last executing test programs: 2.055862799s ago: executing program 1 (id=2947): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bind$inet(r0, 0x0, 0x0) 2.023005913s ago: executing program 1 (id=2948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) pipe(&(0x7f0000000440)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.988969076s ago: executing program 1 (id=2949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in6=@local, 0x0, 0x0, 0x3, 0x3, 0x49}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) 1.121050743s ago: executing program 1 (id=2957): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000700)={0x2, 0x0, {&(0x7f0000000d40)=""/154, 0x9a, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000cc0)={0x2, 0x0, {&(0x7f0000000bc0)=""/233, 0xe9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000a00)=""/264, 0x108, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 1.059844149s ago: executing program 1 (id=2959): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 987.764692ms ago: executing program 0 (id=2961): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) syz_usb_connect(0x0, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090400000002020100022406"], 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190003000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x1000000) 785.212719ms ago: executing program 2 (id=2962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x4, 0xbe, 0x3, 0xe}]}}, {0x4e20, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}, "e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73eacb24c20d9d92e5f83e219b0692a1a8fb9c1dea766ac3456d"}}}}, 0x73) 673.417816ms ago: executing program 2 (id=2964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 600.704998ms ago: executing program 3 (id=2966): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000a40)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000006c0)={r2, @in6={{0xa, 0x4e24, 0x100, @empty, 0xc}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 515.922733ms ago: executing program 3 (id=2967): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 515.482317ms ago: executing program 2 (id=2968): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 515.314519ms ago: executing program 3 (id=2969): setregid(0x0, 0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='personality\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x400) 478.219071ms ago: executing program 2 (id=2970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x105aa) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 451.639164ms ago: executing program 3 (id=2971): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 423.780417ms ago: executing program 0 (id=2972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000009ffffffffffffbbbbbbbbbbbb0806000108000604"], 0x7b) 343.989731ms ago: executing program 3 (id=2973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 323.998004ms ago: executing program 3 (id=2974): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000480), 0x12) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000040)=""/45, 0x2d}], 0x2) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="600acf5a9bd524eb24b523c439cde580f4875be389db78d63b3d819f4ae9d669dc89ed29af345bc3f178634058e6f9d401a90a29ede83384345b16d1360611718f399724394fc9a862c79c9050605acd", 0x50}], 0x1, 0x0, 0x0, 0x4c040}], 0x1, 0x24000804) 266.35199ms ago: executing program 0 (id=2975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 187.400815ms ago: executing program 0 (id=2976): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x144) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000010c0)='./file0/file0\x00', 0x8) 186.967585ms ago: executing program 2 (id=2977): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4a22, 0x0, @local, 0xb}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 170.875417ms ago: executing program 1 (id=2978): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(0x3) 139.221437ms ago: executing program 0 (id=2979): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x23c, 0x0, 0x0, "0600323ef77d1f000085c1f721c3edc2a000"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r4, r2, r3, 0x0, 0x20, 0x3}) 126.802064ms ago: executing program 2 (id=2980): pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000040)=0x6bf1, 0x4) shutdown(r0, 0x1) 0s ago: executing program 0 (id=2981): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) kernel console output (not intermixed with test programs): [ 70.919737][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.945669][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.959729][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.982164][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.989203][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.015551][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.068560][ T5827] team0: Port device team_slave_0 added [ 71.109493][ T5827] team0: Port device team_slave_1 added [ 71.117529][ T5825] team0: Port device team_slave_0 added [ 71.127567][ T5825] team0: Port device team_slave_1 added [ 71.138355][ T5828] hsr_slave_0: entered promiscuous mode [ 71.145105][ T5828] hsr_slave_1: entered promiscuous mode [ 71.220732][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.229538][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.256234][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.263251][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.289278][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.302645][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.309665][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.336531][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.348822][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.356562][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.382591][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.399619][ T5826] hsr_slave_0: entered promiscuous mode [ 71.406307][ T5826] hsr_slave_1: entered promiscuous mode [ 71.412681][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 71.418525][ T5826] Cannot create hsr debugfs directory [ 71.439869][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.446900][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.473300][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.473484][ T5835] Bluetooth: hci3: command tx timeout [ 71.533841][ T5831] Bluetooth: hci2: command tx timeout [ 71.533855][ T5838] Bluetooth: hci0: command tx timeout [ 71.545380][ T5835] Bluetooth: hci1: command tx timeout [ 71.560630][ T5827] hsr_slave_0: entered promiscuous mode [ 71.569529][ T5827] hsr_slave_1: entered promiscuous mode [ 71.576044][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 71.581763][ T5827] Cannot create hsr debugfs directory [ 71.652052][ T5825] hsr_slave_0: entered promiscuous mode [ 71.658717][ T5825] hsr_slave_1: entered promiscuous mode [ 71.665236][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 71.670957][ T5825] Cannot create hsr debugfs directory [ 72.072742][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.085791][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.099127][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.117092][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.161310][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.174534][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.187951][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.215952][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.294704][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.309316][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.320324][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.330744][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.436789][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.464433][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.474721][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.486419][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.556329][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.587134][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.632314][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.651753][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.659039][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.693118][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.700224][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.719187][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.749584][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.756687][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.771403][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.826549][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.833722][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.916196][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.949824][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.957013][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.978538][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.006887][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.024879][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.032031][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.115278][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.162273][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.169463][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.217783][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.224975][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.299727][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.340715][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.522183][ T5826] veth0_vlan: entered promiscuous mode [ 73.531972][ T5828] veth0_vlan: entered promiscuous mode [ 73.533649][ T5831] Bluetooth: hci3: command tx timeout [ 73.555980][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.569202][ T5828] veth1_vlan: entered promiscuous mode [ 73.595545][ T5826] veth1_vlan: entered promiscuous mode [ 73.616207][ T5831] Bluetooth: hci2: command tx timeout [ 73.621614][ T5831] Bluetooth: hci1: command tx timeout [ 73.631000][ T5835] Bluetooth: hci0: command tx timeout [ 73.679389][ T5826] veth0_macvtap: entered promiscuous mode [ 73.713275][ T5826] veth1_macvtap: entered promiscuous mode [ 73.729575][ T5828] veth0_macvtap: entered promiscuous mode [ 73.759044][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.776871][ T5828] veth1_macvtap: entered promiscuous mode [ 73.806266][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.829397][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.840995][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.851776][ T5827] veth0_vlan: entered promiscuous mode [ 73.872762][ T1317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.890885][ T5827] veth1_vlan: entered promiscuous mode [ 73.904875][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.912128][ T1317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.922872][ T1317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.952972][ T1317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.970999][ T1317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.987020][ T1317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.997257][ T1317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.035292][ T1317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.110668][ T5825] veth0_vlan: entered promiscuous mode [ 74.129421][ T5827] veth0_macvtap: entered promiscuous mode [ 74.159239][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.160127][ T5825] veth1_vlan: entered promiscuous mode [ 74.167376][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.189607][ T5827] veth1_macvtap: entered promiscuous mode [ 74.256889][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.273851][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.285965][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.293228][ T686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.304460][ T686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.331841][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.363065][ T1317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.374116][ T1317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.396534][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.406805][ T1317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.407589][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.421559][ T1317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.437769][ T5825] veth0_macvtap: entered promiscuous mode [ 74.455592][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.466440][ T5825] veth1_macvtap: entered promiscuous mode [ 74.628941][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.638357][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.658645][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.663369][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.693044][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.706491][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.717596][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.765894][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.795950][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.812902][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.892609][ T5929] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.079575][ T5936] netlink: 'syz.0.9': attribute type 21 has an invalid length. [ 75.099498][ T5936] netlink: 'syz.0.9': attribute type 22 has an invalid length. [ 75.109129][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.118046][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.140447][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.202033][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.243409][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.615158][ T5831] Bluetooth: hci3: command tx timeout [ 75.692113][ T5830] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.703592][ T5831] Bluetooth: hci1: command tx timeout [ 75.708996][ T5831] Bluetooth: hci0: command tx timeout [ 75.714470][ T5835] Bluetooth: hci2: command tx timeout [ 75.866299][ T5830] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 75.875752][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.890223][ T5830] usb 1-1: config 0 descriptor?? [ 