last executing test programs: 1m24.76330833s ago: executing program 2 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xffffff9b, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m24.355926082s ago: executing program 2 (id=405): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000009c0)="648bbd4549b893382a7e2fed81b5b0656921886186a6d04576589bd276f3c5614babefac39b59d9d48922e85b2f14705d8f9a58517a208a201ef9975febe429a38a7", 0x42}], 0x1}, 0x40041) recvmsg$kcm(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000440)=""/119, 0x77}], 0x1, &(0x7f0000000a40)=""/202, 0xca}, 0x40000022) 1m23.625734308s ago: executing program 2 (id=413): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m23.348806173s ago: executing program 1 (id=416): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=ANY=[@ANYBLOB="3800000024000701feffffff00000000017c0000040042801c000180100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m23.303187081s ago: executing program 0 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x44, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 1m23.1873551s ago: executing program 2 (id=419): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x418e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c8c1}, 0x40041) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 1m23.16492525s ago: executing program 1 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000048000000030a01020000000000000000020000060900010073797a300000000026000300fd02b21edf8b721e23f25f4700"], 0x90}}, 0x0) 1m23.120363526s ago: executing program 0 (id=421): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0xf) 1m22.978189917s ago: executing program 1 (id=423): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4890}, 0x408c0) 1m22.835467282s ago: executing program 2 (id=424): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/139, 0x8b}, {&(0x7f0000002c80)=""/4143, 0x103a}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000000140)=""/146, 0x92}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/175, 0x35}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000200)=""/136, 0x88}], 0x9}, 0x10102) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 1m22.734018609s ago: executing program 1 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c0000000f0a0104"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m22.67472551s ago: executing program 2 (id=426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1a3081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x66) 1m22.552462296s ago: executing program 0 (id=428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x3c, 0x2}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000100)) 1m22.457995471s ago: executing program 1 (id=430): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000012006b00000000d86e6c1d0000147ea60864160af36504b68675f8001d000a008be6050017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m22.232266206s ago: executing program 1 (id=432): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=""/77, 0x4d}, {0x0}, {&(0x7f0000001c40)=""/4151, 0xde7}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000900)=""/189, 0xbd}], 0x6}, 0x10002) 1m21.891396998s ago: executing program 0 (id=436): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4050}, 0x20000800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000004800e1ff030000000000000002ff9d2f05d5c7df43b6e8a049812b9ebd0548ca3fc1b3f21f913dad9742be58a8fb2519af7d76a585d2529acc5d6d821dbb88b011ada712c84c29b492c73abf7fef07537da2c8e3"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc0d0) 1m21.738047194s ago: executing program 0 (id=437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x2, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{@in6=@private2, 0x4d3, 0x3c}, 0x0, @in6=@local, 0xffffffff, 0x5}]}]}, 0x13c}}, 0x20000000) 1m21.465394431s ago: executing program 0 (id=440): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'bond0\x00', @link_local}) 1m7.210970238s ago: executing program 32 (id=426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1a3081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x66) 1m6.172062635s ago: executing program 33 (id=440): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'bond0\x00', @link_local}) 1m6.078585154s ago: executing program 34 (id=432): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=""/77, 0x4d}, {0x0}, {&(0x7f0000001c40)=""/4151, 0xde7}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000900)=""/189, 0xbd}], 0x6}, 0x10002) 5.289067038s ago: executing program 3 (id=614): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x270f}, 0x20) sendto$inet(r1, &(0x7f0000000200)='test\x00', 0x5, 0x0, 0x0, 0x0) 4.812285664s ago: executing program 4 (id=618): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000004)=0x800, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000010)=@assoc_value={0x0, 0x1f4}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000018)=@assoc_value={0x0, 0x1f4}, 0x8) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000020)=0x1, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000024)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000008)=0x800, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000028)=@assoc_value={0x0, 0x1f4}, 0x8) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f000000002c)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000200)='\x00'/10000, 0x2710, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) recvfrom$inet(r2, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 4.745019848s ago: executing program 6 (id=619): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2389, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000010)={0x2, 0x238a, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000020)=0x1, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000030)=@assoc_value={0x0, 0x4b0}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x2389, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)='\x00', 0x1000}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0x0, [0x0]}, &(0x7f0000000310)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000400), &(0x7f0000000410)=0x8) 4.389383791s ago: executing program 6 (id=620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x5002}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'syzkaller0\x00', &(0x7f0000000400)=@ethtool_sfeatures={0x3b, 0x2, [{0x80000000, 0x80000000}, {0x4000000, 0x4000000}]}}) write$tun(r0, &(0x7f0000000500)={@void, @void, @eth={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local}, {0x1234, 0x1234, 0xd, 0x0, @opaque="1234567890"}}}}}}, 0x36) write$tun(r0, &(0x7f0000000600)={@void, @void, @eth={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local}, {0x1234, 0x1234, 0xd, 0x0, @opaque="1234567890"}}}}}}, 0x36) 4.387478605s ago: executing program 3 (id=621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x400, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x400, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000400)=0x1000, 0x4) write(r1, &(0x7f0000001000)='\x00'/1000000, 0xf4240) (async) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) shutdown(r1, 0x2) close(r1) 3.824957475s ago: executing program 4 (id=622): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mount(&(0x7f0000000400)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000700)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000100)='ceph v027\x00'/281, 0x119) write(r1, &(0x7f0000000200)="01ffffffffffffffff0100000001000000000000000000000000070100000000000000000000000000000004000000000004000000000000000100000000000100000000000000000000000000006505b200000000", 0x54) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 3.46650484s ago: executing program 5 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/net/atm/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000100), 0x1000) 3.23226888s ago: executing program 5 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500010000000000000030010000100001800900020065746830000000000800050011223344"], 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000100000000000000300100000c000180080002006c6f00000800050011223344"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000100000000000000300100000c00018008000100010000000800050011223344"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000100000000000000300100000c00018008000100020000000800050011223344"], 0x28}}, 0x0) 3.21718409s ago: executing program 3 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000002c0)="5c000000300005060000000000000000000000004800018044000180090001006761746500000000370002801800020000000000000000000000000000000000170005801300018008000100000000000700030064000000", 0x5c, 0x0, 0x0, 0x0) 2.551102793s ago: executing program 6 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000110000000102030405060708090a0b0c0d0e0f10\n', 0x6c) 2.521031365s ago: executing program 3 (id=628): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0a, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6666:/path\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='mon_addr\x00', &(0x7f0000000500)='127.0.0.1:6666\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) accept$inet(r0, 0x0, 0x0) 2.504014542s ago: executing program 5 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mount(&(0x7f0000000400)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000700)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000100)="63657068207630323700000000000000007f00000100000000000000007f00000101000000000000000000000000000000000000000000000000070400000000000000000000000000000000000000000100000000000000040000000000040000000000000001000000000000000000000000006505b221", 0x90) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 2.370810501s ago: executing program 6 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000018000180140002007665746830000000000008000900000000000800060000000000"], 0x34}}, 0x0) 2.053611952s ago: executing program 6 (id=631): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000120)='source\x00', &(0x7f0000000130)='127.0.0.2:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000190)='timeo\x00', &(0x7f00000001a0)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001b0)='retrans\x00', &(0x7f00000001c0)='5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001d0)='vers\x00', &(0x7f00000001e0)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.999867823s ago: executing program 4 (id=632): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1 1\x00', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000100005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000110005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000120005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000130005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000140005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000150005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000160005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000170005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000180005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000190005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001a0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001b0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001c0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001e0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001f0005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000200005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000210005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000220005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000230005000100000000000000060100000800010001000000"], 0x1c}}, 0x0) 1.366924976s ago: executing program 4 (id=633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)='espintcp\x00', 0x9) sendto$inet(r1, &(0x7f0000000200)="0008000000000102", 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) recvfrom$inet(r2, &(0x7f0000000300), 0x6, 0x0, 0x0, 0x0) 1.366572463s ago: executing program 6 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/probability\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='100\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='100\x00', 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}}) 996.968645ms ago: executing program 5 (id=635): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'dummy0\x00', {0x1}}) 904.689705ms ago: executing program 3 (id=636): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="340000000000010000000000000000001f0000000c0001000b0002006c6f00000800020000000000080003001000000005000400000000000500060050000000"], 0x34}], 0x1}, 0x0) 520.717568ms ago: executing program 3 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000011000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000012000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000013000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000014000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000015000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000016000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000017000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000018000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000019000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001a000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001b000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001c000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001d000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001e000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001f000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000020000100000000000000000001020000000000000d0002006f76735f64617461706174680000001800020000000000100001006f76735f647030000800020000000000"], 0x50}}, 0x0) 485.731801ms ago: executing program 4 (id=638): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c00170004000100"]}, 0x68}}, 0x0) 281.351609ms ago: executing program 5 (id=639): r0 = socket$inet(0x2, 0x2, 0x11) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r2, &(0x7f0000000200), 0x10) lseek(r2, 0x1, 0x0) read(r2, &(0x7f0000000300), 0x1000) 207.405673ms ago: executing program 4 (id=640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffffffffffffffffffff00"/30, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 5 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xa}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0}}}, 0xd8}}, 0x0) kernel console output (not intermixed with test programs): 95083][ T5694] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.933591][ T6147] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 143.053492][ T5776] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 143.053527][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.068553][ T5694] usb 3-1: Using ep0 maxpacket: 8 [ 143.116212][ T5694] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 143.116243][ T5694] usb 3-1: config 0 has no interface number 0 [ 143.143099][ T5694] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 143.143136][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.143157][ T5694] usb 3-1: Product: syz [ 143.143172][ T5694] usb 3-1: Manufacturer: syz [ 143.143187][ T5694] usb 3-1: SerialNumber: syz [ 143.193772][ T5776] usb 1-1: config 0 descriptor?? [ 143.235541][ T5776] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 143.266950][ T5694] usb 3-1: config 0 descriptor?? [ 143.754264][ T5776] gspca_sunplus: reg_w_riv err -110 [ 143.754589][ T5776] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 144.292547][ T5694] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 144.292649][ T5694] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 144.478351][ T5694] usb 3-1: USB disconnect, device number 6 [ 144.843688][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.975492][ T10] usb 2-1: device descriptor read/64, error -71 [ 145.233554][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 145.260341][ T198] usb 1-1: USB disconnect, device number 10 [ 145.364387][ T10] usb 2-1: device descriptor read/64, error -71 [ 145.473953][ T10] usb usb2-port1: attempt power cycle [ 145.771042][ T5325] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.887083][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.910151][ T10] usb 2-1: device descriptor read/8, error -71 [ 145.936221][ T5325] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 145.936251][ T5325] usb 4-1: config 0 has no interface number 0 [ 