102][T24441] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1041.437756][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888029c8e000 (7)(dummy0) start [ 1041.467323][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888029c8e000 (7)(dummy0) end [ 1041.487366][T24441] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1041.496540][T24441] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1041.505167][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888028f30000 (15)(team0) start [ 1041.505262][T24441] usb 2-1: Product: syz [ 1041.526989][T24441] usb 2-1: SerialNumber: syz [ 1041.534352][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888028f30000 (6)(team0) end [ 1041.562000][T24441] hub 2-1:250.228: bad descriptor, ignoring hub [ 1041.569012][T24441] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1041.728100][T24709] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6494'. [ 1041.738876][T24709] netlink: 'syz.5.6494': attribute type 12 has an invalid length. [ 1041.747786][T24709] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6494'. [ 1041.796997][T24441] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 60 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1041.992585][T24242] IPVS: stop unused estimator thread 0... [ 1042.034003][T24441] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1042.119283][ T5883] usb 2-1: USB disconnect, device number 60 [ 1042.127358][ T5883] usblp0: removed [ 1042.161612][ T5862] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1042.216118][T24441] usb 5-1: not running at top speed; connect to a high speed hub [ 1042.225269][T24441] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1042.235912][T24441] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1042.250145][T24441] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.259412][T24441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.267579][T24441] usb 5-1: Product: syz [ 1042.271761][T24441] usb 5-1: Manufacturer: syz [ 1042.276360][T24441] usb 5-1: SerialNumber: syz [ 1042.322529][ T5862] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1042.330751][ T5862] usb 6-1: config 0 has no interface number 0 [ 1042.337468][ T5862] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1042.346705][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.357971][ T5862] usb 6-1: config 0 descriptor?? [ 1042.373448][ T5862] usb 6-1: selecting invalid altsetting 1 [ 1042.390719][ T5862] dvb_ttusb_budget: ttusb_init_controller: error [ 1042.397594][ T5862] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1042.455872][ T5862] DVB: Unable to find symbol cx22700_attach() [ 1042.501874][T24710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.512685][ T5862] DVB: Unable to find symbol tda10046_attach() [ 1042.513392][T24710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.519305][ T5862] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1042.534362][T24710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.550199][T24710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.564038][T24710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.576763][T24710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.617041][T24714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.633985][T24714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.646349][ T5862] usb 6-1: USB disconnect, device number 2 [ 1042.817237][T24441] usb 5-1: 0:2 : does not exist [ 1042.849930][T24441] usb 5-1: USB disconnect, device number 14 [ 1042.877185][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1043.064582][T24737] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.6505'. [ 1043.079434][T24736] binder_alloc: binder_alloc_mmap_handler: 24735 200000735000-200000736000 already mapped failed -16 [ 1043.101304][ T5901] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1043.279491][ T5901] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1043.292343][ T5901] usb 2-1: config 0 has no interface number 0 [ 1043.298819][ T5901] usb 2-1: config 0 interface 29 has no altsetting 0 [ 1043.309303][ T5901] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1043.320830][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.329311][ T5901] usb 2-1: Product: syz [ 1043.333542][ T5901] usb 2-1: Manufacturer: syz [ 1043.339048][ T5901] usb 2-1: SerialNumber: syz [ 1043.345582][ T5901] usb 2-1: config 0 descriptor?? [ 1043.439919][T24749] can1: slcan on ttyprintk. [ 1043.469830][T24749] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 1043.529483][T24748] can1 (unregistered): slcan off ttyprintk. [ 1043.536098][T24441] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1043.712798][T24441] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 1043.721107][T24441] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 1043.754879][T24441] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1043.764056][T24441] usb 6-1: config 250 has no interface number 0 [ 1043.790969][T24441] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 1043.817131][T24441] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1043.849707][T24441] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1043.865209][T24441] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1043.878842][T24441] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1043.900890][T24441] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1043.910153][T24441] usb 6-1: Product: syz [ 1043.916039][T24441] usb 6-1: SerialNumber: syz [ 1043.935146][T24441] hub 6-1:250.228: bad descriptor, ignoring hub [ 1043.946453][T24441] hub 6-1:250.228: probe with driver hub failed with error -5 [ 1044.118845][ T5901] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1044.169601][T24441] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1044.333389][ T5901] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 1044.351350][ T5901] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 1044.362191][ T5901] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 1044.449984][ T5901] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -8 [ 1044.514640][ T5901] usb 6-1: USB disconnect, device number 3 [ 1044.534942][ T5901] usblp0: removed [ 1045.122664][T24441] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1045.271115][T24799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6518'. [ 1045.304837][T24441] usb 5-1: Using ep0 maxpacket: 32 [ 1045.339064][T24441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.375698][T24441] usb 5-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.00 [ 1045.420311][T24441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.446987][T24441] usb 5-1: config 0 descriptor?? [ 1045.752207][T24441] usb 