75.951600][ T5830] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 76.739981][ T5830] gspca_sunplus: reg_w_riv err -71 [ 76.763931][ T5830] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 76.814489][ T5830] usb 1-1: USB disconnect, device number 2 [ 76.935208][ T5986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.27'. [ 77.443623][ T54] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.615207][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 77.643034][ T54] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 77.660694][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.675036][ T54] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 77.689579][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.701290][ T54] usb 3-1: Product: syz [ 77.703085][ T5831] Bluetooth: hci3: command tx timeout [ 77.709533][ T54] usb 3-1: Manufacturer: syz [ 77.715779][ T54] usb 3-1: SerialNumber: syz [ 77.726771][ T54] usb 3-1: config 0 descriptor?? [ 77.766938][ T54] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 77.780034][ T54] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 77.788121][ T5831] Bluetooth: hci0: command tx timeout [ 77.794189][ T5831] Bluetooth: hci2: command tx timeout [ 77.800080][ T5831] Bluetooth: hci1: command tx timeout [ 77.864130][ T6001] block nbd1: shutting down sockets [ 78.245433][ T6013] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 78.252071][ T6013] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.288738][ T6013] vhci_hcd vhci_hcd.0: Device attached [ 78.308053][ T6014] vhci_hcd: connection closed [ 78.309056][ T1317] vhci_hcd vhci_hcd.0: stop threads [ 78.319750][ T1317] vhci_hcd vhci_hcd.0: release socket [ 78.325530][ T1317] vhci_hcd vhci_hcd.0: disconnect device [ 78.385017][ T54] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 78.402433][ T54] em28xx 3-1:0.0: Config register raw data: 0x73 [ 78.411445][ T54] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 78.419413][ T54] em28xx 3-1:0.0: No AC97 audio processor [ 78.583493][ T5830] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.695933][ T6026] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 78.744749][ T5830] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.755113][ T5830] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.765002][ T5830] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 78.774846][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.782839][ T5830] usb 4-1: SerialNumber: syz [ 78.805459][ T54] usb 3-1: USB disconnect, device number 2 [ 78.907564][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.024118][ T5830] usb 4-1: 0:2 : does not exist [ 79.071474][ T5830] usb 4-1: USB disconnect, device number 2 [ 79.098629][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.412047][ T6041] netlink: 56 bytes leftover after parsing attributes in process `syz.2.50'. [ 79.529699][ T35] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 79.657702][ T6052] netlink: 116 bytes leftover after parsing attributes in process `syz.3.52'. [ 79.747215][ T6055] syz.2.55 uses obsolete (PF_INET,SOCK_PACKET) [ 80.293396][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.300918][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bceec00: rx timeout, send abort [ 80.310149][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bceec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 80.478516][ T54] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 80.488728][ T54] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 80.504644][ T54] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 80.523412][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.531558][ T54] usb 4-1: Product: syz [ 80.536181][ T54] usb 4-1: Manufacturer: syz [ 80.540848][ T54] usb 4-1: SerialNumber: syz [ 80.551480][ T54] usb 4-1: config 0 descriptor?? [ 80.564476][ T6071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.572033][ T6071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.788657][ T6071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.805339][ T6071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.219018][ T54] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 81.422183][ T54] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 81.463901][ T54] usb 4-1: USB disconnect, device number 3 [ 81.517275][ T9] cfg80211: failed to load regulatory.db [ 81.886249][ T6128] netlink: 176 bytes leftover after parsing attributes in process `syz.1.88'. [ 82.425117][ T6147] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 83.298987][ T6192] capability: warning: `syz.2.116' uses deprecated v2 capabilities in a way that may be insecure [ 83.737126][ T5921] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.920001][ T5921] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.949159][ T5921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.970646][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 83.997144][ T5921] usb 4-1: SerialNumber: syz [ 84.505590][ T6240] netlink: 'syz.2.137': attribute type 3 has an invalid length. [ 84.689770][ T5921] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 85.078675][ T806] usb 4-1: USB disconnect, device number 4 [ 85.095353][ T806] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 85.550891][ T6288] mmap: syz.2.163 (6288) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.712111][ T6298] netlink: 642 bytes leftover after parsing attributes in process `syz.2.156'. [ 85.820825][ T6306] batadv_slave_0: entered promiscuous mode [ 85.830388][ T6304] batadv_slave_0: left promiscuous mode [ 85.973470][ T806] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.125517][ T806] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.136998][ T54] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 86.146658][ T806] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.159622][ T806] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.172692][ T806] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 86.188296][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.201559][ T806] usb 2-1: config 0 descriptor?? [ 86.313407][ T5921] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.316305][ T54] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.330774][ T54] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.344066][ T54] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.353106][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.426179][ T806] usbhid 2-1:0.0: can't add hid device: -71 [ 86.436062][ T806] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 86.447952][ T806] usb 2-1: USB disconnect, device number 2 [ 86.465679][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.476519][ T5921] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 86.486378][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.498949][ T5921] usb 3-1: config 0 descriptor?? [ 86.509284][ T5921] pwc: Askey VC010 type 2 USB webcam detected. [ 86.570368][ T54] usb 4-1: usb_control_msg returned -32 [ 86.582283][ T54] usbtmc 4-1:16.0: can't read capabilities [ 86.910798][ T5921] pwc: recv_control_msg error -32 req 02 val 2b00 [ 86.918302][ T5921] pwc: recv_control_msg error -32 req 02 val 2700 [ 86.925741][ T5921] pwc: recv_control_msg error -32 req 02 val 2c00 [ 86.945584][ T6328] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 86.954264][ T806] usb 4-1: USB disconnect, device number 5 [ 87.135743][ T5921] pwc: recv_control_msg error -71 req 04 val 1300 [ 87.142537][ T5921] pwc: recv_control_msg error -71 req 04 val 1400 [ 87.150310][ T5921] pwc: recv_control_msg error -71 req 02 val 2000 [ 87.157141][ T5921] pwc: recv_control_msg error -71 req 02 val 2100 [ 87.164083][ T5921] pwc: recv_control_msg error -71 req 04 val 1500 [ 87.171385][ T5921] pwc: recv_control_msg error -71 req 02 val 2500 [ 87.178566][ T5921] pwc: recv_control_msg error -71 req 02 val 2400 [ 87.185305][ T5921] pwc: recv_control_msg error -71 req 02 val 2600 [ 87.191996][ T5921] pwc: recv_control_msg error -71 req 02 val 2900 [ 87.198796][ T5921] pwc: recv_control_msg error -71 req 02 val 2800 [ 87.205616][ T5921] pwc: recv_control_msg error -71 req 04 val 1100 [ 87.212295][ T5921] pwc: recv_control_msg error -71 req 04 val 1200 [ 87.228509][ T5921] pwc: Registered as video103. [ 87.233415][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.243927][ T5921] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 87.274179][ T5921] usb 3-1: USB disconnect, device number 3 [ 87.413376][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 87.421359][ T5830] usb 2-1: config 0 has an invalid interface number: 240 but max is 0 [ 87.429616][ T5830] usb 2-1: config 0 has no interface number 0 [ 87.437783][ T5830] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 87.446881][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.454933][ T5830] usb 2-1: Product: syz [ 87.459068][ T5830] usb 2-1: Manufacturer: syz [ 87.463675][ T5830] usb 2-1: SerialNumber: syz [ 87.474857][ T5830] usb 2-1: config 0 descriptor?? [ 87.489104][ T5830] gspca_main: spca508-2.14.0 probing 041e:4018 [ 87.723735][ T5830] gspca_spca508: reg_read err -32 [ 87.733021][ T5830] gspca_spca508: reg_read err -32 [ 87.751560][ T5830] gspca_spca508: reg_read err -32 [ 87.762331][ T5830] gspca_spca508: reg_read err -32 [ 87.968806][ T5830] gspca_spca508: reg write: error -71 [ 87.975286][ T5830] spca508 2-1:0.240: probe with driver spca508 failed with error -71 [ 87.992519][ T5830] usb 2-1: USB disconnect, device number 3 [ 88.463784][ T6353] netlink: 'syz.3.174': attribute type 10 has an invalid length. [ 88.475691][ T6353] netlink: 55 bytes leftover after parsing attributes in process `syz.3.174'. [ 89.055843][ T6376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.344730][ T5830] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 89.517133][ T5830] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 89.541328][ T5830] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 89.556811][ T6399] syzkaller1: entered promiscuous mode [ 89.558186][ T5830] usb 4-1: Product: syz [ 89.562764][ T6399] syzkaller1: entered allmulticast mode [ 89.571147][ T5830] usb 4-1: Manufacturer: syz [ 89.578097][ T5830] usb 4-1: SerialNumber: syz [ 89.598015][ T5830] usb 4-1: config 0 descriptor?? [ 89.610127][ T5830] ch341 4-1:0.0: ch341-uart converter detected [ 90.237035][ T6419] input: syz0 as /devices/virtual/input/input6 [ 90.627562][ T5830] ch341-uart ttyUSB0: failed to read break control: -71 [ 90.635612][ T5830] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 90.647389][ T5830] usb 4-1: USB disconnect, device number 6 [ 90.656264][ T5830] ch341 4-1:0.0: device disconnected [ 90.713446][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 90.753418][ T5894] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.865311][ T9] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 90.873838][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.883957][ T9] usb 2-1: config 0 has no interfaces? [ 90.889419][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 90.898453][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.909059][ T9] usb 2-1: config 0 descriptor?? [ 90.913385][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 90.924830][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.935892][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.946134][ T5894] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.955282][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.965554][ T5894] usb 3-1: config 0 descriptor?? [ 90.972969][ T5894] hub 3-1:0.0: USB hub found [ 91.124209][ T806] usb 2-1: USB disconnect, device number 4 [ 91.181226][ T5894] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 91.270115][ T6434] kvm: kvm [6433]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 91.279237][ T6434] kvm: kvm [6433]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 91.397196][ T5894] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 91.421293][ T5894] hid-generic 0003:046D:C31C.0001: probe with driver hid-generic failed with error -22 [ 91.733643][ T5830] usb 3-1: USB disconnect, device number 4 [ 92.216779][ T6469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.283466][ T6467] kvm: kvm [6466]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 92.292227][ T6467] kvm: kvm [6466]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 92.373752][ T5830] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 92.539355][ T5830] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 92.548000][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.560724][ T5830] usb 4-1: config 0 has no interfaces? [ 92.573390][ T5830] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 92.593375][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.611239][ T5830] usb 4-1: config 0 descriptor?? [ 92.663457][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 92.825072][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.835132][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.850394][ T54] usb 4-1: USB disconnect, device number 7 [ 92.869379][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.880070][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.111273][ T9] usb 2-1: usb_control_msg returned -32 [ 93.117017][ T9] usbtmc 2-1:16.0: can't read capabilities [ 93.452674][ T6487] Invalid ELF header magic: != ELF [ 93.484028][ T6488] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -32 [ 93.500059][ T5894] usb 2-1: USB disconnect, device number 5 [ 94.293947][ T806] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.471225][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 94.503776][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.517138][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.529176][ T806] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.538807][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.568575][ T806] usb 3-1: config 0 descriptor?? [ 94.585363][ T806] hub 3-1:0.0: USB hub found [ 94.793464][ T54] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.812989][ T806] hub 3-1:0.0: 1 port detected [ 94.833609][ T6533] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 94.986238][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.014272][ T54] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 95.035666][ T54] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.046463][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.056090][ T54] usb 2-1: Product: syz [ 95.060941][ T54] usb 2-1: Manufacturer: syz [ 95.065986][ T54] usb 2-1: SerialNumber: syz [ 95.080879][ T54] cdc_mbim 2-1:1.0: skipping garbage [ 95.235077][ T6552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.285359][ T6525] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.294325][ T6554] netlink: 14 bytes leftover after parsing attributes in process `syz.0.267'. [ 95.435375][ T5894] hub 3-1:0.0: activate --> -90 [ 95.859250][ T5894] usb 3-1-port1: config error [ 95.859571][ T5830] usb 3-1: USB disconnect, device number 5 [ 95.913917][ T6525] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.926561][ T54] cdc_mbim 2-1:1.0: dwNtbInMaxSize=64 is too small. Using 2048 [ 95.935262][ T54] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 96.136394][ T54] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 96.143642][ T54] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 96.153602][ T54] wwan wwan0: port wwan0mbim0 attached [ 96.164637][ T54] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, a2:43:60:1c:fd:5d [ 96.183927][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 96.354581][ T9] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 96.382783][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.396809][ T5921] usb 2-1: USB disconnect, device number 6 [ 96.406227][ T5921] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 96.435775][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 96.460229][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.498341][ T9] usb 4-1: Product: syz [ 96.515678][ T9] usb 4-1: Manufacturer: syz [ 96.527978][ T9] usb 4-1: SerialNumber: syz [ 96.540230][ T5921] wwan wwan0: port wwan0mbim0 disconnected [ 96.551187][ T9] usb 4-1: config 0 descriptor?? [ 96.574298][ T9] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 96.600632][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 96.619765][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 96.627799][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 96.664524][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 96.672199][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 96.690176][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 96.713867][ T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 96.735579][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 96.753442][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 96.764198][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 96.777860][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 96.791995][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 96.810863][ T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 96.831201][ T9] usb 4-1: USB disconnect, device number 8 [ 96.872294][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 96.905007][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 96.927536][ T9] keyspan 4-1:0.0: device disconnected [ 97.273391][ T54] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 97.435941][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 97.447980][ T54] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 97.466817][ T54] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 97.476488][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.501352][ T54] usb 2-1: config 0 descriptor?? [ 97.509138][ T6616] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.633610][ T806] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 97.784677][ T806] usb 4-1: Using ep0 maxpacket: 16 [ 97.793741][ T806] usb 4-1: config 0 has an invalid interface number: 240 but max is 0 [ 97.802166][ T806] usb 4-1: config 0 has no interface number 0 [ 97.813583][ T806] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 97.822847][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.831459][ T806] usb 4-1: Product: syz [ 97.836427][ T806] usb 4-1: Manufacturer: syz [ 97.841157][ T806] usb 4-1: SerialNumber: syz [ 97.864012][ T806] usb 4-1: config 0 descriptor?? [ 97.872985][ T806] gspca_main: spca508-2.14.0 probing 041e:4018 [ 97.936227][ T54] hid-corsair-void 0003:1B1C:0A0F.0002: hidraw0: USB HID vff.ff Device [HID 1b1c:0a0f] on usb-dummy_hcd.1-1/input0 [ 98.076431][ T806] gspca_spca508: reg_read err -32 [ 98.095065][ T806] gspca_spca508: reg_read err -32 [ 98.104282][ T806] gspca_spca508: reg_read err -32 [ 98.114822][ T806] gspca_spca508: reg_read err -32 [ 98.153691][ T5887] hid-corsair-void 0003:1B1C:0A0F.0002: failed to request firmware (reason: -71) [ 98.153912][ T5921] usb 2-1: USB disconnect, device number 7 [ 98.163099][ T54] hid-corsair-void 0003:1B1C:0A0F.0002: failed to request battery (reason: -71) [ 98.325698][ T806] gspca_spca508: reg write: error -71 [ 98.331171][ T806] spca508 4-1:0.240: probe with driver spca508 failed with error -71 [ 98.355249][ T806] usb 4-1: USB disconnect, device number 9 [ 100.560392][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 100.828233][ T6703] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.336183][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 101.953420][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.975531][ T5921] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 102.120921][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 102.130066][ T5830] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 102.141164][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.141189][ T5830] usb 2-1: Product: syz [ 102.141203][ T5830] usb 2-1: Manufacturer: syz [ 102.141216][ T5830] usb 2-1: SerialNumber: syz [ 102.145149][ T5921] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 102.145190][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.145214][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.145234][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 102.146182][ T5921] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 102.146208][ T5921] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 102.146228][ T5921] usb 4-1: Manufacturer: syz [ 102.149009][ T5921] usb 4-1: config 0 descriptor?? [ 102.150145][ T5830] usb 2-1: config 0 descriptor?? [ 102.460012][ T5830] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 102.585207][ T5921] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 102.626084][ T5921] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 102.636128][ T6775] input: syz1 as /devices/virtual/input/input7 [ 102.680535][ T806] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.714271][ T806] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 102.943432][ T5921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.106329][ T5921] usb 1-1: config 0 has no interfaces? [ 103.112918][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.122035][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.130193][ T5921] usb 1-1: SerialNumber: syz [ 103.137661][ T5921] usb 1-1: config 0 descriptor?? [ 103.422310][ T5921] usb 4-1: USB disconnect, device number 10 [ 103.426028][ T806] usb 1-1: USB disconnect, device number 3 [ 103.683796][ T5830] usb write operation failed. (-71) [ 103.693068][ T5830] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.705978][ T5830] dvbdev: DVB: registering new adapter (Terratec H7) [ 103.712887][ T5830] usb 2-1: media controller created [ 103.718797][ T5830] usb read operation failed. (-71) [ 103.724407][ T5830] usb write operation failed. (-71) [ 103.733567][ T5830] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 103.745856][ T5830] usb 2-1: USB disconnect, device number 8 [ 104.395860][ T6812] evm: overlay not supported [ 104.703401][ T5830] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.854862][ T5830] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.866224][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.877527][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.887695][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.902109][ T5830] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.911794][ T5830] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.920250][ T5830] usb 1-1: Manufacturer: syz [ 104.928120][ T5830] usb 1-1: config 0 descriptor?? [ 105.019957][ T6822] input: syz1 as /devices/virtual/input/input8 [ 105.349047][ T5830] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 105.369522][ T5830] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 106.176905][ T5887] usb 1-1: USB disconnect, device number 4 [ 106.265861][ T6877] ======================================================= [ 106.265861][ T6877] WARNING: The mand mount option has been deprecated and [ 106.265861][ T6877] and is ignored by this kernel. Remove the mand [ 106.265861][ T6877] option from the mount to silence this warning. [ 106.265861][ T6877] ======================================================= [ 106.680263][ T6895] syzkaller1: entered promiscuous mode [ 106.685881][ T6895] syzkaller1: entered allmulticast mode [ 108.045661][ T6922] syzkaller1: entered promiscuous mode [ 108.055261][ T6922] syzkaller1: entered allmulticast mode [ 108.170405][ T6927] 9pnet: p9_errstr2errno: server reported unknown error -tun [ 108.549196][ T6947] netlink: 'syz.2.421': attribute type 21 has an invalid length. [ 108.578580][ T6947] netlink: 164 bytes leftover after parsing attributes in process `syz.2.421'. [ 108.903476][ T5901] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.063497][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 109.075933][ T5901] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 109.099804][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.109305][ T5901] usb 3-1: Product: syz [ 109.113582][ T5901] usb 3-1: Manufacturer: syz [ 109.118190][ T5901] usb 3-1: SerialNumber: syz [ 109.126227][ T5901] usb 3-1: config 0 descriptor?? [ 109.340438][ T5901] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 110.247885][ T6990] 9pnet: p9_errstr2errno: server reported unknown error -tun [ 110.564927][ T5901] usb write operation failed. (-71) [ 110.593530][ T5901] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 110.623129][ T5901] dvbdev: DVB: registering new adapter (Terratec H7) [ 110.638952][ T5901] usb 3-1: media controller created [ 110.646256][ T5901] usb read operation failed. (-71) [ 110.651765][ T5901] usb write operation failed. (-71) [ 110.661966][ T5901] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 110.752814][ T5901] usb 3-1: USB disconnect, device number 6 [ 111.353382][ T806] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 111.506327][ T806] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.516222][ T806] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.529893][ T806] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.539646][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.763993][ T806] usb 4-1: usb_control_msg returned -32 [ 111.769586][ T806] usbtmc 4-1:16.0: can't read capabilities [ 112.443397][ T5830] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.595160][ T5830] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.613365][ T5830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.623781][ T5830] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.633129][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.658276][ T5830] usb 3-1: SerialNumber: syz [ 112.882169][ T7081] program syz.1.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.882904][ T5830] usb 3-1: 0:2 : does not exist [ 112.933858][ T5921] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.948770][ T5830] usb 3-1: USB disconnect, device number 7 [ 112.997181][ T7085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.010193][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.123396][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 113.130325][ T5921] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.141454][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.148248][ T5921] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 113.157344][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.167352][ T5921] usb 1-1: config 0 descriptor?? [ 113.293627][ T806] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.444928][ T806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.456298][ T806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.466587][ T806] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.491330][ T806] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.503145][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.518796][ T806] usb 2-1: config 0 descriptor?? [ 113.592914][ T5921] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 113.947494][ T806] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 113.955089][ T806] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 113.971258][ T806] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 114.010494][ T806] usb 1-1: USB disconnect, device number 5 [ 114.119877][ T5830] usb 4-1: USB disconnect, device number 11 [ 114.162948][ T5921] usb 2-1: USB disconnect, device number 9 [ 114.903544][ T7116] syzkaller1: entered promiscuous mode [ 114.921202][ T7116] syzkaller1: entered allmulticast mode [ 115.023637][ T806] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 115.087201][ T7130] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 115.121920][ T7130] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 115.200805][ T7134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.206336][ T806] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.227649][ T806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.255476][ T806] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.271852][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.303639][ T806] usb 2-1: SerialNumber: syz [ 115.559294][ T806] usb 2-1: 0:2 : does not exist [ 115.657908][ T806] usb 2-1: USB disconnect, device number 10 [ 115.796908][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.902621][ T7185] kvm: user requested TSC rate below hardware speed [ 117.194340][ T54] psmouse serio2: Failed to reset mouse on : -5 [ 118.207948][ T7235] syzkaller1: entered promiscuous mode [ 118.214623][ T7235] syzkaller1: entered allmulticast mode [ 118.510460][ T7248] netlink: 'syz.3.547': attribute type 4 has an invalid length. [ 118.526519][ T7248] netlink: 'syz.3.547': attribute type 4 has an invalid length. [ 119.429986][ T7261] syzkaller1: entered promiscuous mode [ 119.435741][ T7261] syzkaller1: entered