145.936299][ T5325] usb 4-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 31 [ 145.936434][ T5325] usb 4-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid maxpacket 12336, setting to 1024 [ 145.936462][ T5325] usb 4-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 1024 [ 145.936487][ T5325] usb 4-1: config 0 interface 238 has no altsetting 0 [ 146.009742][ T5325] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 146.009775][ T5325] usb 4-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 146.009797][ T5325] usb 4-1: Product: syz [ 146.009812][ T5325] usb 4-1: Manufacturer: syz [ 146.009827][ T5325] usb 4-1: SerialNumber: syz [ 146.057659][ T5325] usb 4-1: config 0 descriptor?? [ 146.060322][ T6187] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.060595][ T6187] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.145607][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.167606][ T10] usb 2-1: device descriptor read/8, error -71 [ 146.187292][ T5325] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 146.273983][ T10] usb usb2-port1: unable to enumerate USB device [ 146.689422][ T32] usb 4-1: USB disconnect, device number 5 [ 147.194200][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.343543][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 147.351552][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 147.351584][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.351606][ T10] usb 1-1: Product: syz [ 147.351620][ T10] usb 1-1: Manufacturer: syz [ 147.351637][ T10] usb 1-1: SerialNumber: syz [ 147.407756][ T10] usb 1-1: config 0 descriptor?? [ 147.435912][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 147.636435][ T6210] netlink: 'syz.0.124': attribute type 4 has an invalid length. [ 147.753638][ T5785] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.923552][ T5785] usb 3-1: Using ep0 maxpacket: 16 [ 147.926780][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.927201][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.927229][ T5785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.927274][ T5785] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.927513][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.038414][ T5785] usb 3-1: config 0 descriptor?? [ 148.052465][ T6233] netlink: zone id is out of range [ 148.052480][ T6233] netlink: zone id is out of range [ 148.052489][ T6233] netlink: get zone limit has 8 unknown bytes [ 148.078483][ T6233] netlink: zone id is out of range [ 148.078497][ T6233] netlink: zone id is out of range [ 148.078505][ T6233] netlink: get zone limit has 8 unknown bytes [ 148.079542][ T6233] netlink: zone id is out of range [ 148.079553][ T6233] netlink: zone id is out of range [ 148.079561][ T6233] netlink: get zone limit has 8 unknown bytes [ 148.081610][ T6233] netlink: zone id is out of range [ 148.482965][ T5785] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 148.496231][ T5785] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0 [ 148.544966][ T5785] microsoft 0003:045E:07DA.0001: implement() called with n (152) > 32! (kworker/0:7) [ 148.651546][ T5785] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0 [ 148.693177][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.880506][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 148.880529][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.880543][ T9] usb 2-1: Product: syz [ 148.880553][ T9] usb 2-1: Manufacturer: syz [ 148.880563][ T9] usb 2-1: SerialNumber: syz [ 148.952806][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.980230][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.019830][ T5785] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 149.019898][ T5785] microsoft 0003:045E:07DA.0001: no inputs found [ 149.019910][ T5785] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 149.145843][ T6210] kAFS: unable to lookup cell 'syz0' [ 149.325629][ T5785] usb 3-1: USB disconnect, device number 7 [ 149.425326][ T10] gspca_sonixj: i2c_w8 err -110 [ 149.443573][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 149.533546][ T10] usb 1-1: USB disconnect, device number 11 [ 149.534051][ T6252] netlink: 'syz.2.137': attribute type 28 has an invalid length. [ 149.534071][ T6252] netlink: 'syz.2.137': attribute type 28 has an invalid length. [ 149.534085][ T6252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.137'. [ 149.712214][ T9] rtl8150 2-1:1.0: couldn't reset the device [ 149.712504][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 149.846778][ T9] usb 2-1: USB disconnect, device number 10 [ 150.233658][ T5785] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.334241][ T5776] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 150.413474][ T5785] usb 4-1: Using ep0 maxpacket: 16 [ 150.413479][ T32] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.415298][ T5785] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.415323][ T5785] usb 4-1: config 0 has no interface number 0 [ 150.415372][ T5785] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 150.415399][ T5785] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 150.415437][ T5785] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 150.415464][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.474117][ T5785] usb 4-1: config 0 descriptor?? [ 150.503189][ T6259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.513773][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 150.519853][ T5776] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.519879][ T5776] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.559791][ T5776] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.559824][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.559855][ T5776] usb 2-1: Product: syz [ 150.559871][ T5776] usb 2-1: Manufacturer: syz [ 150.559886][ T5776] usb 2-1: SerialNumber: syz [ 150.652203][ T5776] usb 2-1: 0:2 : does not exist [ 150.718108][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.718206][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.718232][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.718281][ T32] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.718372][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.792632][ T32] usb 3-1: config 0 descriptor?? [ 150.849841][ T32] usbhid 3-1:0.0: can't add hid device: -22 [ 150.850059][ T32] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 151.047740][ T5776] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 151.248734][ T5776] usb 2-1: USB disconnect, device number 11 [ 151.379951][ T5785] uclogic 0003:28BD:0071.0002: failed retrieving string descriptor #100: -71 [ 151.380011][ T5785] uclogic 0003:28BD:0071.0002: failed retrieving pen parameters: -71 [ 151.380043][ T5785] uclogic 0003:28BD:0071.0002: pen probing failed: -71 [ 151.380065][ T5785] uclogic 0003:28BD:0071.0002: failed probing parameters: -71 [ 151.380176][ T5785] uclogic 0003:28BD:0071.0002: probe with driver uclogic failed with error -71 [ 151.486441][ T5785] usb 4-1: USB disconnect, device number 6 [ 151.528199][ T5681] udevd[5681]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.943162][ T5785] usb 3-1: USB disconnect, device number 8 [ 152.310397][ T6304] netlink: 76 bytes leftover after parsing attributes in process `syz.3.145'. [ 152.844177][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.003936][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 153.007233][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 153.007283][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 153.007312][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 153.007355][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 153.007379][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.130870][ T9] usb 4-1: config 0 descriptor?? [ 153.576077][ T9] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 153.576132][ T9] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 153.576160][ T9] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 153.576187][ T9] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 153.576213][ T9] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 153.576239][ T9] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 153.576266][ T9] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 153.576321][ T9] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 153.707803][ T9] pyra 0003:1E7D:2C24.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.3-1/input0 [ 153.776693][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.777413][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.878123][ T9] usb 4-1: USB disconnect, device number 7 [ 154.087980][ T5785] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.217242][ T5785] usb 3-1: device descriptor read/64, error -71 [ 154.453776][ T5785] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 154.462061][ T6339] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 154.462091][ T6339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.570978][ T6339] vhci_hcd vhci_hcd.0: Device attached [ 154.583538][ T5785] usb 3-1: device descriptor read/64, error -71 [ 154.650535][ T6340] vhci_hcd: connection closed [ 154.683602][ T1484] vhci_hcd vhci_hcd.1: stop threads [ 154.686979][ T1484] vhci_hcd vhci_hcd.1: release socket [ 154.759958][ T5785] usb usb3-port1: attempt power cycle [ 154.776755][ T5776] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 154.799953][ T1484] vhci_hcd vhci_hcd.1: disconnect device [ 154.878938][ T6332] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 155.163762][ T5785] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 155.189198][ T5785] usb 3-1: device descriptor read/8, error -71 [ 155.299921][ T1484] tipc: Subscription rejected, illegal request [ 155.425517][ T5785] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 155.446231][ T5785] usb 3-1: device descriptor read/8, error -71 [ 155.556136][ T5785] usb usb3-port1: unable to enumerate USB device [ 155.613554][ T5694] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 155.630441][ T6362] FAULT_INJECTION: forcing a failure. [ 155.630441][ T6362] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 155.630507][ T6362] CPU: 1 UID: 0 PID: 6362 Comm: syz.0.162 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 155.630537][ T6362] Tainted: [L]=SOFTLOCKUP [ 155.630544][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.630565][ T6362] Call Trace: [ 155.630574][ T6362] [ 155.630584][ T6362] dump_stack_lvl+0xe8/0x150 [ 155.630620][ T6362] should_fail_ex+0x467/0x600 [ 155.630652][ T6362] _copy_from_user+0x2d/0xb0 [ 155.630674][ T6362] ___sys_sendmsg+0x1c6/0x360 [ 155.630708][ T6362] ? __lock_acquire+0x6df/0x2e40 [ 155.630730][ T6362] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.630790][ T6362] ? __fget_files+0x2a/0x420 [ 155.630810][ T6362] ? __fget_files+0x3a8/0x420 [ 155.630838][ T6362] __x64_sys_sendmsg+0x1b7/0x290 [ 155.630874][ T6362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.630924][ T6362] do_syscall_64+0x17b/0x530 [ 155.630947][ T6362] ? irqentry_exit+0x10f/0x8f0 [ 155.630967][ T6362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.630990][ T6362] ? clear_bhb_loop+0x40/0x90 [ 155.631018][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.631041][ T6362] RIP: 0033:0x7fd3dabbe019 [ 155.631070][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.631088][ T6362] RSP: 002b:00007fd3d8e16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.631115][ T6362] RAX: ffffffffffffffda RBX: 00007fd3dae45fa0 RCX: 00007fd3dabbe019 [ 155.631130][ T6362] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 155.631144][ T6362] RBP: 00007fd3d8e16090 R08: 0000000000000000 R09: 0000000000000000 [ 155.631156][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.631169][ T6362] R13: 00007fd3dae46038 R14: 00007fd3dae45fa0 R15: 00007fff52118688 [ 155.631202][ T6362] [ 155.917162][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 155.928943][ T5694] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 155.929031][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.929093][ T5694] usb 2-1: Product: syz [ 155.929130][ T5694] usb 2-1: Manufacturer: syz [ 155.929145][ T5694] usb 2-1: SerialNumber: syz [ 155.966184][ T5694] usb 2-1: config 0 descriptor?? [ 155.981309][ T5694] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 156.343964][ T5776] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.512068][ T5776] usb 4-1: config 1 has an invalid descriptor of length 67, skipping remainder of the config [ 156.512099][ T5776] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.515653][ T5776] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.516518][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.516579][ T5776] usb 4-1: SerialNumber: syz [ 156.684674][ T5694] gspca_ov534_9: reg_w failed -71 [ 156.809157][ T6378] capability: warning: `syz.1.168' uses 32-bit capabilities (legacy support in use) [ 156.854878][ T6366] fuse: Unknown parameter '184467440737095516150x000000000000000a' [ 156.983568][ T5694] gspca_ov534_9: Unknown sensor 0000 [ 156.983732][ T5694] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 157.145436][ T5694] usb 2-1: USB disconnect, device number 12 [ 157.302966][ T6400] FAULT_INJECTION: forcing a failure. [ 157.302966][ T6400] name failslab, interval 1, probability 0, space 0, times 1 [ 157.303001][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.0.171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 157.303026][ T6400] Tainted: [L]=SOFTLOCKUP [ 157.303033][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.303043][ T6400] Call Trace: [ 157.303050][ T6400] [ 157.303058][ T6400] dump_stack_lvl+0xe8/0x150 [ 157.303088][ T6400] should_fail_ex+0x467/0x600 [ 157.303117][ T6400] should_failslab+0xa8/0x100 [ 157.303136][ T6400] kmem_cache_alloc_node_noprof+0xac/0x660 [ 157.303166][ T6400] ? __alloc_skb+0x1d7/0x7a0 [ 157.303191][ T6400] ? __alloc_skb+0x1d7/0x7a0 [ 157.303222][ T6400] __alloc_skb+0x1d7/0x7a0 [ 157.303255][ T6400] netlink_sendmsg+0x5d4/0xb40 [ 157.303301][ T6400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.303332][ T6400] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 157.303364][ T6400] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 157.303393][ T6400] ? arch_stack_walk+0xfb/0x150 [ 157.303425][ T6400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.303454][ T6400] sock_sendmsg_nosec+0x13a/0x180 [ 157.303480][ T6400] ____sys_sendmsg+0x565/0x870 [ 157.303518][ T6400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.303558][ T6400] ? import_iovec+0x73/0xa0 [ 157.303596][ T6400] ___sys_sendmsg+0x2a5/0x360 [ 157.303625][ T6400] ? __lock_acquire+0x6df/0x2e40 [ 157.303645][ T6400] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.303698][ T6400] ? __fget_files+0x2a/0x420 [ 157.303727][ T6400] ? __fget_files+0x3a8/0x420 [ 157.303753][ T6400] __x64_sys_sendmsg+0x1b7/0x290 [ 157.303782][ T6400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.303828][ T6400] do_syscall_64+0x17b/0x530 [ 157.303848][ T6400] ? irqentry_exit+0x10f/0x8f0 [ 157.303866][ T6400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.303886][ T6400] ? clear_bhb_loop+0x40/0x90 [ 157.303910][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.303928][ T6400] RIP: 0033:0x7fd3dabbe019 [ 157.303947][ T6400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.303963][ T6400] RSP: 002b:00007fd3d8e16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.303983][ T6400] RAX: ffffffffffffffda RBX: 00007fd3dae45fa0 RCX: 00007fd3dabbe019 [ 157.303997][ T6400] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 157.304009][ T6400] RBP: 00007fd3d8e16090 R08: 0000000000000000 R09: 0000000000000000 [ 157.304020][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.304031][ T6400] R13: 00007fd3dae46038 R14: 00007fd3dae45fa0 R15: 00007fff52118688 [ 157.304059][ T6400] [ 157.923039][ T5776] usb 4-1: 0:2 : does not exist [ 157.931766][ T5776] usb 4-1: unit 5 not found! [ 158.130239][ T5776] usb 4-1: USB disconnect, device number 8 [ 158.131458][ T6410] netlink: 1476 bytes leftover after parsing attributes in process `syz.0.172'. [ 158.212683][ T5681] udevd[5681]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.286768][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'. [ 158.393623][ T5694] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 158.558921][ T5694] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.561471][ T5694] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 