last executing test programs: 34.671124222s ago: executing program 2 (id=1911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="0000d9269d79000000000000455f1a88c3bd09", 0x13}], 0x1) 34.080408822s ago: executing program 2 (id=1913): socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x100000, 0x1, 0x4000003, 0x40055}, 0x0, &(0x7f0000000140), 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0xfffffffffffffffc) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) 32.921109456s ago: executing program 2 (id=1919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000400)=0x1) 32.657169945s ago: executing program 2 (id=1922): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x12100) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) write$binfmt_misc(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x4a, 0x0, 0x0) 30.886320264s ago: executing program 2 (id=1930): socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x20, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xfdef) 29.643713937s ago: executing program 2 (id=1938): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) 13.800187162s ago: executing program 32 (id=1938): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) 13.732673098s ago: executing program 0 (id=1954): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x12100) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a74020000060a030400000000000000000a0000010900010073797a3100000000400204803c0201800a0001006d617463680000002c0202800b0001006367726f75700000080002400000000214020300060400000070226714b06026799504d26462d0f7a66ead44d6899e1445d97832ad457d06138b69af69d529be95f1911eab1846eb51bda151a6b0736302fdfb9f2c903fa06bb26b5a1ce76b17878e8174d345499079f1da597f0326854d62b1f5d97f2de35a9cb60da0764d08dbaf74939de34af914a3ea3f02ca57df07e9ed10aecb90bdbabcfcdd62e3ef6913b29a63fd42d9276dc54b68f9bc26a02bfec3c72f303f719fe6ca141e405417118a3316ef2a473417d47a2c37cecc2f4333caf9b5d8096a71bc60c57dd3fc882043377d4140b7f4580a622043a0da245a977be1af6ec12bf2ec5c7ed50e1b4f9e144fe641036e5673089a6707b709515c62734ab864914ef7e6e82143b0f6a3a6ec884fb0ecb0567dff30ef656a1316898954a71db76db8b74d4749e35b33481ad897934c4c5b1ca2f8b7e93e8dadaa1d2c96c5f1e9ce253fc6f3335b981003f183afc65a3618d2ac05c2a557154862dcc900bf408ec8c74aef836fff2e2caf6925c8bb1f460cc68d410733bd2ff5d15c60bfd8c080839e416b589d51e18c402e0282aa1918d13aadca89120112ba089e9925a0b4cbf9441a2e63268c0b2fc90c38b840eb48e9800d6f4d731051bcae4924d5e7176d83d5951cf4dbd6108032b6a35b67d6c585ee1c047b1fea250f941fccce0210922b1d9f6c6a0da7e9bf3704c31afdf08438c1021cbe05fb24ec20dc9630f8c92a4f833f431b8ac1b0cc0a19fbf9420900020073797a32"], 0x29c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) write$binfmt_misc(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x4a, 0x0, 0x0) 11.507786073s ago: executing program 0 (id=1958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) close(r2) 10.204047571s ago: executing program 1 (id=1963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, &(0x7f00000edb40)={0x1, &(0x7f00000ed9c0)=[{0xe000003, 0x19, &(0x7f00000016c0)=[0xe6, 0x1ff, 0x3, 0x2, 0x502dd8b8, 0x4b03, 0x4, 0x4, 0x3e69, 0x0, 0x9, 0xbb, 0x4, 0x1, 0x200, 0x9, 0xa3c, 0x8000, 0xf, 0x4, 0x3, 0x8001, 0x5, 0x8, 0x18], 0xa145, 0x7}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) 9.217461631s ago: executing program 5 (id=1953): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_require}, {@verity_on}, {@nfs_export_on}], [{@flag='dirsync'}, {@audit}, {@appraise}, {@seclabel}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 7.492519315s ago: executing program 1 (id=1968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, 0x0, 0x4005) 5.767867489s ago: executing program 5 (id=1953): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_require}, {@verity_on}, {@nfs_export_on}], [{@flag='dirsync'}, {@audit}, {@appraise}, {@seclabel}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 4.459485996s ago: executing program 4 (id=1973): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='44100,', 0x6) 4.345816373s ago: executing program 4 (id=1974): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="05000000", 0x4) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000140)="0d00000001", 0x5) read(r1, 0x0, 0x0) write(r1, 0x0, 0x0) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000200)="34000000070001020304050601", 0xd) write(r1, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) read(r1, &(0x7f0000000400)=""/128, 0x80) close(r1) close(r0) 4.312387392s ago: executing program 5 (id=1953): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_require}, {@verity_on}, {@nfs_export_on}], [{@flag='dirsync'}, {@audit}, {@appraise}, {@seclabel}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 3.532382696s ago: executing program 3 (id=1975): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f00000001c0)={0xa, 0x4e22, 0x8001, @local}, 0x1c, 0x0, 0x0, &(0x7f00000019c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x4}}}], 0x18}, 0x4008800) 3.408000844s ago: executing program 3 (id=1976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2800128014000180090001006c6173740000000004000280100001800c000100636f756e74657200080003400000013014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000a0a0101"], 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 3.353060213s ago: executing program 4 (id=1977): r0 = syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0x6d8b, 0x80, 0x2, 0x29}, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0xffff, {"6938a03395f5ddccb9c20b8d6d1b4377"}, 0xb, 0xc76, 0xf}, @ib={0x1b, 0x80, 0x7, {"a5c217c7f55e233d74ec62f7f7a2b878"}, 0x101, 0x0, 0x3}}}, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_io_uring_setup(0x5478, &(0x7f0000000100)={0x0, 0x3, 0x10, 0x0, 0xffffffff}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r1, 0x20, {0x8b37, 0x8000000000000001}, 0x54}, 0x1) 3.336744506s ago: executing program 5 (id=1953): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_require}, {@verity_on}, {@nfs_export_on}], [{@flag='dirsync'}, {@audit}, {@appraise}, {@seclabel}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 2.458738675s ago: executing program 0 (id=1978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x4000000, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6c}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) 2.458231108s ago: executing program 1 (id=1979): bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.452017969s ago: executing program 3 (id=1980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0xffc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 2.45126404s ago: executing program 4 (id=1981): socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x100000, 0x1, 0x4000003, 0x40055}, 0x0, &(0x7f0000000140), 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', 0x0, 0xfffffffffffffffc) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) 2.321381165s ago: executing program 5 (id=1953): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_require}, {@verity_on}, {@nfs_export_on}], [{@flag='dirsync'}, {@audit}, {@appraise}, {@seclabel}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 2.318584678s ago: executing program 0 (id=1982): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x24008002) 530.222963ms ago: executing program 0 (id=1983): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mount$bind(&(0x7f0000000680)='./mnt/file0\x00', &(0x7f00000006c0)='./dev/sda1/file0\x00', &(0x7f0000000700), 0x102000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 529.755498ms ago: executing program 1 (id=1984): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='44100,480', 0x9) 529.146853ms ago: executing program 3 (id=1985): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x30, 0x6, 0x40, @private1, @mcast2, {[], {{0x4e22, 0x4e22, 0x1000, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x3, 0x0, 0x0, {[@fastopen={0x22, 0xf, "4df7e10e8e27c73b0829c2c924"}, @generic={0x3, 0xd, "5c61af3990b710712818ef"}]}}}}}}}}, 0x0) 528.274031ms ago: executing program 4 (id=1986): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) 441.286957ms ago: executing program 1 (id=1987): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f00000001c0)={0xa, 0x4e22, 0x8001, @local}, 0x1c, 0x0, 0x0, &(0x7f00000019c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x4}}}], 0x18}, 0x4008800) 384.649296ms ago: executing program 1 (id=1988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0800080007000200000014000000457f001c006600004011"], 0xfce) 262.302068ms ago: executing program 3 (id=1989): listns(&(0x7f0000000000)={0x20, 0x0, 0x8, 0x0, 0x0, 0x3}, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0) 247.29229ms ago: executing program 0 (id=1990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, 0x0, 0x4005) 185.065084ms ago: executing program 4 (id=1991): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x4) r4 = syz_io_uring_setup(0x141b, &(0x7f0000000140)={0x0, 0x2af6, 0x10, 0x2, 0x139, 0x0, r3}, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x6, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000ffdbdf253500000008000300", @ANYRES32, @ANYBLOB='\n\x004'], 0x3c}}, 0x22044804) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 60.423175ms ago: executing program 3 (id=1992): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') umount2(&(0x7f0000000600)='./mnt\x00', 0x0) 0s ago: executing program 5 (id=1953): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_require}, {@verity_on}, {@nfs_export_on}], [{@flag='dirsync'}, {@audit}, {@appraise}, {@seclabel}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) kernel console output (not intermixed with test programs): yz.0.769'. [ 301.919355][ T5618] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 302.256572][ T8400] fuse: Bad value for 'group_id' [ 302.256593][ T8400] fuse: Bad value for 'group_id' [ 302.460476][ T5807] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 302.747871][ T5807] usb 4-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 302.822705][ T5807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 302.822736][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 302.822773][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.865558][ T8413] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 305.816076][ T5807] usb 4-1: can't set config #1, error -71 [ 305.823613][ T5807] usb 4-1: USB disconnect, device number 15 [ 305.994938][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 305.995087][ T8436] xt_cgroup: path and classid specified [ 306.004747][ T8436] FAULT_INJECTION: forcing a failure. [ 306.004747][ T8436] name fail_futex, interval 1, probability 0, space 0, times 0 [ 306.004778][ T8436] CPU: 0 UID: 0 PID: 8436 Comm: syz.0.782 Not tainted syzkaller #0 PREEMPT(full) [ 306.004800][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 306.004819][ T8436] Call Trace: [ 306.004827][ T8436] [ 306.004835][ T8436] dump_stack_lvl+0xe8/0x150 [ 306.004870][ T8436] should_fail_ex+0x3eb/0x540 [ 306.004900][ T8436] get_futex_key+0x1b4/0x1580 [ 306.004927][ T8436] ? tcp_sendmsg+0x39/0x50 [ 306.004953][ T8436] ? __local_bh_enable_ip+0xd6/0x140 [ 306.004980][ T8436] ? lockdep_hardirqs_on+0x7b/0x110 [ 306.005010][ T8436] ? __pfx_get_futex_key+0x10/0x10 [ 306.005036][ T8436] ? __asan_memcpy+0x40/0x70 [ 306.005056][ T8436] ? sock_write_iter+0x2f7/0x3e0 [ 306.005081][ T8436] futex_wake+0x119/0x5f0 [ 306.005109][ T8436] ? __pfx_futex_wake+0x10/0x10 [ 306.005138][ T8436] ? vfs_write+0x9d5/0xba0 [ 306.005164][ T8436] do_futex+0x458/0x4e0 [ 306.005187][ T8436] ? __pfx_do_futex+0x10/0x10 [ 306.005202][ T8436] ? __fget_files+0x3a2/0x420 [ 306.005220][ T8436] ? __fget_files+0x2a/0x420 [ 306.005245][ T8436] __se_sys_futex+0x3a8/0x450 [ 306.005267][ T8436] ? ksys_write+0x242/0x270 [ 306.005285][ T8436] ? __pfx___se_sys_futex+0x10/0x10 [ 306.005303][ T8436] ? __pfx_ksys_write+0x10/0x10 [ 306.005328][ T8436] ? __x64_sys_futex+0x21/0xf0 [ 306.005349][ T8436] do_syscall_64+0x166/0x520 [ 306.005374][ T8436] ? trace_irq_disable+0x3b/0x140 [ 306.005397][ T8436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.005416][ T8436] ? clear_bhb_loop+0x70/0xc0 [ 306.005439][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.005465][ T8436] RIP: 0033:0x7f338c59e159 [ 306.005483][ T8436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.005503][ T8436] RSP: 002b:00007f338a7f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 306.005525][ T8436] RAX: ffffffffffffffda RBX: 00007f338c825fa8 RCX: 00007f338c59e159 [ 306.005540][ T8436] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f338c825fac [ 306.005553][ T8436] RBP: 00007f338c825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 306.005566][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.005578][ T8436] R13: 00007f338c826038 R14: 00007ffeebdbc7e0 R15: 00007ffeebdbc8c8 [ 306.005608][ T8436] [ 306.280842][ T5807] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 306.307069][ T8446] fuse: Bad value for 'group_id' [ 306.307089][ T8446] fuse: Bad value for 'group_id' [ 306.433391][ T8452] device-mapper: dirty region log: invalid region size 1024 [ 306.433429][ T8452] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 306.433445][ T8452] device-mapper: ioctl: error adding target to table [ 306.465517][ T5807] usb 2-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 306.469262][ T5807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.469310][ T5807] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 306.469333][ T5807] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.484872][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 306.484897][ T5807] usb 2-1: Product: syz [ 306.484910][ T5807] usb 2-1: Manufacturer: syz [ 306.490775][ T8440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.496592][ T5807] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 306.504974][ T5807] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 306.843188][ T8463] netlink: 144 bytes leftover after parsing attributes in process `syz.2.790'. [ 306.882101][ T5807] usb 2-1: USB disconnect, device number 11 [ 306.926061][ T5807] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 306.927901][ T5807] garmin_gps 2-1:1.0: device disconnected [ 307.093483][ T8469] overlay: Unknown parameter 'audit' [ 310.311567][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 310.311713][ T8485] xt_cgroup: path and classid specified [ 310.382709][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.799'. [ 310.388282][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.799'. [ 311.210928][ T8493] FAULT_INJECTION: forcing a failure. [ 311.210928][ T8493] name fail_futex, interval 1, probability 0, space 0, times 0 [ 311.210969][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.4.797 Not tainted syzkaller #0 PREEMPT(full) [ 311.210991][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.211002][ T8493] Call Trace: [ 311.211012][ T8493] [ 311.211021][ T8493] dump_stack_lvl+0xe8/0x150 [ 311.211053][ T8493] should_fail_ex+0x3eb/0x540 [ 311.211083][ T8493] get_futex_key+0x1b4/0x1580 [ 311.211120][ T8493] ? __pfx_get_futex_key+0x10/0x10 [ 311.211157][ T8493] futex_wake+0x119/0x5f0 [ 311.211184][ T8493] ? __pfx_futex_wake+0x10/0x10 [ 311.211214][ T8493] ? mm_exit_exec_release+0x20/0x290 [ 311.211243][ T8493] do_futex+0x458/0x4e0 [ 311.211266][ T8493] ? __pfx_do_futex+0x10/0x10 [ 311.211289][ T8493] ? __might_fault+0xaf/0x130 [ 311.211318][ T8493] mm_exit_exec_release+0x10d/0x290 [ 311.211346][ T8493] exit_mm+0x4d/0x2d0 [ 311.211368][ T8493] do_exit+0x6a8/0x2390 [ 311.211396][ T8493] ? __pfx_do_exit+0x10/0x10 [ 311.211419][ T8493] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.211447][ T8493] do_group_exit+0x22d/0x2f0 [ 311.211466][ T8493] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.211494][ T8493] get_signal+0x1216/0x12c0 [ 311.211538][ T8493] arch_do_signal_or_restart+0xbb/0x860 [ 311.211566][ T8493] ? __pfx___fput_deferred+0x10/0x10 [ 311.211593][ T8493] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 311.211627][ T8493] ? ksys_write+0x242/0x270 [ 311.211655][ T8493] exit_to_user_mode_loop+0x10e/0x770 [ 311.211679][ T8493] ? rcu_is_watching+0x16/0xb0 [ 311.211708][ T8493] do_syscall_64+0x328/0x520 [ 311.211732][ T8493] ? trace_irq_disable+0x3b/0x140 [ 311.211755][ T8493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.211774][ T8493] ? clear_bhb_loop+0x70/0xc0 [ 311.211797][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.211816][ T8493] RIP: 0033:0x7f86a439e159 [ 311.211833][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.211849][ T8493] RSP: 002b:00007f86a25d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.211869][ T8493] RAX: fffffffffffffe00 RBX: 00007f86a4626090 RCX: 00007f86a439e159 [ 311.211883][ T8493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 311.211894][ T8493] RBP: 00007f86a443506b R08: 0000000000000000 R09: 0000000000000000 [ 311.211913][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.211924][ T8493] R13: 00007f86a4626128 R14: 00007f86a4626090 R15: 00007ffeb56d24d8 [ 311.211954][ T8493] [ 311.335186][ T8498] device-mapper: dirty region log: invalid region size 1024 [ 311.335224][ T8498] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 311.335241][ T8498] device-mapper: ioctl: error adding target to table [ 312.086953][ T991] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 312.542435][ T991] usb 4-1: Using ep0 maxpacket: 8 [ 312.544679][ T991] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.546183][ T991] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 312.546242][ T991] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.546263][ T991] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.546286][ T991] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.546308][ T991] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.546348][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.000726][ T991] usb 4-1: usb_control_msg returned -32 [ 313.001215][ T991] usbtmc 4-1:16.0: can't read capabilities [ 313.307210][ T991] usb 4-1: USB disconnect, device number 16 [ 314.079379][ T8529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.090376][ T8529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.194358][ T8532] overlay: Unknown parameter 'audit' [ 316.795952][ T8541] kAFS: No cell specified [ 317.404297][ T8552] device-mapper: dirty region log: invalid region size 1024 [ 317.404339][ T8552] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 317.404356][ T8552] device-mapper: ioctl: error adding target to table [ 317.447060][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.447117][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.475982][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.813'. [ 320.871708][ T8582] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 320.871733][ T8582] netlink: 84 bytes leftover after parsing attributes in process `syz.4.821'. [ 320.871749][ T8582] netlink: 'syz.4.821': attribute type 2 has an invalid length. [ 320.871760][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'. [ 322.826004][ T8622] overlay: Unknown parameter 'audit' [ 325.652730][ T8635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.653008][ T8635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.706154][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 325.706266][ T8639] xt_cgroup: path and classid specified [ 326.188950][ T8645] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 326.188968][ T8645] netlink: 84 bytes leftover after parsing attributes in process `syz.2.838'. [ 326.188977][ T8645] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 326.188983][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 326.559671][ T8649] ublk0: read batch cmd buffer failed [ 326.559791][ T8649] ublk0: read batch cmd buffer failed [ 326.574778][ T8649] ublk0: read batch cmd buffer failed [ 326.574850][ T8649] ublk0: read batch cmd buffer failed [ 326.647008][ T8652] FAULT_INJECTION: forcing a failure. [ 326.647008][ T8652] name failslab, interval 1, probability 0, space 0, times 0 [ 326.647272][ T8652] CPU: 1 UID: 0 PID: 8652 Comm: syz.4.841 Not tainted syzkaller #0 PREEMPT(full) [ 326.647296][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 326.647310][ T8652] Call Trace: [ 326.647374][ T8652] [ 326.647458][ T8652] dump_stack_lvl+0xe8/0x150 [ 326.647614][ T8652] should_fail_ex+0x3eb/0x540 [ 326.647744][ T8652] should_failslab+0xa8/0x100 [ 326.647796][ T8652] __kmalloc_cache_noprof+0x9e/0x600 [ 326.647825][ T8652] ? __kmalloc_cache_noprof+0x148/0x600 [ 326.647879][ T8652] ? fuse_get_tree+0xc2/0x3b0 [ 326.647950][ T8652] ? fuse_get_tree+0xc2/0x3b0 [ 326.647977][ T8652] fuse_get_tree+0xc2/0x3b0 [ 326.648000][ T8652] vfs_get_tree+0x92/0x2a0 [ 326.648037][ T8652] vfs_cmd_create+0xa2/0x200 [ 326.648077][ T8652] __se_sys_fsconfig+0x6b9/0x810 [ 326.648109][ T8652] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 326.648148][ T8652] ? __x64_sys_fsconfig+0x20/0xc0 [ 326.648177][ T8652] do_syscall_64+0x166/0x520 [ 326.648303][ T8652] ? trace_irq_disable+0x3b/0x140 [ 326.648351][ T8652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.648390][ T8652] ? clear_bhb_loop+0x70/0xc0 [ 326.648421][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.648442][ T8652] RIP: 0033:0x7f86a439e159 [ 326.648493][ T8652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.648511][ T8652] RSP: 002b:00007f86a25f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 326.648565][ T8652] RAX: ffffffffffffffda RBX: 00007f86a4625fa0 RCX: 00007f86a439e159 [ 326.648581][ T8652] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 326.648592][ T8652] RBP: 00007f86a443506b R08: 0000000000000000 R09: 0000000000000000 [ 326.648604][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.648617][ T8652] R13: 00007f86a4626038 R14: 00007f86a4625fa0 R15: 00007ffeb56d24d8 [ 326.648653][ T8652] [ 326.898445][ T8654] jffs2: notice: (8654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 327.643634][ T8658] syz.3.842 (8658): drop_caches: 1 [ 327.672627][ T8658] syz.3.842 (8658): drop_caches: 1 [ 328.071369][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 328.071508][ T8669] xt_cgroup: path and classid specified [ 328.790709][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.791183][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.909838][ T8689] overlay: Unknown parameter 'audit' [ 330.869203][ T8699] syz.3.856 (8699): drop_caches: 1 [ 330.891860][ T8699] syz.3.856 (8699): drop_caches: 1 [ 332.007589][ T8710] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 332.520842][ T5707] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 332.521699][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 332.830499][ T5707] usb 3-1: device descriptor read/64, error -32 [ 333.081401][ T5707] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 333.177603][ T8732] overlay: Unknown parameter 'audit' [ 333.245955][ T5707] usb 3-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 333.281983][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 333.282196][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 333.337659][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.337701][ T5707] usb 3-1: Product: syz [ 333.337786][ T5707] usb 3-1: Manufacturer: syz [ 333.337833][ T5707] usb 3-1: SerialNumber: syz [ 333.462791][ T5707] usb 3-1: config 0 descriptor?? [ 333.532678][ T5707] hub 3-1:0.0: bad descriptor, ignoring hub [ 333.532830][ T5707] hub 3-1:0.0: probe with driver hub failed with error -5 [ 333.594961][ T8723] syz.0.864 (8723): drop_caches: 1 [ 333.675453][ T5707] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 334.503048][ T5707] input: failed to attach handler mousedev to device input8, error: -5 [ 334.771823][ T5707] usb 3-1: USB disconnect, device number 20 [ 337.156195][ T8749] overlay: Unknown parameter 'audit' [ 340.290937][ T5748] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 340.356857][ T8766] syz.4.879 (8766): drop_caches: 1 [ 340.443941][ T5748] usb 3-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 340.468878][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 340.469055][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 340.528900][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.528943][ T5748] usb 3-1: Product: syz [ 340.529027][ T5748] usb 3-1: Manufacturer: syz [ 340.529074][ T5748] usb 3-1: SerialNumber: syz [ 340.607573][ T5748] usb 3-1: config 0 descriptor?? [ 340.676123][ T8766] syz.4.879 (8766): drop_caches: 1 [ 340.712417][ T5748] hub 3-1:0.0: bad descriptor, ignoring hub [ 340.712545][ T5748] hub 3-1:0.0: probe with driver hub failed with error -5 [ 340.875361][ T5748] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 341.489588][ T5748] usb 3-1: USB disconnect, device number 21 [ 344.719529][ T8796] FAULT_INJECTION: forcing a failure. [ 344.719529][ T8796] name failslab, interval 1, probability 0, space 0, times 0 [ 344.719561][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.4.890 Not tainted syzkaller #0 PREEMPT(full) [ 344.719585][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 344.719596][ T8796] Call Trace: [ 344.719604][ T8796] [ 344.719613][ T8796] dump_stack_lvl+0xe8/0x150 [ 344.719656][ T8796] should_fail_ex+0x3eb/0x540 [ 344.719687][ T8796] should_failslab+0xa8/0x100 [ 344.719714][ T8796] __kvmalloc_node_noprof+0x171/0x820 [ 344.719736][ T8796] ? __kvmalloc_node_noprof+0x340/0x820 [ 344.719757][ T8796] ? io_alloc_cache_init+0x42/0x140 [ 344.719885][ T8796] ? io_alloc_cache_init+0x42/0x140 [ 344.719912][ T8796] io_alloc_cache_init+0x42/0x140 [ 344.719939][ T8796] io_ring_ctx_alloc+0x527/0xb80 [ 344.719988][ T8796] io_uring_create+0x50/0x980 [ 344.720019][ T8796] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 344.720099][ T8796] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 344.720164][ T8796] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 344.720205][ T8796] ? rcu_is_watching+0x16/0xb0 [ 344.720260][ T8796] do_syscall_64+0x166/0x520 [ 344.720288][ T8796] ? trace_irq_disable+0x3b/0x140 [ 344.720312][ T8796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.720332][ T8796] ? clear_bhb_loop+0x70/0xc0 [ 344.720357][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.720374][ T8796] RIP: 0033:0x7f86a439e159 [ 344.720391][ T8796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.720407][ T8796] RSP: 002b:00007f86a25f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 344.720428][ T8796] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f86a439e159 [ 344.720443][ T8796] RDX: 00002000000003c0 RSI: 0000200000000040 RDI: 000000000000001b [ 344.720457][ T8796] RBP: 00007f86a443506b R08: 0000000000000000 R09: 0000000000000000 [ 344.720470][ T8796] R10: 0000200000000140 R11: 0000000000000206 R12: 00002000000003c0 [ 344.720483][ T8796] R13: 0000200000000140 R14: 0000000000000000 R15: 00007ffeb56d24d8 [ 344.720512][ T8796] [ 344.791076][ T8799] fuse: Bad value for 'fd' [ 345.484252][ T8808] overlay: Unknown parameter 'audit' [ 348.678646][ T8830] jffs2: notice: (8830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 350.481717][ T8842] fuse: Unknown parameter 'grou00000000000000000000' [ 351.389295][ T8868] fuse: Unknown parameter 'grou00000000000000000000' [ 352.104266][ T8883] fuse: Unknown parameter 'grou00000000000000000000' [ 352.973024][ T8899] usb 1-1: USB disconnect, device number 3 [ 352.991681][ T8899] hub 1-0:1.0: USB hub found [ 352.993327][ T8899] hub 1-0:1.0: 1 port detected [ 353.286047][ T5748] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 353.499439][ T5748] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03 [ 353.505479][ T5748] usb 1-1: Dual-Role OTG device on HNP port [ 353.506122][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.530582][ T5708] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 353.593502][ T5748] usb 1-1: No union descriptors [ 353.643247][ T5748] gspca_main: spca501-2.14.0 probing 0000:0000 [ 353.648253][ T5748] gspca_spca501: reg write: error -32 [ 353.648274][ T5748] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 353.648357][ T5748] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 353.740766][ T5708] usb 5-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 353.745966][ T5708] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 353.746025][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.747278][ T5708] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 353.747301][ T5708] usb 5-1: Manufacturer: syz [ 353.753001][ T5708] usb 5-1: config 0 descriptor?? [ 354.092709][ T5708] rc_core: IR keymap rc-hauppauge not found [ 354.092729][ T5708] Registered IR keymap rc-empty [ 354.094150][ T5708] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 354.099104][ T5708] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 354.149510][ T5708] usb 5-1: USB disconnect, device number 11 [ 354.355245][ T8944] device-mapper: dirty region log: invalid region size 1024 [ 354.355285][ T8944] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 354.355302][ T8944] device-mapper: ioctl: error adding target to table [ 354.699076][ T8947] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 354.699112][ T8947] netlink: 'syz.3.924': attribute type 2 has an invalid length. [ 354.699189][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.924'. [ 355.228260][ T8947] mmap: syz.3.924 (8947) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 355.394651][ T8959] fuse: Unknown parameter 'group_i00000000000000000000' [ 355.610099][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 355.619274][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 355.630073][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 355.633907][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 355.812146][ T8981] device-mapper: dirty region log: invalid region size 1024 [ 355.812187][ T8981] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 355.812204][ T8981] device-mapper: ioctl: error adding target to table [ 355.891834][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 355.892000][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 356.389032][ T8965] ceph: No mds server is up or the cluster is laggy [ 356.675680][ T8977] syz.2.934 (8977): drop_caches: 1 [ 356.678491][ T8940] syz.3.924 (8940): drop_caches: 1 [ 356.748961][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.749402][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.442164][ T8988] syz.4.938 (8988): drop_caches: 1 [ 358.088751][ T8988] syz.4.938 (8988): drop_caches: 1 [ 358.710680][ T32] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 358.860605][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 358.898505][ T32] usb 2-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 358.909249][ T32] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 358.909288][ T32] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 358.909323][ T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 358.909348][ T32] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.909371][ T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.909395][ T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 358.909418][ T32] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 358.909442][ T32] usb 2-1: config 168 interface 0 has no altsetting 0 [ 358.913903][ T32] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 358.913942][ T32] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 358.913978][ T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 358.914003][ T32] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.914026][ T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.914050][ T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 358.914074][ T32] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 358.914098][ T32] usb 2-1: config 168 interface 0 has no altsetting 0 [ 358.918473][ T32] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 358.918595][ T32] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 358.918683][ T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 358.918741][ T32] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.918779][ T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.918816][ T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 358.918853][ T32] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 358.918890][ T32] usb 2-1: config 168 interface 0 has no altsetting 0 [ 358.990296][ T32] usb 2-1: string descriptor 0 read error: -22 [ 358.995034][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.076271][ T32] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 359.470983][ T9017] jffs2: notice: (9017) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 359.748397][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.769820][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.887120][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.907061][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.037355][ T9] usb 2-1: USB disconnect, device number 12 [ 360.544940][ T9001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.941'. [ 360.944650][ T5612] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 360.987685][ T9052] Bluetooth: MGMT ver 1.23 [ 361.340601][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 361.490504][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 361.491265][ T9] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 361.492266][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 361.492314][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.492336][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.492359][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.492381][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.492420][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.660485][ T32] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 361.693106][ T9069] overlay: Unknown parameter 'audit' [ 361.734930][ T9] usb 2-1: usb_control_msg returned -32 [ 361.735255][ T9] usbtmc 2-1:16.0: can't read capabilities [ 362.029598][ T32] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 362.070036][ T9] usb 2-1: USB disconnect, device number 13 [ 362.097093][ T32] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.241123][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 362.241151][ T32] usb 4-1: Product: syz [ 362.241165][ T32] usb 4-1: Manufacturer: syz [ 362.241179][ T32] usb 4-1: SerialNumber: syz [ 364.107798][ T32] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 364.683028][ T32] usb 4-1: USB disconnect, device number 17 [ 364.699423][ T32] usblp0: removed [ 364.775623][ T9085] device-mapper: dirty region log: invalid region size 1024 [ 364.776902][ T9085] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 364.776924][ T9085] device-mapper: ioctl: error adding target to table [ 365.087658][ T9083] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 365.087718][ T9083] netlink: 'syz.1.971': attribute type 2 has an invalid length. [ 365.087809][ T9083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.971'. [ 365.875736][ T9082] syz.1.971 (9082): drop_caches: 3 [ 366.200523][ T5707] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 366.360538][ T5707] usb 4-1: Using ep0 maxpacket: 8 [ 366.361251][ T5707] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 366.366518][ T9123] overlay: Unknown parameter 'audit' [ 366.395357][ T5707] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 366.395394][ T5707] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 366.395435][ T5707] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 366.395454][ T5707] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 366.395466][ T5707] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 366.395479][ T5707] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 366.395493][ T5707] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 366.395517][ T5707] usb 4-1: config 168 interface 0 has no altsetting 0 [ 366.424035][ T5707] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 366.424072][ T5707] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 366.424107][ T5707] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 366.424132][ T5707] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 366.424156][ T5707] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 366.424175][ T5707] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 366.424188][ T5707] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 366.424201][ T5707] usb 4-1: config 168 interface 0 has no altsetting 0 [ 366.510594][ T32] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 366.510808][ T5707] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 366.510840][ T5707] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 366.510875][ T5707] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 366.510900][ T5707] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 366.510934][ T5707] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 366.510957][ T5707] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 366.510981][ T5707] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 366.511003][ T5707] usb 4-1: config 168 interface 0 has no altsetting 0 [ 366.665563][ T32] usb 2-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 366.675389][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 366.690325][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.690351][ T32] usb 2-1: Product: syz [ 366.690485][ T32] usb 2-1: Manufacturer: syz [ 366.690498][ T32] usb 2-1: SerialNumber: syz [ 366.721553][ T32] usb 2-1: config 0 descriptor?? [ 366.852995][ T32] hub 2-1:0.0: bad descriptor, ignoring hub [ 366.853024][ T32] hub 2-1:0.0: probe with driver hub failed with error -5 [ 367.332277][ T5707] usb 4-1: string descriptor 0 read error: -22 [ 367.332396][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.758353][ T32] usb 2-1: USB disconnect, device number 14 [ 369.796722][ T5707] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 369.930437][ T5748] usb 4-1: USB disconnect, device number 18 [ 370.440499][ T32] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 370.867445][ T32] usb 2-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 370.961937][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.961991][ T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 370.962013][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.086213][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 371.086240][ T32] usb 2-1: Product: syz [ 371.086253][ T32] usb 2-1: Manufacturer: syz [ 371.777468][ T9142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 372.032555][ T32] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 372.038141][ T32] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 372.209620][ T9] usb 2-1: USB disconnect, device number 15 [ 372.258444][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 372.267045][ T9] garmin_gps 2-1:1.0: device disconnected [ 372.461016][ T9180] fuse: Bad value for 'fd' [ 372.520508][ T32] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 372.564021][ T9185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.650565][ T32] usb 3-1: device descriptor read/64, error -71 [ 372.900589][ T32] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 372.906620][ T9189] overlay: Unknown parameter 'audit' [ 373.276425][ T32] usb 3-1: device descriptor read/64, error -71 [ 373.431237][ T32] usb usb3-port1: attempt power cycle [ 374.039165][ T9204] sctp: [Deprecated]: syz.0.1009 (pid 9204) Use of int in max_burst socket option. [ 374.039165][ T9204] Use struct sctp_assoc_value instead [ 374.062641][ T9204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1009'. [ 374.063401][ T473] IPVS: starting estimator thread 0... [ 374.080933][ T9209] fuse: Bad value for 'user_id' [ 374.080952][ T9209] fuse: Bad value for 'user_id' [ 374.100811][ T32] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 374.132020][ T32] usb 3-1: device descriptor read/8, error -71 [ 374.163492][ T9208] IPVS: using max 37 ests per chain, 88800 per kthread [ 375.020728][ T32] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 375.082730][ T32] usb 3-1: device descriptor read/8, error -71 [ 375.193120][ T32] usb usb3-port1: unable to enumerate USB device [ 375.770830][ T5807] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 375.922153][ T5807] usb 4-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 375.922997][ T5807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.923026][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 375.923040][ T5807] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.924422][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 375.924444][ T5807] usb 4-1: Product: syz [ 375.924459][ T5807] usb 4-1: Manufacturer: syz [ 375.928478][ T9222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 375.930792][ T5807] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 375.941628][ T5807] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 376.145105][ T5748] usb 4-1: USB disconnect, device number 19 [ 376.160289][ T5748] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 376.173596][ T5748] garmin_gps 4-1:1.0: device disconnected [ 376.685585][ T9244] fuse: Bad value for 'user_id' [ 376.685606][ T9244] fuse: Bad value for 'user_id' [ 376.796349][ T9252] overlay: Unknown parameter 'audit' [ 377.860692][ T5748] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 378.033330][ T5748] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 378.040109][ T5748] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.040185][ T5748] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.077189][ T5748] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.162339][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.162378][ T5748] usb 2-1: Product: syz [ 378.162469][ T5748] usb 2-1: Manufacturer: syz [ 378.162517][ T5748] usb 2-1: SerialNumber: syz [ 378.571795][ T5748] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 378.572563][ T5748] cdc_ncm 2-1:1.0: bind() failure [ 378.882123][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.882184][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.003841][ T32] usb 2-1: USB disconnect, device number 16 [ 380.607684][ T9275] usb 1-1: USB disconnect, device number 4 [ 380.651741][ T9275] hub 1-0:1.0: USB hub found [ 380.652116][ T9275] hub 1-0:1.0: 1 port detected [ 380.930525][ T5707] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 381.094532][ T5707] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03 [ 381.107036][ T5707] usb 1-1: Dual-Role OTG device on HNP port [ 381.107364][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.142753][ T5707] usb 1-1: No union descriptors [ 381.148389][ T5707] gspca_main: spca501-2.14.0 probing 0000:0000 [ 381.165263][ T5707] gspca_spca501: reg write: error -32 [ 381.165280][ T5707] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 381.165361][ T5707] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 381.589209][ T9289] fuse: Bad value for 'user_id' [ 381.589223][ T9289] fuse: Bad value for 'user_id' [ 381.958167][ T9308] overlay: Unknown parameter 'audit' [ 381.993202][ T5708] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 382.283095][ T32] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 382.388951][ T5708] usb 4-1: device descriptor read/64, error -71 [ 382.973529][ T5708] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 383.093508][ T32] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 383.094672][ T32] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 383.094699][ T32] usb 5-1: config 0 has no interface number 0 [ 383.094736][ T32] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.094758][ T32] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 383.094782][ T32] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 383.094805][ T32] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 383.094828][ T32] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 383.094851][ T32] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 383.094890][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.127620][ T32] usb 5-1: config 0 descriptor?? [ 383.130141][ T9302] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.130262][ T9302] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.162203][ T32] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 383.230562][ T5708] usb 4-1: device descriptor read/64, error -71 [ 383.330778][ T5708] usb usb4-port1: attempt power cycle [ 383.357514][ T32] usb 5-1: USB disconnect, device number 12 [ 383.367649][ T32] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 383.995021][ T5708] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 384.061739][ T5708] usb 4-1: device descriptor read/8, error -71 [ 384.647718][ T5708] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 384.661740][ T5708] usb 4-1: device descriptor read/8, error -71 [ 384.770750][ T5708] usb usb4-port1: unable to enumerate USB device [ 389.330880][ T9346] device-mapper: dirty region log: invalid region size 1024 [ 389.330906][ T9346] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 389.330916][ T9346] device-mapper: ioctl: error adding target to table [ 389.429892][ T9360] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 390.354287][ T9368] overlay: Unknown parameter 'audit' [ 394.830991][ T9402] device-mapper: dirty region log: invalid region size 1024 [ 394.831031][ T9402] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 394.831049][ T9402] device-mapper: ioctl: error adding target to table [ 397.065237][ T9423] FAULT_INJECTION: forcing a failure. [ 397.065237][ T9423] name failslab, interval 1, probability 0, space 0, times 0 [ 397.065276][ T9423] CPU: 0 UID: 0 PID: 9423 Comm: syz.3.1079 Not tainted syzkaller #0 PREEMPT(full) [ 397.065289][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 397.065298][ T9423] Call Trace: [ 397.065303][ T9423] [ 397.065312][ T9423] dump_stack_lvl+0xe8/0x150 [ 397.065334][ T9423] should_fail_ex+0x3eb/0x540 [ 397.065352][ T9423] should_failslab+0xa8/0x100 [ 397.065367][ T9423] __kmalloc_cache_noprof+0x9e/0x600 [ 397.065379][ T9423] ? mutex_init_lockdep+0xdf/0x110 [ 397.065416][ T9423] ? do_inotify_init+0xa7/0x440 [ 397.065433][ T9423] ? do_inotify_init+0xa7/0x440 [ 397.065451][ T9423] do_inotify_init+0xa7/0x440 [ 397.065466][ T9423] ? __ia32_sys_inotify_init+0x9/0x20 [ 397.065483][ T9423] __ia32_sys_inotify_init+0x10/0x20 [ 397.065498][ T9423] do_syscall_64+0x166/0x520 [ 397.065513][ T9423] ? trace_irq_disable+0x3b/0x140 [ 397.065526][ T9423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.065538][ T9423] ? clear_bhb_loop+0x70/0xc0 [ 397.065554][ T9423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.065564][ T9423] RIP: 0033:0x7fbe29f9e159 [ 397.065576][ T9423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.065586][ T9423] RSP: 002b:00007fbe2aef4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 397.065599][ T9423] RAX: ffffffffffffffda RBX: 00007fbe2a225fa0 RCX: 00007fbe29f9e159 [ 397.065607][ T9423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.065613][ T9423] RBP: 00007fbe2a225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 397.065620][ T9423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.065627][ T9423] R13: 00007fbe2a226038 R14: 00007fbe2a225fa0 R15: 00007ffdafe2c948 [ 397.065643][ T9423] [ 398.910712][ T9444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.983726][ T5609] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 402.552548][ T5609] usb 3-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 402.568407][ T5609] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 402.568433][ T5609] usb 3-1: config 0 has no interface number 0 [ 402.568473][ T5609] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 402.568494][ T5609] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 402.568517][ T5609] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 402.568541][ T5609] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 402.568564][ T5609] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 402.568586][ T5609] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 402.568625][ T5609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.679606][ T5609] usb 3-1: config 0 descriptor?? [ 402.680683][ T9466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 402.680792][ T9466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 402.720959][ T5609] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 402.920503][ T9494] jffs2: notice: (9494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 403.067661][ T5821] usb 3-1: USB disconnect, device number 26 [ 403.240330][ T5821] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 403.773618][ T9500] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 404.727267][ T9507] MPI: mpi too large (113288 bits) [ 407.084012][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.093499][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.700469][ T991] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 407.850458][ T991] usb 4-1: Using ep0 maxpacket: 8 [ 407.851172][ T991] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 407.852107][ T991] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 407.852136][ T991] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.852148][ T991] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.852160][ T991] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.852172][ T991] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.852193][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.063929][ T9544] FAULT_INJECTION: forcing a failure. [ 408.063929][ T9544] name failslab, interval 1, probability 0, space 0, times 0 [ 408.063961][ T9544] CPU: 1 UID: 0 PID: 9544 Comm: syz.1.1108 Not tainted syzkaller #0 PREEMPT(full) [ 408.063985][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 408.063997][ T9544] Call Trace: [ 408.064005][ T9544] [ 408.064014][ T9544] dump_stack_lvl+0xe8/0x150 [ 408.064053][ T9544] should_fail_ex+0x3eb/0x540 [ 408.064085][ T9544] should_failslab+0xa8/0x100 [ 408.064112][ T9544] __kmalloc_cache_noprof+0x9e/0x600 [ 408.064133][ T9544] ? mutex_init_lockdep+0xdf/0x110 [ 408.064161][ T9544] ? do_inotify_init+0xa7/0x440 [ 408.064189][ T9544] ? do_inotify_init+0xa7/0x440 [ 408.064223][ T9544] do_inotify_init+0xa7/0x440 [ 408.064250][ T9544] ? __ia32_sys_inotify_init+0x9/0x20 [ 408.064282][ T9544] __ia32_sys_inotify_init+0x10/0x20 [ 408.064309][ T9544] do_syscall_64+0x166/0x520 [ 408.064338][ T9544] ? trace_irq_disable+0x3b/0x140 [ 408.064362][ T9544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.064382][ T9544] ? clear_bhb_loop+0x70/0xc0 [ 408.064405][ T9544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.064426][ T9544] RIP: 0033:0x7fbf5d19e159 [ 408.064444][ T9544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.064461][ T9544] RSP: 002b:00007fbf5dfe8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 408.064483][ T9544] RAX: ffffffffffffffda RBX: 00007fbf5d425fa0 RCX: 00007fbf5d19e159 [ 408.064498][ T9544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.064509][ T9544] RBP: 00007fbf5d425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 408.064522][ T9544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.064534][ T9544] R13: 00007fbf5d426038 R14: 00007fbf5d425fa0 R15: 00007ffc8c351b18 [ 408.064565][ T9544] [ 408.078460][ T991] usb 4-1: usb_control_msg returned -32 [ 408.078507][ T991] usbtmc 4-1:16.0: can't read capabilities [ 408.111543][ T991] usb 4-1: USB disconnect, device number 24 [ 408.291702][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.292146][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.973793][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.974252][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.040907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 410.126843][ T9583] overlay: Unknown parameter 'audit' [ 410.556373][ T9591] MTD: Couldn't look up './dev/mtdblock0': -2 [ 413.237736][ T9604] FAULT_INJECTION: forcing a failure. [ 413.237736][ T9604] name failslab, interval 1, probability 0, space 0, times 0 [ 413.237769][ T9604] CPU: 0 UID: 0 PID: 9604 Comm: syz.0.1124 Not tainted syzkaller #0 PREEMPT(full) [ 413.237793][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 413.237805][ T9604] Call Trace: [ 413.237813][ T9604] [ 413.237822][ T9604] dump_stack_lvl+0xe8/0x150 [ 413.237856][ T9604] should_fail_ex+0x3eb/0x540 [ 413.237886][ T9604] should_failslab+0xa8/0x100 [ 413.237914][ T9604] __kmalloc_cache_noprof+0x9e/0x600 [ 413.237934][ T9604] ? mutex_init_lockdep+0xdf/0x110 [ 413.237959][ T9604] ? do_inotify_init+0xa7/0x440 [ 413.237983][ T9604] ? do_inotify_init+0xa7/0x440 [ 413.238015][ T9604] do_inotify_init+0xa7/0x440 [ 413.238040][ T9604] ? __ia32_sys_inotify_init+0x9/0x20 [ 413.238070][ T9604] __ia32_sys_inotify_init+0x10/0x20 [ 413.238097][ T9604] do_syscall_64+0x166/0x520 [ 413.238124][ T9604] ? trace_irq_disable+0x3b/0x140 [ 413.238147][ T9604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.238166][ T9604] ? clear_bhb_loop+0x70/0xc0 [ 413.238190][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.238209][ T9604] RIP: 0033:0x7f338c59e159 [ 413.238228][ T9604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.238245][ T9604] RSP: 002b:00007f338a7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 413.238267][ T9604] RAX: ffffffffffffffda RBX: 00007f338c825fa0 RCX: 00007f338c59e159 [ 413.238283][ T9604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 413.238295][ T9604] RBP: 00007f338c825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 413.238307][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.238319][ T9604] R13: 00007f338c826038 R14: 00007f338c825fa0 R15: 00007ffeebdbc8c8 [ 413.238351][ T9604] [ 416.980666][ T991] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 417.142118][ T991] usb 4-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 417.143202][ T991] usb 4-1: config index 0 descriptor too short (expected 255, got 27) [ 417.143226][ T991] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.143245][ T991] usb 4-1: config 0 has no interfaces? [ 417.145023][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.145038][ T991] usb 4-1: Product: syz [ 417.145045][ T991] usb 4-1: Manufacturer: syz [ 417.145053][ T991] usb 4-1: SerialNumber: syz [ 417.168410][ T991] usb 4-1: config 0 descriptor?? [ 417.578912][ T5821] usb 4-1: USB disconnect, device number 25 [ 418.319697][ T9685] loop2: detected capacity change from 0 to 2640 [ 418.335464][ T9685] buffer_io_error: 320 callbacks suppressed [ 418.335555][ T9685] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 418.335578][ T9685] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 418.335591][ T9685] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 418.335602][ T9685] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 418.335614][ T9685] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 418.335626][ T9685] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 418.335638][ T9685] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 418.335650][ T9685] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 418.335661][ T9685] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 418.335674][ T9685] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 418.413769][ T9638] udevd[9638]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 418.524141][ T5799] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 418.651237][ T9694] overlay: Unknown parameter 'audit' [ 418.670474][ T5799] usb 2-1: Using ep0 maxpacket: 8 [ 418.675462][ T5799] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.717237][ T5799] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 418.717485][ T5799] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.717550][ T5799] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.717606][ T5799] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.717643][ T5799] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.717695][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.853987][ T5799] usb 2-1: usb_control_msg returned -71 [ 419.947878][ T5799] usbtmc 2-1:16.0: can't read capabilities [ 419.962654][ T9644] udevd[9644]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 420.245232][ T9644] udevd[9644]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 420.321945][ T5799] usb 2-1: USB disconnect, device number 17 [ 422.233189][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1156'. [ 422.318576][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 422.500726][ T58] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 422.579771][ T9723] loop2: detected capacity change from 0 to 2640 [ 422.599126][ T9638] udevd[9638]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 422.663038][ T58] usb 2-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 422.665610][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.665647][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 422.674466][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.674491][ T58] usb 2-1: Product: syz [ 422.674505][ T58] usb 2-1: Manufacturer: syz [ 422.674518][ T58] usb 2-1: SerialNumber: syz [ 422.682476][ T58] usb 2-1: config 0 descriptor?? [ 422.930540][ T32] usb 2-1: USB disconnect, device number 18 [ 423.603099][ T9644] udevd[9644]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 423.651025][ T9638] udevd[9638]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 423.961476][ T9750] netlink: 'syz.3.1166': attribute type 10 has an invalid length. [ 424.079498][ T9750] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 426.175070][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 426.633024][ T5799] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 426.766677][ T9794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.769335][ T9794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.781199][ T5799] usb 4-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 426.782289][ T5799] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.782323][ T5799] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.784556][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.784579][ T5799] usb 4-1: Product: syz [ 426.784591][ T5799] usb 4-1: Manufacturer: syz [ 426.784604][ T5799] usb 4-1: SerialNumber: syz [ 426.787686][ T5799] usb 4-1: config 0 descriptor?? [ 426.876787][ T9792] netlink: 'syz.1.1178': attribute type 10 has an invalid length. [ 426.876964][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.877187][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.879707][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.879777][ T9792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.879933][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.879999][ T9792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.882141][ T9792] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 427.118312][ T5609] usb 4-1: USB disconnect, device number 26 [ 427.212012][ T9808] vivid-007: disconnect [ 427.213498][ T9807] vivid-007: reconnect [ 427.342760][ T9816] fuse: Bad value for 'fd' [ 428.300086][ T9854] netlink: 'syz.2.1191': attribute type 10 has an invalid length. [ 428.300264][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.301998][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.304732][ T9854] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.304800][ T9854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.304954][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.305027][ T9854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.306745][ T9854] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 428.638488][ T9867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.650705][ T9867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.011789][ T9879] syzkaller0: entered promiscuous mode [ 429.011812][ T9879] syzkaller0: entered allmulticast mode [ 429.446017][ T9885] 9p: Bad value for 'rfdno' [ 431.202571][ T9892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.102502][ T5748] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 434.292849][ T5748] usb 5-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 434.331572][ T5748] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.331793][ T5748] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.454442][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.454481][ T5748] usb 5-1: Product: syz [ 434.454495][ T5748] usb 5-1: Manufacturer: syz [ 434.454509][ T5748] usb 5-1: SerialNumber: syz [ 434.496522][ T5748] usb 5-1: config 0 descriptor?? [ 434.707903][ T5748] hub 5-1:0.0: bad descriptor, ignoring hub [ 434.707931][ T5748] hub 5-1:0.0: probe with driver hub failed with error -5 [ 434.753674][ T5748] usb 5-1: USB disconnect, device number 14 [ 434.768558][ T9940] tipc: Started in network mode [ 434.768584][ T9940] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 434.768881][ T9940] tipc: Enabled bearer , priority 0 [ 435.975337][ T58] tipc: Node number set to 43690 [ 436.278912][ T33] kauditd_printk_skb: 145 callbacks suppressed [ 436.278932][ T33] audit: type=1326 audit(1790207390.283:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29f9e159 code=0x7ffc0000 [ 436.279062][ T33] audit: type=1326 audit(1790207390.283:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29f9e159 code=0x7ffc0000 [ 436.286706][ T33] audit: type=1326 audit(1790207390.293:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fbe29f9e159 code=0x7ffc0000 [ 436.286759][ T33] audit: type=1326 audit(1790207390.293:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29f9e159 code=0x7ffc0000 [ 436.286797][ T33] audit: type=1326 audit(1790207390.293:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29f9e159 code=0x7ffc0000 [ 436.312982][ T33] audit: type=1326 audit(1790207390.293:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbe29f9e159 code=0x7ffc0000 [ 436.313033][ T33] audit: type=1326 audit(1790207390.293:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29f9e159 code=0x7ffc0000 [ 436.313070][ T33] audit: type=1326 audit(1790207390.293:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29f9e159 code=0x7ffc0000 [ 436.313106][ T33] audit: type=1326 audit(1790207390.293:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbe29f9e159 code=0x7ffc0000 [ 436.313142][ T33] audit: type=1326 audit(1790207390.293:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1231" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29f9e159 code=0x7ffc0000 [ 438.080232][ T9990] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 438.080256][ T9990] netlink: 'syz.4.1239': attribute type 2 has an invalid length. [ 438.080271][ T9990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1239'. [ 438.120626][ T991] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 438.272385][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 438.273774][ T991] usb 2-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 438.273813][ T991] usb 2-1: no configurations [ 438.273824][ T991] usb 2-1: can't read configurations, error -22 [ 438.444924][T10010] overlay: Unknown parameter 'audit' [ 438.577709][ T991] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 438.960569][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 439.047480][ T991] usb 2-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 439.047523][ T991] usb 2-1: no configurations [ 439.047535][ T991] usb 2-1: can't read configurations, error -22 [ 439.201031][ T991] usb usb2-port1: attempt power cycle [ 439.930493][ T991] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 439.997115][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 440.034891][ T991] usb 2-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 440.034947][ T991] usb 2-1: no configurations [ 440.034959][ T991] usb 2-1: can't read configurations, error -22 [ 440.323331][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.323391][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.361143][ T991] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 440.536206][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 440.577024][ T991] usb 2-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 440.577067][ T991] usb 2-1: no configurations [ 440.577080][ T991] usb 2-1: can't read configurations, error -22 [ 440.651833][ T991] usb usb2-port1: unable to enumerate USB device [ 441.140823][ T9986] syz.4.1239 (9986): drop_caches: 3 [ 441.519847][T10035] loop2: detected capacity change from 0 to 2640 [ 441.534207][T10035] buffer_io_error: 650 callbacks suppressed [ 441.534224][T10035] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 441.534242][T10035] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 441.534254][T10035] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 441.534266][T10035] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 441.534278][T10035] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 441.534291][T10035] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 441.534303][T10035] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 441.534314][T10035] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 441.534325][T10035] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 441.534337][T10035] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 441.673056][T10025] udevd[10025]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 441.869657][T10045] Invalid ELF header type: 3 != 1 [ 442.036274][T10049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.040676][T10049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.370296][ T5799] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 442.536141][T10025] udevd[10025]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 442.550481][ T5799] usb 4-1: Using ep0 maxpacket: 8 [ 442.559224][ T5799] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 442.615000][ T5799] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 442.615042][ T5799] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 442.615079][ T5799] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.615103][ T5799] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.615126][ T5799] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.615148][ T5799] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.615170][ T5799] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 442.615193][ T5799] usb 4-1: config 168 interface 0 has no altsetting 0 [ 442.761745][ T5799] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 442.761783][ T5799] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 442.761817][ T5799] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.761842][ T5799] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.761867][ T5799] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.761891][ T5799] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.761915][ T5799] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 442.761939][ T5799] usb 4-1: config 168 interface 0 has no altsetting 0 [ 442.883819][ T5799] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 442.883857][ T5799] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 442.883893][ T5799] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.883918][ T5799] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.883941][ T5799] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.883973][ T5799] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.883996][ T5799] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 442.884018][ T5799] usb 4-1: config 168 interface 0 has no altsetting 0 [ 443.076863][T10025] udevd[10025]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 443.137108][ T5799] usb 4-1: string descriptor 0 read error: -22 [ 443.137253][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.462106][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.526645][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.575834][ T5799] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 444.851174][ T5799] usb 4-1: USB disconnect, device number 27 [ 444.938475][T10056] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 444.938501][T10056] netlink: 'syz.2.1263': attribute type 2 has an invalid length. [ 444.938514][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1263'. [ 445.275190][T10052] syz.2.1263 (10052): drop_caches: 3 [ 445.449971][T10067] overlay: Unknown parameter 'audit' [ 448.009025][T10090] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1274'. [ 448.009055][T10090] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1274'. [ 448.333163][T10096] syzkaller0: entered promiscuous mode [ 448.333189][T10096] syzkaller0: entered allmulticast mode [ 448.415855][T10102] Invalid ELF header type: 3 != 1 [ 448.418003][ T33] kauditd_printk_skb: 1 callbacks suppressed [ 448.418017][ T33] audit: type=1800 audit(1790207402.423:610): pid=10098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1279" name="file1" dev="sda1" ino=1262 res=0 errno=0 [ 448.517643][T10098] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 448.517664][T10098] File: /228/mnt/file1 PID: 10098 Comm: syz.1.1279 [ 448.651422][T10108] netlink: 'syz.1.1279': attribute type 9 has an invalid length. [ 450.669413][T10105] bridge0: port 3(syz_tun) entered blocking state [ 450.669472][T10105] bridge0: port 3(syz_tun) entered disabled state [ 450.669665][T10105] syz_tun: entered allmulticast mode [ 450.676400][T10105] syz_tun: entered promiscuous mode [ 450.677199][T10105] bridge0: port 3(syz_tun) entered blocking state [ 450.677313][T10105] bridge0: port 3(syz_tun) entered forwarding state [ 450.906489][T10082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.240126][T10131] overlay: Unknown parameter 'audit' [ 454.074208][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 454.963113][T10160] Invalid ELF header type: 3 != 1 [ 455.274871][T10163] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 455.592340][T10183] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1306'. [ 455.614745][T10183] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1306'. [ 456.527090][T10192] warning: `syz.2.1309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 457.354879][T10203] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1313'. [ 457.745226][T10212] netlink: 'syz.2.1316': attribute type 10 has an invalid length. [ 457.746166][T10212] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.746310][T10212] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.530896][T10235] syzkaller0: entered promiscuous mode [ 458.530921][T10235] syzkaller0: entered allmulticast mode [ 458.600767][T10248] netlink: 'syz.1.1330': attribute type 1 has an invalid length. [ 458.918145][T10262] loop2: detected capacity change from 0 to 2640 [ 458.984444][T10262] buffer_io_error: 320 callbacks suppressed [ 458.984461][T10262] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 458.984478][T10262] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 458.984491][T10262] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 458.984508][T10262] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 458.984529][T10262] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 458.986704][T10262] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 458.987482][T10171] udevd[10171]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 458.987793][T10262] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 458.989341][T10262] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 458.989366][T10262] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 458.989385][T10262] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 459.861944][T10171] udevd[10171]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 460.107892][T10171] udevd[10171]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 464.056976][T10354] netlink: 'syz.0.1346': attribute type 10 has an invalid length. [ 464.144383][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.144549][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.175170][T10354] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.175290][T10354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.175479][T10354] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.175545][T10354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.219769][T10354] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 464.371515][ T58] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 464.520920][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 464.523619][ T58] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 464.524756][ T58] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 464.524794][ T58] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 464.524839][ T58] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 464.524865][ T58] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.524888][ T58] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.524913][ T58] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.524938][ T58] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 464.524964][ T58] usb 4-1: config 168 interface 0 has no altsetting 0 [ 464.526045][ T58] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 464.526080][ T58] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 464.526116][ T58] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 464.526141][ T58] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.526166][ T58] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.526190][ T58] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.526215][ T58] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 464.526240][ T58] usb 4-1: config 168 interface 0 has no altsetting 0 [ 464.527146][ T58] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 464.527178][ T58] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 464.527246][ T58] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 464.527271][ T58] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.527296][ T58] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.527318][ T58] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.527342][ T58] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 464.527367][ T58] usb 4-1: config 168 interface 0 has no altsetting 0 [ 464.663958][ T58] usb 4-1: string descriptor 0 read error: -22 [ 464.664083][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.810595][ T32] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 464.838103][ T58] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 465.074808][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 465.080567][ T32] usb 2-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 465.124109][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.124136][ T32] usb 2-1: config 0 has no interfaces? [ 465.124165][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.548139][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.550926][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.618887][ T58] usb 4-1: USB disconnect, device number 28 [ 465.906205][ T32] usb 2-1: config 0 descriptor?? [ 467.582609][ T58] usb 2-1: USB disconnect, device number 23 [ 467.698665][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 468.078212][T10417] netlink: 'syz.3.1361': attribute type 10 has an invalid length. [ 468.610161][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1363'. [ 468.716816][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 468.788729][T10425] overlayfs: failed to resolve './file0/file1': -2 [ 472.271540][ T991] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 472.305144][T10481] syzkaller0: entered promiscuous mode [ 472.305170][T10481] syzkaller0: entered allmulticast mode [ 472.660491][ T991] usb 4-1: device descriptor read/64, error -71 [ 472.970468][ T991] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 473.350650][ T991] usb 4-1: device descriptor read/64, error -71 [ 473.461718][ T991] usb usb4-port1: attempt power cycle [ 473.561685][T10508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1381'. [ 473.739937][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 473.915779][ T991] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 473.978688][ T991] usb 4-1: device descriptor read/8, error -71 [ 474.633740][T10515] overlayfs: failed to resolve './file0/file1': -2 [ 474.852059][ T991] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 474.950225][ T991] usb 4-1: device descriptor read/8, error -71 [ 475.108069][ T991] usb usb4-port1: unable to enumerate USB device [ 479.220283][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 479.721680][T10526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.868375][T10557] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 480.161788][ T5799] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 480.368408][ T5799] usb 5-1: device descriptor read/64, error -71 [ 480.630812][ T5799] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 481.389167][ T5799] usb 5-1: device descriptor read/64, error -71 [ 481.577795][ T5799] usb usb5-port1: attempt power cycle [ 483.150791][ T5799] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 483.170960][ T5799] usb 5-1: device descriptor read/8, error -71 [ 484.537223][T10611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1403'. [ 484.634538][T10608] syzkaller0: entered promiscuous mode [ 484.634565][T10608] syzkaller0: entered allmulticast mode [ 484.650929][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 484.752753][T10620] overlayfs: failed to resolve './file0/file1': -2 [ 485.621354][T10634] loop2: detected capacity change from 0 to 2640 [ 485.663082][T10634] buffer_io_error: 320 callbacks suppressed [ 485.663103][T10634] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 485.663133][T10634] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 485.663464][T10634] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 485.663490][T10634] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 485.663513][T10634] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 485.663556][T10634] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 485.663579][T10634] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 485.663601][T10634] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 485.663622][T10634] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 485.663645][T10634] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 486.221490][T10576] udevd[10576]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 486.225966][T10576] udevd[10576]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 486.229567][T10576] udevd[10576]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 487.581638][T10636] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 487.585422][T10636] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 493.064121][T10677] loop2: detected capacity change from 0 to 2640 [ 493.072533][T10673] udevd[10673]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 493.078814][T10677] buffer_io_error: 320 callbacks suppressed [ 493.078834][T10677] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 493.078862][T10677] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 493.078883][T10677] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 493.078904][T10677] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 493.078925][T10677] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 493.078946][T10677] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 493.078967][T10677] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 493.078988][T10677] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 493.079009][T10677] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 493.079030][T10677] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 493.288879][T10673] udevd[10673]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 493.403627][T10684] overlay: Unknown parameter 'audit' [ 494.968809][T10673] udevd[10673]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 496.543515][T10697] syzkaller0: entered promiscuous mode [ 496.543542][T10697] syzkaller0: entered allmulticast mode [ 497.575822][T10725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.573528][T10728] loop2: detected capacity change from 0 to 2640 [ 498.612050][T10731] udevd[10731]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 498.613096][T10728] buffer_io_error: 320 callbacks suppressed [ 498.613114][T10728] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 498.613144][T10728] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 498.613167][T10728] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 498.613190][T10728] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 498.613212][T10728] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 498.613235][T10728] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 498.613257][T10728] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 498.613279][T10728] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 498.613301][T10728] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 498.613324][T10728] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 499.139916][T10731] udevd[10731]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 499.220493][T10731] udevd[10731]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 500.357940][T10751] overlay: Unknown parameter 'audit' [ 501.765287][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.765353][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.904586][T10779] overlay: Unknown parameter 'audit' [ 503.949664][T10780] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 506.892829][T10798] syzkaller0: entered promiscuous mode [ 506.892853][T10798] syzkaller0: entered allmulticast mode [ 506.999867][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 508.203963][T10825] overlay: Unknown parameter 'audit' [ 509.658305][T10833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.746457][T10837] netlink: 'syz.0.1468': attribute type 10 has an invalid length. [ 509.747715][T10837] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.747836][T10837] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.795962][T10838] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 509.840637][ T5799] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 509.992383][ T5799] usb 4-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 509.995454][ T5799] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 509.995730][ T5799] usb 4-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 509.995807][ T5799] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 509.999576][ T5799] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 509.999920][ T5799] usb 4-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 510.000068][ T5799] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 510.193367][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.193395][ T5799] usb 4-1: Product: syz [ 510.193409][ T5799] usb 4-1: Manufacturer: syz [ 510.193422][ T5799] usb 4-1: SerialNumber: syz [ 510.629744][ T5799] ti_usb_3410_5052 4-1:2.0: required endpoints missing [ 510.719732][T10843] overlay: Unknown parameter 'audit' [ 510.842026][ T9] usb 4-1: USB disconnect, device number 33 [ 510.906030][T10854] syzkaller1: entered promiscuous mode [ 510.906053][T10854] syzkaller1: entered allmulticast mode [ 511.166587][T10859] trusted_key: encrypted_key: insufficient parameters specified [ 511.230228][T10860] syzkaller0: entered promiscuous mode [ 511.230255][T10860] syzkaller0: entered allmulticast mode [ 511.653286][T10868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.434951][T10870] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 513.307355][T10878] netlink: 'syz.1.1482': attribute type 1 has an invalid length. [ 513.766702][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'. [ 513.834646][T10878] bond1: entered promiscuous mode [ 513.835914][T10878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.919163][T10880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.927078][T10880] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 513.927103][T10880] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 514.023938][T10894] trusted_key: encrypted_key: insufficient parameters specified [ 514.107951][T10880] bond1: (slave wireguard0): making interface the new active one [ 514.107979][T10880] wireguard0: entered promiscuous mode [ 514.111330][T10880] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 514.329571][T10905] syzkaller0: entered promiscuous mode [ 514.329648][T10905] syzkaller0: entered allmulticast mode [ 514.402815][T10910] overlay: Unknown parameter 'audit' [ 517.455924][T10961] overlay: Unknown parameter 'audit' [ 518.636475][T10996] netlink: 'syz.2.1524': attribute type 1 has an invalid length. [ 518.681128][T10996] bond1: entered promiscuous mode [ 518.681707][T10996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.720665][T10996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.721063][T10996] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 518.721083][T10996] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 518.774934][T10996] bond1: (slave wireguard0): making interface the new active one [ 518.774960][T10996] wireguard0: entered promiscuous mode [ 518.776411][T10996] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 518.910487][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.252282][ T5748] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 519.309730][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'. [ 519.365163][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 519.369149][T11019] FAULT_INJECTION: forcing a failure. [ 519.369149][T11019] name failslab, interval 1, probability 0, space 0, times 0 [ 519.369173][T11019] CPU: 1 UID: 0 PID: 11019 Comm: syz.0.1532 Tainted: G Y syzkaller #0 PREEMPT(full) [ 519.369188][T11019] Tainted: [Y]=FORCED_BIND [ 519.369192][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 519.369199][T11019] Call Trace: [ 519.369204][T11019] [ 519.369210][T11019] dump_stack_lvl+0xe8/0x150 [ 519.369231][T11019] should_fail_ex+0x3eb/0x540 [ 519.369248][T11019] ? __alloc_skb+0x1db/0x7a0 [ 519.369429][T11019] should_failslab+0xa8/0x100 [ 519.369445][T11019] ? __alloc_skb+0x1db/0x7a0 [ 519.369457][T11019] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 519.369476][T11019] ? __alloc_skb+0x1db/0x7a0 [ 519.369509][T11019] __alloc_skb+0x1db/0x7a0 [ 519.369524][T11019] tcp_stream_alloc_skb+0x3f/0x580 [ 519.369592][T11019] tcp_sendmsg_locked+0x138c/0x5400 [ 519.369631][T11019] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 519.369648][T11019] ? tcp_sendmsg+0x21/0x50 [ 519.369662][T11019] ? __local_bh_enable_ip+0xd6/0x140 [ 519.369690][T11019] tcp_sendmsg+0x2f/0x50 [ 519.369702][T11019] ? __pfx_inet_sendmsg+0x10/0x10 [ 519.369735][T11019] sock_sendmsg_nosec+0x10e/0x180 [ 519.369767][T11019] __sys_sendto+0x408/0x5a0 [ 519.369810][T11019] ? __pfx___sys_sendto+0x10/0x10 [ 519.369837][T11019] ? __pfx___se_sys_futex+0x10/0x10 [ 519.369857][T11019] ? __pfx_ksys_write+0x10/0x10 [ 519.369873][T11019] __x64_sys_sendto+0xde/0x100 [ 519.369888][T11019] do_syscall_64+0x166/0x520 [ 519.369904][T11019] ? trace_irq_disable+0x3b/0x140 [ 519.369917][T11019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.369929][T11019] ? clear_bhb_loop+0x70/0xc0 [ 519.369942][T11019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.369953][T11019] RIP: 0033:0x7f338c59e159 [ 519.369965][T11019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.369974][T11019] RSP: 002b:00007f338a7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 519.369990][T11019] RAX: ffffffffffffffda RBX: 00007f338c826090 RCX: 00007f338c59e159 [ 519.369999][T11019] RDX: fffffffffffffe88 RSI: 00002000000002c0 RDI: 0000000000000003 [ 519.370006][T11019] RBP: 00007f338c63506b R08: 0000000000000000 R09: 0000000000000000 [ 519.370014][T11019] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000000 [ 519.370021][T11019] R13: 00007f338c826128 R14: 00007f338c826090 R15: 00007ffeebdbc8c8 [ 519.370041][T11019] [ 519.423099][ T5748] usb 4-1: Using ep0 maxpacket: 16 [ 519.436120][ T5748] usb 4-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 519.489677][ T5748] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.489704][ T5748] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 519.489738][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.675805][ T5748] usb 4-1: config 0 descriptor?? [ 519.881444][ T5807] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 520.402516][ T5807] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 520.447859][ T5807] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 520.447911][ T5807] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 520.447931][ T5807] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 520.447952][ T5807] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 520.541132][ T5807] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 520.541189][ T5807] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 520.541208][ T5807] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 520.541228][ T5807] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 520.622997][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.623022][ T5807] usb 3-1: Product: syz [ 520.623034][ T5807] usb 3-1: Manufacturer: syz [ 520.623046][ T5807] usb 3-1: SerialNumber: syz [ 522.032531][ T5807] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 522.032926][ T5807] ti_usb_3410_5052 3-1:2.0: missing endpoints [ 522.150788][ T5748] usb 4-1: USB disconnect, device number 34 [ 522.193779][ T5807] usb 3-1: USB disconnect, device number 27 [ 522.268793][T11050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.999304][T11064] overlay: Unknown parameter 'audit' [ 524.326796][T11107] syzkaller0: entered promiscuous mode [ 524.326820][T11107] syzkaller0: entered allmulticast mode [ 525.367933][T11113] overlay: Unknown parameter 'audit' [ 525.467511][T11129] syz_tun: entered allmulticast mode [ 525.468533][T11129] wg2: entered allmulticast mode [ 525.485941][T11128] syz_tun: left allmulticast mode [ 527.397567][T11184] overlay: Unknown parameter 'audit' [ 527.681154][ T5748] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 527.850840][ T5748] usb 5-1: Using ep0 maxpacket: 8 [ 527.851579][ T5748] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 527.852683][ T5748] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 527.852737][ T5748] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 527.852759][ T5748] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 527.852782][ T5748] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.852802][ T5748] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.852841][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.861306][ T5748] usbtmc 5-1:16.0: bulk endpoints not found [ 528.073783][T11200] usb 1-1: USB disconnect, device number 5 [ 528.163570][T11200] hub 1-0:1.0: USB hub found [ 528.165268][T11200] hub 1-0:1.0: 1 port detected [ 528.284336][ T5807] usb 5-1: USB disconnect, device number 19 [ 528.320529][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 528.484259][ T9] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03 [ 528.505337][ T9] usb 1-1: Dual-Role OTG device on HNP port [ 528.506088][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.989025][ T9] usb 1-1: No union descriptors [ 529.068393][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 529.096267][ T9] gspca_spca501: reg write: error -32 [ 529.096320][ T9] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 529.096648][ T9] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 533.944955][T11285] xt_nfacct: accounting object `' does not exist [ 534.578975][T11295] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1627'. [ 534.716620][T11298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1629'. [ 534.778948][T11302] ip_tables: iptables: counters copy to user failed while replacing table [ 534.830600][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1629'. [ 534.883775][T11298] overlayfs: failed to resolve './file0/file1': -2 [ 534.980823][T11312] overlay: Unknown parameter 'audit' [ 535.023260][T11309] syzkaller0: entered promiscuous mode [ 535.023285][T11309] syzkaller0: entered allmulticast mode [ 536.502925][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 536.502962][T11332] netlink: 'syz.2.1640': attribute type 9 has an invalid length. [ 536.502975][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 536.630541][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 536.630579][T11332] netlink: 'syz.2.1640': attribute type 9 has an invalid length. [ 536.630576][ T1019] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.630593][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 536.640966][ T8209] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.652730][ T1019] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.652772][ T1019] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.011984][T11340] ip_tables: iptables: counters copy to user failed while replacing table [ 538.581535][T11366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.739466][T11372] 0: reclassify loop, rule prio 0, protocol 800 [ 541.869285][T11421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1668'. [ 541.894433][T11423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.949714][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 541.974564][T11424] overlayfs: failed to resolve './file0/file1': -2 [ 542.062781][T11427] fuse: Unknown parameter 'fd0x0000000000000003' [ 542.229925][ T33] audit: type=1326 audit(1790207496.233:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.0.1676" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338c59e159 code=0x7ffc0000 [ 542.230194][ T33] audit: type=1326 audit(1790207496.233:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.0.1676" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338c59e159 code=0x7ffc0000 [ 542.308994][ T33] audit: type=1326 audit(1790207496.313:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.0.1676" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f338c59e159 code=0x7ffc0000 [ 542.310031][ T33] audit: type=1326 audit(1790207496.313:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.0.1676" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338c59e159 code=0x7ffc0000 [ 542.310666][ T33] audit: type=1326 audit(1790207496.313:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.0.1676" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338c59e159 code=0x7ffc0000 [ 542.420514][ T33] audit: type=1326 audit(1790207496.413:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.0.1676" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f338c59e159 code=0x7ffc0000 [ 542.420679][ T33] audit: type=1326 audit(1790207496.413:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.0.1676" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338c59e159 code=0x7ffc0000 [ 542.420858][ T33] audit: type=1326 audit(1790207496.413:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.0.1676" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338c59e159 code=0x7ffc0000 [ 542.421033][ T33] audit: type=1326 audit(1790207496.413:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.0.1676" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f338c59e159 code=0x7ffc0000 [ 542.421232][ T33] audit: type=1326 audit(1790207496.413:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.0.1676" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f338c597ed7 code=0x7ffc0000 [ 543.387175][T11461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1685'. [ 543.479700][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 543.574759][T11461] overlayfs: failed to resolve './file0/file1': -2 [ 544.352465][T11475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.041083][T11492] syzkaller0: entered promiscuous mode [ 545.041106][T11492] syzkaller0: entered allmulticast mode [ 545.131178][T11497] ip_tables: iptables: counters copy to user failed while replacing table [ 547.628979][T11537] wg1 speed is unknown, defaulting to 1000 [ 547.692056][T11537] wg1 speed is unknown, defaulting to 1000 [ 547.705580][T11537] wg1 speed is unknown, defaulting to 1000 [ 547.903695][T11542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1717'. [ 548.015727][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'. [ 548.453443][T11548] overlayfs: failed to resolve './file0/file1': -2 [ 549.461598][ T32] wg1 speed is unknown, defaulting to 1000 [ 549.466992][T11537] infiniband syz2: set active [ 549.467012][T11537] infiniband syz2: added wg1 [ 549.528713][T11537] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 549.528781][T11537] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 549.528822][T11537] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 549.617950][T11537] RDS/IB: syz2: added [ 549.618542][T11537] smc: adding ib device syz2 with port count 1 [ 549.618684][T11537] smc: ib device syz2 port 1 has no pnetid [ 549.622699][ T9] wg1 speed is unknown, defaulting to 1000 [ 549.630328][T11537] wg1 speed is unknown, defaulting to 1000 [ 549.857724][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'. [ 550.900684][T11537] wg1 speed is unknown, defaulting to 1000 [ 550.987464][T11579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.192600][T11537] wg1 speed is unknown, defaulting to 1000 [ 551.976986][T11590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1733'. [ 552.029038][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 552.059845][T11590] overlayfs: failed to resolve './file0/file1': -2 [ 553.013334][T11537] wg1 speed is unknown, defaulting to 1000 [ 554.944571][T11622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1745'. [ 555.104655][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'. [ 555.130995][T11628] overlayfs: failed to resolve './file0/file1': -2 [ 555.218741][T11537] wg1 speed is unknown, defaulting to 1000 [ 557.485980][T11664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1761'. [ 557.518446][T11663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1760'. [ 557.573507][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 557.640218][T11667] syzkaller0: entered promiscuous mode [ 557.640242][T11667] syzkaller0: entered allmulticast mode [ 557.657531][T11663] overlayfs: failed to resolve './file0/file1': -2 [ 558.186505][T11677] syzkaller0: entered promiscuous mode [ 558.186647][T11677] syzkaller0: entered allmulticast mode [ 558.436512][T11681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1766'. [ 558.510274][T11681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1766'. [ 558.572565][T11681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1766'. [ 559.925158][T11720] syzkaller0: entered promiscuous mode [ 559.925209][T11720] syzkaller0: entered allmulticast mode [ 560.238783][T11726] Invalid ELF header type: 3 != 1 [ 561.419192][T11744] rdma_rxe: rxe_newlink: failed to add wg1 [ 561.605258][T11753] netlink: 'syz.2.1794': attribute type 1 has an invalid length. [ 561.635813][T11753] bond2: entered promiscuous mode [ 561.637329][T11753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.715158][T11758] loop2: detected capacity change from 0 to 2640 [ 561.753900][T11737] udevd[11737]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 561.806234][T11758] buffer_io_error: 320 callbacks suppressed [ 561.806264][T11758] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 561.806392][T11758] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 561.806456][T11758] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 561.806715][T11758] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 561.806813][T11758] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 561.807068][T11758] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 561.807133][T11758] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 561.807243][T11758] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 561.807341][T11758] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 561.807527][T11758] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 562.154421][T11753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.172048][T11753] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 562.172073][T11753] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 562.712984][T11737] udevd[11737]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 562.732731][T11737] udevd[11737]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 562.776300][T11753] bond2: (slave wireguard1): making interface the new active one [ 562.776318][T11753] wireguard1: entered promiscuous mode [ 562.804584][T11753] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 562.939153][T11769] syzkaller0: entered promiscuous mode [ 562.939176][T11769] syzkaller0: entered allmulticast mode [ 563.212334][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.212425][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.636562][T11806] Invalid ELF header type: 3 != 1 [ 565.407103][T11817] syzkaller0: entered promiscuous mode [ 565.407126][T11817] syzkaller0: entered allmulticast mode [ 568.224942][T11865] syzkaller0: entered promiscuous mode [ 568.224965][T11865] syzkaller0: entered allmulticast mode [ 571.594830][T11893] netlink: 'syz.3.1840': attribute type 4 has an invalid length. [ 571.672256][T11894] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1841'. [ 572.649593][T11897] syzkaller0: entered promiscuous mode [ 572.649662][T11897] syzkaller0: entered allmulticast mode [ 574.968701][T11940] overlay: Unknown parameter 'audit' [ 575.018467][T11943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1854'. [ 580.083169][T12015] overlay: Unknown parameter 'audit' [ 580.541510][ T5609] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 580.716944][ T5609] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 580.763586][ T5609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.763624][ T5609] usb 3-1: config 0 has no interfaces? [ 580.807032][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 580.807464][ T5609] usb 3-1: Product: syz [ 580.807575][ T5609] usb 3-1: Manufacturer: syz [ 580.807729][ T5609] usb 3-1: SerialNumber: syz [ 580.995583][ T5609] usb 3-1: config 0 descriptor?? [ 581.488515][T12038] netlink: 'syz.4.1881': attribute type 10 has an invalid length. [ 581.488695][T12038] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.488861][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.491360][T12038] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.491437][T12038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.491601][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.491668][T12038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.493359][T12038] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 581.643874][ T5799] usb 3-1: USB disconnect, device number 28 [ 582.005578][T12062] netlink: 'syz.4.1885': attribute type 1 has an invalid length. [ 582.005596][T12062] netlink: 'syz.4.1885': attribute type 4 has an invalid length. [ 582.005603][T12062] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1885'. [ 583.022319][T12075] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 583.022342][T12075] netlink: 'syz.3.1889': attribute type 2 has an invalid length. [ 583.022355][T12075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1889'. [ 583.363371][T12092] overlay: Unknown parameter 'audit' [ 583.469771][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 583.469915][T12101] xt_cgroup: path and classid specified [ 583.593573][T12109] overlayfs: missing 'lowerdir' [ 583.798521][T12118] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 583.798543][T12118] netlink: 'syz.1.1905': attribute type 2 has an invalid length. [ 583.798555][T12118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1905'. [ 583.832668][T12119] syzkaller0: entered promiscuous mode [ 583.832693][T12119] syzkaller0: entered allmulticast mode [ 584.431745][T12134] loop2: detected capacity change from 0 to 2640 [ 584.536988][T11987] udevd[11987]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 584.587548][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1912'. [ 584.644107][T12134] buffer_io_error: 320 callbacks suppressed [ 584.644129][T12134] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 584.644158][T12134] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 584.644180][T12134] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 584.644199][T12134] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 584.644211][T12134] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 584.644223][T12134] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 584.644234][T12134] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 584.644280][T12134] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 584.644292][T12134] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 584.644304][T12134] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 584.702021][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 584.774224][T12139] overlayfs: failed to resolve './file0/file1': -2 [ 585.361094][T11987] udevd[11987]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 585.524056][T11987] udevd[11987]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 586.052414][T12155] netlink: 'syz.1.1917': attribute type 1 has an invalid length. [ 586.052437][T12155] netlink: 'syz.1.1917': attribute type 2 has an invalid length. [ 586.052450][T12155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1917'. [ 586.168074][T12158] syzkaller0: entered promiscuous mode [ 586.168099][T12158] syzkaller0: entered allmulticast mode [ 586.288318][ T33] kauditd_printk_skb: 104 callbacks suppressed [ 586.288337][ T33] audit: type=1326 audit(1790207540.293:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.1.1923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5d19e159 code=0x7ffc0000 [ 586.289466][ T33] audit: type=1326 audit(1790207540.293:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.1.1923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5d19e159 code=0x7ffc0000 [ 586.373147][ T33] audit: type=1326 audit(1790207540.383:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.1.1923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbf5d19e159 code=0x7ffc0000 [ 586.373199][ T33] audit: type=1326 audit(1790207540.383:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.1.1923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5d19e159 code=0x7ffc0000 [ 586.373253][ T33] audit: type=1326 audit(1790207540.383:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.1.1923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbf5d19e159 code=0x7ffc0000 [ 586.373293][ T33] audit: type=1326 audit(1790207540.383:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.1.1923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5d19e159 code=0x7ffc0000 [ 586.374863][ T33] audit: type=1326 audit(1790207540.383:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.1.1923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5d19e159 code=0x7ffc0000 [ 586.374909][ T33] audit: type=1326 audit(1790207540.383:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.1.1923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbf5d19e159 code=0x7ffc0000 [ 586.374946][ T33] audit: type=1326 audit(1790207540.383:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.1.1923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf5d197ed7 code=0x7ffc0000 [ 586.374985][ T33] audit: type=1326 audit(1790207540.383:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.1.1923" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf5d13f4d9 