allmulticast mode [ 120.650665][ T7327] netlink: 25 bytes leftover after parsing attributes in process `syz.3.584'. [ 120.693921][ T7327] netlink: 'syz.3.584': attribute type 4 has an invalid length. [ 121.013620][ T54] misc userio: Buffer overflowed, userio client isn't keeping up [ 121.202296][ T7360] netlink: 25 bytes leftover after parsing attributes in process `syz.0.595'. [ 121.223260][ T7360] netlink: 'syz.0.595': attribute type 4 has an invalid length. [ 121.277467][ T7363] IPv4: Oversized IP packet from 127.202.26.0 [ 121.389443][ T7370] raw_sendmsg: syz.3.600 forgot to set AF_INET. Fix it! [ 122.067696][ T54] input: PS/2 Generic Mouse as /devices/serio2/input/input10 [ 122.294916][ T54] psmouse serio2: Failed to enable mouse on [ 123.691379][ T7434] kvm: MONITOR instruction emulated as NOP! [ 124.014242][ T7449] trusted_key: syz.0.632 sent an empty control message without MSG_MORE. [ 124.455732][ T29] audit: type=1326 audit(1771352509.707:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.2.636" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09eb39c629 code=0x0 [ 125.113385][ T806] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 125.268327][ T7489] input: syz0 as /devices/virtual/input/input11 [ 125.288525][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 125.302669][ T806] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 125.333574][ T806] usb 4-1: config 0 has no interface number 0 [ 125.339692][ T806] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 125.362023][ T806] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 125.372107][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.392617][ T806] usb 4-1: Product: syz [ 125.397229][ T806] usb 4-1: Manufacturer: syz [ 125.401851][ T806] usb 4-1: SerialNumber: syz [ 125.421389][ T806] usb 4-1: config 0 descriptor?? [ 125.434798][ T7474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.646767][ T7474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.724225][ T5921] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.883394][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 125.897332][ T5921] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 125.907047][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.933375][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.945046][ T5921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.955009][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.963003][ T5921] usb 3-1: Product: syz [ 125.968013][ T5921] usb 3-1: Manufacturer: syz [ 125.972616][ T5921] usb 3-1: SerialNumber: syz [ 126.113452][ T24] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 126.264880][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.275732][ T24] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 126.285981][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.300332][ T24] usb 2-1: config 0 descriptor?? [ 126.387027][ T5921] usb 3-1: 0:2 : does not exist [ 126.677648][ T806] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 126.688250][ T806] asix 4-1:0.188: probe with driver asix failed with error -71 [ 126.699956][ T806] usb 4-1: USB disconnect, device number 12 [ 126.723041][ T24] cherry 0003:046A:0023.0008: hidraw0: USB HID v10.00 Device [HID 046a:0023] on usb-dummy_hcd.1-1/input0 [ 126.920839][ T5901] usb 2-1: USB disconnect, device number 11 [ 126.999464][ T5921] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 127.034026][ T5921] usb 3-1: USB disconnect, device number 8 [ 129.993398][ T806] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 130.154057][ T806] usb 2-1: Using ep0 maxpacket: 16 [ 130.171673][ T806] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.185194][ T806] usb 2-1: config 1 has no interface number 1 [ 130.191810][ T806] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.203491][ T806] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 130.216532][ T806] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.250549][ T806] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.283409][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.303268][ T806] usb 2-1: Product: syz [ 130.307581][ T806] usb 2-1: Manufacturer: syz [ 130.320361][ T806] usb 2-1: SerialNumber: syz [ 130.653894][ T5901] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.740886][ T806] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 130.814010][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 130.820863][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.830205][ T5901] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 130.841858][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.850329][ T5901] usb 3-1: Product: syz [ 130.855010][ T5901] usb 3-1: Manufacturer: syz [ 130.859675][ T5901] usb 3-1: SerialNumber: syz [ 130.867992][ T5901] usb 3-1: config 0 descriptor?? [ 131.288742][ T5901] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 131.323469][ T5887] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 131.482177][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.494010][ T5887] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 131.503105][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.515138][ T5887] usb 1-1: config 0 descriptor?? [ 131.546071][ T806] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 131.617793][ T806] usb 2-1: USB disconnect, device number 12 [ 131.908666][ T5901] usb 3-1: USB disconnect, device number 9 [ 131.955166][ T5887] cherry 0003:046A:0023.0009: hidraw0: USB HID v10.00 Device [HID 046a:0023] on usb-dummy_hcd.0-1/input0 [ 132.150807][ T5921] usb 1-1: USB disconnect, device number 6 [ 132.674079][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.681430][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.720787][ T7708] netlink: 31 bytes leftover after parsing attributes in process `syz.3.734'. [ 133.079132][ T7727] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.642817][ C0] Unknown status report in ack skb [ 133.813417][ T806] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 133.985713][ T806] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 134.001540][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.031398][ T806] usb 2-1: config 0 descriptor?? [ 134.045031][ T806] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 134.251427][ T806] gp8psk: usb in 128 operation failed. [ 134.383451][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.452920][ T7778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.467693][ T806] gp8psk: FW Version = 126.93.5 (0x7e5d05) Build 2147/157/255 [ 134.553605][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 134.560888][ T24] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 134.572265][ T24] usb 3-1: config 0 has no interface number 0 [ 134.589947][ T24] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 134.613003][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 134.622347][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.633350][ T24] usb 3-1: Product: syz [ 134.637521][ T24] usb 3-1: Manufacturer: syz [ 134.642125][ T24] usb 3-1: SerialNumber: syz [ 134.653610][ T24] usb 3-1: config 0 descriptor?? [ 134.660111][ T7770] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 134.675909][ T806] gp8psk: usb in 149 operation failed. [ 134.686427][ T806] gp8psk: failed to get FPGA version [ 134.692126][ T806] gp8psk: usb in 138 operation failed. [ 134.698896][ T806] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.710946][ T806] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 134.720831][ T806] usb 2-1: media controller created [ 134.746771][ T806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.792445][ T806] gp8psk_fe: Frontend attached [ 134.804344][ T806] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 134.815894][ T806] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 134.862487][ T806] gp8psk: usb in 138 operation failed. [ 134.868096][ T806] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 134.875274][ T7770] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 134.878101][ T806] gp8psk: found Genpix USB device pID = 203 (hex) [ 134.900373][ T806] usb 2-1: USB disconnect, device number 13 [ 134.974772][ T7790] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 134.981707][ T7790] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.000223][ T806] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 135.907260][ T24] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 135.926796][ T24] asix 3-1:0.188: probe with driver asix failed with error -71 [ 135.942314][ T24] usb 3-1: USB disconnect, device number 10 [ 136.023394][ T5894] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.206047][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.218592][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.229923][ T5894] usb 1-1: Product: syz [ 136.235044][ T5894] usb 1-1: Manufacturer: syz [ 136.239707][ T5894] usb 1-1: SerialNumber: syz [ 137.266285][ T5894] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 137.273354][ T5894] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 137.305823][ T7863] overlayfs: failed to clone upperpath [ 137.312667][ C1] Unknown status report in ack skb [ 137.466981][ T5894] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 137.499052][ T5894] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 137.554167][ T5894] usb 1-1: USB disconnect, device number 7 [ 137.575331][ T5894] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 138.494006][ T7916] overlayfs: failed to clone upperpath [ 139.383372][ T54] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.533732][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 139.545002][ T54] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.563397][ T54] usb 1-1: config 1 has no interface number 1 [ 139.579674][ T54] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.602168][ T54] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 139.618096][ T54] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.645292][ T54] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.661171][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.689729][ T54] usb 1-1: Product: syz [ 139.698283][ T54] usb 1-1: Manufacturer: syz [ 139.702897][ T54] usb 1-1: SerialNumber: syz [ 139.743589][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 139.909445][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 139.923640][ T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 139.940733][ T24] usb 3-1: config 179 has no interface number 0 [ 139.947371][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 139.960577][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 139.972724][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.984707][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 139.997573][ T24] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.011274][ T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 140.022341][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.035789][ T7955] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 140.174355][ T54] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 140.281043][ T5894] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 140.481501][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.491639][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.710580][ T5921] usb 3-1: USB disconnect, device number 11 [ 140.710624][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 140.725363][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 140.988016][ T54] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 141.026414][ T54] usb 1-1: USB disconnect, device number 8 [ 141.666613][ T7997] netlink: 'syz.2.859': attribute type 9 has an invalid length. [ 141.710993][ T7997] netlink: 'syz.2.859': attribute type 11 has an invalid length. [ 141.743524][ T7997] netlink: 'syz.2.859': attribute type 12 has an invalid length. [ 141.820083][ T7997] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.859'. [ 141.855564][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 142.479074][ T54] libceph: connect (1)[c::]:6789 error -101 [ 142.486027][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 142.495205][ T54] libceph: connect (1)[c::]:6789 error -101 [ 142.501353][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 142.536950][ T54] libceph: connect (1)[c::]:6789 error -101 [ 142.553645][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 142.769434][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 142.778768][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 142.813838][ T54] libceph: connect (1)[c::]:6789 error -101 [ 142.820511][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 143.017910][ T8037] bridge0: entered allmulticast mode [ 143.033978][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 143.043846][ T8037] bridge_slave_1: left allmulticast mode [ 143.057568][ T8037] bridge_slave_1: left promiscuous mode [ 143.067088][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.080455][ T8037] bridge_slave_0: left allmulticast mode [ 143.091452][ T8037] bridge_slave_0: left promiscuous mode [ 143.098522][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.119543][ T8037] bridge0 (unregistering): left allmulticast mode [ 143.281081][ T8020] ceph: No mds server is up or the cluster is laggy [ 143.288100][ T8024] ceph: No mds server is up or the cluster is laggy [ 143.295400][ T54] libceph: connect (1)[c::]:6789 error -101 [ 143.303642][ T5921] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.312576][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 143.338594][ T54] libceph: connect (1)[c::]:6789 error -101 [ 143.345059][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 143.466871][ T8054] loop4: detected capacity change from 0 to 2560 [ 143.492291][ T5834] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.503612][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 143.510533][ T5921] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 143.511969][ T8054] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.530215][ T5921] usb 1-1: config 179 has no interface number 0 [ 143.539390][ T5834] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.540988][ T5921] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 143.547846][ T8054] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.621436][ T5834] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.631016][ T5834] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.641705][ T5834] Buffer I/O error on dev loop4, logical block 0, async page read [ 143.649622][ T5921] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 143.685449][ T5921] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.699387][ T5921] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 143.743333][ T5921] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.791790][ T5921] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 143.804741][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.861601][ T8039] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.128136][ T5921] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input13 [ 144.317378][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.328529][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.556643][ T5921] usb 1-1: USB disconnect, device number 9 [ 144.562533][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 144.562580][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 144.843783][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 145.023393][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 145.045387][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 145.063407][ T9] usb 3-1: config 0 has no interface number 0 [ 145.072676][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.085551][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 145.094982][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.103024][ T9] usb 3-1: Product: syz [ 145.107467][ T9] usb 3-1: Manufacturer: syz [ 145.112131][ T9] usb 3-1: SerialNumber: syz [ 145.125410][ T9] usb 3-1: config 0 descriptor?? [ 145.142703][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 145.161703][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 145.549041][ T9] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 145.556671][ T8119] bridge0: entered allmulticast mode [ 145.562693][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.909'. [ 145.571569][ T8119] bridge_slave_1: left allmulticast mode [ 145.579613][ T8119] bridge_slave_1: left promiscuous mode [ 145.585897][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.597273][ T8119] bridge_slave_0: left allmulticast mode [ 145.602899][ T8119] bridge_slave_0: left promiscuous mode [ 145.608826][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.630254][ T8119] bridge0 (unregistering): left allmulticast mode [ 145.801135][ T5894] IPVS: starting estimator thread 0... [ 145.882416][ T8128] netlink: 120 bytes leftover after parsing attributes in process `syz.1.913'. [ 145.893460][ T8124] IPVS: using max 31 ests per chain, 74400 per kthread [ 146.030874][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 146.038767][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 146.080420][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 146.086573][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 146.177878][ T9] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 146.188634][ T9] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 146.195240][ T9] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 146.273409][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 146.281298][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 146.287601][ T5921] em28xx 3-1:0.132: Registering V4L2 extension [ 146.301995][ T9] usb 3-1: USB disconnect, device number 12 [ 146.303813][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 146.310109][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 146.323894][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 146.354211][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 146.360325][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 146.398294][ T5921] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 146.407204][ T5921] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 146.414384][ T5921] em28xx 3-1:0.132: No AC97 audio processor [ 146.423203][ T5921] usb 3-1: Decoder not found [ 146.428046][ T5921] em28xx 3-1:0.132: failed to create media graph [ 146.434481][ T5921] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 146.442928][ T5921] em28xx 3-1:0.132: Remote control support is not available for this card. [ 146.451716][ T9] em28xx 3-1:0.132: Closing input extension [ 146.463435][ T9] em28xx 3-1:0.132: Freeing device [ 146.666987][ T5894] IPVS: starting estimator thread 0... [ 146.764763][ T8148] IPVS: using max 57 ests per chain, 136800 per kthread [ 146.843837][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 146.865553][ T8137] ceph: No mds server is up or the cluster is laggy [ 146.872320][ T8134] ceph: No mds server is up or the cluster is laggy [ 146.879763][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 146.883713][ T9] libceph: connect (1)[c::]:6789 error -101 [ 146.892243][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 147.034856][ T8164] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.925'. [ 148.215284][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 148.444225][ T8233] Bluetooth: hci4: Frame reassembly failed (-84) [ 148.453813][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 148.562306][ T8242] overlayfs: failed to clone upperpath [ 148.661761][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 150.208924][ T8305] netlink: 120 bytes leftover after parsing attributes in process `syz.3.988'. [ 150.435860][ T5894] IPVS: starting estimator thread 0... [ 150.494469][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 150.502630][ T5831] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.523422][ T8315] IPVS: using max 41 ests per chain, 98400 per kthread [ 150.963362][ T5921] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 151.126560][ T5921] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 151.144740][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.165206][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 151.183556][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.214257][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 151.234640][ T5921] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 151.243990][ T5921] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 151.252058][ T5921] usb 3-1: Manufacturer: syz [ 151.270188][ T5921] usb 3-1: config 0 descriptor?? [ 151.470381][ T8362] could not open pipe file descriptor [ 151.717396][ T5921] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 151.750448][ T5921] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 152.210707][ T29] audit: type=1326 audit(1771352537.457:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.0.1033" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a0b79c629 code=0x0 [ 152.982017][ T8436] netlink: 'syz.3.1043': attribute type 39 has an invalid length. [ 153.573072][ T29] audit: type=1800 audit(1771352538.817:4): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1057" name="nullb0" dev="tmpfs" ino=1268 res=0 errno=0 [ 154.172704][ T9] usb 3-1: USB disconnect, device number 13 [ 155.654985][ T8561] netlink: 'syz.0.1095': attribute type 39 has an invalid length. [ 156.103727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.325067][ T8595] netlink: 'syz.3.1114': attribute type 9 has an invalid length. [ 156.348209][ T8595] netlink: 'syz.3.1114': attribute type 11 has an invalid length. [ 156.362581][ T8595] netlink: 'syz.3.1114': attribute type 12 has an invalid length. [ 156.392048][ T8595] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1114'. [ 156.406410][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 156.473540][ T806] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 156.626979][ T8608] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1119'. [ 156.639223][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.653111][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.675179][ T806] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 156.703409][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.726646][ T806] usb 3-1: config 0 descriptor?? [ 157.160040][ T806] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 157.170570][ T806] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 157.179190][ T806] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 157.187382][ T806] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 157.199575][ T806] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 157.225310][ T806] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 157.416832][ T806] usb 3-1: USB disconnect, device number 14 [ 158.220712][ T8666] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1144'. [ 159.984057][ T8750] 9pnet: p9_errstr2errno: server reported unknown error  [ 160.070255][ T8753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.330802][ T8768] netlink: 'syz.3.1178': attribute type 9 has an invalid length. [ 160.338724][ T8768] netlink: 'syz.3.1178': attribute type 11 has an invalid length. [ 160.346972][ T8768] netlink: 'syz.3.1178': attribute type 12 has an invalid length. [ 160.354989][ T8768] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1178'. [ 160.364847][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 160.369542][ T8765] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 160.803368][ T806] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 160.965475][ T806] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.974176][ T806] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.003411][ T806] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.012356][ T806] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 161.026857][ T806] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 161.040639][ T806] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.051032][ T806] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.062932][ T806] usb 3-1: Product: syz [ 161.067979][ T806] usb 3-1: Manufacturer: syz [ 161.078569][ T806] cdc_wdm 3-1:1.0: skipping garbage [ 161.083931][ T806] cdc_wdm 3-1:1.0: skipping garbage [ 161.090990][ T806] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 161.097373][ T806] cdc_wdm 3-1:1.0: Unknown control protocol [ 161.104439][ T8761] ceph: No mds server is up or the cluster is laggy [ 161.339853][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.346623][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.363574][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.370185][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.384005][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.390618][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.397235][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.403840][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.410143][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.416736][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.422983][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.429579][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.435828][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.442421][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.448673][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.455263][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.463523][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.470126][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.476452][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.483050][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.514086][ T54] usb 3-1: USB disconnect, device number 15 [ 161.520040][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 161.790316][ T8800] tls_set_device_offload_rx: netdev not found [ 162.047572][ T8815] 9pnet: p9_errstr2errno: server reported unknown error  [ 162.125233][ T8825] netlink: 'syz.1.1199': attribute type 9 has an invalid length. [ 162.133491][ T8825] netlink: 'syz.1.1199': attribute type 11 has an invalid length. [ 162.141421][ T8825] netlink: 'syz.1.1199': attribute type 12 has an invalid length. [ 162.150138][ T8825] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1199'. [ 162.163428][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 162.475908][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 162.537075][ T806] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 162.705147][ T806] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.716581][ T806] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.726940][ T806] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.738486][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.756936][ T8837] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.782556][ T806] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.999627][ T806] usb 3-1: USB disconnect, device number 16 [ 163.999977][ T8888] tls_set_device_offload_rx: netdev not found [ 164.801614][ T29] audit: type=1326 audit(1771352550.047:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.3.1244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f639f19c629 code=0x0 [ 165.983007][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'. [ 166.633374][ T5921] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 166.793344][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 166.800870][ T5921] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 166.811391][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.821599][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.833176][ T5921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.842470][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.850557][ T5921] usb 3-1: Product: syz [ 166.854824][ T5921] usb 3-1: Manufacturer: syz [ 166.859526][ T5921] usb 3-1: SerialNumber: syz [ 167.272973][ T5921] usb 3-1: 0:2 : does not exist [ 168.082387][ T5921] usb 3-1: USB disconnect, device number 17 [ 169.960448][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 169.967765][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 170.043953][ T5921] libceph: connect (1)[b::]:6789 error -101 [ 170.050138][ T5921] libceph: mon0 (1)[b::]:6789 connect error [ 170.051315][ T9121] process 'syz.1.1319' launched './file0' with NULL argv: empty string added [ 170.219343][ T9129] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 170.263675][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 170.269726][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 170.333805][ T5921] libceph: connect (1)[b::]:6789 error -101 [ 170.339998][ T5921] libceph: mon0 (1)[b::]:6789 connect error [ 170.448339][ T9141] batadv_slave_0: entered promiscuous mode [ 170.466950][ T9139] batadv_slave_0: left promiscuous mode [ 170.708656][ T9158] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1337'. [ 170.721079][ T9156] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2036668960 (4073337920 ns) > initial count (1044739206 ns). Using initial count to start timer. [ 170.777520][ T9108] ceph: No mds server is up or the cluster is laggy [ 170.785481][ T9115] ceph: No mds server is up or the cluster is laggy [ 170.786878][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 170.798453][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 171.412733][ T9199] ptrace attach of ""[9200] was attempted by "./syz-executor exec"[9199] [ 172.259236][ T9236] netlink: 'syz.3.1369': attribute type 2 has an invalid length. [ 172.267121][ T9236] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 172.277398][ T9236] netlink: 'syz.3.1369': attribute type 8 has an invalid length. [ 172.285361][ T9236] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1369'. [ 172.403422][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.588193][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.596920][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.607163][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.616976][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 172.628025][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 172.640746][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.650261][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.658599][ T9] usb 1-1: Product: syz [ 172.662767][ T9] usb 1-1: Manufacturer: syz [ 172.677379][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 172.682598][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 172.694542][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 172.700445][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 172.943883][ C0] wdm_int_callback: 139 callbacks suppressed [ 172.943905][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 172.944979][ T806] usb 1-1: USB disconnect, device number 10 [ 172.949901][ C0] wdm_int_callback: 139 callbacks suppressed [ 172.949919][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 172.974340][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 173.195860][ T806] libceph: connect (1)[c::]:6789 error -101 [ 173.201899][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 173.254786][ T806] libceph: connect (1)[c::]:6789 error -101 [ 173.260849][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 173.339255][ T9276] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 173.474133][ T806] libceph: connect (1)[c::]:6789 error -101 [ 173.480327][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 173.523697][ T806] libceph: connect (1)[c::]:6789 error -101 [ 173.533590][ T9282] Invalid ELF header magic: != ELF [ 173.533942][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 173.935809][ T806] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 173.943365][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 173.956069][ T806] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.994359][ T806] libceph: connect (1)[c::]:6789 error -101 [ 174.006035][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 174.026808][ T9266] ceph: No mds server is up or the cluster is laggy [ 174.043464][ T9271] ceph: No mds server is up or the cluster is laggy [ 174.063805][ T806] libceph: connect (1)[c::]:6789 error -101 [ 174.069918][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 174.135586][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.146731][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.165057][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 174.182746][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.202074][ T9] usb 3-1: config 0 descriptor?? [ 174.439489][ T29] audit: type=1326 audit(1771352559.687:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.3.1402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f639f19c629 code=0x0 [ 174.674106][ T9] corsair-cpro 0003:1B1C:1D00.000D: unknown main item tag 0x0 [ 174.686414][ T9] corsair-cpro 0003:1B1C:1D00.000D: unknown main item tag 0x0 [ 174.703432][ T9] corsair-cpro 0003:1B1C:1D00.000D: unknown main item tag 0x0 [ 174.723404][ T9] corsair-cpro 0003:1B1C:1D00.000D: unknown main item tag 0x0 [ 174.751082][ T9] corsair-cpro 0003:1B1C:1D00.000D: unknown main item tag 0x0 [ 174.774151][ T9] corsair-cpro 0003:1B1C:1D00.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.2-1/input0 [ 174.875547][ T9] corsair-cpro 0003:1B1C:1D00.000D: probe with driver corsair-cpro failed with error -38 [ 174.897444][ T9] usb 3-1: USB disconnect, device number 18 [ 175.691976][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 175.698823][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 175.706918][ T9381] block nbd0: NBD_DISCONNECT [ 175.714265][ T9381] block nbd0: Disconnected due to user request. [ 175.721585][ T9381] block nbd0: shutting down sockets [ 175.749180][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 175.764991][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 175.888141][ T9401] loop5: detected capacity change from 0 to 7 [ 175.903388][ T9401] Dev loop5: unable to read RDB block 7 [ 175.909262][ T9401] loop5: unable to read partition table [ 175.915295][ T9401] loop5: partition table beyond EOD, truncated [ 175.924890][ T9401] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.963722][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 175.975563][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 176.043796][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 176.049833][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 176.073146][ T9405] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 176.081127][ T9405] netlink: 16110 bytes leftover after parsing attributes in process `syz.0.1439'. [ 176.503682][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 176.510907][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 176.512138][ T9388] ceph: No mds server is up or the cluster is laggy [ 176.523475][ T9385] ceph: No mds server is up or the cluster is laggy [ 176.789523][ T9428] "syz.2.1449" (9428) uses obsolete ecb(arc4) skcipher [ 176.812104][ T9436] capability: warning: `syz.1.1451' uses 32-bit capabilities (legacy support in use) [ 178.087166][ T9493] loop5: detected capacity change from 0 to 7 [ 178.113472][ T9493] Dev loop5: unable to read RDB block 7 [ 178.119072][ T9493] loop5: unable to read partition table [ 178.142366][ T9493] loop5: partition table beyond EOD, truncated [ 178.173692][ T9493] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.417483][ T9512] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 178.773355][ T806] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 178.933474][ T806] usb 3-1: Using ep0 maxpacket: 16 [ 178.948901][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.966735][ T806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.979680][ T806] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 178.988765][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.004357][ T806] usb 3-1: config 0 descriptor?? [ 179.534699][ T806] HID 045e:07da: Invalid code 65791 type 1 [ 179.551470][ T806] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input14 [ 179.618350][ T806] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 179.908043][ T9554] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 180.394721][ T9] usb 3-1: USB disconnect, device number 19 [ 180.635319][ T9570] netlink: 'syz.3.1506': attribute type 4 has an invalid length. [ 180.658182][ T9570] netlink: 'syz.3.1506': attribute type 4 has an invalid length. [ 182.900034][ T9681] tls_set_device_offload: netdev not found [ 183.724015][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1567'. [ 183.860329][ T9724] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 186.209536][ T9832] overlayfs: failed to clone upperpath [ 186.315651][ T9836] overlayfs: failed to clone upperpath [ 188.634379][ T9971] 9pnet: p9_errstr2errno: server reported unknown error di0 [ 188.774746][ T9984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1678'. [ 190.091681][T10066] tipc: Started in network mode [ 190.128582][T10066] tipc: Node identity 4, cluster identity 4711 [ 190.135477][T10066] tipc: Node number set to 4 [ 190.148144][ T87] tipc: Subscription rejected, illegal request [ 190.847431][T10119] TCP: TCP_TX_DELAY enabled [ 191.120975][T10137] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.1743'. [ 191.579525][T10165] 9pnet: p9_errstr2errno: server reported unknown error di0 [ 192.472310][T10188] fuse: Bad value for 'fd' [ 192.531245][T10192] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1768'. [ 193.031515][T10217] netlink: 'syz.1.1779': attribute type 9 has an invalid length. [ 193.039457][T10217] netlink: 'syz.1.1779': attribute type 11 has an invalid length. [ 193.060915][T10217] netlink: 'syz.1.1779': attribute type 12 has an invalid length. [ 193.076997][T10217] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1779'. [ 193.087853][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'. [ 193.610651][T10240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.629611][T10240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.669254][T10240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.680466][T10240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.113517][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.120866][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.752258][T10291] "syz.2.1811" (10291) uses obsolete ecb(arc4) skcipher [ 194.787741][T10293] overlayfs: failed to clone upperpath [ 194.953846][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1817'. [ 194.983235][T10303] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 195.003138][T10303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.046551][T10303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.096150][T10303] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 195.176269][T10316] overlayfs: failed to clone upperpath [ 195.798892][T10359] netlink: 'syz.0.1840': attribute type 9 has an invalid length. [ 195.811592][T10359] netlink: 'syz.0.1840': attribute type 11 has an invalid length. [ 195.820257][T10359] netlink: 'syz.0.1840': attribute type 12 has an invalid length. [ 195.829057][T10359] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1840'. [ 195.838967][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'. [ 196.178491][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 196.178980][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.187482][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 196.192279][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 196.387547][T10400] overlayfs: failed to clone upperpath [ 196.864790][T10412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.872392][T10412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.587697][T10436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.603419][T10436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.630513][T10436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.643726][T10436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.296267][T10459] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1889'. [ 198.328175][T10459] gretap0: entered promiscuous mode [ 198.388439][T10459] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1889'. [ 198.397893][T10459] 0ªî{X¹¦: renamed from gretap0 [ 198.435047][T10459] 0ªî{X¹¦: left promiscuous mode [ 198.440327][T10459] 0ªî{X¹¦: entered allmulticast mode [ 198.463240][T10459] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 198.772592][T10477] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.1890'. [ 199.085854][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'. [ 199.159584][T10505] overlayfs: failed to clone lowerpath [ 199.549242][ T92] IPVS: starting estimator thread 0... [ 199.582510][T10475] ceph: No mds server is up or the cluster is laggy [ 199.653746][T10516] IPVS: using max 35 ests per chain, 84000 per kthread [ 199.906178][T10529] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1909'. [ 199.928213][T10529] gretap0: entered promiscuous mode [ 199.968829][T10529] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1909'. [ 199.982010][ T1317] IPVS: stop unused estimator thread 0... [ 199.992084][T10529] 0ªî{X¹¦: renamed from gretap0 [ 200.016295][T10529] 0ªî{X¹¦: left promiscuous mode [ 200.036411][T10529] 0ªî{X¹¦: entered allmulticast mode [ 200.046101][T10529] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 200.075064][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'. [ 200.084454][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'. [ 200.308526][T10556] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.1922'. [ 201.187509][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 201.539276][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 201.551185][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 201.685628][T10625] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1948'. [ 201.929410][T10640] netlink: 'syz.1.1955': attribute type 9 has an invalid length. [ 201.939643][T10640] netlink: 'syz.1.1955': attribute type 11 has an invalid length. [ 201.948750][T10640] netlink: 'syz.1.1955': attribute type 12 has an invalid length. [ 201.957403][T10640] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1955'. [ 201.968970][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 202.149897][T10656] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 202.226896][T10660] netlink: 'syz.2.1964': attribute type 3 has an invalid length. [ 202.711958][T10682] syzkaller1: entered promiscuous mode [ 202.719660][T10682] syzkaller1: entered allmulticast mode [ 202.730435][T10685] netlink: 'syz.1.1975': attribute type 9 has an invalid length. [ 202.745489][T10685] netlink: 'syz.1.1975': attribute type 11 has an invalid length. [ 202.754345][T10685] netlink: 'syz.1.1975': attribute type 12 has an invalid length. [ 203.039940][T10704] netlink: 'syz.3.1984': attribute type 9 has an invalid length. [ 203.056603][T10704] netlink: 'syz.3.1984': attribute type 11 has an invalid length. [ 203.073335][T10704] netlink: 'syz.3.1984': attribute type 12 has an invalid length. [ 