last executing test programs: 20.853306006s ago: executing program 0 (id=1328): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x142, 0x193) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x5, 0x401}, {0x8, 0x4, 0x6, 0xfffffff8}, {0x800, 0x5}}) 19.529697112s ago: executing program 0 (id=1331): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)="f2c733db0262059d65a5a425918b604aba593eac58ede5a7154d7b0f8ec35d1c75e36be6753588d510521be61032b3c2e9df5d53d86f38fa346aed7ae719b2a2728653e437f72f45e1d69ecc6c4d72c4f0d5cbf0f21cb243589198c16aa6e58920b4d4bfb44fbb94d96c3692bb658c94e6e5518fa807eee5d531ca5f119c3785426619285bc888c8510ec42f9b0b7b6141ceea0cb1ee8f5c455dc0e19004ba718e3dac0baa0da99715ca2314fa86669a7b1b59acfb0562093e5c2e7a93d3c74a2e56137dab220b70a836f03e24f0f81bff1ba234e25992c9ef87e72cacdaca989ff9e58d966ffabfce539eb4", &(0x7f0000000240), 0xfff, r0, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r1 = socket$kcm(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x2e, @rand_addr=0x64010102, 0x4e21, 0x2, 'wlc\x00', 0x0, 0x8, 0x55}, {@remote, 0x4e20, 0x0, 0x7, 0x1, 0x26}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000001c0)='f\x04', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) 15.175727823s ago: executing program 4 (id=1337): syz_open_dev$sndpcmp(&(0x7f0000000300), 0x4fd, 0x203) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x82, &(0x7f0000019380)=ANY=[], 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e200001060004404e2100000500010007000000050004"], 0x5c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 12.71285367s ago: executing program 4 (id=1340): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0x1, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x80000000, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) 12.657628652s ago: executing program 1 (id=1341): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x142, 0x193) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x5, 0x401}, {0x8, 0x4, 0x6, 0xfffffff8}, {0x800, 0x5}}) 11.542706412s ago: executing program 1 (id=1343): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 11.448455985s ago: executing program 4 (id=1344): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000340), 0x4) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) 10.574612039s ago: executing program 2 (id=1345): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x541b, 0x0) 10.330905376s ago: executing program 4 (id=1346): r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000840)=ANY=[@ANYRES16=0x0, @ANYBLOB="00012dbd70", @ANYRES32, @ANYBLOB="9400028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="40000100240001006c625f68617368", @ANYRES32, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f0000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400010080090600000001804804040a000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000", @ANYRES32, @ANYBLOB="ec00028038000100240001"], 0x714}, 0x1, 0x0, 0x0, 0xe06fe0bcf66fd50e}, 0x8081) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) 10.241013698s ago: executing program 0 (id=1347): socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000580)='measure', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xbe84380, 0x0, 0xffffffffffffffb5, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c", @ANYRESOCT=r5, @ANYRESDEC=r0, @ANYBLOB="6337ee20fbf9edc7fe700b178336d727a7bf7d4bd6f5547532ae8a5969a7765b401955d69cf3864e1b5632c3fdbd2e0bf169eb97c65fffb4c4dd23", @ANYRES64=r6, @ANYRESDEC], 0x50}}, 0x24000000) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400"], 0x2c}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) 9.195777527s ago: executing program 0 (id=1348): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, 0x0, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000000000001d01", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) open(0x0, 0x0, 0x244) setpgid(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20000, 0x10c) 7.758708127s ago: executing program 0 (id=1349): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x90) 7.346821018s ago: executing program 3 (id=1350): syz_open_dev$sndpcmp(&(0x7f0000000300), 0x4fd, 0x203) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x82, &(0x7f0000019380)=ANY=[], 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e200001060004404e2100000500010007000000050004"], 0x5c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 7.317926789s ago: executing program 2 (id=1351): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ee6b5fd600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x8, 0x4}, 0x28) ioctl(r2, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101202) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) syz_emit_ethernet(0x17c, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x146, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x3, "0000000566994ff111397b4a8840491bae50dd6fc1f9dd74"}, {}, {0x21}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213"}, {0x0, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bc"}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) socket$l2tp(0x2, 0x2, 0x73) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6000, 