158.561501][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.561522][ T5694] usb 1-1: Product: syz [ 158.561538][ T5694] usb 1-1: Manufacturer: syz [ 158.561552][ T5694] usb 1-1: SerialNumber: syz [ 158.658114][ T5694] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 158.658434][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 87 [ 158.658514][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 158.660749][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 158.660846][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82 [ 158.660934][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 158.661041][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 158.661130][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 85 [ 158.661352][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 5 [ 158.752952][ T5694] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 158.759592][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 83 [ 158.759829][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 158.760069][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3 [ 158.760273][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 4 [ 158.760494][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 86 [ 158.760740][ T5694] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 158.837804][ T5694] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 159.081669][ T6417] warning: `syz.0.172' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.157719][ T9] IPVS: starting estimator thread 0... [ 159.169994][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.170671][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.250515][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 159.253723][ T5785] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 159.274277][ T6418] IPVS: using max 7 ests per chain, 16800 per kthread [ 159.297053][ T6394] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.297091][ T6394] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 159.447853][ T5785] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 159.447892][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.447913][ T5785] usb 4-1: Product: syz [ 159.447927][ T5785] usb 4-1: Manufacturer: syz [ 159.447942][ T5785] usb 4-1: SerialNumber: syz [ 159.606581][ T32] usb 1-1: USB disconnect, device number 12 [ 159.674515][ T5694] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 159.721293][ T32] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 159.722696][ T6394] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.722718][ T6394] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 159.789035][ T32] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 159.799017][ T32] keyspan 1-1:1.0: device disconnected [ 159.929161][ T6394] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.929189][ T6394] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 159.962173][ T6416] netlink: 666 bytes leftover after parsing attributes in process `syz.3.174'. [ 160.327948][ T6394] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.327973][ T6394] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 160.412502][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.432105][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.963623][ T5694] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 161.117782][ T5694] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 161.168631][ T5694] usb 2-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 161.168659][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.168676][ T5694] usb 2-1: Product: syz [ 161.168688][ T5694] usb 2-1: Manufacturer: syz [ 161.168700][ T5694] usb 2-1: SerialNumber: syz [ 161.219207][ T5694] usb 2-1: config 0 descriptor?? [ 161.240247][ T5694] go7007-loader 2-1:0.0: can't handle multiple config [ 161.240270][ T5694] go7007-loader 2-1:0.0: probe failed [ 161.413688][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 161.470197][ T5325] usb 2-1: USB disconnect, device number 14 [ 161.573731][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 161.611456][ T9] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 161.611494][ T9] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 161.611509][ T9] usb 3-1: config 0 has no interface number 0 [ 161.611587][ T9] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.611606][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.611625][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 161.612926][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 161.612956][ T9] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 161.613040][ T9] usb 3-1: Product: syz [ 161.664533][ T5694] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 161.740054][ T9] usb 3-1: config 0 descriptor?? [ 161.853548][ T5694] usb 1-1: Using ep0 maxpacket: 16 [ 161.856125][ T5694] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.878564][ T5694] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 161.878597][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.878618][ T5694] usb 1-1: Product: syz [ 161.878633][ T5694] usb 1-1: Manufacturer: syz [ 161.878648][ T5694] usb 1-1: SerialNumber: syz [ 161.952130][ T5694] usb 1-1: config 0 descriptor?? [ 161.964980][ T5694] asix 1-1:0.0: probe with driver asix failed with error -22 [ 162.307460][ T5785] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 162.322919][ T5785] usb 4-1: USB disconnect, device number 9 [ 162.371046][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.372936][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.411046][ T5785] usblp0: removed [ 162.697564][ T9] usb 3-1: USB disconnect, device number 13 [ 162.742192][ T5785] IPVS: starting estimator thread 0... [ 162.847491][ T6458] IPVS: using max 9 ests per chain, 21600 per kthread [ 162.889273][ T6461] team_slave_0: entered allmulticast mode [ 162.937120][ T6461] team_slave_0: entered promiscuous mode [ 163.957267][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.981311][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.181649][ T6493] input: syz0 as /devices/virtual/input/input8 [ 164.198834][ T6497] netlink: 'syz.1.195': attribute type 10 has an invalid length. [ 164.200587][ T6497] veth0_macvtap: entered allmulticast mode [ 164.221453][ T198] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 164.510563][ T32] usb 1-1: USB disconnect, device number 13 [ 164.548611][ T6504] binder: 6501:6504 ioctl c00c620f 0 returned -14 [ 164.873314][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 165.313217][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.421985][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.504349][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.504975][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.505414][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.505671][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.636791][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.636988][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.637147][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.637282][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.637425][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.637566][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.637695][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.637959][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.638101][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.638287][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.645481][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.646675][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.670486][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.714917][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.717029][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.747311][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.747487][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.747635][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.747782][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.747932][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.748060][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.794603][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.794787][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.794946][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.795120][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.795283][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.795431][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.878832][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.878990][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.879099][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.879204][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.879309][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.879415][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.879520][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.879762][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.879872][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.879982][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.880086][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.880203][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.881971][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.882145][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.882308][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.882465][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.882625][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.882796][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.882976][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.883146][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.883305][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.903191][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.908090][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.939339][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.939882][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.940307][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.960741][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.961313][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.961713][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.962196][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.108486][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.108664][ T6519] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.343569][ T5785] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 166.473662][ T5785] usb 3-1: device descriptor read/64, error -71 [ 166.713608][ T5785] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.844490][ T5785] usb 3-1: device descriptor read/64, error -71 [ 166.954139][ T5785] usb usb3-port1: attempt power cycle [ 167.250050][ T6567] befs: (nbd0): No write support. Marking filesystem read-only [ 167.324496][ T5785] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 167.344564][ T5785] usb 3-1: device descriptor read/8, error -71 [ 167.453575][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.582752][ T6578] FAULT_INJECTION: forcing a failure. [ 167.582752][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 167.582792][ T6578] CPU: 0 UID: 0 PID: 6578 Comm: syz.1.213 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.582822][ T6578] Tainted: [L]=SOFTLOCKUP [ 167.582829][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.582842][ T6578] Call Trace: [ 167.582851][ T6578] [ 167.582860][ T6578] dump_stack_lvl+0xe8/0x150 [ 167.582892][ T6578] should_fail_ex+0x467/0x600 [ 167.582926][ T6578] should_failslab+0xa8/0x100 [ 167.582949][ T6578] kmem_cache_alloc_node_noprof+0xac/0x660 [ 167.582981][ T6578] ? __alloc_skb+0x1d7/0x7a0 [ 167.583008][ T6578] ? __alloc_skb+0x1d7/0x7a0 [ 167.583043][ T6578] __alloc_skb+0x1d7/0x7a0 [ 167.583077][ T6578] nfsd_nl_threads_get_doit+0xcd/0x790 [ 167.583119][ T6578] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 167.583150][ T6578] ? __nla_parse+0x40/0x60 [ 167.583189][ T6578] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 167.583216][ T6578] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 167.583253][ T6578] genl_family_rcv_msg_doit+0x233/0x340 [ 167.583289][ T6578] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 167.583341][ T6578] genl_rcv_msg+0x614/0x7a0 [ 167.583374][ T6578] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.583397][ T6578] ? ref_tracker_free+0x668/0x820 [ 167.583427][ T6578] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 167.583458][ T6578] ? ____sys_sendmsg+0x565/0x870 [ 167.583488][ T6578] ? ___sys_sendmsg+0x2a5/0x360 [ 167.583519][ T6578] ? __x64_sys_sendmsg+0x1b7/0x290 [ 167.583552][ T6578] ? do_syscall_64+0x17b/0x530 [ 167.583574][ T6578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.583615][ T6578] netlink_rcv_skb+0x226/0x4a0 [ 167.583651][ T6578] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.583680][ T6578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.583733][ T6578] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.583767][ T6578] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.583806][ T6578] genl_rcv+0x28/0x40 [ 167.583829][ T6578] netlink_unicast+0x7f5/0x990 [ 167.583871][ T6578] netlink_sendmsg+0x813/0xb40 [ 167.583915][ T6578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.583953][ T6578] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 167.583989][ T6578] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 167.584023][ T6578] ? arch_stack_walk+0xfb/0x150 [ 167.584060][ T6578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.584094][ T6578] sock_sendmsg_nosec+0x13a/0x180 [ 167.584120][ T6578] ____sys_sendmsg+0x565/0x870 [ 167.584157][ T6578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.584199][ T6578] ? import_iovec+0x73/0xa0 [ 167.584238][ T6578] ___sys_sendmsg+0x2a5/0x360 [ 167.584268][ T6578] ? __lock_acquire+0x6df/0x2e40 [ 167.584295][ T6578] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.584367][ T6578] ? __fget_files+0x2a/0x420 [ 167.584389][ T6578] ? __fget_files+0x3a8/0x420 [ 167.584422][ T6578] __x64_sys_sendmsg+0x1b7/0x290 [ 167.584459][ T6578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.584513][ T6578] do_syscall_64+0x17b/0x530 [ 167.584535][ T6578] ? irqentry_exit+0x10f/0x8f0 [ 167.584556][ T6578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.584579][ T6578] ? clear_bhb_loop+0x40/0x90 [ 167.584712][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.584747][ T6578] RIP: 0033:0x7f45ef99e019 [ 167.584774][ T6578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.584793][ T6578] RSP: 002b:00007f45edbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.584816][ T6578] RAX: ffffffffffffffda RBX: 00007f45efc25fa0 RCX: 00007f45ef99e019 [ 167.584832][ T6578] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 167.584846][ T6578] RBP: 00007f45edbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.584859][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.584872][ T6578] R13: 00007f45efc26038 R14: 00007f45efc25fa0 R15: 00007ffc069dbff8 [ 167.584907][ T6578] [ 167.626948][ T5785] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 167.708964][ T5785] usb 3-1: device descriptor read/8, error -71 [ 168.020806][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.020996][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 168.159426][ T5785] usb usb3-port1: unable to enumerate USB device [ 168.168251][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 168.168291][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.168310][ T9] usb 4-1: Product: syz [ 168.168324][ T9] usb 4-1: Manufacturer: syz [ 168.168339][ T9] usb 4-1: SerialNumber: syz [ 168.306063][ T9] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 168.734650][ T32] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 168.888460][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.889082][ T32] usb 1-1: not running at top speed; connect to a high speed hub [ 168.890358][ T32] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 104, changing to 4 [ 168.893229][ T32] usb 1-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 168.893257][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.893279][ T32] usb 1-1: Product: ৈ႓髻욑舂㸙떷Ꭷ팼཭뙡䃑숍끅㴤碕땕⃸Ꭹ宥位禉S୏ا㵌ೳ곹Ə뚚ﷳ슉籹䚝朒뾐 [ 168.893300][ T32] usb 1-1: Manufacturer: ꓿⯳䬰ᵖ릎됓ન﫢骢熷㓉眄疪洫벏횎㹮訮롸䮞ᒾꈽ⅔臨ṝ鉩삪躵⛮샔臬锆뫳ⅴ뙊哫ⷒﱃ→ワ鶦ꤧ骝罈䜨廯곈孛鷜哟䑮炤䗁ꙑ☁颎㸪놼໺玡砏颈黡호ᛝ뫧쩙阢猎⬋붚짇舠눀 [ 168.893322][ T32] usb 1-1: SerialNumber: Б [ 169.063649][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 169.213555][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 169.220565][ T9] usb 3-1: config 6 has an invalid interface number: 91 but max is 0 [ 169.220596][ T9] usb 3-1: config 6 has no interface number 0 [ 169.220630][ T9] usb 3-1: config 6 interface 91 has no altsetting 0 [ 169.252214][ T9] usb 3-1: New USB device found, idVendor=10d2, idProduct=3620, bcdDevice=83.9c [ 169.252247][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.252270][ T9] usb 3-1: Product: syz [ 169.252284][ T9] usb 3-1: Manufacturer: syz [ 169.252299][ T9] usb 3-1: SerialNumber: syz [ 169.322187][ T32] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 169.322673][ T32] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 169.372075][ T32] usb 1-1: unable to issue vendor read request (ret = -71) [ 169.372696][ T32] usb 1-1: unable to issue vendor read request (ret = -71) [ 169.388609][ T32] usb 1-1: unable to issue vendor read request (ret = -71) [ 169.389227][ T32] usb 1-1: unable to issue vendor read request (ret = -71) [ 169.391522][ T32] usb 1-1: unable to issue vendor read request (ret = -71) [ 169.398744][ T32] usb 1-1: unable to issue vendor read request (ret = -71) [ 169.419582][ T32] usb 1-1: unable to issue vendor read request (ret = -71) [ 169.430475][ T32] usb 1-1: unable to issue vendor read request (ret = -71) [ 169.561377][ T32] usb 1-1: USB disconnect, device number 14 [ 169.630309][ T5681] udevd[5681]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.724037][ T5776] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 169.747010][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.751157][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.803881][ T9] usblcd 3-1:6.91: USBLCD model not supported. [ 169.821052][ T9] usb 3-1: USB disconnect, device number 18 [ 169.853622][ T5776] usb 2-1: device descriptor read/64, error -71 [ 169.937256][ T6595] overlayfs: upper fs does not support file handles, falling back to index=off. [ 170.095121][ T5776] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 170.158694][ T9] usb 4-1: USB disconnect, device number 11 [ 170.233585][ T5776] usb 2-1: device descriptor read/64, error -71 [ 170.356019][ T5776] usb usb2-port1: attempt power cycle [ 170.452995][ T6603] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 170.534223][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 170.663821][ T5674] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 170.683753][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 170.687666][ T9] usb 4-1: config 0 has an invalid interface number: 87 but max is 0 [ 170.687694][ T9] usb 4-1: config 0 has no interface number 0 [ 170.687737][ T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=bc8c, bcdDevice=7d.94 [ 170.687754][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.704554][ T5776] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 170.753629][ T5776] usb 2-1: device descriptor read/8, error -71 [ 170.779052][ T9] usb 4-1: config 0 descriptor?? [ 170.806414][ T9] option 4-1:0.87: GSM modem (1-port) converter detected [ 170.853537][ T5674] usb 3-1: Using ep0 maxpacket: 16 [ 170.858177][ T5674] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 170.858208][ T5674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.925901][ T5674] usb 3-1: config 0 descriptor?? [ 170.935782][ T5674] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 171.034021][ T5776] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 171.042968][ T9] usb 4-1: USB disconnect, device number 12 [ 171.048620][ T9] option 4-1:0.87: device disconnected [ 171.066325][ T5776] usb 2-1: device descriptor read/8, error -71 [ 171.133168][ T5674] usb 3-1: Detected FT232B [ 171.174070][ T5776] usb usb2-port1: unable to enumerate USB device [ 171.416442][ T5674] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 171.417062][ T5674] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 171.440471][ T5674] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 171.459665][ T5674] usb 3-1: USB disconnect, device number 19 [ 171.477072][ T5674] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 171.478114][ T5674] ftdi_sio 3-1:0.0: device disconnected [ 171.813555][ T5694] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 171.946492][ T5694] usb 1-1: device descriptor read/64, error -71 [ 172.197887][ T5694] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 172.314593][ T6646] IPVS: Scheduler module ip_vs_sip not found [ 172.333611][ T5694] usb 1-1: device descriptor read/64, error -71 [ 172.444106][ T5694] usb usb1-port1: attempt power cycle [ 172.823836][ T5694] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 172.847611][ T5694] usb 1-1: device descriptor read/8, error -71 [ 173.064360][ T6661] loop8: detected capacity change from 0 to 7 [ 173.106006][ T5694] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 173.135617][ T5694] usb 1-1: device descriptor read/8, error -71 [ 173.240596][ T6661] Dev loop8: unable to read RDB block 7 [ 173.240641][ T6661] loop8: unable to read partition table [ 173.240862][ T6661] loop8: partition table beyond EOD, truncated [ 173.240898][ T6661] loop_reread_partitions: partition scan of loop8 (被x^>) failed (rc=-5) [ 173.271026][ T5694] usb usb1-port1: unable to enumerate USB device [ 173.349437][ T5681] Flush: task=udevd[5681] dev=loop8 state=2 [ 173.486197][ T5681] Teardown: task=udevd[5681] dev=loop8 state=2 [ 173.953636][ T5325] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 174.103666][ T5325] usb 3-1: Using ep0 maxpacket: 8 [ 174.106158][ T5325] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 174.106184][ T5325] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 174.152708][ T5325] usb 3-1: string descriptor 0 read error: -71 [ 174.152868][ T5325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.152898][ T5325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.185807][ T5325] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 174.185838][ T5325] usb 3-1: no configuration chosen from 1 choice [ 174.202526][ T5325] usb 3-1: USB disconnect, device number 20 [ 174.348879][ T38] audit: type=1326 audit(1785767403.874:2): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6683 comm="syz.1.240" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45ef99e019 code=0x0 [ 174.385850][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'. [ 174.787581][ T6696] syz.2.245 uses obsolete (PF_INET,SOCK_PACKET) [ 174.833570][ T5776] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.926708][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.927509][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.993640][ T5776] usb 4-1: Using ep0 maxpacket: 8 [ 174.996386][ T5776] usb 4-1: config 1 has an invalid interface number: 141 but max is 3 [ 174.996484][ T5776] usb 4-1: config 1 has an invalid interface number: 27 but max is 3 [ 174.996509][ T5776] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 174.996530][ T5776] usb 4-1: config 1 has an invalid interface number: 96 but max is 3 [ 174.996551][ T5776] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 174.996570][ T5776] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 174.996600][ T5776] usb 4-1: config 1 has an invalid interface number: 84 but max is 3 [ 174.996614][ T5776] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 174.996627][ T5776] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 174.996640][ T5776] usb 4-1: config 1 has no interface number 0 [ 174.996652][ T5776] usb 4-1: config 1 has no interface number 1 [ 174.996663][ T5776] usb 4-1: config 1 has no interface number 2 [ 174.996674][ T5776] usb 4-1: config 1 has no interface number 3 [ 174.996732][ T5776] usb 4-1: config 1 interface 141 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 174.996762][ T5776] usb 4-1: config 1 interface 27 altsetting 5 endpoint 0x1 has invalid maxpacket 1088, setting to 64 [ 174.996781][ T5776] usb 4-1: config 1 interface 27 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 174.996798][ T5776] usb 4-1: config 1 interface 27 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 174.996815][ T5776] usb 4-1: config 1 interface 27 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 174.996832][ T5776] usb 4-1: config 1 interface 27 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 174.996848][ T5776] usb 4-1: config 1 interface 27 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 174.996864][ T5776] usb 4-1: config 1 interface 27 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 174.996881][ T5776] usb 4-1: config 1 interface 27 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 174.996897][ T5776] usb 4-1: config 1 interface 27 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 174.996916][ T5776] usb 4-1: config 1 interface 27 altsetting 5 endpoint 0x6 has invalid maxpacket 1632, setting to 1024 [ 174.996935][ T5776] usb 4-1: config 1 interface 27 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 174.996976][ T5776] usb 4-1: config 1 interface 96 altsetting 68 has a duplicate endpoint with address 0xB, skipping [ 174.996992][ T5776] usb 4-1: config 1 interface 96 altsetting 68 has an endpoint descriptor with address 0x1C, changing to 0xC [ 174.997010][ T5776] usb 4-1: config 1 interface 96 altsetting 68 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 174.997029][ T5776] usb 4-1: config 1 interface 96 altsetting 68 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 174.997048][ T5776] usb 4-1: config 1 interface 96 altsetting 68 has an invalid descriptor for endpoint zero, skipping [ 174.997064][ T5776] usb 4-1: config 1 interface 96 altsetting 68 endpoint 0x9 has invalid maxpacket 624, setting to 64 [ 174.997085][ T5776] usb 4-1: config 1 interface 96 altsetting 68 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 174.997103][ T5776] usb 4-1: config 1 interface 96 altsetting 68 endpoint 0x84 has an invalid bInterval 131, changing to 7 [ 174.997122][ T5776] usb 4-1: config 1 interface 96 altsetting 68 has an invalid descriptor for endpoint zero, skipping [ 174.997136][ T5776] usb 4-1: config 1 interface 96 altsetting 68 has a duplicate endpoint with address 0x1, skipping [ 174.997153][ T5776] usb 4-1: config 1 interface 96 altsetting 68 has a duplicate endpoint with address 0x9, skipping [ 174.997177][ T5776] usb 4-1: config 1 interface 84 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 174.997192][ T5776] usb 4-1: config 1 interface 84 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 174.997207][ T5776] usb 4-1: config 1 interface 84 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 174.997222][ T5776] usb 4-1: config 1 interface 84 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 174.997238][ T5776] usb 4-1: config 1 interface 84 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 174.997253][ T5776] usb 4-1: config 1 interface 84 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 174.997267][ T5776] usb 4-1: config 1 interface 84 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 174.997284][ T5776] usb 4-1: config 1 interface 84 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 174.997300][ T5776] usb 4-1: config 1 interface 84 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 174.997315][ T5776] usb 4-1: config 1 interface 84 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 174.997329][ T5776] usb 4-1: config 1 interface 141 has no altsetting 0 [ 174.997342][ T5776] usb 4-1: config 1 interface 27 has no altsetting 0 [ 174.997354][ T5776] usb 4-1: config 1 interface 96 has no altsetting 0 [ 174.997367][ T5776] usb 4-1: config 1 interface 84 has no altsetting 0 [ 175.001355][ T5776] usb 4-1: New USB device found, idVendor=1b80, idProduct=d3af, bcdDevice=31.b7 [ 175.001387][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.001408][ T5776] usb 4-1: Product: syz [ 175.001423][ T5776] usb 4-1: Manufacturer: Ў [ 175.001437][ T5776] usb 4-1: SerialNumber: syz [ 175.163540][ T32] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 175.343527][ T5674] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 175.573650][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 175.576025][ T32] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 175.576054][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.576075][ T32] usb 1-1: config 0 has no interface number 0 [ 175.576180][ T32] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.579063][ T32] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 175.579095][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.579175][ T32] usb 1-1: Product: syz [ 175.579192][ T32] usb 1-1: Manufacturer: syz [ 175.579208][ T32] usb 1-1: SerialNumber: syz [ 175.666085][ T5674] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.666346][ T5674] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.666390][ T5674] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 175.666415][ T5674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.728778][ T32] usb 1-1: config 0 descriptor?? [ 175.755651][ T5674] usb 3-1: config 0 descriptor?? [ 175.763138][ T32] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 175.763291][ T32] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 175.946297][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.950237][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.976097][ T32] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 175.991794][ T32] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 176.198229][ T821] usb 1-1: USB disconnect, device number 19 [ 176.371681][ T6701] netlink: 160 bytes leftover after parsing attributes in process `syz.2.246'. [ 176.541488][ T6700] netlink: 160 bytes leftover after parsing attributes in process `syz.2.246'. [ 176.652598][ T5674] usbhid 3-1:0.0: can't add hid device: -71 [ 176.653245][ T5674] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 176.705927][ T5674] usb 3-1: USB disconnect, device number 21 [ 177.758599][ T5776] usb 4-1: USB disconnect, device number 13 [ 178.286765][ T5776] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 178.426142][ T5776] usb 4-1: device descriptor read/64, error -71 [ 178.714653][ T5776] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 178.865261][ T5776] usb 4-1: device descriptor read/64, error -71 [ 178.984020][ T5776] usb usb4-port1: attempt power cycle [ 179.231663][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 179.483539][ T5776] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 179.507085][ T5776] usb 4-1: device descriptor read/8, error -71 [ 179.760037][ T5776] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 179.781940][ T5776] usb 4-1: device descriptor read/8, error -71 [ 179.899650][ T5776] usb usb4-port1: unable to enumerate USB device [ 180.233544][ T5776] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 180.391970][ T5776] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.392005][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.392026][ T5776] usb 1-1: Product: syz [ 180.392041][ T5776] usb 1-1: Manufacturer: syz [ 180.392057][ T5776] usb 1-1: SerialNumber: syz [ 180.564945][ T821] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 180.793903][ T821] usb 2-1: Using ep0 maxpacket: 32 [ 180.820420][ T821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.830348][ T821] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 180.830433][ T821] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 180.830487][ T821] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 180.830541][ T821] usb 2-1: config 14 has no interface number 0 [ 180.830585][ T821] usb 2-1: config 14 has no interface number 1 [ 180.830786][ T821] usb 2-1: config 14 interface 228 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.830879][ T821] usb 2-1: config 14 interface 57 has no altsetting 0 [ 180.830953][ T821] usb 2-1: config 14 interface 228 has no altsetting 0 [ 180.930347][ T821] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 180.930415][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.930441][ T821] usb 2-1: Product: syz [ 180.930460][ T821] usb 2-1: Manufacturer: syz [ 180.930478][ T821] usb 2-1: SerialNumber: syz [ 181.026713][ T6791] netlink: 'syz.2.268': attribute type 4 has an invalid length. [ 181.026739][ T6791] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 181.223591][ T821] legousbtower 2-1:14.57: interrupt endpoints not found [ 181.244250][ T821] legousbtower 