5-1: string descriptor 0 read error: -71 [ 1045.791773][T24441] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input87 [ 1045.824596][ T5173] bcm5974 5-1:0.0: could not read from device [ 1045.844156][ T5173] bcm5974 5-1:0.0: could not read from device [ 1045.873285][T24441] usb 5-1: USB disconnect, device number 15 [ 1045.875239][T12789] usb 2-1: USB disconnect, device number 61 [ 1046.018982][T24816] FAULT_INJECTION: forcing a failure. [ 1046.018982][T24816] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.036077][T24816] CPU: 0 UID: 0 PID: 24816 Comm: syz.1.6524 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.036107][T24816] Tainted: [L]=SOFTLOCKUP [ 1046.036115][T24816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1046.036127][T24816] Call Trace: [ 1046.036139][T24816] [ 1046.036148][T24816] dump_stack_lvl+0xe8/0x150 [ 1046.036177][T24816] should_fail_ex+0x412/0x560 [ 1046.036203][T24816] ? __d_alloc+0x37/0x6f0 [ 1046.036228][T24816] should_failslab+0xa8/0x100 [ 1046.036251][T24816] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1046.036276][T24816] ? do_raw_spin_lock+0x12b/0x2f0 [ 1046.036302][T24816] __d_alloc+0x37/0x6f0 [ 1046.036324][T24816] ? __pfx_simple_offset_add+0x10/0x10 [ 1046.036350][T24816] d_alloc+0x4b/0x190 [ 1046.036377][T24816] shmem_rename2+0x25c/0x3c0 [ 1046.036400][T24816] ? __pfx_shmem_rename2+0x10/0x10 [ 1046.036423][T24816] vfs_rename+0xa96/0xeb0 [ 1046.036464][T24816] ? __pfx_vfs_rename+0x10/0x10 [ 1046.036492][T24816] ? take_dentry_name_snapshot+0x29/0x500 [ 1046.036524][T24816] ovl_fill_super+0x4677/0x5e60 [ 1046.036565][T24816] ? stack_depot_save_flags+0x33/0x810 [ 1046.036591][T24816] ? __lock_acquire+0x6b5/0x2cf0 [ 1046.036620][T24816] ? __lock_acquire+0x6b5/0x2cf0 [ 1046.036643][T24816] ? __pfx_ovl_fill_super+0x10/0x10 [ 1046.036681][T24816] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1046.036712][T24816] ? trace_contention_end+0x3d/0x150 [ 1046.036748][T24816] ? shrinker_register+0x124/0x230 [ 1046.036776][T24816] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1046.036804][T24816] ? __pfx___mutex_lock+0x10/0x10 [ 1046.036828][T24816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1046.036857][T24816] ? __raw_spin_lock_init+0x45/0x100 [ 1046.036890][T24816] ? sget_fc+0x962/0xa40 [ 1046.036917][T24816] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1046.036933][T24816] ? __pfx_ovl_fill_super+0x10/0x10 [ 1046.036959][T24816] get_tree_nodev+0xbb/0x150 [ 1046.036979][T24816] vfs_get_tree+0x92/0x2a0 [ 1046.037001][T24816] do_new_mount+0x341/0xd30 [ 1046.037022][T24816] ? apparmor_capable+0x126/0x170 [ 1046.037046][T24816] ? __pfx_do_new_mount+0x10/0x10 [ 1046.037072][T24816] ? ns_capable+0x89/0xe0 [ 1046.037096][T24816] ? path_mount+0x690/0x10e0 [ 1046.037124][T24816] ? user_path_at+0xd4/0x160 [ 1046.037152][T24816] __se_sys_mount+0x31d/0x420 [ 1046.037181][T24816] ? __pfx___se_sys_mount+0x10/0x10 [ 1046.037211][T24816] ? __x64_sys_mount+0x20/0xc0 [ 1046.037236][T24816] do_syscall_64+0x14d/0xf80 [ 1046.037258][T24816] ? trace_irq_disable+0x3b/0x150 [ 1046.037280][T24816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.037298][T24816] ? clear_bhb_loop+0x40/0x90 [ 1046.037321][T24816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.037338][T24816] RIP: 0033:0x7ff10e99aeb9 [ 1046.037356][T24816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.037370][T24816] RSP: 002b:00007ff10f7ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1046.037390][T24816] RAX: ffffffffffffffda RBX: 00007ff10ec15fa0 RCX: 00007ff10e99aeb9 [ 1046.037403][T24816] RDX: 0000200000000b80 RSI: 0000200000000280 RDI: 0000000000000000 [ 1046.037415][T24816] RBP: 00007ff10f7ec090 R08: 0000200000000a80 R09: 0000000000000000 [ 1046.037427][T24816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1046.037438][T24816] R13: 00007ff10ec16038 R14: 00007ff10ec15fa0 R15: 00007ffe955ac318 [ 1046.037476][T24816] [ 1046.812536][ T5901] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1046.962522][T12789] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1046.978742][ T5901] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1046.987934][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.997567][ T5901] usb 6-1: Product: syz [ 1047.001758][ T5901] usb 6-1: Manufacturer: syz [ 1047.006509][ T5901] usb 6-1: SerialNumber: syz [ 1047.013426][ T5901] usb 6-1: config 0 descriptor?? [ 1047.122666][T12789] usb 2-1: Using ep0 maxpacket: 16 [ 1047.129941][T12789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1047.139165][T12789] usb 2-1: config 76 descriptor has 1 excess byte, ignoring [ 1047.146777][T12789] usb 2-1: config 76 has 0 interfaces, different from the descriptor's value: 1 [ 1047.158488][T12789] usb 2-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.9f [ 1047.168208][T12789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.177226][T12789] usb 2-1: Product: syz [ 1047.181498][T12789] usb 2-1: Manufacturer: syz [ 1047.186097][T12789] usb 2-1: SerialNumber: syz [ 1047.193472][T12789] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1047.202395][T12789] usb 2-1: no configuration chosen from 1 choice [ 1047.234878][ T5901] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1047.255566][ T5901] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1047.299828][ T5901] usb 6-1: USB disconnect, device number 4 [ 1047.320072][T24841] tipc: Failed to remove unknown binding: 66,1,1/0:2134830303/2134830305 [ 1047.329309][T24841] tipc: Failed to remove unknown binding: 66,1,1/0:2134830303/2134830305 [ 1047.393682][T24843] FAULT_INJECTION: forcing a failure. [ 1047.393682][T24843] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.408067][T24843] CPU: 1 UID: 0 PID: 24843 Comm: syz.5.6534 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.408086][T24843] Tainted: [L]=SOFTLOCKUP [ 1047.408090][T24843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1047.408096][T24843] Call Trace: [ 1047.408103][T24843] [ 1047.408110][T24843] dump_stack_lvl+0xe8/0x150 [ 1047.408129][T24843] should_fail_ex+0x412/0x560 [ 1047.408145][T24843] ? __d_alloc+0x37/0x6f0 [ 1047.408160][T24843] should_failslab+0xa8/0x100 [ 1047.408173][T24843] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1047.408194][T24843] __d_alloc+0x37/0x6f0 [ 1047.408212][T24843] d_alloc+0x4b/0x190 [ 1047.408224][T24843] ? lookup_one_qstr_excl+0xc8/0x360 [ 1047.408240][T24843] lookup_one_qstr_excl+0xdc/0x360 [ 1047.408253][T24843] ? lock_rename_child+0xfc/0x1a0 [ 1047.408269][T24843] start_renaming_dentry+0x248/0x4f0 [ 1047.408284][T24843] ovl_fill_super+0x4517/0x5e60 [ 1047.408306][T24843] ? stack_depot_save_flags+0x33/0x810 [ 1047.408321][T24843] ? __lock_acquire+0x6b5/0x2cf0 [ 1047.408337][T24843] ? __lock_acquire+0x6b5/0x2cf0 [ 1047.408350][T24843] ? __pfx_ovl_fill_super+0x10/0x10 [ 1047.408378][T24843] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1047.408396][T24843] ? trace_contention_end+0x3d/0x150 [ 1047.408416][T24843] ? shrinker_register+0x124/0x230 [ 1047.408431][T24843] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1047.408448][T24843] ? __pfx___mutex_lock+0x10/0x10 [ 1047.408461][T24843] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1047.408477][T24843] ? __raw_spin_lock_init+0x45/0x100 [ 1047.408495][T24843] ? sget_fc+0x962/0xa40 [ 1047.408510][T24843] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1047.408520][T24843] ? __pfx_ovl_fill_super+0x10/0x10 [ 1047.408534][T24843] get_tree_nodev+0xbb/0x150 [ 1047.408545][T24843] vfs_get_tree+0x92/0x2a0 [ 1047.408557][T24843] do_new_mount+0x341/0xd30 [ 1047.408569][T24843] ? apparmor_capable+0x126/0x170 [ 1047.408583][T24843] ? __pfx_do_new_mount+0x10/0x10 [ 1047.408595][T24843] ? ns_capable+0x89/0xe0 [ 1047.408609][T24843] ? path_mount+0x690/0x10e0 [ 1047.408626][T24843] ? user_path_at+0xd4/0x160 [ 1047.408642][T24843] __se_sys_mount+0x31d/0x420 [ 1047.408657][T24843] ? __pfx___se_sys_mount+0x10/0x10 [ 1047.408674][T24843] ? __x64_sys_mount+0x20/0xc0 [ 1047.408688][T24843] do_syscall_64+0x14d/0xf80 [ 1047.408701][T24843] ? trace_irq_disable+0x3b/0x150 [ 1047.408715][T24843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.408725][T24843] ? clear_bhb_loop+0x40/0x90 [ 1047.408737][T24843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.408748][T24843] RIP: 0033:0x7f0ecf79aeb9 [ 1047.408759][T24843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.408767][T24843] RSP: 002b:00007f0ed062a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1047.408779][T24843] RAX: ffffffffffffffda RBX: 00007f0ecfa15fa0 RCX: 00007f0ecf79aeb9 [ 1047.408786][T24843] RDX: 0000200000000b80 RSI: 0000200000000280 RDI: 0000000000000000 [ 1047.408793][T24843] RBP: 00007f0ed062a090 R08: 0000200000000a80 R09: 0000000000000000 [ 1047.408799][T24843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1047.408805][T24843] R13: 00007f0ecfa16038 R14: 00007f0ecfa15fa0 R15: 00007ffc44e6b7e8 [ 1047.408821][T24843] [ 1048.128049][ T5883] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1048.290142][ T5883] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1048.301242][ T5883] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 1048.312064][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1048.319732][ T5883] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1048.329441][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0 [ 1048.338557][ T5883] usb 5-1: Product: syz [ 1048.347557][ T5883] usb 5-1: config 0 descriptor?? [ 1048.354115][T24849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1048.579226][T24849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.589097][T24849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.975939][ T5883] usbhid 5-1:0.0: can't add hid device: -71 [ 1048.994380][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1049.009817][ T5883] usb 5-1: USB disconnect, device number 16 [ 1049.379364][ T5883] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 1049.539749][ T5883] usb 6-1: Invalid ep0 maxpacket: 16 [ 1049.678870][ T5883] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 1049.747838][T24879] infiniband: Added to hash: ib_dev=ffff888056cc4000 (0)() ndev=ffff88801fff4000 (19)(team_slave_0) [ 1049.804247][T24880] veth0_to_team: entered promiscuous mode [ 1049.839347][ T5883] usb 6-1: Invalid ep0 maxpacket: 16 [ 1049.845052][ T5883] usb usb6-port1: attempt power cycle [ 1049.899337][T24879] infiniband syz1: set down [ 1049.904401][ T5901] syz1: Port: 1 Link DOWN [ 1049.908523][ T58] usb 2-1: USB disconnect, device number 62 [ 1049.919722][ T2148] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1049.933964][T24879] infiniband syz1: added team_slave_0 [ 1049.972455][T24879] RDS/IB: syz1: added [ 1049.976548][T24879] smc: adding ib device syz1 with port count 1 [ 1049.986062][T24879] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 1050.096032][ T2148] usb 5-1: Using ep0 maxpacket: 32 [ 1050.109358][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.138632][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.148686][ T2148] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1050.158123][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.167040][T20102] Bluetooth: hci3: command 0x0406 tx timeout [ 1050.179486][ T2148] usb 5-1: config 0 descriptor?? [ 1050.214011][ T5883] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 1050.251741][ T5883] usb 6-1: Invalid ep0 maxpacket: 16 [ 1050.406247][ T5883] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1050.420694][ T2148] usbhid 5-1:0.0: can't add hid device: -71 [ 1050.427317][ T2148] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1050.428508][ T5883] usb 6-1: Invalid ep0 maxpacket: 16 [ 1050.444340][T24890] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6553'. [ 1050.451040][ T2148] usb 5-1: USB disconnect, device number 17 [ 1050.464928][ T5883] usb usb6-port1: unable to enumerate USB device [ 1051.013688][ T5818] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 1051.286362][T24894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6555'. [ 1051.849917][ T5883] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1051.917033][T24911] syz.0.6563 (24911): drop_caches: 2 [ 1052.031806][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 1052.036831][T24916] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1052.039038][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1052.056994][T24916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1052.058513][ T5883] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1052.075929][T24916] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1052.075989][T24916] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1052.097141][ T5883] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1052.111619][ T5883] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1052.120442][ T5883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1052.129737][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.137730][ T5883] usb 2-1: Product: syz [ 1052.142209][ T5883] usb 2-1: Manufacturer: syz [ 1052.146816][ T5883] usb 2-1: SerialNumber: syz [ 1052.158193][ T5883] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1052.214611][ T2148] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1052.393018][ T2148] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1052.401957][ T2148] usb 5-1: config 0 has no interface number 0 [ 1052.406550][ T58] usb 2-1: USB disconnect, device number 63 [ 1052.409737][ T2148] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.427175][ T2148] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.442146][ T2148] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1052.452835][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.465611][ T2148] usb 5-1: config 0 descriptor?? [ 1052.743799][ T29] audit: type=1326 audit(2000000106.197:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24917 comm="syz.5.6565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ecf79aeb9 code=0x0 [ 1052.957524][ T2148] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0034/input/input88 [ 1052.996824][ T5818] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1053.097788][ T5818] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1053.121950][ T2148] holtek_kbd 0003:04D9:A055.