0x0, &(0x7f0000ffa000/0x6000)=nil) 6.061894614s ago: executing program 1 (id=1352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r0], 0xfdef) 5.994502125s ago: executing program 4 (id=1353): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x142, 0x193) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x5, 0x401}, {0x8, 0x4, 0x6, 0xfffffff8}, {0x800, 0x5}}) 4.883633206s ago: executing program 2 (id=1354): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 4.776233349s ago: executing program 3 (id=1355): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0x1, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x80000000, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) 4.594014194s ago: executing program 2 (id=1356): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x200000, 0xb418842, 0x6, 0x0, 0xffffffff, 0x2}}, 0x50) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r2}, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xff) sched_getscheduler(0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_open_pts(r5, 0x80) r6 = dup3(r0, r5, 0x80000) read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x48854}, 0x24000080) 4.593250003s ago: executing program 4 (id=1357): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)="f2c733db0262059d65a5a425918b604aba593eac58ede5a7154d7b0f8ec35d1c75e36be6753588d510521be61032b3c2e9df5d53d86f38fa346aed7ae719b2a2728653e437f72f45e1d69ecc6c4d72c4f0d5cbf0f21cb243589198c16aa6e58920b4d4bfb44fbb94d96c3692bb658c94e6e5518fa807eee5d531ca5f119c3785426619285bc888c8510ec42f9b0b7b6141ceea0cb1ee8f5c455dc0e19004ba718e3dac0baa0da99715ca2314fa86669a7b1b59acfb0562093e5c2e7a93d3c74a2e56137dab220b70a836f03e24f0f81bff1ba234e25992c9ef87e72cacdaca989ff9e58d966ffabfce539eb4", &(0x7f0000000240), 0xfff, r0, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r1 = socket$kcm(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x2e, @rand_addr=0x64010102, 0x4e21, 0x2, 'wlc\x00', 0x0, 0x8, 0x55}, {@remote, 0x4e20, 0x0, 0x7, 0x1, 0x26}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000001c0)='f\x04', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) 3.823148835s ago: executing program 3 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x88102, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) getpid() sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) 3.617835811s ago: executing program 2 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, 0x0, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000000000001d01", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) open(0x0, 0x0, 0x244) setpgid(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20000, 0x10c) 2.200777819s ago: executing program 3 (id=1360): r0 = socket$inet(0x2, 0x2, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x8000, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syz_tun\x00', 0x800}) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000000240)='none\x00') close_range(r2, 0xffffffffffffffff, 0x0) 2.142481931s ago: executing program 2 (id=1361): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002300)='oom_score_adj\x00') read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_io_uring_setup(0x53ef, &(0x7f0000000100)={0x0, 0x2565, 0x8, 0x3, 0x26e}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) read$FUSE(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x4, 'lblcr\x00', 0x32, 0x0, 0xf}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES64=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a010100000000000000000000000920000000080a010100000000000000000a0000020900010073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000014) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) r9 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x1000, 0x1, 0x2d0, 0x0, r2}, &(0x7f0000000440), &(0x7f0000000040), &(0x7f0000000080)) gettimeofday(0xfffffffffffffffe, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000022c0)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) 1.973427906s ago: executing program 1 (id=1362): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0x2, &(0x7f0000000000)=0x80000000000003) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1.933072367s ago: executing program 0 (id=1363): r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000840)=ANY=[@ANYRES16=0x0, @ANYBLOB="00012dbd70", @ANYRES32, @ANYBLOB="9400028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="40000100240001006c625f68617368", @ANYRES32, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f0000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400010080090600000001804804040a000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000", @ANYRES32, @ANYBLOB="ec00028038000100240001"], 0x714}, 0x1, 0x0, 0x0, 0xe06fe0bcf66fd50e}, 0x8081) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) 1.238391896s ago: executing program 1 (id=1364): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ee6b5fd600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x8, 0x4}, 