2-1:14.228: interrupt endpoints not found [ 181.265753][ T821] usb 2-1: USB disconnect, device number 19 [ 181.354004][ T5694] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.823879][ T9] usb 1-1: USB disconnect, device number 20 [ 182.506217][ T5785] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 182.573241][ T6390] Bluetooth: hci4: Frame reassembly failed (-84) [ 182.617346][ T5694] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 182.673992][ T5694] ath9k_htc: Failed to initialize the device [ 182.694417][ T5785] usb 2-1: Using ep0 maxpacket: 8 [ 182.698767][ T5785] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 182.719819][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 182.732819][ T5785] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 182.732850][ T5785] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 182.732871][ T5785] usb 2-1: Product: syz [ 182.732886][ T5785] usb 2-1: Manufacturer: syz [ 182.732901][ T5785] usb 2-1: SerialNumber: syz [ 183.008450][ T5785] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 183.008477][ T5785] usb 2-1: Handspring Visor / Palm OS: port 143, is for Remote File System use [ 183.008499][ T5785] usb 2-1: Handspring Visor / Palm OS: port 223, is for unknown use [ 183.008518][ T5785] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 183.103629][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 183.227260][ T5785] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 183.246361][ T9] usb 1-1: device descriptor read/64, error -71 [ 183.248757][ T5785] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 183.278363][ T5785] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 183.463709][ T5785] usb 2-1: USB disconnect, device number 20 [ 183.487285][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 183.509331][ T5785] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 183.537171][ T5785] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 183.542247][ T5785] visor 2-1:1.0: device disconnected [ 183.613768][ T9] usb 1-1: device descriptor read/64, error -71 [ 183.724888][ T9] usb usb1-port1: attempt power cycle [ 184.074666][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 184.094567][ T9] usb 1-1: device descriptor read/8, error -71 [ 184.167605][ T6846] netlink: 156 bytes leftover after parsing attributes in process `syz.2.287'. [ 184.333599][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 184.356321][ T9] usb 1-1: device descriptor read/8, error -71 [ 184.464478][ T9] usb usb1-port1: unable to enumerate USB device [ 184.621419][ T5606] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 184.624567][ T5604] Bluetooth: hci4: command 0x1003 tx timeout [ 185.099803][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.101462][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.183728][ T32] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 185.323502][ T5785] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 185.363569][ T32] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 185.363602][ T32] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 185.363625][ T32] usb 2-1: config 220 has no interface number 2 [ 185.363715][ T32] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 185.363748][ T32] usb 2-1: config 220 interface 0 has no altsetting 0 [ 185.363770][ T32] usb 2-1: config 220 interface 76 has no altsetting 0 [ 185.363791][ T32] usb 2-1: config 220 interface 1 has no altsetting 0 [ 185.376458][ T32] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 185.376494][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.376519][ T32] usb 2-1: Product: syz [ 185.376536][ T32] usb 2-1: Manufacturer: syz [ 185.376553][ T32] usb 2-1: SerialNumber: syz [ 185.492752][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.492794][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.492821][ T5785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.492872][ T5785] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.492900][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.527907][ T5785] usb 3-1: config 0 descriptor?? [ 186.019083][ T5785] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 186.031581][ T5785] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 186.214208][ T5776] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 186.367681][ T32] usb 2-1: selecting invalid altsetting 0 [ 186.368188][ T32] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 186.368222][ T32] uvcvideo 2-1:220.0: No valid video chain found. [ 186.425471][ T5776] usb 4-1: Using ep0 maxpacket: 32 [ 186.478321][ T32] usb 2-1: selecting invalid altsetting 0 [ 186.478363][ T32] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 186.481435][ T5776] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 186.481470][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 245, changing to 11 [ 186.481500][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 58613, setting to 1024 [ 186.481530][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 186.481557][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 186.574786][ T5776] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 186.574819][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.574840][ T5776] usb 4-1: Product: syz [ 186.574855][ T5776] usb 4-1: Manufacturer: syz [ 186.574870][ T5776] usb 4-1: SerialNumber: syz [ 186.632063][ T32] usb 2-1: USB disconnect, device number 21 [ 186.679278][ T5776] usb 4-1: config 0 descriptor?? [ 186.760532][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 186.822514][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 186.822543][ T6880] net_ratelimit: 89 callbacks suppressed [ 186.822552][ T6880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.859118][ T5785] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 186.859155][ T5785] microsoft 0003:045E:07DA.0004: no inputs found [ 186.859169][ T5785] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 187.069755][ T5785] usb 3-1: USB disconnect, device number 22 [ 187.181630][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.194704][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.395932][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.398880][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.399347][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.399762][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.400200][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.400613][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.401034][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.401439][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.451907][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.452442][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.453081][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.473513][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.473956][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.477528][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.478471][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.508597][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.509334][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.509813][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.510272][ T5776] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 187.510353][ T5776] input input10: Timeout waiting for response from device. [ 187.558212][ T5776] usb 4-1: USB disconnect, device number 18 [ 187.682669][ T6884] fido_id[6884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 187.853518][ T5785] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 188.012279][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.012315][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.012343][ T5785] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 188.012360][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.043810][ T5325] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 188.070358][ T5785] usb 3-1: config 0 descriptor?? [ 188.133702][ T821] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 188.197515][ T5325] usb 1-1: Using ep0 maxpacket: 32 [ 188.224979][ T5325] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.225017][ T5325] usb 1-1: config 0 has no interface number 0 [ 188.227614][ T5325] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 188.227642][ T5325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.227715][ T5325] usb 1-1: Product: syz [ 188.227726][ T5325] usb 1-1: Manufacturer: syz [ 188.227736][ T5325] usb 1-1: SerialNumber: syz [ 188.290828][ T5325] usb 1-1: config 0 descriptor?? [ 188.293613][ T821] usb 2-1: Using ep0 maxpacket: 8 [ 188.319140][ T821] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 188.319177][ T821] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 188.319206][ T821] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.319232][ T821] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.319276][ T821] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.319299][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.517971][ T5325] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 188.518078][ T5325] usb 1-1: selecting invalid altsetting 1 [ 188.518097][ T5325] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 188.653649][ T821] usb 2-1: GET_CAPABILITIES returned 0 [ 188.653698][ T821] usbtmc 2-1:16.0: can't read capabilities [ 188.731864][ T5785] usbhid 3-1:0.0: can't add hid device: -71 [ 188.731992][ T5785] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 188.776181][ T5785] usb 3-1: USB disconnect, device number 23 [ 188.850162][ T6902] /dev/nullb0: Can't open blockdev [ 189.011417][ T5325] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 189.012012][ T5325] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 189.012218][ T5325] usb 1-1: media controller created [ 189.038760][ T6914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.300'. [ 189.066634][ T6914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.300'. [ 189.135466][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.136155][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.180658][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.214276][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.324453][ T5325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.343856][ T5785] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 189.511990][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 189.538812][ T198] usb 2-1: USB disconnect, device number 22 [ 189.542272][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.542305][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.542343][ T5785] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.542366][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.751059][ T5785] usb 3-1: config 0 descriptor?? [ 189.794019][ T5785] hub 3-1:0.0: USB hub found [ 190.088570][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.092686][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.175533][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.258450][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.332993][ T5325] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 190.468735][ T5785] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 190.497967][ T5785] usbhid 3-1:0.0: can't add hid device: -71 [ 190.498099][ T5785] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 190.545781][ T5785] usb 3-1: USB disconnect, device number 24 [ 190.610515][ T6930] overlayfs: missing 'workdir' [ 190.805810][ T5325] usb 1-1: USB disconnect, device number 25 [ 191.055558][ T5776] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 191.163659][ T821] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 191.256049][ T5776] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 191.256098][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.256127][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 191.256154][ T5776] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 191.256198][ T5776] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 191.256222][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.361407][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.361443][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.361483][ T821] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 191.361508][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.408943][ T821] usb 3-1: config 0 descriptor?? [ 191.495447][ T5776] usb 4-1: config 0 descriptor?? [ 191.497917][ T6934] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.060823][ T821] usbhid 3-1:0.0: can't add hid device: -71 [ 192.060953][ T821] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 192.088162][ T5776] elecom 0003:056E:010D.0005: unexpected long global item [ 192.088990][ T5776] elecom 0003:056E:010D.0005: probe with driver elecom failed with error -22 [ 192.121975][ T821] usb 3-1: USB disconnect, device number 25 [ 192.204948][ T38] audit: type=1326 audit(1785767421.774:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6940 comm="syz.0.311" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3dabbe019 code=0x7ffe0000 [ 192.251356][ T5776] usb 4-1: USB disconnect, device number 19 [ 193.235829][ T5776] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 193.386662][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 193.386733][ T5776] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 193.386759][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.430860][ T5776] usb 4-1: config 0 descriptor?? [ 193.432412][ T6956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.604830][ T5325] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 193.788322][ T5325] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.788354][ T5325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.788376][ T5325] usb 2-1: Product: syz [ 193.788391][ T5325] usb 2-1: Manufacturer: syz [ 193.788407][ T5325] usb 2-1: SerialNumber: syz [ 193.932513][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 193.968147][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 193.968185][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 193.968211][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 193.968246][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 193.968271][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 193.968296][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 193.968370][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 193.968396][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 193.968421][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 193.968447][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 193.993691][ T5776] logitech-djreceiver 0003:046D:C71F.0006: unbalanced collection at end of report description [ 193.994343][ T5776] logitech-djreceiver 0003:046D:C71F.0006: logi_dj_probe: parse failed [ 193.994413][ T5776] logitech-djreceiver 0003:046D:C71F.0006: probe with driver logitech-djreceiver failed with error -22 [ 194.337334][ T6973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.352903][ T6973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.398542][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.402243][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.540180][ T5776] usb 2-1: USB disconnect, device number 23 [ 195.163757][ T6989] sg_write: data in/out 77791/32 bytes for SCSI command 0x0-- guessing data in; [ 195.163757][ T6989] program syz.1.322 not setting count and/or reply_len properly [ 195.244343][ T198] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 195.481637][ T198] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 195.481687][ T198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.481715][ T198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.481739][ T198] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 195.481782][ T198] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 195.481806][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.493704][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 195.596482][ T198] usb 3-1: config 0 descriptor?? [ 195.613738][ T9] ath9k_htc: Failed to initialize the device [ 195.699236][ T5776] usb 2-1: ath9k_htc: USB layer deinitialized [ 196.019654][ T821] usb 4-1: USB disconnect, device number 20 [ 196.152584][ T7003] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 196.234161][ T5776] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 196.253038][ T198] holtek_kbd 