203.093580][ T29] audit: type=1800 audit(1771352588.337:7): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1986" name="nullb0" dev="tmpfs" ino=2096 res=0 errno=0 [ 205.235809][T10820] __nla_validate_parse: 7 callbacks suppressed [ 205.235827][T10820] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2032'. [ 205.255356][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 205.275323][T10823] Zero length message leads to an empty skb [ 206.259399][T10891] smc: net device bond0 applied user defined pnetid SYZ2 [ 206.268588][T10891] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2062'. [ 206.296507][T10891] smc: removing net device bond0 with user defined pnetid SYZ2 [ 206.312303][T10891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.357855][T10891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.379110][T10891] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 206.397205][T10891] bond0 (unregistering): Released all slaves [ 207.219013][T10954] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2079'. [ 208.190223][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'. [ 208.200973][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'. [ 208.260138][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2097'. [ 208.471209][T11022] smc: net device bond0 applied user defined pnetid SYZ2 [ 208.479713][T11022] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2102'. [ 208.525984][T11022] smc: removing net device bond0 with user defined pnetid SYZ2 [ 208.537432][T11022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.560895][T11022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.568624][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 208.586847][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 208.588319][T11022] bond0 (unregistering): Released all slaves [ 208.710604][T11037] validate_nla: 12 callbacks suppressed [ 208.710622][T11037] netlink: 'syz.1.2108': attribute type 9 has an invalid length. [ 208.724601][T11037] netlink: 'syz.1.2108': attribute type 11 has an invalid length. [ 208.732424][T11037] netlink: 'syz.1.2108': attribute type 12 has an invalid length. [ 209.095827][T11067] netlink: 'syz.0.2122': attribute type 9 has an invalid length. [ 209.115148][T11067] netlink: 'syz.0.2122': attribute type 11 has an invalid length. [ 209.122992][T11067] netlink: 'syz.0.2122': attribute type 12 has an invalid length. [ 209.818787][T11102] netlink: 'syz.1.2138': attribute type 29 has an invalid length. [ 209.830060][T11102] netlink: 'syz.1.2138': attribute type 29 has an invalid length. [ 210.937136][ T29] audit: type=1326 audit(1771352596.187:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.0.2145" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a0b79c629 code=0x0 [ 212.319378][T11178] netlink: 'syz.1.2167': attribute type 39 has an invalid length. [ 212.687288][T11197] __nla_validate_parse: 6 callbacks suppressed [ 212.687310][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2174'. [ 213.076412][T11220] 9p: Unknown uid 00000000004294967295 [ 214.711514][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2207'. [ 214.730201][ T5830] IPVS: starting estimator thread 0... [ 214.775472][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'. [ 214.823429][T11291] IPVS: using max 37 ests per chain, 88800 per kthread [ 215.117304][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2214'. [ 215.686275][ T29] audit: type=1326 audit(1771352600.937:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.2.2231" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09eb39c629 code=0x0 [ 217.512833][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'. [ 217.669555][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'. [ 218.016339][T11426] netlink: 'syz.1.2263': attribute type 9 has an invalid length. [ 218.024462][T11426] netlink: 'syz.1.2263': attribute type 11 has an invalid length. [ 218.032372][T11426] netlink: 'syz.1.2263': attribute type 12 has an invalid length. [ 218.040587][T11426] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2263'. [ 218.051298][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2263'. [ 218.127160][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'. [ 218.428294][T11451] netlink: 'syz.2.2277': attribute type 9 has an invalid length. [ 218.444236][T11451] netlink: 'syz.2.2277': attribute type 11 has an invalid length. [ 218.452089][T11451] netlink: 'syz.2.2277': attribute type 12 has an invalid length. [ 218.470465][T11451] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2277'. [ 218.483245][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'. [ 219.206054][T11483] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.2290'. [ 219.478059][T11494] overlayfs: failed to clone upperpath [ 220.265393][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 220.272127][T11537] input: syz0 as /devices/virtual/input/input15 [ 220.275192][T11533] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2313'. [ 220.291687][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 220.392858][T11541] overlayfs: failed to clone lowerpath [ 220.398306][ T29] audit: type=1800 audit(1771352605.637:10): pid=11543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2318" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 221.565343][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 221.739332][T11627] veth1_to_bridge: entered promiscuous mode [ 221.745775][T11627] veth1_to_bridge: left promiscuous mode [ 222.734755][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 224.211445][T11748] netlink: 'syz.3.2404': attribute type 3 has an invalid length. [ 224.814683][T10385] Bluetooth: hci1: command 0x0406 tx timeout [ 225.071697][T11783] Invalid ELF header magic: != ELF [ 225.087618][T11783] Invalid ELF header magic: != ELF [ 225.442399][T11801] netlink: 'syz.1.2425': attribute type 1 has an invalid length. [ 225.784057][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2429'. [ 226.000169][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2429'. [ 226.602255][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'. [ 226.776017][T11852] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2446'. [ 227.015971][T11856] sctp: [Deprecated]: syz.0.2448 (pid 11856) Use of int in max_burst socket option. [ 227.015971][T11856] Use struct sctp_assoc_value instead [ 227.679874][T11884] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2460'. [ 227.974182][ T29] audit: type=1326 audit(1771352613.227:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz.1.2467" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd257d9c629 code=0x0 [ 228.027018][T11904] netlink: 'syz.0.2469': attribute type 9 has an invalid length. [ 228.034950][T11904] netlink: 'syz.0.2469': attribute type 11 has an invalid length. [ 228.042775][T11904] netlink: 'syz.0.2469': attribute type 12 has an invalid length. [ 228.051469][T11904] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2469'. [ 228.061088][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'. [ 228.897499][T11931] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2481'. [ 228.988677][T11933] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2482'. [ 228.998665][T11933] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2482'. [ 229.358351][T11943] netlink: 'syz.0.2486': attribute type 9 has an invalid length. [ 229.366341][T11943] netlink: 'syz.0.2486': attribute type 11 has an invalid length. [ 229.377825][T11943] netlink: 'syz.0.2486': attribute type 12 has an invalid length. [ 229.413018][T11945] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 229.471849][T11947] @0Ù: renamed from bond_slave_1 [ 230.806883][T12006] __nla_validate_parse: 3 callbacks suppressed [ 230.806906][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'. [ 231.085875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 231.316569][T12032] overlayfs: failed to clone upperpath [ 231.795988][T12054] overlayfs: failed to clone upperpath [ 233.143382][ T806] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 233.260173][ T29] audit: type=1326 audit(1771352618.507:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd257d9c629 code=0x7ffc0000 [ 233.284930][ T29] audit: type=1326 audit(1771352618.507:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd257d9c629 code=0x7ffc0000 [ 233.310518][ T29] audit: type=1326 audit(1771352618.537:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd257d9c629 code=0x7ffc0000 [ 233.315524][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 233.333610][T12117] netlink: 'syz.0.2551': attribute type 29 has an invalid length. [ 233.350021][ T29] audit: type=1326 audit(1771352618.537:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd257d9c629 code=0x7ffc0000 [ 233.372974][T12117] netlink: 'syz.0.2551': attribute type 29 has an invalid length. [ 233.386460][T12117] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2551'. [ 233.390377][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.416845][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58627, setting to 1024 [ 233.423322][ T29] audit: type=1326 audit(1771352618.537:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd257d9c629 code=0x7ffc0000 [ 233.435207][ T806] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 233.455842][ T29] audit: type=1326 audit(1771352618.537:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd257d9c629 code=0x7ffc0000 [ 233.489366][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.500322][ T806] usb 3-1: config 0 descriptor?? [ 233.510479][T12093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.532995][ T29] audit: type=1326 audit(1771352618.537:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd257d9c629 code=0x7ffc0000 [ 233.537708][ T806] hub 3-1:0.0: USB hub found [ 233.563676][T12120] overlayfs: failed to clone upperpath [ 233.570454][ T29] audit: type=1326 audit(1771352618.537:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd257d9c629 code=0x7ffc0000 [ 233.602985][ T29] audit: type=1326 audit(1771352618.547:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd257d9c629 code=0x7ffc0000 [ 233.627346][ T29] audit: type=1326 audit(1771352618.547:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd257d9c629 code=0x7ffc0000 [ 233.740844][ T806] hub 3-1:0.0: 1 port detected [ 234.637388][ T5894] usb 3-1: USB disconnect, device number 20 [ 234.643538][ T806] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 234.834366][T12174] netlink: 'syz.1.2575': attribute type 4 has an invalid length. [ 234.863916][T12174] netlink: 'syz.1.2575': attribute type 4 has an invalid length. [ 235.108248][T12187] infiniband: Added to hash: ib_dev=ffff888078b60000 (0)() ndev=ffff88807d6de000 (231)(lo) [ 235.120835][T12187] lo speed is unknown, defaulting to 1000 [ 235.129413][T12187] lo speed is unknown, defaulting to 1000 [ 235.138685][T12187] lo speed is unknown, defaulting to 1000 [ 235.298699][T12192] netlink: 'syz.2.2582': attribute type 10 has an invalid length. [ 235.358315][T12187] infiniband syz0: set active [ 235.365337][ T5894] lo speed is unknown, defaulting to 1000 [ 235.383470][T12187] infiniband syz0: added lo [ 235.420644][T12187] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 235.443490][T12187] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 235.493404][T12187] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 235.635335][T12187] RDS/IB: syz0: added [ 235.646239][T12187] smc: adding ib device syz0 with port count 1 [ 235.652853][T12187] smc: ib device syz0 port 1 has no pnetid [ 235.678710][T12187] lo speed is unknown, defaulting to 1000 [ 235.695854][ T5894] lo speed is unknown, defaulting to 1000 [ 235.765079][T12203] netlink: 'syz.3.2586': attribute type 11 has an invalid length. [ 236.176161][T12187] lo speed is unknown, defaulting to 1000 [ 236.336512][T12222] netlink: 'syz.3.2594': attribute type 1 has an invalid length. [ 236.344524][T12222] netlink: 'syz.3.2594': attribute type 4 has an invalid length. [ 236.352371][T12222] netlink: 15294 bytes leftover after parsing attributes in process `syz.3.2594'. [ 236.571340][T12187] lo speed is unknown, defaulting to 1000 [ 236.992635][T12187] lo speed is unknown, defaulting to 1000 [ 237.095908][T12240] ceph: No mds server is up or the cluster is laggy [ 238.387330][T12309] cgroup: Setting release_agent not allowed [ 238.526155][T12320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.026556][T12380] netlink: 'syz.1.2660': attribute type 5 has an invalid length. [ 240.053674][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2660'. [ 240.613445][ T5921] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 240.767842][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 240.767858][ T29] audit: type=1800 audit(1771352626.017:29): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2675" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 240.794298][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 240.801078][ T5921] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 240.812843][ T5921] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 240.827333][ T5921] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.838640][ T5921] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 240.856313][ T5921] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 240.865672][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.874072][ T5921] usb 3-1: Product: syz [ 240.878257][ T5921] usb 3-1: Manufacturer: syz [ 240.882858][ T5921] usb 3-1: SerialNumber: syz [ 240.901340][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 240.919717][ T5921] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input16 [ 241.113505][ T5921] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 241.126336][ T5921] (id 0x00) [ 241.203339][ T5921] rc_core: IR keymap rc-imon-pad not found [ 241.212821][ T5921] Registered IR keymap rc-empty [ 241.225114][ T5921] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 241.235974][ T5921] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 241.318058][ T5921] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 241.340449][ T5921] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input17 [ 241.361626][ T5921] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:21> initialized [ 241.424633][ T158] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (235)(lo) cookie=ffff88807bf94000 (11)(l2tpeth0) start [ 