0x28) ioctl(r2, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101202) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) syz_emit_ethernet(0x188, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x152, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x4, "0000000566994ff111397b4a8840491bae50dd6fc1f9dd74244c6faa519bda83168fc518"}, {}, {0x21}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213"}, {0x0, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bc"}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) socket$l2tp(0x2, 0x2, 0x73) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6000, 0x0, &(0x7f0000ffa000/0x6000)=nil) 252.483283ms ago: executing program 1 (id=1365): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) 205.977904ms ago: executing program 3 (id=1366): syz_open_dev$sndpcmp(&(0x7f0000000300), 0x4fd, 0x203) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x82, &(0x7f0000019380)=ANY=[], 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e200001060004404e2100000500010007000000050004"], 0x5c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 0s ago: executing program 3 (id=1367): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44842, 0x1ef) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x144}}, 0x4050) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000b80)=ANY=[@ANYRES16, @ANYRESDEC, @ANYBLOB="e08060fec96c06ba963f6ccd619b02337aba1e5eaa4be25709d7"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r4, r2, 0x0, 0x8) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x3, 0xda000000, {{0x5, 0x4, 0x1, 0x10, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1}}}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r5, &(0x7f00000091c0)=""/16384, 0x4000) kernel console output (not intermixed with test programs): g attributes in process `syz.1.285'. [ 186.033847][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 186.040267][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 186.046299][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 186.052321][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 186.714957][ T46] wlan1: Trigger new scan to find an IBSS to join [ 187.746102][ T5387] autofs4:pid:5387:autofs_fill_super: called with bogus options [ 188.948070][ T4370] wlan1: Creating new IBSS network, BSSID 42:d5:0a:e5:58:44 [ 191.912267][ T5424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 191.924222][ T5424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.296'. [ 195.069520][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.075930][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.224664][ T5458] syz.2.292: attempt to access beyond end of device [ 195.224664][ T5458] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 196.193978][ T5464] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.206753][ T5464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.215530][ T5464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.597514][ T5472] autofs4:pid:5472:autofs_fill_super: called with bogus options [ 199.342284][ T5492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 199.354420][ T5492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.309'. [ 201.211141][ T5510] syz.3.316: attempt to access beyond end of device [ 201.211141][ T5510] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 202.802668][ T5518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.318'. [ 205.549842][ T5537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 205.560847][ T5537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.324'. [ 209.700294][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.712687][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.720687][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.357434][ T5572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'. [ 214.263095][ T5591] syz.1.327: attempt to access beyond end of device [ 214.263095][ T5591] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 215.872769][ T5606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 215.884835][ T5606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.336'. [ 217.806072][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.820189][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.828669][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.424374][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.438848][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.446940][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.289160][ T5641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.342'. [ 222.474461][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 223.186657][ T5656] syz.2.348: attempt to access beyond end of device [ 223.186657][ T5656] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 224.041458][ T5667] syz.3.349: attempt to access beyond end of device [ 224.041458][ T5667] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 226.258580][ T5673] using random self ethernet address [ 226.285521][ T5673] using random host ethernet address [ 226.393678][ T5682] jffs2: notice: (5682) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 226.430456][ T5685] using random self ethernet address [ 226.453985][ T5685] using random host ethernet address [ 227.657814][ T5700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.356'. [ 227.813132][ T5711] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 227.813132][ T5711] [ 227.827233][ T5711] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 227.840140][ T5711] CIFS mount error: No usable UNC path provided in device string! [ 227.840140][ T5711] [ 227.850528][ T5711] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 230.003960][ T5725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.016281][ T5725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.024488][ T5725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.085328][ T5735] jffs2: notice: (5735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 234.121653][ T5747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.369'. [ 239.458685][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.733089][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.801262][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.887305][ T5794] jffs2: notice: (5794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.342726][ T5813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.357341][ T5813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.365896][ T5813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.004395][ T5826] FAULT_INJECTION: forcing a failure. [ 243.004395][ T5826] name failslab, interval 1, probability 0, space 0, times 1 [ 243.058623][ T5826] CPU: 0 PID: 5826 Comm: syz.2.385 Not tainted syzkaller #0 [ 243.065971][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.076067][ T5826] Call Trace: [ 243.079372][ T5826] [ 243.082313][ T5826] dump_stack_lvl+0x188/0x24e [ 243.087020][ T5826] ? show_regs_print_info+0x12/0x12 [ 243.092267][ T5826] ? load_image+0x410/0x410 [ 243.096769][ T5826] ? __might_sleep+0xd0/0xd0 [ 243.101360][ T5826] ? __lock_acquire+0x7ea0/0x7ea0 [ 243.106382][ T5826] should_fail_ex+0x390/0x4c0 [ 243.111053][ T5826] should_failslab+0x5/0x20 [ 243.115539][ T5826] slab_pre_alloc_hook+0x59/0x300 [ 243.120549][ T5826] ? sctp_endpoint_new+0x11a/0xa00 [ 243.125647][ T5826] __kmem_cache_alloc_node+0x4f/0x270 [ 243.131006][ T5826] ? sctp_endpoint_new+0x11a/0xa00 [ 243.136107][ T5826] kmalloc_trace+0x26/0xe0 [ 243.140510][ T5826] sctp_endpoint_new+0x11a/0xa00 [ 243.145440][ T5826] sctp_init_sock+0x95b/0x11c0 [ 243.150189][ T5826] sctp_v6_init_sock+0x12/0x60 [ 243.154941][ T5826] inet6_create+0xdb3/0x11b0 [ 243.159572][ T5826] __sock_create+0x49a/0x940 [ 243.164153][ T5826] __sys_socket+0xc4/0x190 [ 243.168555][ T5826] __x64_sys_socket+0x76/0x80 [ 243.173219][ T5826] do_syscall_64+0x4c/0xa0 [ 243.177624][ T5826] ? clear_bhb_loop+0x60/0xb0 [ 243.182289][ T5826] ? clear_bhb_loop+0x60/0xb0 [ 243.186970][ T5826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.192881][ T5826] RIP: 0033:0x7f4f80d9e159 [ 243.197290][ T5826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.216897][ T5826] RSP: 002b:00007f4f81d5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 243.225326][ T5826] RAX: ffffffffffffffda RBX: 00007f4f81025fa0 RCX: 00007f4f80d9e159 [ 243.233297][ T5826] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 243.241264][ T5826] RBP: 00007f4f80e3506b R08: 0000000000000000 R09: 0000000000000000 [ 243.249226][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.257190][ T5826] R13: 00007f4f81026038 R14: 00007f4f81025fa0 R15: 00007fffad3c6248 [ 243.265179][ T5826] [ 246.944068][ T4318] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 247.021881][ T5847] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.061464][ T5847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.103386][ T5847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.139454][ T4318] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 247.151796][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.160078][ T4318] usb 4-1: Product: syz [ 247.164366][ T4318] usb 4-1: Manufacturer: syz [ 247.169044][ T4318] usb 4-1: SerialNumber: syz [ 247.176220][ T4318] usb 4-1: config 0 descriptor?? [ 247.188126][ T4318] hub 4-1:0.0: bad descriptor, ignoring hub [ 247.200517][ T4318] hub: probe of 4-1:0.0 failed with error -5 [ 247.438555][ T4318] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 247.466275][ T4318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.505880][ T4318] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 247.524125][ T4318] usb 4-1: media controller created [ 247.658870][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.231139][ T5851] dib0700: tx buffer length is larger than 4. Not supported. [ 248.269352][ T5873] ceph: separator ':' missing in source [ 249.933706][ T4318] DVB: Unable to find symbol dib7000p_attach() [ 249.942715][ T4318] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 252.044656][ T5903] jffs2: notice: (5903) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.424132][ T129] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 253.658996][ T4318] rc_core: IR keymap rc-dib0700-rc5 not found [ 253.695331][ T4318] Registered IR keymap rc-empty [ 253.728957][ T4318] dvb-usb: could not initialize remote control. [ 253.765678][ T4318] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 253.892365][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 253.970445][ T4318] usb 4-1: USB