0003:04D9:A055.0007: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 196.397976][ T5776] usb 2-1: not running at top speed; connect to a high speed hub [ 196.400217][ T5776] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 196.400252][ T5776] usb 2-1: config 1 interface 0 has no altsetting 0 [ 196.419102][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.438400][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.452167][ T5776] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 196.452198][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.452218][ T5776] usb 2-1: Product: 奠ሤ◞ꏊ鸟蜚圓쳩膛吸梏怘빽肏슡흛懅鏧둖⁠殤哲Ᏺ냌媜㬑᫇ᾆ皯▖覐䖫윕꟪䀾⩽꾥劤謡⃓背⸑ꆥ鎹Φ䐳뱃殬ꧬ秖죶緆픰唆眗輒毂㸀红賞鲡걀匣㹒 [ 196.452245][ T5776] usb 2-1: Manufacturer: ъ [ 196.452261][ T5776] usb 2-1: SerialNumber: ߍ硄蘕畾贰ឬ烰餬爫뗷ᦣ寠쎦᠓嶴帖˘ൗ딕Ʉ駱છ [ 196.525508][ T6995] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 196.525796][ T6995] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 196.582672][ T10] usb 3-1: USB disconnect, device number 26 [ 196.756127][ T7010] fido_id[7010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 196.963280][ T7025] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 197.058015][ T5776] usblp0: Disabling reads from problematic bidirectional printer [ 197.196554][ T5776] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 2 proto 3 vid 0x03F0 pid 0x0004 [ 197.231241][ T5776] usb 2-1: USB disconnect, device number 24 [ 197.291285][ T5776] usblp0: removed [ 197.658859][ T7040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.332'. [ 197.726686][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 197.856755][ T10] usb 4-1: device descriptor read/64, error -71 [ 198.093570][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 198.225434][ T10] usb 4-1: device descriptor read/64, error -71 [ 198.253016][ T1315] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.353205][ T10] usb usb4-port1: attempt power cycle [ 198.395476][ T7055] binder: 7054:7055 ioctl 400c620e 200000000140 returned -22 [ 198.670947][ T7063] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 198.670983][ T7063] overlayfs: missing 'lowerdir' [ 198.703656][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 198.734430][ T10] usb 4-1: device descriptor read/8, error -71 [ 198.993654][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 199.049000][ T10] usb 4-1: device descriptor read/8, error -71 [ 199.161963][ T10] usb usb4-port1: unable to enumerate USB device [ 199.633625][ T37] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 199.783542][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 199.785697][ T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.788220][ T37] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 199.788248][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.788269][ T37] usb 3-1: Product: syz [ 199.788284][ T37] usb 3-1: Manufacturer: syz [ 199.788298][ T37] usb 3-1: SerialNumber: syz [ 199.792747][ T37] usb 3-1: config 0 descriptor?? [ 199.793566][ T5694] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 199.858024][ T37] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 199.858132][ T37] usb 3-1: selecting invalid altsetting 1 [ 199.953633][ T5694] usb 1-1: Using ep0 maxpacket: 16 [ 199.960024][ T5694] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 199.960141][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.960156][ T5694] usb 1-1: Product: syz [ 199.960170][ T5694] usb 1-1: Manufacturer: syz [ 199.960195][ T5694] usb 1-1: SerialNumber: syz [ 199.979706][ T5694] usb 1-1: config 0 descriptor?? [ 200.216536][ T5694] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 200.236658][ T5694] usb 1-1: USB disconnect, device number 26 [ 200.363928][ T37] gspca_stk014: reg_r err -110 [ 200.363998][ T37] stk014 3-1:0.0: probe with driver stk014 failed with error -110 [ 200.874990][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 201.003562][ T10] usb 4-1: device descriptor read/64, error -71 [ 201.243652][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 201.375046][ T10] usb 4-1: device descriptor read/64, error -71 [ 201.485093][ T10] usb usb4-port1: attempt power cycle [ 201.663671][ T37] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 201.687907][ T5325] usb 3-1: USB disconnect, device number 27 [ 201.814008][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 201.828530][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 201.829231][ T37] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 201.829260][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.837338][ T37] usb 1-1: config 0 descriptor?? [ 201.864118][ T10] usb 4-1: device descriptor read/8, error -71 [ 201.876209][ T37] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 202.047757][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.053636][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.086111][ T37] gspca_vc032x: reg_r err -71 [ 202.086154][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086165][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086174][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086183][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086193][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086202][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086211][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086227][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086236][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086246][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086255][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086265][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086275][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086284][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086293][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086303][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086312][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086322][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 202.086335][ T37] gspca_vc032x: Unknown sensor... [ 202.086417][ T37] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 202.134272][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 202.216617][ T37] usb 1-1: USB disconnect, device number 27 [ 202.240103][ T10] usb 4-1: device descriptor read/8, error -71 [ 202.349622][ T10] usb usb4-port1: unable to enumerate USB device [ 202.974487][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.351'. [ 202.974505][ T7116] tipc: Invalid UDP bearer configuration [ 202.974534][ T7116] tipc: Enabling of bearer rejected, failed to enable media [ 203.895933][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'. [ 204.314236][ T7153] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 204.443652][ T37] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 204.597263][ T37] usb 3-1: config 2 has an invalid interface number: 36 but max is 0 [ 204.597295][ T37] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 204.597315][ T37] usb 3-1: config 2 has no interface number 0 [ 204.597350][ T37] usb 3-1: config 2 interface 36 has no altsetting 0 [ 204.602416][ T37] usb 3-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a [ 204.602444][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.602472][ T37] usb 3-1: Product: syz [ 204.602486][ T37] usb 3-1: Manufacturer: syz [ 204.602507][ T37] usb 3-1: SerialNumber: syz [ 204.911465][ T37] cdc_acm 3-1:2.36: More than one union descriptor, skipping ... [ 204.911490][ T37] cdc_acm 3-1:2.36: skipping garbage [ 204.939780][ T37] usb 3-1: USB disconnect, device number 28 [ 204.994886][ T198] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 205.126780][ T7168] syzkaller1: entered promiscuous mode [ 205.126799][ T7168] syzkaller1: entered allmulticast mode [ 205.127989][ T7168] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 205.143538][ T198] usb 1-1: Using ep0 maxpacket: 16 [ 205.161898][ T198] usb 1-1: config 99 has an invalid interface number: 172 but max is 1 [ 205.161941][ T198] usb 1-1: config 99 has an invalid interface number: 242 but max is 1 [ 205.161958][ T198] usb 1-1: config 99 has no interface number 0 [ 205.161970][ T198] usb 1-1: config 99 has no interface number 1 [ 205.162010][ T198] usb 1-1: config 99 interface 172 altsetting 4 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 205.162030][ T198] usb 1-1: config 99 interface 172 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 205.162047][ T198] usb 1-1: config 99 interface 172 altsetting 4 bulk endpoint 0x8 has invalid maxpacket 0 [ 205.162073][ T198] usb 1-1: config 99 interface 172 altsetting 4 bulk endpoint 0xF has invalid maxpacket 64 [ 205.162095][ T198] usb 1-1: config 99 interface 172 altsetting 4 has an endpoint descriptor with address 0x1B, changing to 0xB [ 205.162114][ T198] usb 1-1: config 99 interface 172 altsetting 4 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 205.162132][ T198] usb 1-1: config 99 interface 172 altsetting 4 endpoint 0x8C has invalid wMaxPacketSize 0 [ 205.162154][ T198] usb 1-1: config 99 interface 172 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 205.162170][ T198] usb 1-1: config 99 interface 172 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 205.162188][ T198] usb 1-1: config 99 interface 172 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 205.162224][ T198] usb 1-1: config 99 interface 242 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 205.162246][ T198] usb 1-1: config 99 interface 242 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 205.162270][ T198] usb 1-1: config 99 interface 242 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 16 [ 205.162293][ T198] usb 1-1: config 99 interface 242 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 205.162315][ T198] usb 1-1: config 99 interface 242 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 205.162331][ T198] usb 1-1: config 99 interface 242 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 205.162355][ T198] usb 1-1: config 99 interface 172 has no altsetting 0 [ 205.162368][ T198] usb 1-1: config 99 interface 242 has no altsetting 0 [ 205.347149][ T198] usb 1-1: New USB device found, idVendor=1bc7, idProduct=701a, bcdDevice=a6.46 [ 205.347244][ T198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.347299][ T198] usb 1-1: Product: 䯐塚윅ꑡ騦鱟樓ះ賫ੵ茝ᐆꬻ䡿胡뾋㽋▻슎䨛楛팎멶⳾弿会⬌둉぀࠘桉ᱦ㹬㴭灍꽛闁봔蒃⦻폗㜟阍ࡃ濐忎俞 [ 205.347371][ T198] usb 1-1: Manufacturer: ч [ 205.347416][ T198] usb 1-1: SerialNumber: syz [ 205.423633][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 205.484052][ T7159] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 205.596380][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.596407][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.596435][ T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 205.596453][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.671777][ T9] usb 4-1: config 0 descriptor?? [ 205.747440][ T198] option 1-1:99.172: GSM modem (1-port) converter detected [ 205.820517][ T198] usb 1-1: USB disconnect, device number 28 [ 205.835889][ T5325] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 205.913455][ T198] option 1-1:99.172: device disconnected [ 205.963558][ T5325] usb 3-1: device descriptor read/64, error -71 [ 206.168974][ T9] hid_parser_main: 467 callbacks suppressed [ 206.169000][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 206.169080][ T9] hid-thrustmaster 0003:044F:B65D.0008: item fetching failed at offset 6/7 [ 206.169841][ T9] hid-thrustmaster 0003:044F:B65D.0008: parse failed with error -22 [ 206.169920][ T9] hid-thrustmaster 0003:044F:B65D.0008: probe with driver hid-thrustmaster failed with error -22 [ 206.224850][ T5325] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 206.353593][ T5325] usb 3-1: device descriptor read/64, error -71 [ 206.354524][ T37] usb 4-1: USB disconnect, device number 29 [ 206.641669][ T5325] usb usb3-port1: attempt power cycle [ 207.003573][ T5325] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 207.024267][ T5325] usb 3-1: device descriptor read/8, error -71 [ 207.063752][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 207.225320][ T10] usb 2-1: device descriptor read/64, error -71 [ 207.240875][ T7186] pim6reg: entered allmulticast mode [ 207.249037][ T7186] pim6reg: left allmulticast mode [ 207.263576][ T5325] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 207.284226][ T5325] usb 3-1: device descriptor read/8, error -71 [ 207.394883][ T5325] usb usb3-port1: unable to enumerate USB device [ 207.463625][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 207.593584][ T10] usb 2-1: device descriptor read/64, error -71 [ 207.673554][ T37] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 207.704980][ T10] usb usb2-port1: attempt power cycle [ 207.825556][ T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.825621][ T37] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 207.825639][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.830124][ T37] usb 1-1: config 0 descriptor?? [ 207.876763][ T37] pwc: Askey VC010 type 2 USB webcam detected. [ 208.053559][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 208.075369][ T10] usb 2-1: device descriptor read/8, error -71 [ 208.093625][ T7191] bond0: entered promiscuous mode [ 208.310217][ T37] pwc: send_video_command error -71 [ 208.310248][ T37] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 208.310355][ T37] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 208.341596][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 208.362364][ T10] usb 2-1: device descriptor read/8, error -71 [ 208.383263][ T37] usb 1-1: USB disconnect, device number 29 [ 208.448527][ T7204] tipc: Started in network mode [ 208.448569][ T7204] tipc: Node identity ac14142f, cluster identity 4711 [ 208.463881][ T10] usb usb2-port1: unable to enumerate USB device [ 208.491389][ T7204] tipc: New replicast peer: 127.0.0.1 [ 208.492423][ T7204] tipc: Enabled bearer , priority 10 [ 208.498953][ T7204] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 208.776299][ T821] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 208.817459][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 208.915510][ T37] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 208.937628][ T821] usb 4-1: Using ep0 maxpacket: 16 [ 208.965847][ T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.965876][ T821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.968243][ T821] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 208.968276][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.968291][ T821] usb 4-1: SerialNumber: syz [ 209.038899][ T821] usb 4-1: 0:2 : does not exist [ 209.073915][ T37] usb 1-1: device descriptor read/64, error -71 [ 209.288521][ T821] usb 4-1: USB disconnect, device number 30 [ 209.344012][ T37] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 209.475467][ T37] usb 1-1: device descriptor read/64, error -71 [ 209.585335][ T37] usb usb1-port1: attempt power cycle [ 209.619060][ T32] tipc: Node number set to 2886997039 [ 209.933569][ T37] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 209.959432][ T37] usb 1-1: device descriptor read/8, error -71 [ 209.997369][ T7238] C: renamed from veth1_to_team (while UP) [ 210.079797][ T7238] netlink: 'syz.1.384': attribute type 3 has an invalid length. [ 210.079822][ T7238] netlink: 116 bytes leftover after parsing attributes in process `syz.1.384'. [ 210.079838][ T7238] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.203533][ T37] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 210.236837][ T37] usb 1-1: device descriptor read/8, error -71 [ 210.344092][ T37] usb usb1-port1: unable to enumerate USB device [ 210.587396][ T7257] netlink: Invalid conntrack helper [ 210.587429][ T7257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.714507][ T7261] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 210.769909][ T7263] netlink: 'syz.2.394': attribute type 6 has an invalid length. [ 210.865127][ T7268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.396'. [ 210.865157][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 210.865174][ T7268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'. [ 211.014981][ T7272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.397'. [ 211.037424][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.080772][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 211.080802][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 211.163236][ T7261] team0: Port device bond0 added [ 211.534280][ T7290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.402'. [ 211.557862][ T7290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.402'. [ 211.662980][ T7293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.357136][ T7309] ======================================================= [ 212.357136][ T7309] WARNING: The mand mount option has been deprecated and [ 212.357136][ T7309] and is ignored by this kernel. Remove the mand [ 212.357136][ T7309] option from the mount to silence this warning. [ 212.357136][ T7309] ======================================================= [ 212.595972][ T5599] do_umount: task=syz-executor[5599] propagate_mount_busy()!