code=0x7ffc0000 [ 586.393255][T12170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1924'. [ 586.464724][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 586.464863][T12173] xt_cgroup: path and classid specified [ 586.468600][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 586.692238][T12175] overlayfs: failed to resolve './file0/file1': -2 [ 589.046895][T12212] overlay: Unknown parameter 'audit' [ 590.006469][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'. [ 590.006612][T12230] xt_cgroup: path and classid specified [ 603.248708][T12249] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1946'. [ 604.404199][T12260] overlay: Unknown parameter 'audit' [ 605.487376][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 605.519449][T12271] xt_cgroup: path and classid specified [ 605.568577][T12271] FAULT_INJECTION: forcing a failure. [ 605.568577][T12271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.568614][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.0.1954 Tainted: G Y syzkaller #0 PREEMPT(full) [ 605.568641][T12271] Tainted: [Y]=FORCED_BIND [ 605.568649][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 605.568661][T12271] Call Trace: [ 605.568670][T12271] [ 605.568679][T12271] dump_stack_lvl+0xe8/0x150 [ 605.568717][T12271] should_fail_ex+0x3eb/0x540 [ 605.568750][T12271] _copy_from_iter+0x1d3/0x1660 [ 605.568882][T12271] ? policy_nodemask+0x2cc/0x8e0 [ 605.568918][T12271] ? tcp_leave_memory_pressure+0xe8/0x100 [ 605.568944][T12271] ? __pfx__copy_from_iter+0x10/0x10 [ 605.568968][T12271] ? __sk_mem_raise_allocated+0x2e5/0x1250 [ 605.568999][T12271] ? alloc_pages_noprof+0x140/0x2b0 [ 605.569030][T12271] ? __sk_mem_schedule+0x7b/0xf0 [ 605.569054][T12271] tcp_sendmsg_locked+0x20cf/0x5400 [ 605.569129][T12271] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 605.569163][T12271] ? tcp_sendmsg+0x21/0x50 [ 605.569189][T12271] ? __local_bh_enable_ip+0xd6/0x140 [ 605.569221][T12271] tcp_sendmsg+0x2f/0x50 [ 605.569245][T12271] ? __pfx_inet_sendmsg+0x10/0x10 [ 605.569265][T12271] sock_sendmsg_nosec+0x10e/0x180 [ 605.569290][T12271] __sys_sendto+0x408/0x5a0 [ 605.569322][T12271] ? __pfx___sys_sendto+0x10/0x10 [ 605.569374][T12271] ? rcu_is_watching+0x16/0xb0 [ 605.569410][T12271] __x64_sys_sendto+0xde/0x100 [ 605.569440][T12271] do_syscall_64+0x166/0x520 [ 605.569470][T12271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.569490][T12271] ? clear_bhb_loop+0x70/0xc0 [ 605.569514][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.569534][T12271] RIP: 0033:0x7f338c59e159 [ 605.569553][T12271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.569569][T12271] RSP: 002b:00007f338a7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 605.569591][T12271] RAX: ffffffffffffffda RBX: 00007f338c826090 RCX: 00007f338c59e159 [ 605.569607][T12271] RDX: fffffffffffffe88 RSI: 00002000000002c0 RDI: 0000000000000003 [ 605.569621][T12271] RBP: 00007f338c63506b R08: 0000000000000000 R09: 0000000000000000 [ 605.569633][T12271] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000000 [ 605.569645][T12271] R13: 00007f338c826128 R14: 00007f338c826090 R15: 00007ffeebdbc8c8 [ 605.569677][T12271] [ 607.832200][T12220] tipc: Resetting bearer [ 607.997923][T12220] tipc: Disabling bearer [ 616.298457][ T6223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.298495][ T6223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.424606][ T6223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.424630][ T6223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.496289][ T6223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.496312][ T6223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.628121][ T6223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.628158][ T6223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.817194][ T6223] bridge_slave_1: left allmulticast mode [ 617.817850][ T6223] bridge_slave_1: left promiscuous mode [ 617.821540][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.845268][ T6223] bridge_slave_0: left allmulticast mode [ 617.845295][ T6223] bridge_slave_0: left promiscuous mode [ 617.845559][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.120043][ T6223] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 618.152691][ T6223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.156879][ T6223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.158697][ T6223] bond0 (unregistering): Released all slaves [ 618.199538][ T6223] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 618.199568][ T6223] wireguard0: left promiscuous mode [ 618.217879][ T6223] bond1 (unregistering): Released all slaves [ 618.249651][ T6223] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 618.249681][ T6223] wireguard1: left promiscuous mode [ 618.268908][ T6223] bond2 (unregistering): Released all slaves [ 618.292288][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 618.458131][ T6223] tipc: Left network mode [ 618.541912][T12391] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 618.573452][ T5799] wg1 speed is unknown, defaulting to 1000 [ 618.573493][ T5799] syz2: Port: 1 Link DOWN [ 618.573994][ T5799] wg1 speed is unknown, defaulting to 1000 [ 618.685232][ T6223] IPVS: stopping master sync thread 8413 ... [ 618.804602][T12400] syzkaller1: entered promiscuous mode [ 618.804626][T12400] syzkaller1: entered allmulticast mode [ 619.740939][T12418] syzkaller0: entered promiscuous mode [ 619.740964][T12418] syzkaller0: entered allmulticast mode [ 619.989720][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 620.246238][ T6223] hsr_slave_0: left promiscuous mode [ 620.247009][ T6223] hsr_slave_1: left promiscuous mode [ 620.247894][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.247933][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.248878][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.248896][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.277759][ T6223] veth1_macvtap: left promiscuous mode [ 620.277834][ T6223] veth0_macvtap: left promiscuous mode [ 620.278028][ T6223] veth1_vlan: left promiscuous mode [ 620.428692][ T6223] ------------[ cut here ]------------ [ 620.428708][ T6223] debug_locks && !(lock_is_held(&(&n->tbl->lock)->dep_map) != 0) [ 620.428731][ T6223] WARNING: net/core/neighbour.c:154 at neigh_mark_dead+0x2fb/0x340, CPU#1: kworker/u8:13/6223 [ 620.453625][ T6223] Modules linked in: [ 620.457539][ T6223] CPU: 1 UID: 0 PID: 6223 Comm: kworker/u8:13 Tainted: G Y syzkaller #0 PREEMPT(full) [ 620.468791][ T6223] Tainted: [Y]=FORCED_BIND [ 620.473243][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 620.483369][ T6223] Workqueue: netns cleanup_net [ 620.488218][ T6223] RIP: 0010:neigh_mark_dead+0x2fb/0x340 [ 620.493791][ T6223] Code: e8 03 42 80 3c 28 00 74 08 48 89 df e8 3e 6f 7f f8 4c 89 33 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c 37 33 02 cc e8 d6 20 0e f8 90 <0f> 0b 90 e9 8f fd ff ff 48 c7 c1 d0 4e 7a 90 80 e1 07 80 c1 03 38 [ 620.513438][ T6223] RSP: 0000:ffffc90006b770a0 EFLAGS: 00010293 [ 620.519499][ T6223] RAX: ffffffff89bac1da RBX: ffff8880690f6800 RCX: ffff88802ab98000 [ 620.527506][ T6223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.535509][ T6223] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 620.543506][ T6223] R10: dffffc0000000000 R11: fffff52000d6ee0c R12: ffff8880690f693c [ 620.551509][ T6223] R13: dffffc0000000000 R14: ffff8880690f6820 R15: ffff8880690f6800 [ 620.559481][ T6223] FS: 0000000000000000(0000) GS:ffff888124daf000(0000) knlGS:0000000000000000 [ 620.568699][ T6223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.575313][ T6223] CR2: 00007f32f9776e9c CR3: 000000000eb48000 CR4: 00000000003526f0 [ 620.583315][ T6223] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 620.591330][ T6223] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 620.599292][ T6223] Call Trace: [ 620.602596][ T6223] [ 620.605538][ T6223] neigh_flush_one+0x27c/0x5a0 [ 620.610326][ T6223] ? __neigh_ifdown+0xa9/0xc70 [ 620.615128][ T6223] __neigh_ifdown+0x1fb/0xc70 [ 620.619812][ T6223] ? __fib6_clean_all+0xb8/0x5d0 [ 620.624878][ T6223] ? __pfx___neigh_ifdown+0x10/0x10 [ 620.630087][ T6223] ? __pfx___fib6_clean_all+0x10/0x10 [ 620.635505][ T6223] ? __pfx_fib6_clean_node+0x10/0x10 [ 620.640898][ T6223] ? __pfx_fib6_ifdown+0x10/0x10 [ 620.645913][ T6223] neigh_ifdown+0x1f/0x30 [ 620.650227][ T6223] rt6_disable_ip+0x751/0x7e0 [ 620.654932][ T6223] ? trace_contention_end+0x3d/0x140 [ 620.660254][ T6223] ? __pfx_rt6_disable_ip+0x10/0x10 [ 620.665505][ T6223] addrconf_ifdown+0x155/0x1ad0 [ 620.670469][ T6223] ? __mutex_unlock_slowpath+0x731/0x900 [ 620.676115][ T6223] ? net_generic+0x1e/0x240 [ 620.680731][ T6223] ? __pfx_addrconf_ifdown+0x10/0x10 [ 620.686031][ T6223] ? net_generic+0x1e/0x240 [ 620.690594][ T6223] addrconf_notify+0x1bc/0x1050 [ 620.695473][ T6223] notifier_call_chain+0x1a5/0x3d0 [ 620.700663][ T6223] netif_close_many+0x463/0x660 [ 620.705597][ T6223] ? __pfx_netif_close_many+0x10/0x10 [ 620.711122][ T6223] unregister_netdevice_many_notify+0xb76/0x2140 [ 620.717577][ T6223] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 620.724403][ T6223] ? unregister_netdevice_queue+0x17d/0x340 [ 620.730310][ T6223] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 620.736607][ T6223] default_device_exit_batch+0x6cf/0x760 [ 620.742282][ T6223] ? __pfx_default_device_exit_batch+0x10/0x10 [ 620.748439][ T6223] ? __pfx_default_device_exit_batch+0x10/0x10 [ 620.754656][ T6223] ops_undo_list+0x4d7/0x8f0 [ 620.759315][ T6223] ? __pfx_ops_undo_list+0x10/0x10 [ 620.764489][ T6223] ? idr_destroy+0x218/0x290 [ 620.769190][ T6223] ? do_raw_spin_unlock+0xf5/0x200 [ 620.774352][ T6223] cleanup_net+0x572/0x810 [ 620.778789][ T6223] ? __pfx_cleanup_net+0x10/0x10 [ 620.783795][ T6223] ? rcu_is_watching+0x16/0xb0 [ 620.788589][ T6223] ? process_scheduled_works+0x97a/0x1630 [ 620.794377][ T6223] process_scheduled_works+0xc3d/0x1630 [ 620.799995][ T6223] ? __pfx_process_scheduled_works+0x10/0x10 [ 620.806060][ T6223] ? assign_work+0x3cf/0x5d0 [ 620.810739][ T6223] worker_thread+0xa47/0xfb0 [ 620.815389][ T6223] kthread+0x38b/0x480 [ 620.819474][ T6223] ? __pfx_worker_thread+0x10/0x10 [ 620.824643][ T6223] ? __pfx_kthread+0x10/0x10 [ 620.829253][ T6223] ret_from_fork+0x514/0xb70 [ 620.833942][ T6223] ? __pfx_ret_from_fork+0x10/0x10 [ 620.839078][ T6223] ? __switch_to+0xc78/0x1410 [ 620.843869][ T6223] ? __pfx_kthread+0x10/0x10 [ 620.848501][ T6223] ret_from_fork_asm+0x1a/0x30 [ 620.853355][ T6223] [ 620.856431][ T6223] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 620.863744][ T6223] CPU: 1 UID: 0 PID: 6223 Comm: kworker/u8:13 Tainted: G Y syzkaller #0 PREEMPT(full) [ 620.874953][ T6223] Tainted: [Y]=FORCED_BIND [ 620.879358][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 620.889398][ T6223] Workqueue: netns cleanup_net [ 620.894164][ T6223] Call Trace: [ 620.897431][ T6223] [ 620.900386][ T6223] vpanic+0x26f/0x710 [ 620.904373][ T6223] panic+0xc5/0xd0 [ 620.908087][ T6223] ? __pfx_panic+0x10/0x10 [ 620.912505][ T6223] ? ret_from_fork_asm+0x1a/0x30 [ 620.917446][ T6223] __warn+0x315/0x4c0 [ 620.921418][ T6223] ? neigh_mark_dead+0x2fb/0x340 [ 620.926349][ T6223] ? neigh_mark_dead+0x2fb/0x340 [ 620.931276][ T6223] __report_bug+0x276/0x570 [ 620.935894][ T6223] ? neigh_mark_dead+0x2fb/0x340 [ 620.940843][ T6223] ? __pfx___report_bug+0x10/0x10 [ 620.945864][ T6223] ? __lock_acquire+0x747/0x2de0 [ 620.950799][ T6223] ? __lock_acquire+0x747/0x2de0 [ 620.955742][ T6223] ? neigh_mark_dead+0x2fb/0x340 [ 620.960676][ T6223] report_bug+0x16b/0x220 [ 620.965006][ T6223] ? neigh_mark_dead+0x2fb/0x340 [ 620.969933][ T6223] ? neigh_mark_dead+0x2fd/0x340 [ 620.974864][ T6223] handle_bug+0x9c/0x200 [ 620.979101][ T6223] exc_invalid_op+0x1a/0x50 [ 620.983593][ T6223] asm_exc_invalid_op+0x1a/0x20 [ 620.988438][ T6223] RIP: 0010:neigh_mark_dead+0x2fb/0x340 [ 620.993971][ T6223] Code: e8 03 42 80 3c 28 00 74 08 48 89 df e8 3e 6f 7f f8 4c 89 33 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c 37 33 02 cc e8 d6 20 0e f8 90 <0f> 0b 90 e9 8f fd ff ff 48 c7 c1 d0 4e 7a 90 80 e1 07 80 c1 03 38 [ 621.013595][ T6223] RSP: 0000:ffffc90006b770a0 EFLAGS: 00010293 [ 621.019659][ T6223] RAX: ffffffff89bac1da RBX: ffff8880690f6800 RCX: ffff88802ab98000 [ 621.027639][ T6223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.035599][ T6223] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 621.043562][ T6223] R10: dffffc0000000000 R11: fffff52000d6ee0c R12: ffff8880690f693c [ 621.051526][ T6223] R13: dffffc0000000000 R14: ffff8880690f6820 R15: ffff8880690f6800 [ 621.059521][ T6223] ? neigh_mark_dead+0x2fa/0x340 [ 621.064472][ T6223] neigh_flush_one+0x27c/0x5a0 [ 621.069235][ T6223] ? __neigh_ifdown+0xa9/0xc70 [ 621.073993][ T6223] __neigh_ifdown+0x1fb/0xc70 [ 621.078664][ T6223] ? __fib6_clean_all+0xb8/0x5d0 [ 621.083595][ T6223] ? __pfx___neigh_ifdown+0x10/0x10 [ 621.088788][ T6223] ? __pfx___fib6_clean_all+0x10/0x10 [ 621.094155][ T6223] ? __pfx_fib6_clean_node+0x10/0x10 [ 621.099434][ T6223] ? __pfx_fib6_ifdown+0x10/0x10 [ 621.104375][ T6223] neigh_ifdown+0x1f/0x30 [ 621.108696][ T6223] rt6_disable_ip+0x751/0x7e0 [ 621.113369][ T6223] ? trace_contention_end+0x3d/0x140 [ 621.118652][ T6223] ? __pfx_rt6_disable_ip+0x10/0x10 [ 621.123852][ T6223] addrconf_ifdown+0x155/0x1ad0 [ 621.128695][ T6223] ? __mutex_unlock_slowpath+0x731/0x900 [ 621.134324][ T6223] ? net_generic+0x1e/0x240 [ 621.138818][ T6223] ? __pfx_addrconf_ifdown+0x10/0x10 [ 621.144096][ T6223] ? net_generic+0x1e/0x240 [ 621.148602][ T6223] addrconf_notify+0x1bc/0x1050 [ 621.153452][ T6223] notifier_call_chain+0x1a5/0x3d0 [ 621.158670][ T6223] netif_close_many+0x463/0x660 [ 621.163517][ T6223] ? __pfx_netif_close_many+0x10/0x10 [ 621.168891][ T6223] unregister_netdevice_many_notify+0xb76/0x2140 [ 621.175218][ T6223] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 621.181995][ T6223] ? unregister_netdevice_queue+0x17d/0x340 [ 621.187881][ T6223] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 621.194122][ T6223] default_device_exit_batch+0x6cf/0x760 [ 621.199751][ T6223] ? __pfx_default_device_exit_batch+0x10/0x10 [ 621.205910][ T6223] ? __pfx_default_device_exit_batch+0x10/0x10 [ 621.212055][ T6223] ops_undo_list+0x4d7/0x8f0 [ 621.216647][ T6223] ? __pfx_ops_undo_list+0x10/0x10 [ 621.221757][ T6223] ? idr_destroy+0x218/0x290 [ 621.226338][ T6223] ? do_raw_spin_unlock+0xf5/0x200 [ 621.231440][ T6223] cleanup_net+0x572/0x810 [ 621.235855][ T6223] ? __pfx_cleanup_net+0x10/0x10 [ 621.240878][ T6223] ? rcu_is_watching+0x16/0xb0 [ 621.245663][ T6223] ? process_scheduled_works+0x97a/0x1630 [ 621.251387][ T6223] process_scheduled_works+0xc3d/0x1630 [ 621.256983][ T6223] ? __pfx_process_scheduled_works+0x10/0x10 [ 621.262984][ T6223] ? assign_work+0x3cf/0x5d0 [ 621.267577][ T6223] worker_thread+0xa47/0xfb0 [ 621.272185][ T6223] kthread+0x38b/0x480 [ 621.276246][ T6223] ? __pfx_worker_thread+0x10/0x10 [ 621.281354][ T6223] ? __pfx_kthread+0x10/0x10 [ 621.285942][ T6223] ret_from_fork+0x514/0xb70 [ 621.290527][ T6223] ? __pfx_ret_from_fork+0x10/0x10 [ 621.295628][ T6223] ? __switch_to+0xc78/0x1410 [ 621.300301][ T6223] ? __pfx_kthread+0x10/0x10 [ 621.304882][ T6223] ret_from_fork_asm+0x1a/0x30 [ 621.309668][ T6223] [ 621.312972][ T6223] Kernel Offset: disabled [ 621.317293][ T6223] Rebooting in 86400 seconds..