241.503426][ T158] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (235)(lo) cookie=ffff88807bf94000 (3)(l2tpeth0) end [ 241.916276][T12457] imon:send_packet: packet tx failed (-71) [ 241.924618][ T5921] usb 3-1: USB disconnect, device number 21 [ 241.941888][T12464] sctp: [Deprecated]: syz.1.2696 (pid 12464) Use of int in maxseg socket option. [ 241.941888][T12464] Use struct sctp_assoc_value instead [ 241.956472][T12457] imon:vfd_write: send packet #1 failed [ 242.435954][T12499] veth1_to_bridge: entered promiscuous mode [ 242.446101][T12499] veth1_to_bridge: left promiscuous mode [ 244.218886][T12559] netlink: 'syz.2.2735': attribute type 9 has an invalid length. [ 244.230591][T12559] netlink: 'syz.2.2735': attribute type 11 has an invalid length. [ 244.238738][T12559] netlink: 'syz.2.2735': attribute type 12 has an invalid length. [ 244.244344][T12561] netlink: 566 bytes leftover after parsing attributes in process `syz.3.2736'. [ 244.246975][T12559] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2735'. [ 244.266087][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2735'. [ 244.395726][T12565] lo speed is unknown, defaulting to 1000 [ 245.147310][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88802f784000 (11)(erspan0) start [ 245.179246][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88802f784000 (4)(erspan0) end [ 245.204822][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88803595a000 (4)(gretap0) start [ 245.223463][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88803595a000 (4)(gretap0) end [ 245.316988][ T29] audit: type=1804 audit(1771352630.567:30): pid=12609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2755" name="file1" dev="tmpfs" ino=3605 res=1 errno=0 [ 245.528630][T12614] overlayfs: failed to clone upperpath [ 245.552942][ T158] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88805077c000 (4)(l2tpeth0) start [ 245.589293][ T158] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88805077c000 (3)(l2tpeth0) end [ 245.669098][T12622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2761'. [ 245.765003][T12625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2761'. [ 245.775710][T12625] nbd: device at index 64 is going down [ 245.839011][T12628] netlink: 'syz.3.2762': attribute type 9 has an invalid length. [ 245.848118][T12628] netlink: 'syz.3.2762': attribute type 11 has an invalid length. [ 245.858434][T12628] netlink: 'syz.3.2762': attribute type 12 has an invalid length. [ 245.866659][T12628] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2762'. [ 245.876850][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2762'. [ 245.960219][T12632] netlink: 'syz.3.2764': attribute type 9 has an invalid length. [ 245.966541][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 245.970144][T12632] netlink: 'syz.3.2764': attribute type 11 has an invalid length. [ 245.979647][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 245.997114][T12632] netlink: 'syz.3.2764': attribute type 12 has an invalid length. [ 246.005207][T12632] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2764'. [ 247.751535][ T158] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88806065e000 (4)(l2tpeth0) start [ 247.794954][ T158] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88806065e000 (3)(l2tpeth0) end [ 247.860977][T10385] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 248.532412][T12743] netlink: 'syz.2.2815': attribute type 4 has an invalid length. [ 250.430908][T12823] netlink: 'syz.2.2846': attribute type 4 has an invalid length. [ 250.439996][T12823] netlink: 'syz.2.2846': attribute type 1 has an invalid length. [ 250.448197][T12823] __nla_validate_parse: 3 callbacks suppressed [ 250.448213][T12823] netlink: 15314 bytes leftover after parsing attributes in process `syz.2.2846'. [ 250.537583][ T87] Bluetooth: (null): Invalid header checksum [ 250.645491][ T1317] Bluetooth: (null): Invalid header checksum [ 250.753820][ T686] Bluetooth: (null): Invalid header checksum [ 250.863639][ T686] Bluetooth: (null): Invalid header checksum [ 250.973661][ T1317] Bluetooth: (null): Invalid header checksum [ 251.084044][ T686] Bluetooth: (null): Invalid header checksum [ 251.203829][ T1317] Bluetooth: (null): Invalid header checksum [ 251.323659][ T13] Bluetooth: (null): Invalid header checksum [ 251.431707][T12846] lo speed is unknown, defaulting to 1000 [ 251.663919][T12849] lo speed is unknown, defaulting to 1000 [ 251.767596][ T87] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff888035bdc000 (7)(syzkaller1) start [ 251.814007][ T87] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff888035bdc000 (3)(syzkaller1) end [ 252.045767][ T1317] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88807e14e000 (4)(erspan0) start [ 252.083214][ T1317] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88807e14e000 (3)(erspan0) end [ 252.116296][T12863] netlink: 'syz.3.2862': attribute type 4 has an invalid length. [ 252.120702][ T1317] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff888036860000 (3)(gretap0) start [ 252.163363][ T1317] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff888036860000 (3)(gretap0) end [ 252.556291][ T29] audit: type=1326 audit(1771352637.807:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.1.2856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd257d9c629 code=0x0 [ 252.706470][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88806f208000 (11)(erspan0) start [ 252.744585][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88806f208000 (3)(erspan0) end [ 252.766662][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88807d94e000 (3)(gretap0) start [ 252.783402][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (233)(lo) cookie=ffff88807d94e000 (3)(gretap0) end [ 253.529690][T12913] lo speed is unknown, defaulting to 1000 [ 254.324250][ T29] audit: type=1326 audit(1771352639.547:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.3.2881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f639f19c629 code=0x0 [ 254.651268][ T158] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (234)(lo) cookie=ffff88807a360000 (11)(erspan0) start [ 254.713313][ T158] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (234)(lo) cookie=ffff88807a360000 (4)(erspan0) end [ 254.760308][ T158] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (234)(lo) cookie=ffff88806f2e6000 (4)(gretap0) start [ 254.797698][ T158] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888078b60000 (14)(syz0) rdma_ndev=ffff88807d6de000 (234)(lo) cookie=ffff88806f2e6000 (3)(gretap0) end [ 255.544070][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.550419][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.762385][T12983] netlink: 'syz.3.2909': attribute type 27 has an invalid length. [ 256.903444][ T5894] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 256.964804][ T806] Process accounting resumed [ 257.063395][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 257.073633][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.093396][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.113367][ T5894] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 257.122429][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.146672][ T5894] usb 3-1: config 0 descriptor?? [ 257.154323][ T5894] hub 3-1:0.0: USB hub found [ 257.360235][ T5894] hub 3-1:0.0: 1 port detected [ 257.739343][T13059] overlayfs: failed to clone upperpath [ 258.585810][ T5894] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 258.603078][ T5894] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 258.615868][ T5894] usbhid 3-1:0.0: can't add hid device: -32 [ 258.622040][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 258.657150][ T5894] usb 3-1: USB disconnect, device number 22 [ 259.178225][T13107] syzkaller1: entered promiscuous mode [ 259.183919][T13107] syzkaller1: entered allmulticast mode [ 259.598124][T13134] syzkaller1: entered promiscuous mode [ 259.608961][T13134] syzkaller1: entered allmulticast mode [ 259.969666][T13154] ------------[ cut here ]------------ [ 259.975276][T13154] old_ns_root->mnt_id_unique != 1 [ 259.975308][T13154] WARNING: fs/namespace.c:3112 at vfs_open_tree+0xf35/0xfb0, CPU#0: syz.0.2981/13154 [ 259.990008][T13154] Modules linked in: [ 259.993995][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.0.2981 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.005072][T13154] Tainted: [L]=SOFTLOCKUP [ 260.009416][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.020453][T13154] RIP: 0010:vfs_open_tree+0xf35/0xfb0 [ 260.025982][T13154] Code: 39 78 ff 49 bf 00 00 00 00 00 fc ff df e9 1e fb ff ff e8 9e 39 78 ff 4d 63 ee 4c 8b 64 24 08 e9 64 ff ff ff e8 8c 39 78 ff 90 <0f> 0b 90 e9 d1 f5 ff ff e8 7e 39 78 ff 90 0f 0b 90 e9 18 f6 ff ff [ 260.046967][T13154] RSP: 0018:ffffc90018297d80 EFLAGS: 00010283 [ 260.053088][T13154] RAX: ffffffff824db904 RBX: 0000000080000287 RCX: 0000000000080000 [ 260.061173][T13154] RDX: ffffc90005642000 RSI: 00000000000000d9 RDI: 00000000000000da [ 260.070076][T13154] RBP: ffffc90018297eb0 R08: ffffffff8e7fa2eb R09: 1ffffffff1cff45d [ 260.078709][T13154] R10: dffffc0000000000 R11: fffffbfff1cff45e R12: ffff88804c1b6000 [ 260.086840][T13154] R13: 0000000000009902 R14: ffff88803076d501 R15: dffffc0000000000 [ 260.095068][T13154] FS: 00007f7a099f66c0(0000) GS:ffff888124fff000(0000) knlGS:0000000000000000 [ 260.104083][T13154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.110789][T13154] CR2: 00007f7a099d6f40 CR3: 0000000065dda000 CR4: 00000000003526f0 [ 260.118942][T13154] DR0: 0000000000000000 DR1: 0000000000000044 DR2: 0000000000000000 [ 260.127110][T13154] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 260.135160][T13154] Call Trace: [ 260.138469][T13154] [ 260.141444][T13154] ? __pfx_vfs_open_tree+0x10/0x10 [ 260.146637][T13154] ? _raw_spin_unlock+0x28/0x50 [ 260.151516][T13154] ? alloc_fd+0x64b/0x6c0 [ 260.155947][T13154] __x64_sys_open_tree+0x96/0x110 [ 260.160992][T13154] do_syscall_64+0x14d/0xf80 [ 260.165758][T13154] ? trace_irq_disable+0x3b/0x150 [ 260.171344][T13154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.178047][T13154] ? clear_bhb_loop+0x40/0x90 [ 260.182757][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.188749][T13154] RIP: 0033:0x7f7a0b79c629 [ 260.193202][T13154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.213207][T13154] RSP: 002b:00007f7a099f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 260.221695][T13154] RAX: ffffffffffffffda RBX: 00007f7a0ba15fa0 RCX: 00007f7a0b79c629 [ 260.229746][T13154] RDX: 0000000000009902 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 260.237879][T13154] RBP: 00007f7a0b832b39 R08: 0000000000000000 R09: 0000000000000000 [ 260.245918][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.253940][T13154] R13: 00007f7a0ba16038 R14: 00007f7a0ba15fa0 R15: 00007ffd80eb2798 [ 260.261944][T13154] [ 260.265042][T13154] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 260.272326][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.0.2981 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.283260][T13154] Tainted: [L]=SOFTLOCKUP [ 260.287582][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.297627][T13154] Call Trace: [ 260.300899][T13154] [ 260.303824][T13154] vpanic+0x56c/0xa60 [ 260.307823][T13154] ? __pfx__printk+0x10/0x10 [ 260.312516][T13154] ? __pfx_vpanic+0x10/0x10 [ 260.317025][T13154] ? is_bpf_text_address+0x292/0x2b0 [ 260.322315][T13154] ? is_bpf_text_address+0x26/0x2b0 [ 260.327517][T13154] panic+0xc5/0xd0 [ 260.331260][T13154] ? __pfx_panic+0x10/0x10 [ 260.335682][T13154] __warn+0x315/0x4f0 [ 260.339656][T13154] ? vfs_open_tree+0xf35/0xfb0 [ 260.344409][T13154] ? vfs_open_tree+0xf35/0xfb0 [ 260.349160][T13154] __report_bug+0x29a/0x540 [ 260.353689][T13154] ? vfs_open_tree+0xf35/0xfb0 [ 260.358443][T13154] ? __pfx___report_bug+0x10/0x10 [ 260.363466][T13154] ? ida_alloc_range+0x832/0x870 [ 260.368424][T13154] ? __pfx_ida_alloc_range+0x10/0x10 [ 260.373720][T13154] ? vfs_open_tree+0xf35/0xfb0 [ 260.378509][T13154] report_bug+0x16a/0x220 [ 260.382863][T13154] ? vfs_open_tree+0xf35/0xfb0 [ 260.387627][T13154] ? vfs_open_tree+0xf37/0xfb0 [ 260.392384][T13154] handle_bug+0x98/0x200 [ 260.396636][T13154] exc_invalid_op+0x1a/0x50 [ 260.401175][T13154] asm_exc_invalid_op+0x1a/0x20 [ 260.406047][T13154] RIP: 0010:vfs_open_tree+0xf35/0xfb0 [ 260.411451][T13154] Code: 39 78 ff 49 bf 00 00 00 00 00 fc ff df e9 1e fb ff ff e8 9e 39 78 ff 4d 63 ee 4c 8b 64 24 08 e9 64 ff ff ff e8 8c 39 78 ff 90 <0f> 0b 90 e9 d1 f5 ff ff e8 7e 39 78 ff 90 0f 0b 90 e9 18 f6 ff ff [ 260.431257][T13154] RSP: 0018:ffffc90018297d80 EFLAGS: 00010283 [ 260.437341][T13154] RAX: ffffffff824db904 RBX: 0000000080000287 RCX: 0000000000080000 [ 260.445322][T13154] RDX: ffffc90005642000 RSI: 00000000000000d9 RDI: 00000000000000da [ 260.453369][T13154] RBP: ffffc90018297eb0 R08: ffffffff8e7fa2eb R09: 1ffffffff1cff45d [ 260.461417][T13154] R10: dffffc0000000000 R11: fffffbfff1cff45e R12: ffff88804c1b6000 [ 260.469408][T13154] R13: 0000000000009902 R14: ffff88803076d501 R15: dffffc0000000000 [ 260.477394][T13154] ? vfs_open_tree+0xf34/0xfb0 [ 260.482175][T13154] ? __pfx_vfs_open_tree+0x10/0x10 [ 260.487308][T13154] ? _raw_spin_unlock+0x28/0x50 [ 260.492175][T13154] ? alloc_fd+0x64b/0x6c0 [ 260.496615][T13154] __x64_sys_open_tree+0x96/0x110 [ 260.501650][T13154] do_syscall_64+0x14d/0xf80 [ 260.506243][T13154] ? trace_irq_disable+0x3b/0x150 [ 260.511289][T13154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.517469][T13154] ? clear_bhb_loop+0x40/0x90 [ 260.522154][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.528049][T13154] RIP: 0033:0x7f7a0b79c629 [ 260.532486][T13154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.552113][T13154] RSP: 002b:00007f7a099f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 260.560535][T13154] RAX: ffffffffffffffda RBX: 00007f7a0ba15fa0 RCX: 00007f7a0b79c629 [ 260.568500][T13154] RDX: 0000000000009902 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 260.576473][T13154] RBP: 00007f7a0b832b39 R08: 0000000000000000 R09: 0000000000000000 [ 260.584439][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.592403][T13154] R13: 00007f7a0ba16038 R14: 00007f7a0ba15fa0 R15: 00007ffd80eb2798 [ 260.600377][T13154] [ 260.603803][T13154] Kernel Offset: disabled [ 260.608121][T13154] Rebooting in 86400 seconds..