=0 [ 212.907735][ T7330] netlink: 'syz.2.419': attribute type 2 has an invalid length. [ 212.999836][ T7334] netlink: 'syz.2.424': attribute type 29 has an invalid length. [ 213.001685][ T7334] netlink: 'syz.2.424': attribute type 29 has an invalid length. [ 213.002556][ T7334] netlink: 'syz.2.424': attribute type 29 has an invalid length. [ 213.486749][ T7348] netlink: 'syz.1.430': attribute type 10 has an invalid length. [ 213.642270][ T7352] netlink: 'syz.1.432': attribute type 29 has an invalid length. [ 213.790145][ T7353] netlink: 'syz.1.432': attribute type 29 has an invalid length. [ 214.532729][ T7371] __nla_validate_parse: 4 callbacks suppressed [ 214.532745][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 214.901689][ T7375] openvswitch: netlink: Flow key attr not present in new flow. [ 228.798608][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.830868][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.851478][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.896739][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.897638][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.967198][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.967733][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.968140][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.969311][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.970167][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.958220][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.010305][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.022671][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.024298][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.074195][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.411235][ T5604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 230.495711][ T5604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 230.504641][ T5604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 230.524343][ T5604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 230.542969][ T5604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.098772][ T5606] Bluetooth: hci4: command tx timeout [ 232.178616][ T7424] validate_nla: 1 callbacks suppressed [ 232.178639][ T7424] netlink: 'syz.3.454': attribute type 29 has an invalid length. [ 232.181244][ T7424] netlink: 'syz.3.454': attribute type 29 has an invalid length. [ 232.303881][ T5606] Bluetooth: hci5: command tx timeout [ 232.642771][ T5606] Bluetooth: hci6: command tx timeout [ 233.175400][ T5606] Bluetooth: hci4: command tx timeout [ 233.198012][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 233.477784][ T7440] netlink: 'syz.3.460': attribute type 46 has an invalid length. [ 233.477802][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.460'. [ 233.706228][ T1039] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.801510][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 234.207042][ T7452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.466'. [ 234.376829][ T5606] Bluetooth: hci5: command tx timeout [ 234.382670][ T1039] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.487992][ T7453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.466'. [ 234.698994][ T5606] Bluetooth: hci6: command tx timeout [ 234.805967][ T1039] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.213883][ T1039] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.240197][ T7463] netlink: 'syz.3.470': attribute type 2 has an invalid length. [ 235.240213][ T7463] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 235.263648][ T5606] Bluetooth: hci4: command tx timeout [ 235.882111][ T7473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.474'. [ 236.453997][ T5606] Bluetooth: hci5: command tx timeout [ 236.765670][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.478'. [ 236.777903][ T5606] Bluetooth: hci6: command tx timeout [ 236.868589][ T7494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.478'. [ 237.137232][ T7501] netlink: 'syz.3.479': attribute type 11 has an invalid length. [ 237.137258][ T7501] netlink: 104 bytes leftover after parsing attributes in process `syz.3.479'. [ 237.333530][ T5606] Bluetooth: hci4: command tx timeout [ 237.554617][ T7511] netlink: 'syz.3.480': attribute type 46 has an invalid length. [ 237.554641][ T7511] netlink: 'syz.3.480': attribute type 28 has an invalid length. [ 237.824181][ T1039] bridge_slave_1: left allmulticast mode [ 237.824400][ T1039] bridge_slave_1: left promiscuous mode [ 237.850852][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.996902][ T1039] bridge_slave_0: left allmulticast mode [ 237.996931][ T1039] bridge_slave_0: left promiscuous mode [ 237.997136][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.533776][ T5606] Bluetooth: hci5: command tx timeout [ 238.853598][ T5606] Bluetooth: hci6: command tx timeout [ 238.974667][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.064464][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.092148][ T1039] bond0 (unregistering): Released all slaves [ 239.148223][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 239.550340][ T7526] syzkaller0: entered promiscuous mode [ 239.550367][ T7526] syzkaller0: entered allmulticast mode [ 239.582794][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.583609][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.583892][ T7384] bridge_slave_0: entered allmulticast mode [ 239.603467][ T7384] bridge_slave_0: entered promiscuous mode [ 239.931148][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.931561][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.931853][ T7384] bridge_slave_1: entered allmulticast mode [ 239.958837][ T7384] bridge_slave_1: entered promiscuous mode [ 239.960186][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.960541][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.960849][ T7393] bridge_slave_0: entered allmulticast mode [ 239.996882][ T7393] bridge_slave_0: entered promiscuous mode [ 240.252714][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.253092][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.269938][ T7395] bridge_slave_0: entered allmulticast mode [ 240.280516][ T7395] bridge_slave_0: entered promiscuous mode [ 240.385496][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.385851][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.386156][ T7393] bridge_slave_1: entered allmulticast mode [ 240.448593][ T7393] bridge_slave_1: entered promiscuous mode [ 240.473742][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.474090][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.474415][ T7395] bridge_slave_1: entered allmulticast mode [ 240.588647][ T7395] bridge_slave_1: entered promiscuous mode [ 240.889393][ T7384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.018115][ T7384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.042265][ T7393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.057641][ T7395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.208905][ T7393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.213972][ T7395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.324781][ T7384] team0: Port device team_slave_0 added [ 241.568478][ T7384] team0: Port device team_slave_1 added [ 241.912258][ T7393] team0: Port device team_slave_0 added [ 241.961529][ T7395] team0: Port device team_slave_0 added [ 242.677105][ T7393] team0: Port device team_slave_1 added [ 242.709207][ T7395] team0: Port device team_slave_1 added [ 242.782384][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 243.232789][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.3.494'. [ 243.246490][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.246509][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.246540][ T7384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.526586][ T7597] netlink: 60 bytes leftover after parsing attributes in process `syz.3.494'. [ 243.531394][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.531417][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.531453][ T7384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.599771][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.599791][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.599824][ T7393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.618822][ T7598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.494'. [ 243.712021][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.712039][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.712064][ T7395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.783283][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.783296][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.783319][ T7393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.842377][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.842397][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.842430][ T7395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.940720][ T7604] netlink: 'syz.3.495': attribute type 2 has an invalid length. [ 243.940742][ T7604] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 244.348747][ T7612] netlink: 'syz.3.499': attribute type 29 has an invalid length. [ 244.400022][ T7612] netlink: 'syz.3.499': attribute type 29 has an invalid length. [ 244.585612][ T7384] hsr_slave_0: entered promiscuous mode [ 244.587409][ T7384] hsr_slave_1: entered promiscuous mode [ 244.588869][ T7384] debugfs: 'hsr0' already exists in 'hsr' [ 244.588895][ T7384] Cannot create hsr debugfs directory [ 244.769202][ T7393] hsr_slave_0: entered promiscuous mode [ 244.772022][ T7393] hsr_slave_1: entered promiscuous mode [ 244.786379][ T7393] debugfs: 'hsr0' already exists in 'hsr' [ 244.786409][ T7393] Cannot create hsr debugfs directory [ 244.972747][ T5605] do_umount: task=syz-executor[5605] propagate_mount_busy()!=0 [ 245.023667][ T1039] hsr_slave_0: left promiscuous mode [ 245.063808][ T1039] hsr_slave_1: left promiscuous mode [ 245.074264][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.087668][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.105785][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.105809][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.258480][ T7620] netlink: 'syz.3.502': attribute type 10 has an invalid length. [ 245.259457][ T1039] veth1_macvtap: left promiscuous mode [ 245.277863][ T1039] veth0_macvtap: left promiscuous mode [ 245.298262][ T1039] veth1_vlan: left promiscuous mode [ 245.301455][ T1039] veth0_vlan: left promiscuous mode [ 246.284327][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 246.362568][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 246.606136][ T7395] hsr_slave_0: entered promiscuous mode [ 246.609668][ T7395] hsr_slave_1: entered promiscuous mode [ 246.611927][ T7395] debugfs: 'hsr0' already exists in 'hsr' [ 246.611955][ T7395] Cannot create hsr debugfs directory [ 246.862245][ T7620] team0: Device veth1_vlan failed to register rx_handler [ 247.847029][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 248.218111][ T7646] tap0: tun_chr_ioctl cmd 1074025677 [ 248.218342][ T7646] tap0: linktype set to 778 [ 249.580580][ T1039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.061767][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4 [ 250.080421][ T7676] netlink: 'syz.3.515': attribute type 2 has an invalid length. [ 250.080444][ T7676] netlink: 'syz.3.515': attribute type 11 has an invalid length. [ 250.080458][ T7676] netlink: 104 bytes leftover after parsing attributes in process `syz.3.515'. [ 250.353021][ T1039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.531073][ T7384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.688162][ T7384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.154162][ T1039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.225329][ T7384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.372180][ T7384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.416955][ T7384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.559166][ T7384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.832590][ T1039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.876899][ T7384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.927371][ T7384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.362397][ T7393] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.411766][ T7393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.543585][ T7393] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.630493][ T7393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.667303][ T7393] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.707005][ T7393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.737678][ T7393] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.784167][ T7393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.794533][ T7695] NFSD: Unable to initialize client recovery tracking! (-110) [ 252.794553][ T7695] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 252.794565][ T7695] NFSD: starting 90-second grace period (net f000044f) [ 253.435609][ T1039] bridge_slave_1: left allmulticast mode [ 253.435638][ T1039] bridge_slave_1: left promiscuous mode [ 253.439315][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.625068][ T1039] bridge_slave_0: left allmulticast mode [ 253.625099][ T1039] bridge_slave_0: left promiscuous mode [ 253.626024][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.126623][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 255.264454][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.326352][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.347271][ T1039] bond0 (unregistering): Released all slaves [ 255.609080][ T7395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 255.705128][ T7395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.777170][ T7395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 255.826425][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.826540][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.880199][ T7395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.926886][ T7395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 255.969564][ T7395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.170715][ T7395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 256.211025][ T7395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.530617][ T7761] can0: slcan on ptm0. [ 257.777023][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 258.050549][ T7760] can0 (unregistered): slcan off ptm0. [ 258.248144][ T7384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.694971][ T1039] hsr_slave_0: left promiscuous mode [ 258.733559][ T1039] hsr_slave_1: left promiscuous mode [ 258.735312][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.735342][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.788244][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.788276][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.965182][ T1039] veth1_macvtap: left promiscuous mode [ 258.965304][ T1039] veth0_macvtap: left promiscuous mode [ 258.965613][ T1039] veth1_vlan: left promiscuous mode [ 258.997222][ T1039] veth0_vlan: left promiscuous mode [ 259.087358][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.536'. [ 259.087381][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 260.114294][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 260.154237][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 260.630865][ T7384] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.734646][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 261.020400][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.020655][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.099716][ T7393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.164866][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.183128][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.642769][ T7393] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.666827][ T5254] 8021q: adding VLAN 0 to HW filter on device eth6 [ 261.781581][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.781834][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.921520][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.921733][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.972199][ T7395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.246751][ T1039] IPVS: stop unused estimator thread 0... [ 262.266468][ T7395] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.346647][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.346833][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.637888][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.638078][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.681813][ T1039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.771021][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7 [ 264.289162][ T1039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.544744][ T7384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.962127][ T1039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.682765][ T1039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.352583][ T7393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.447463][ T5254] 8021q: adding VLAN 0 to HW filter on device eth8 [ 267.038706][ T7384] veth0_vlan: entered promiscuous mode [ 267.167794][ T7384] veth1_vlan: entered promiscuous mode [ 267.452264][ T7395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.361785][ T1039] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.686512][ T7384] veth0_macvtap: entered promiscuous mode [ 269.921447][ T7384] veth1_macvtap: entered promiscuous mode [ 270.168179][ T7393] veth0_vlan: entered promiscuous mode [ 270.386482][ T7393] veth1_vlan: entered promiscuous mode [ 270.399038][ T7395] veth0_vlan: entered promiscuous mode [ 270.410859][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.543887][ T1039] bridge_slave_1: left allmulticast mode [ 270.543916][ T1039] bridge_slave_1: left promiscuous mode [ 270.544123][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.704886][ T1039] bridge_slave_0: left allmulticast mode [ 270.704915][ T1039] bridge_slave_0: left promiscuous mode [ 270.711631][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.494419][ T1039] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 271.694398][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.781121][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.796014][ T1039] bond0 (unregistering): Released all slaves [ 271.889160][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.237086][ T7395] veth1_vlan: entered promiscuous mode [ 272.346459][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.369592][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.393254][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.443040][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.355509][ T7393] veth0_macvtap: entered promiscuous mode [ 273.700453][ T7393] veth1_macvtap: entered promiscuous mode [ 274.239340][ T7395] veth0_macvtap: entered promiscuous mode [ 274.573160][ T7395] veth1_macvtap: entered promiscuous mode [ 274.663221][ T5254] 8021q: adding VLAN 0 to HW filter on device eth9 [ 275.050299][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.135122][ T6389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.135145][ T6389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.272757][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.832505][ T8012] NFSD: Failed to start, no listeners configured. [ 275.985088][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.999755][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.111190][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.111219][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.150049][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.200502][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.238782][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.238889][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.578416][ T1039] hsr_slave_0: left promiscuous mode [ 276.604057][ T1039] hsr_slave_1: left promiscuous mode [ 276.657845][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.657877][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.715973][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.715999][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.843039][ T1039] veth1_macvtap: left promiscuous mode [ 276.843262][ T1039] veth1_vlan: left promiscuous mode [ 276.857532][ T1039] veth0_vlan: left promiscuous mode [ 278.085656][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 278.165233][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 278.259781][ T8037] NFSD: Failed to start, no listeners configured. [ 278.669191][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.673060][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.811551][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.843531][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.118208][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.118232][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.420978][ T5254] 8021q: adding VLAN 0 to HW filter on device eth10 [ 281.741365][ T6386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.741389][ T6386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.261168][ T6386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.261191][ T6386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.894061][ T1039] IPVS: stop unused estimator thread 0... [ 282.900379][ T6390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.900403][ T6390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.790191][ T5254] 8021q: adding VLAN 0 to HW filter on device eth11 [ 287.139357][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.596'. [ 288.575738][ T5254] 8021q: adding VLAN 0 to HW filter on device eth12 [ 289.178952][ T5785] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 289.190574][ T5776] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 289.226459][ T32] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 289.227462][ T8192] ceph: No mds server is up or the cluster is laggy [ 289.232911][ T8188] ceph: No mds server is up or the cluster is laggy [ 289.345480][ T8190] ceph: No mds server is up or the cluster is laggy [ 289.404678][ T5776] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 289.538762][ T32] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 289.567440][ T5785] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 289.727669][ T5776] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 289.842133][ T5776] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 290.198087][ T5785] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 290.282470][ T32] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 290.958099][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13 [ 292.980747][ T8276] ceph: No mds server is up or the cluster is laggy [ 293.022309][ T32] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 293.054659][ T8286] netlink: 52 bytes leftover after parsing attributes in process `syz.3.626'. [ 293.118526][ T8286] netlink: 52 bytes leftover after parsing attributes in process `syz.3.626'. [ 293.326585][ T32] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 294.326145][ T821] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 294.326504][ T8298] ceph: No mds server is up or the cluster is laggy [ 294.357041][ T821] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 294.417670][ T10] libceph: mon0 (1)127.0.0.1:6666 socket closed (con state V1_BANNER) [ 294.431952][ T8297] ceph: No mds server is up or the cluster is laggy [ 294.689878][ T10] libceph: mon0 (1)127.0.0.1:6666 socket error on write [ 295.296057][ T8330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.637'. [ 295.297624][ T8330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.637'. [ 295.335546][ T8330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.637'. [ 295.337549][ T8330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.637'. [ 295.417874][ T8330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.637'. [ 295.447128][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 295.447305][ T8333] openvswitch: netlink: Message has 4 unknown bytes. [ 295.841878][ T9] ------------[ cut here ]------------ [ 295.841889][ T9] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 295.841911][ T9] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#0: kworker/0:0/9 [ 295.841945][ T9] Modules linked in: [ 295.841967][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.841988][ T9] Tainted: [L]=SOFTLOCKUP [ 295.841994][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.842008][ T9] Workqueue: ceph-msgr ceph_con_workfn [ 295.842026][ T9] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 295.842049][ T9] Code: 45 31 e4 e9 3f d1 ff ff e8 88 17 b2 f6 90 0f 0b 90 e9 cd d3 ff ff e8 7a 17 b2 f6 90 0f 0b 90 e9 dd e6 ff ff e8 6c 17 b2 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 295.842063][ T9] RSP: 0018:ffffc900000e71e0 EFLAGS: 00010293 [ 295.842076][ T9] RAX: ffffffff8b138c44 RBX: 0000000000000001 RCX: ffff88801dacddc0 [ 295.842087][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.842097][ T9] RBP: ffffc900000e7ad8 R08: 0000000000000000 R09: 0000000000000000 [ 295.842134][ T9] R10: 0000000000000100 R11: 000000000000000d R12: ffff888039de8488 [ 295.842145][ T9] R13: fffff5200001ce7c R14: dffffc0000000000 R15: 00000000ffffffff [ 295.842156][ T9] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 295.842169][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.842180][ T9] CR2: 000055558c409a78 CR3: 0000000038f14000 CR4: 00000000003526f0 [ 295.842212][ T9] Call Trace: [ 295.842219][ T9] [ 295.842293][ T9] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 295.842329][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.842349][ T9] ? __lock_acquire+0x6df/0x2e40 [ 295.842367][ T9] ? reacquire_held_locks+0x117/0x1a0 [ 295.842392][ T9] ? rt_spin_unlock+0x157/0x200 [ 295.842418][ T9] ? lock_acquire+0x115/0x350 [ 295.842447][ T9] ? try_to_take_rt_mutex+0x842/0xb00 [ 295.842475][ T9] ? try_to_take_rt_mutex+0x842/0xb00 [ 295.842498][ T9] ? __css_rstat_updated+0x235/0x540 [ 295.842518][ T9] ? __pfx___css_rstat_updated+0x10/0x10 [ 295.842549][ T9] ? update_se+0x90/0xf30 [ 295.842562][ T9] ? rcu_is_watching+0x15/0xb0 [ 295.842581][ T9] ? rcu_is_watching+0x15/0xb0 [ 295.842612][ T9] ? __lock_acquire+0x6df/0x2e40 [ 295.842632][ T9] ? __lock_acquire+0x6df/0x2e40 [ 295.842647][ T9] ? look_up_lock_class+0x57/0x110 [ 295.842663][ T9] ? register_lock_class+0x31/0x2e0 [ 295.842692][ T9] ? __lock_acquire+0x6df/0x2e40 [ 295.842720][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.842736][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 295.842751][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 295.842767][ T9] ? mutex_lock_nested+0x152/0x1d0 [ 295.842788][ T9] ? ceph_con_workfn+0x3b/0x14a0 [ 295.842806][ T9] ceph_con_workfn+0x208/0x14a0 [ 295.842824][ T9] ? rcu_is_watching+0x15/0xb0 [ 295.842843][ T9] ? process_one_work+0x7fd/0x1480 [ 295.842860][ T9] process_one_work+0xaaf/0x1480 [ 295.842903][ T9] ? __pfx_process_one_work+0x10/0x10 [ 295.842917][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 295.842945][ T9] ? assign_work+0x3cf/0x5d0 [ 295.842965][ T9] worker_thread+0xb05/0x10d0 [ 295.843000][ T9] kthread+0x388/0x470 [ 295.843022][ T9] ? __pfx_worker_thread+0x10/0x10 [ 295.843038][ T9] ? __pfx_kthread+0x10/0x10 [ 295.843061][ T9] ret_from_fork+0x514/0xb70 [ 295.843086][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 295.843114][ T9] ? __switch_to+0xc89/0x1420 [ 295.843136][ T9] ? __pfx_kthread+0x10/0x10 [ 295.843159][ T9] ret_from_fork_asm+0x1a/0x30 [ 295.843194][ T9] [ 295.843202][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.843216][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.843237][ T9] Tainted: [L]=SOFTLOCKUP [ 295.843242][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.843252][ T9] Workqueue: ceph-msgr ceph_con_workfn [ 295.843268][ T9] Call Trace: [ 295.843274][ T9] [ 295.843279][ T9] vpanic+0x56c/0xa60 [ 295.843296][ T9] ? __pfx__printk+0x10/0x10 [ 295.843339][ T9] ? __pfx_vpanic+0x10/0x10 [ 295.843358][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 295.843383][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 295.843416][ T9] panic+0xc5/0xd0 [ 295.843438][ T9] ? __pfx_panic+0x10/0x10 [ 295.843469][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 295.843504][ T9] __warn+0x315/0x4c0 [ 295.843523][ T9] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 295.843553][ T9] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 295.843578][ T9] __report_bug+0x276/0x570 [ 295.843603][ T9] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 295.843633][ T9] ? __pfx___report_bug+0x10/0x10 [ 295.843654][ T9] ? __local_bh_enable+0x1e1/0x2f0 [ 295.843683][ T9] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 295.843707][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 295.843735][ T9] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 295.843760][ T9] report_bug+0x16a/0x220 [ 295.843784][ T9] ? ceph_con_v1_try_read+0x3335/0x6eb0 [ 295.843809][ T9] ? ceph_con_v1_try_read+0x3337/0x6eb0 [ 295.843833][ T9] handle_bug+0x9c/0x200 [ 295.843860][ T9] exc_invalid_op+0x1a/0x50 [ 295.843887][ T9] asm_exc_invalid_op+0x1a/0x20 [ 295.843909][ T9] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0 [ 295.843935][ T9] Code: 45 31 e4 e9 3f d1 ff ff e8 88 17 b2 f6 90 0f 0b 90 e9 cd d3 ff ff e8 7a 17 b2 f6 90 0f 0b 90 e9 dd e6 ff ff e8 6c 17 b2 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1 [ 295.843954][ T9] RSP: 0018:ffffc900000e71e0 EFLAGS: 00010293 [ 295.843973][ T9] RAX: ffffffff8b138c44 RBX: 0000000000000001 RCX: ffff88801dacddc0 [ 295.843990][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.844002][ T9] RBP: ffffc900000e7ad8 R08: 0000000000000000 R09: 0000000000000000 [ 295.844017][ T9] R10: 0000000000000100 R11: 000000000000000d R12: ffff888039de8488 [ 295.844033][ T9] R13: fffff5200001ce7c R14: dffffc0000000000 R15: 00000000ffffffff [ 295.844059][ T9] ? ceph_con_v1_try_read+0x3334/0x6eb0 [ 295.844160][ T9] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 295.844189][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.844217][ T9] ? __lock_acquire+0x6df/0x2e40 [ 295.844243][ T9] ? reacquire_held_locks+0x117/0x1a0 [ 295.844281][ T9] ? rt_spin_unlock+0x157/0x200 [ 295.844318][ T9] ? lock_acquire+0x115/0x350 [ 295.844363][ T9] ? try_to_take_rt_mutex+0x842/0xb00 [ 295.844402][ T9] ? try_to_take_rt_mutex+0x842/0xb00 [ 295.844436][ T9] ? __css_rstat_updated+0x235/0x540 [ 295.844467][ T9] ? __pfx___css_rstat_updated+0x10/0x10 [ 295.844514][ T9] ? update_se+0x90/0xf30 [ 295.844533][ T9] ? rcu_is_watching+0x15/0xb0 [ 295.844560][ T9] ? rcu_is_watching+0x15/0xb0 [ 295.844604][ T9] ? __lock_acquire+0x6df/0x2e40 [ 295.844632][ T9] ? __lock_acquire+0x6df/0x2e40 [ 295.844655][ T9] ? look_up_lock_class+0x57/0x110 [ 295.844678][ T9] ? register_lock_class+0x31/0x2e0 [ 295.844718][ T9] ? __lock_acquire+0x6df/0x2e40 [ 295.844758][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.844781][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 295.844804][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 295.844827][ T9] ? mutex_lock_nested+0x152/0x1d0 [ 295.844855][ T9] ? ceph_con_workfn+0x3b/0x14a0 [ 295.844883][ T9] ceph_con_workfn+0x208/0x14a0 [ 295.844908][ T9] ? rcu_is_watching+0x15/0xb0 [ 295.844935][ T9] ? process_one_work+0x7fd/0x1480 [ 295.844959][ T9] process_one_work+0xaaf/0x1480 [ 295.845006][ T9] ? __pfx_process_one_work+0x10/0x10 [ 295.845028][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 295.845066][ T9] ? assign_work+0x3cf/0x5d0 [ 295.845095][ T9] worker_thread+0xb05/0x10d0 [ 295.845152][ T9] kthread+0x388/0x470 [ 295.845182][ T9] ? __pfx_worker_thread+0x10/0x10 [ 295.845206][ T9] ? __pfx_kthread+0x10/0x10 [ 295.845238][ T9] ret_from_fork+0x514/0xb70 [ 295.845271][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 295.845301][ T9] ? __switch_to+0xc89/0x1420 [ 295.845330][ T9] ? __pfx_kthread+0x10/0x10 [ 295.845363][ T9] ret_from_fork_asm+0x1a/0x30 [ 295.845413][ T9] [ 295.846029][ T9] Kernel Offset: disabled