disconnect, device number 4 [ 254.498704][ T129] usb 1-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 254.544796][ T129] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 254.607682][ T4318] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 254.617581][ T129] usb 1-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 254.726581][ T129] usb 1-1: string descriptor 0 read error: -71 [ 254.732864][ T129] usb 1-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 254.780712][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.815271][ T129] usb 1-1: can't set config #4, error -71 [ 254.864106][ T129] usb 1-1: USB disconnect, device number 5 [ 255.018546][ T5920] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.031098][ T5920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.039219][ T5920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.596581][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.602995][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.448004][ T4358] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 256.655761][ T4358] usb 1-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 256.673981][ T4358] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 257.863773][ T5934] NILFS (nullb0): couldn't find nilfs on the device [ 257.863964][ T4358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.940460][ T5923] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 258.038949][ T4358] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 258.164326][ T7] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 258.355643][ T7] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 258.373913][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.413845][ T7] usb 3-1: selecting invalid altsetting 3 [ 258.433955][ T7] comedi comedi5: could not set alternate setting 3 in high speed [ 258.441863][ T7] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 258.473988][ T7] usbduxsigma: probe of 3-1:128.0 failed with error -22 [ 258.929647][ T4358] usb 3-1: USB disconnect, device number 6 [ 259.700828][ T4576] usb 1-1: USB disconnect, device number 6 [ 262.233911][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 262.243919][ T5958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'. [ 263.033746][ T5968] befs: (nbd1): No write support. Marking filesystem read-only [ 263.054419][ T5968] syz.1.425: attempt to access beyond end of device [ 263.054419][ T5968] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 263.203700][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.216687][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.225634][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.474165][ T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 263.653931][ T4576] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 265.068387][ T4576] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 265.083933][ T4576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.095931][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.102494][ T4576] usb 1-1: Product: syz [ 265.110301][ T4576] usb 1-1: Manufacturer: syz [ 265.131469][ T126] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 265.135273][ T4576] usb 1-1: SerialNumber: syz [ 265.159103][ T126] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.204170][ T126] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 265.210259][ T4357] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 265.213233][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 265.271117][ T126] usb 2-1: Product: syz [ 265.306775][ T126] usb 2-1: Manufacturer: syz [ 265.372932][ T5968] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 265.406762][ T126] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 265.440142][ T126] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 265.552747][ T5979] NILFS (nullb0): couldn't find nilfs on the device [ 265.641445][ T126] usb 2-1: USB disconnect, device number 2 [ 265.672163][ T126] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 265.682746][ T4576] usb 1-1: USB disconnect, device number 7 [ 265.751070][ T126] garmin_gps 2-1:1.0: device disconnected [ 266.464797][ T4357] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 267.098867][ T4357] ath9k_htc: Failed to initialize the device [ 267.106754][ T4576] usb 1-1: ath9k_htc: USB layer deinitialized [ 268.685193][ T6010] jffs2: notice: (6010) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 269.251204][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 269.264605][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.272682][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.107623][ T6029] befs: (nbd3): No write support. Marking filesystem read-only [ 270.162645][ T6033] syz.1.440: attempt to access beyond end of device [ 270.162645][ T6033] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 270.177458][ T6029] syz.3.441: attempt to access beyond end of device [ 270.177458][ T6029] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 270.504057][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 271.233199][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 271.242407][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.433'. [ 