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 1053.213161][ T2148] usb 5-1: USB disconnect, device number 18 [ 1053.315226][T24441] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1053.353109][T24931] fido_id[24931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1053.436874][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888060d9c000 (11)(erspan0) start [ 1053.481998][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888060d9c000 (4)(erspan0) end [ 1053.521077][T20102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1053.530549][T24441] usb 2-1: Using ep0 maxpacket: 8 [ 1053.541302][T20102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1053.547078][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff888060d9c000 (4)(erspan0) start [ 1053.568915][T24441] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1053.577929][T24441] usb 2-1: config 179 has no interface number 0 [ 1053.584866][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff888060d9c000 (3)(erspan0) end [ 1053.588439][T20102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1053.602257][T24441] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1053.623502][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807a0b6000 (3)(gretap0) start [ 1053.648797][T20102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1053.656818][T24441] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1053.675509][T24441] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1053.675627][T20102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1053.687167][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807a0b6000 (3)(gretap0) end [ 1053.687246][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff88807a0b6000 (3)(gretap0) start [ 1053.687288][T24235] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff88807a0b6000 (3)(gretap0) end [ 1053.687681][T24441] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1053.793240][T24441] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1053.822367][T24441] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1053.830369][T24441] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1053.840084][T24441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.976268][T24441] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input89 [ 1054.116462][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (19)(team_slave_1) cookie=ffff888078088000 (21)(syz_tun) start [ 1054.145133][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (19)(team_slave_1) cookie=ffff888078088000 (16)(syz_tun) end [ 1054.162920][ T5173] input input89: unable to receive magic message: -71 [ 1054.172414][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff888078088000 (11)(syz_tun) start [ 1054.192354][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff888078088000 (11)(syz_tun) end [ 1054.216069][ T5173] input input89: unable to receive magic message: -71 [ 1054.255612][T24441] usb 2-1: USB disconnect, device number 64 [ 1054.261815][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1054.477931][ T5818] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 1054.694971][ T5883] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1054.818207][T24959] 9pnet_virtio: no channels available for device syz [ 1054.825344][ T5818] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 1054.876718][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 1054.899495][ T5883] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1054.922673][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.958511][ T5883] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1054.982651][ T5883] pvrusb2: ********** [ 1054.991317][T24966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6583'. [ 1055.001865][ T5883] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1055.009043][T24967] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6582'. [ 1055.018702][ T5883] pvrusb2: Important functionality might not be entirely working. [ 1055.041732][ T5883] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1055.063078][ T5883] pvrusb2: ********** [ 1055.178465][ T2342] pvrusb2: Invalid write control endpoint [ 1055.283444][ T2342] pvrusb2: Invalid write control endpoint [ 1055.300206][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1055.325938][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1055.333589][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1055.357945][ T2342] pvrusb2: Device being rendered inoperable [ 1055.368664][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1055.386749][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1055.409106][ T2148] usb 6-1: USB disconnect, device number 9 [ 1055.418904][ T2342] pvrusb2: Attached sub-driver cx25840 [ 1055.443573][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1055.463874][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1055.564960][T24932] chnl_net:caif_netlink_parms(): no params data found [ 1055.700477][T24932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.707974][T24932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.716368][T24932] bridge_slave_0: entered allmulticast mode [ 1055.725084][T24932] bridge_slave_0: entered promiscuous mode [ 1055.734875][T24932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.743467][T24932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.751047][T24932] bridge_slave_1: entered allmulticast mode [ 1055.759959][T24932] bridge_slave_1: entered promiscuous mode [ 1055.803924][T24981] 9pnet_virtio: no channels available for device syz [ 1055.811901][T24932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.841641][T24932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.908285][T24932] team0: Port device team_slave_0 added [ 1055.918440][ T5818] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 1055.926823][T24932] team0: Port device team_slave_1 added [ 1055.969736][T24932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.977324][T24932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.044160][T24932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.063958][ T5818] Bluetooth: hci2: command tx timeout [ 1056.082658][T24932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.101386][T24932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.135965][T24932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.206874][T24441] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1056.239691][T24932] hsr_slave_0: entered promiscuous mode [ 1056.248733][T24932] hsr_slave_1: entered promiscuous mode [ 1056.256766][T24932] debugfs: 'hsr0' already exists in 'hsr' [ 1056.263960][T24932] Cannot create hsr debugfs directory [ 1056.455818][T24441] usb 2-1: Using ep0 maxpacket: 8 [ 1056.465519][T24441] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.475843][T24441] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1056.512995][T24441] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1056.539594][T24441] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1056.559256][T24441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.578121][T24441] usb 2-1: Product: syz [ 1056.588061][T24441] usb 2-1: Manufacturer: syz [ 1056.598881][T24441] usb 2-1: SerialNumber: syz [ 1056.647616][T24441] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1056.862729][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888043e80000 (16)(netdevsim3) start [ 1056.868460][T24932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.882342][ T5901] usb 2-1: USB disconnect, device number 65 [ 1056.893628][T24441] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1056.921947][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888043e80000 (8)(netdevsim3) end [ 1056.951219][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff888043e80000 (5)(netdevsim3) start [ 1056.989753][T24240] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff888043e80000 (4)(netdevsim3) end [ 1057.085852][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805172c000 (16)(netdevsim2) start [ 1057.088968][T24932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.120353][T24441] usb 6-1: Using ep0 maxpacket: 32 [ 1057.129056][T24441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.144870][T24441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.153692][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88805172c000 (7)(netdevsim2) end [ 1057.159195][T24441] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1057.182740][T24441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.202191][T24441] usb 6-1: config 0 descriptor?? [ 1057.225580][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff88805172c000 (4)(netdevsim2) start [ 1057.243202][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff88805172c000 (4)(netdevsim2) end [ 1057.431248][T24441] usbhid 6-1:0.0: can't add hid device: -71 [ 1057.471139][T24441] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1057.484337][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888060cec000 (16)(netdevsim1) start [ 1057.504728][T24932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.536618][T24441] usb 6-1: USB disconnect, device number 10 [ 1057.561281][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff888060cec000 (5)(netdevsim1) end [ 1057.592714][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff888060cec000 (5)(netdevsim1) start [ 1057.627672][T24244] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff888060cec000 (5)(netdevsim1) end [ 1057.756830][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807a8c4000 (21)(netdevsim0) start [ 1057.777872][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807a8c4000 (14)(netdevsim0) end [ 1057.803971][T24932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.815047][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff88807a8c4000 (11)(netdevsim0) start [ 1057.840695][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff88807a8c4000 (8)(netdevsim0) end [ 1058.175438][T24932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1058.240795][T24932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1058.266672][T24932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1058.289963][ T5818] Bluetooth: hci2: command tx timeout [ 1058.308635][T24932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1058.481872][T24932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.509835][T24932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.518269][ T5901] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1058.551167][T24244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.558425][T24244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.589775][T24244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.597099][T24244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.702047][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 1058.736308][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.748084][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.765835][ T5901] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1058.777227][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.803464][ T5901] usb 6-1: config 0 descriptor?? [ 1058.969796][T24932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.033601][ T5901] usbhid 6-1:0.0: can't add hid device: -71 [ 1059.040052][ T5901] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1059.102713][T24932] veth0_vlan: entered promiscuous mode [ 1059.104286][ T5901] usb 6-1: USB disconnect, device number 11 [ 1059.136230][T24932] veth1_vlan: entered promiscuous mode [ 1059.202111][T24932] veth0_macvtap: entered promiscuous mode [ 1059.220769][T24932] veth1_macvtap: entered promiscuous mode [ 1059.267931][T24932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.271456][T24987] Set syz1 is full, maxelem 65536 reached [ 1059.314455][T24932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.339377][T24242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.352902][T24242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.375842][T24242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.398464][T24242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.523404][T25029] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input90 [ 1059.558094][T24253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.569642][T24253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.692644][T24242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.702153][T24242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.864509][T25039] Bluetooth: (null): Too short H5 packet [ 1060.179984][T25056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input91 [ 1060.416786][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1060.595910][T25075] Bluetooth: (null): Too short H5 packet [ 1060.603421][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1060.633416][T24253] Bluetooth: (null): Invalid header checksum [ 1060.643595][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.675340][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.692984][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1060.704292][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.721099][ T9] usb 2-1: config 0 descriptor?? [ 1060.958267][T25053] clip:clip_setentry: non-CLIP VCC [ 1060.981126][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1060.991427][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1061.010793][ T9] usb 2-1: USB disconnect, device number 66 [ 1061.065867][T25087] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input92 [ 1061.470135][ T5818] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 1061.997358][T25135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1062.017341][T25135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1062.056126][T25135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1062.079354][T25135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1063.351053][T25164] infiniband: Added to hash: ib_dev=ffff888067680000 (0)() ndev=ffff8880629dc000 (22)(syz_tun) [ 1063.363183][T25164] infiniband: Removed from hash: ib_dev=ffff888067680000 (0)() ndev=ffff8880629dc000 (22)(syz_tun) [ 1063.375959][T25164] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1063.534537][T25164] netlink: 'syz.5.6656': attribute type 10 has an invalid length. [ 1063.543718][T25164] syz_tun: entered promiscuous mode [ 1063.556101][T25164] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1064.820942][T25181] Set syz1 is full, maxelem 65536 reached [ 1064.876685][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880370bc000 (4)(erspan0) start [ 1064.908036][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff8880370bc000 (4)(erspan0) end [ 1064.964834][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff8880370bc000 (3)(erspan0) start [ 1064.995751][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff8880370bc000 (3)(erspan0) end [ 1065.019764][T25198] kvm: Disabled LAPIC found during irq injection [ 1065.045243][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807db90000 (3)(gretap0) start [ 1065.065951][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88802b80c000 (11)(syz2) rdma_ndev=ffff888079e94000 (17)(team_slave_1) cookie=ffff88807db90000 (3)(gretap0) end [ 1065.086070][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff88807db90000 (3)(gretap0) start [ 1065.104634][T24239] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056cc4000 (13)(syz1) rdma_ndev=ffff88801fff4000 (20)(team_slave_0) cookie=ffff88807db90000 (3)(gretap0) end [ 1065.935626][ T2148] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1066.106935][ T2148] usb 2-1: Using ep0 maxpacket: 32 [ 1066.122109][ T2148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.150161][ T2148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.160323][ T2148] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1066.171677][ T2148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.192750][ T2148] usb 2-1: config 0 descriptor?? [ 1066.480958][ T2148] usbhid 2-1:0.0: can't add hid device: -71 [ 1066.486993][ T2148] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1066.501116][ T2148] usb 2-1: USB disconnect, device number 67 [ 1066.696804][T12789] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1066.867161][T12789] usb 6-1: Using ep0 maxpacket: 32 [ 1066.875726][T12789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.895877][T12789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.906191][T12789] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1066.915760][T12789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.928643][T12789] usb 6-1: config 0 descriptor?? [ 1067.005183][ T5901] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1067.160664][T12789] usbhid 6-1:0.0: can't add hid device: -71 [ 1067.169161][T12789] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1067.178716][ T5901] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1067.194050][T12789] usb 6-1: USB disconnect, device number 12 [ 1067.202292][ T5901] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1067.223149][ T5901] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1067.232563][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.243932][T25265] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1067.254942][ T5901] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1067.471265][T12789] usb 5-1: USB disconnect, device number 19 [ 1069.047157][T25357] autofs: Unknown parameter './file1' [ 1069.397840][T25377] autofs: Unknown parameter './file1' [ 1069.560112][ T5818] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 1069.617596][T25390] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input93 [ 1069.836485][T25406] autofs: Unknown parameter './file1' [ 1069.853410][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.075162][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1070.235007][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1070.242420][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.254083][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.263945][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1070.273650][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.284771][ T9] usb 5-1: config 0 descriptor?? [ 1070.374009][ T5862] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1070.500414][T25425] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input94 [ 1070.532166][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1070.544249][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1070.545164][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 1070.557038][ T9] usb 5-1: USB disconnect, device number 20 [ 1070.574037][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.589721][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.600658][ T5862] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1070.612195][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.623873][ T5862] usb 6-1: config 0 descriptor?? [ 1070.718331][T25428] autofs: Bad value for 'fd' [ 1070.848007][ T5862] usbhid 6-1:0.0: can't add hid device: -71 [ 1070.854913][ T5862] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1070.868870][ T5862] usb 6-1: USB disconnect, device number 13 [ 1071.126689][T25450] autofs: Bad value for 'fd' [ 1071.434747][T25468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6795'. [ 1071.477643][T25470] autofs: Bad value for 'fd' [ 1071.688956][T25483] Set syz1 is full, maxelem 65536 reached [ 1071.839469][ T5862] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1071.935031][T24238] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1072.031989][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 1072.047459][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.060468][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.070431][ T5862] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1072.079830][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.091222][ T5862] usb 6-1: config 0 descriptor?? [ 1072.315798][ T5862] usbhid 6-1:0.0: can't add hid device: -71 [ 1072.325935][ T5862] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1072.338193][ T5862] usb 6-1: USB disconnect, device number 14 [ 1074.999019][T25494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1075.010003][T25536] netlink: 'syz.5.6823': attribute type 1 has an invalid length. [ 1075.018407][T25536] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6823'. [ 1075.040740][T25536] workqueue: Failed to create a rescuer kthread for wq "phy10-mac-cmds": -EINTR [ 1075.042919][T25538] netlink: 'syz.5.6823': attribute type 1 has an invalid length. [ 1075.092372][T25538] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6823'. [ 1075.466238][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6836'. [ 1075.479467][T25573] ------------[ cut here ]------------ [ 1075.485580][T25573] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 1075.497401][T25573] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2696 at mac80211_hwsim_sta_rc_update+0x696/0x860, CPU#0: syz.1.6836/25573 [ 1075.511789][T25573] Modules linked in: [ 1075.516364][T25573] CPU: 0 UID: 0 PID: 25573 Comm: syz.1.6836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.527981][T25573] Tainted: [L]=SOFTLOCKUP [ 1075.533146][T25573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1075.544344][T25573] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 1075.552549][T25573] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 a6 20 00 00 48 8b 7c 24 28 48 8b 74 24 30 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 e9 81 b6 fa 90 0f 0b [ 1075.572346][T25573] RSP: 0018:ffffc9000c0cee60 EFLAGS: 00010283 [ 1075.578437][T25573] RAX: 000000000000000a RBX: 0000000000000014 RCX: ffff88805d9c0ec0 [ 1075.586483][T25573] RDX: 0000000000000000 RSI: ffff88804e8e3002 RDI: ffffffff904047d0 [ 1075.594650][T25573] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 1075.602649][T25573] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 1075.610706][T25573] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 1075.619047][T25573] FS: 00007ff10f7ec6c0(0000) GS:ffff888125015000(0000) knlGS:0000000000000000 [ 1075.628174][T25573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1075.634771][T25573] CR2: 00007ff10e985dc0 CR3: 0000000038bea000 CR4: 00000000003526f0 [ 1075.642805][T25573] DR0: 0000000000000002 DR1: 00000000000001f8 DR2: 0000000000000083 [ 1075.651256][T25573] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1075.659861][T25573] Call Trace: [ 1075.663170][T25573] [ 1075.666124][T25573] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 1075.672182][T25573] mac80211_hwsim_sta_add+0xa4/0x350 [ 1075.677512][T25573] drv_sta_state+0x86a/0x1880 [ 1075.682261][T25573] sta_info_insert_rcu+0x1985/0x2730 [ 1075.687563][T25573] ? sta_info_insert_rcu+0x2dd/0x2730 [ 1075.693006][T25573] ? ieee80211_add_station+0x4f1/0x6a0 [ 1075.698486][T25573] sta_info_insert+0x16/0xc0 [ 1075.703128][T25573] rdev_add_station+0xfc/0x2c0 [ 1075.707909][T25573] nl80211_new_station+0x1864/0x1d30 [ 1075.713242][T25573] ? trace_contention_end+0x3d/0x150 [ 1075.718566][T25573] ? __pfx_nl80211_new_station+0x10/0x10 [ 1075.724716][T25573] ? ref_tracker_alloc+0x363/0x4d0 [ 1075.729881][T25573] ? nl80211_pre_doit+0x4d5/0x8e0 [ 1075.735439][T25573] genl_family_rcv_msg_doit+0x22a/0x330 [ 1075.741109][T25573] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1075.747381][T25573] ? bpf_lsm_capable+0x9/0x20 [ 1075.752089][T25573] ? security_capable+0x7e/0x2c0 [ 1075.757800][T25573] genl_rcv_msg+0x61c/0x7a0 [ 1075.762773][T25573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1075.767892][T25573] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1075.773279][T25573] ? __pfx_nl80211_new_station+0x10/0x10 [ 1075.779027][T25573] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1075.784509][T25573] ? __lock_acquire+0x6b5/0x2cf0 [ 1075.789589][T25573] netlink_rcv_skb+0x232/0x4b0 [ 1075.794372][T25573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1075.799433][T25573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1075.804915][T25573] ? down_read+0x272/0x2e0 [ 1075.809379][T25573] ? genl_rcv+0xd/0x40 [ 1075.813556][T25573] genl_rcv+0x28/0x40 [ 1075.817556][T25573] netlink_unicast+0x80f/0x9b0 [ 1075.822390][T25573] ? __pfx_netlink_unicast+0x10/0x10 [ 1075.827700][T25573] ? netlink_sendmsg+0x650/0xb40 [ 1075.833115][T25573] ? skb_put+0x11b/0x210 [ 1075.837711][T25573] netlink_sendmsg+0x813/0xb40 [ 1075.842788][T25573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.848098][T25573] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1075.854783][T25573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.860085][T25573] sock_sendmsg_nosec+0x18f/0x1d0 [ 1075.865886][T25573] ____sys_sendmsg+0x589/0x8c0 [ 1075.870684][T25573] ? futex_unqueue+0x211/0x240 [ 1075.876040][T25573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1075.881399][T25573] ? import_iovec+0x73/0xa0 [ 1075.886105][T25573] ___sys_sendmsg+0x2a5/0x360 [ 1075.891101][T25573] ? __pfx____sys_sendmsg+0x10/0x10 [ 1075.896413][T25573] ? futex_wait+0x29a/0x380 [ 1075.901538][T25573] ? __fget_files+0x2a/0x420 [ 1075.906209][T25573] ? __fget_files+0x3a0/0x420 [ 1075.911088][T25573] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1075.916590][T25573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1075.922082][T25573] do_syscall_64+0x14d/0xf80 [ 1075.926951][T25573] ? trace_irq_disable+0x3b/0x150 [ 1075.932103][T25573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.938385][T25573] ? clear_bhb_loop+0x40/0x90 [ 1075.943563][T25573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.949748][T25573] RIP: 0033:0x7ff10e99aeb9 [ 1075.954473][T25573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.975465][T25573] RSP: 002b:00007ff10f7ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.985196][T25573] RAX: ffffffffffffffda RBX: 00007ff10ec15fa0 RCX: 00007ff10e99aeb9 [ 1075.994240][T25573] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 1076.003801][T25573] RBP: 00007ff10ea08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1076.012685][T25573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1076.020717][T25573] R13: 00007ff10ec16038 R14: 00007ff10ec15fa0 R15: 00007ffe955ac318 [ 1076.028877][T25573] [ 1076.031964][T25573] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1076.039428][T25573] CPU: 0 UID: 0 PID: 25573 Comm: syz.1.6836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.050796][T25573] Tainted: [L]=SOFTLOCKUP [ 1076.055113][T25573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1076.065428][T25573] Call Trace: [ 1076.068713][T25573] [ 1076.071645][T25573] vpanic+0x56c/0xa60 [ 1076.075649][T25573] ? __pfx__printk+0x10/0x10 [ 1076.080232][T25573] ? __pfx_vpanic+0x10/0x10 [ 1076.084834][T25573] ? is_bpf_text_address+0x292/0x2b0 [ 1076.090147][T25573] ? is_bpf_text_address+0x26/0x2b0 [ 1076.095357][T25573] panic+0xc5/0xd0 [ 1076.099094][T25573] ? __pfx_panic+0x10/0x10 [ 1076.103525][T25573] __warn+0x315/0x4f0 [ 1076.107544][T25573] ? mac80211_hwsim_sta_rc_update+0x696/0x860 [ 1076.114054][T25573] ? mac80211_hwsim_sta_rc_update+0x696/0x860 [ 1076.120136][T25573] __report_bug+0x29a/0x540 [ 1076.124670][T25573] ? mac80211_hwsim_sta_rc_update+0x696/0x860 [ 1076.131025][T25573] ? __pfx___report_bug+0x10/0x10 [ 1076.136164][T25573] ? __lock_acquire+0x6b5/0x2cf0 [ 1076.141662][T25573] ? sta_info_insert_rcu+0x724/0x2730 [ 1076.147224][T25573] ? sta_info_insert+0x16/0xc0 [ 1076.151982][T25573] ? rdev_add_station+0xfc/0x2c0 [ 1076.157434][T25573] ? nl80211_new_station+0x1864/0x1d30 [ 1076.163409][T25573] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 1076.169232][T25573] report_bug_entry+0x19a/0x290 [ 1076.174083][T25573] ? mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 1076.180153][T25573] ? mac80211_hwsim_sta_rc_update+0x6f9/0x860 [ 1076.186393][T25573] handle_bug+0xca/0x200 [ 1076.190636][T25573] exc_invalid_op+0x1a/0x50 [ 1076.195320][T25573] asm_exc_invalid_op+0x1a/0x20 [ 1076.200345][T25573] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 1076.207292][T25573] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 a6 20 00 00 48 8b 7c 24 28 48 8b 74 24 30 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 e9 81 b6 fa 90 0f 0b [ 1076.226987][T25573] RSP: 0018:ffffc9000c0cee60 EFLAGS: 00010283 [ 1076.233139][T25573] RAX: 000000000000000a RBX: 0000000000000014 RCX: ffff88805d9c0ec0 [ 1076.241199][T25573] RDX: 0000000000000000 RSI: ffff88804e8e3002 RDI: ffffffff904047d0 [ 1076.249336][T25573] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 1076.257297][T25573] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 1076.265346][T25573] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 1076.273327][T25573] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 1076.279316][T25573] mac80211_hwsim_sta_add+0xa4/0x350 [ 1076.284606][T25573] drv_sta_state+0x86a/0x1880 [ 1076.289282][T25573] sta_info_insert_rcu+0x1985/0x2730 [ 1076.294652][T25573] ? sta_info_insert_rcu+0x2dd/0x2730 [ 1076.300025][T25573] ? ieee80211_add_station+0x4f1/0x6a0 [ 1076.305481][T25573] sta_info_insert+0x16/0xc0 [ 1076.310084][T25573] rdev_add_station+0xfc/0x2c0 [ 1076.314931][T25573] nl80211_new_station+0x1864/0x1d30 [ 1076.320205][T25573] ? trace_contention_end+0x3d/0x150 [ 1076.325498][T25573] ? __pfx_nl80211_new_station+0x10/0x10 [ 1076.331120][T25573] ? ref_tracker_alloc+0x363/0x4d0 [ 1076.336243][T25573] ? nl80211_pre_doit+0x4d5/0x8e0 [ 1076.341454][T25573] genl_family_rcv_msg_doit+0x22a/0x330 [ 1076.347037][T25573] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1076.353230][T25573] ? bpf_lsm_capable+0x9/0x20 [ 1076.357917][T25573] ? security_capable+0x7e/0x2c0 [ 1076.362862][T25573] genl_rcv_msg+0x61c/0x7a0 [ 1076.367476][T25573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1076.372499][T25573] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1076.378272][T25573] ? __pfx_nl80211_new_station+0x10/0x10 [ 1076.383904][T25573] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1076.389362][T25573] ? __lock_acquire+0x6b5/0x2cf0 [ 1076.394305][T25573] netlink_rcv_skb+0x232/0x4b0 [ 1076.399148][T25573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1076.404176][T25573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1076.409470][T25573] ? down_read+0x272/0x2e0 [ 1076.413908][T25573] ? genl_rcv+0xd/0x40 [ 1076.417987][T25573] genl_rcv+0x28/0x40 [ 1076.421988][T25573] netlink_unicast+0x80f/0x9b0 [ 1076.426758][T25573] ? __pfx_netlink_unicast+0x10/0x10 [ 1076.432201][T25573] ? netlink_sendmsg+0x650/0xb40 [ 1076.437284][T25573] ? skb_put+0x11b/0x210 [ 1076.441633][T25573] netlink_sendmsg+0x813/0xb40 [ 1076.446753][T25573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.452031][T25573] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1076.458452][T25573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.463825][T25573] sock_sendmsg_nosec+0x18f/0x1d0 [ 1076.468864][T25573] ____sys_sendmsg+0x589/0x8c0 [ 1076.473617][T25573] ? futex_unqueue+0x211/0x240 [ 1076.478377][T25573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1076.483847][T25573] ? import_iovec+0x73/0xa0 [ 1076.488339][T25573] ___sys_sendmsg+0x2a5/0x360 [ 1076.493022][T25573] ? __pfx____sys_sendmsg+0x10/0x10 [ 1076.498236][T25573] ? futex_wait+0x29a/0x380 [ 1076.502755][T25573] ? __fget_files+0x2a/0x420 [ 1076.507345][T25573] ? __fget_files+0x3a0/0x420 [ 1076.512031][T25573] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1076.516973][T25573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1076.522466][T25573] do_syscall_64+0x14d/0xf80 [ 1076.527146][T25573] ? trace_irq_disable+0x3b/0x150 [ 1076.532172][T25573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.538235][T25573] ? clear_bhb_loop+0x40/0x90 [ 1076.542912][T25573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.548882][T25573] RIP: 0033:0x7ff10e99aeb9 [ 1076.553297][T25573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.573016][T25573] RSP: 002b:00007ff10f7ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.581424][T25573] RAX: ffffffffffffffda RBX: 00007ff10ec15fa0 RCX: 00007ff10e99aeb9 [ 1076.589387][T25573] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 1076.597625][T25573] RBP: 00007ff10ea08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1076.605808][T25573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1076.613791][T25573] R13: 00007ff10ec16038 R14: 00007ff10ec15fa0 R15: 00007ffe955ac318 [ 1076.621944][T25573] [ 1076.625370][T25573] Kernel Offset: disabled [ 1076.629675][T25573] Rebooting in 86400 seconds..