272.547974][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.559011][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 272.584554][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.608944][ T7] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 272.623957][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 272.642836][ T7] usb 4-1: Product: syz [ 272.647078][ T7] usb 4-1: Manufacturer: syz [ 272.658483][ T6034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.668462][ T7] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 272.689374][ T7] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 274.469731][ T4357] usb 4-1: USB disconnect, device number 5 [ 274.525233][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.533726][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.541352][ T4357] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 274.543063][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.583368][ T4357] garmin_gps 4-1:1.0: device disconnected [ 274.905578][ T6066] NILFS (nullb0): couldn't find nilfs on the device [ 274.939584][ T6067] jffs2: notice: (6067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 275.167658][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.188129][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.196661][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.274639][ T4318] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 276.502660][ T4318] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 276.547186][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.217817][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 277.229607][ T6087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.455'. [ 277.788771][ T4318] usb 3-1: selecting invalid altsetting 3 [ 277.874517][ T4318] comedi comedi5: could not set alternate setting 3 in high speed [ 277.882377][ T4318] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 277.913280][ T6093] befs: (nbd1): No write support. Marking filesystem read-only [ 277.945506][ T6093] syz.1.457: attempt to access beyond end of device [ 277.945506][ T6093] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 278.713196][ T6094] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.721088][ T4318] usbduxsigma: probe of 3-1:128.0 failed with error -22 [ 278.729838][ T4318] usb 3-1: USB disconnect, device number 7 [ 278.775198][ T6094] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.705669][ T6094] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.725668][ T6094] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 279.763081][ T6094] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.777856][ T6094] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 279.828485][ T6094] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.855346][ T6094] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 279.958074][ T6094] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 280.028824][ T6094] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 280.074232][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout [ 280.404337][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 281.064708][ T6112] jffs2: notice: (6112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 281.201358][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.216671][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.224784][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.627342][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.635450][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.685648][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 282.685695][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 282.691694][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 282.750221][ T6128] FAULT_INJECTION: forcing a failure. [ 282.750221][ T6128] name failslab, interval 1, probability 0, space 0, times 0 [ 282.862027][ T6128] CPU: 1 PID: 6128 Comm: syz.0.469 Not tainted syzkaller #0 [ 282.869380][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.879458][ T6128] Call Trace: [ 282.882747][ T6128] [ 282.885690][ T6128] dump_stack_lvl+0x188/0x24e [ 282.890392][ T6128] ? show_regs_print_info+0x12/0x12 [ 282.895615][ T6128] ? load_image+0x410/0x410 [ 282.900148][ T6128] ? __might_sleep+0xd0/0xd0 [ 282.904757][ T6128] ? __lock_acquire+0x7ea0/0x7ea0 [ 282.909807][ T6128] should_fail_ex+0x390/0x4c0 [ 282.914522][ T6128] should_failslab+0x5/0x20 [ 282.919041][ T6128] slab_pre_alloc_hook+0x59/0x300 [ 282.924082][ T6128] ? ida_alloc_range+0x7ca/0x860 [ 282.929049][ T6128] kmem_cache_alloc+0x56/0x2f0 [ 282.933836][ T6128] ? __proc_create+0x36f/0x8b0 [ 282.938630][ T6128] __proc_create+0x36f/0x8b0 [ 282.943248][ T6128] ? proc_symlink+0x210/0x210 [ 282.947954][ T6128] ? __lock_acquire+0x7ea0/0x7ea0 [ 282.953002][ T6128] ? do_raw_write_lock+0x11a/0x260 [ 282.958132][ T6128] ? do_raw_read_unlock+0x70/0x70 [ 282.963200][ T6128] proc_create_reg+0x87/0x100 [ 282.967911][ T6128] proc_create_net_data+0x95/0x1a0 [ 282.973026][ T6128] ? _raw_write_unlock+0x24/0x40 [ 282.977961][ T6128] ? bpf_iter_fini_seq_net+0xc0/0xc0 [ 282.983245][ T6128] if6_proc_net_init+0x55/0x70 [ 282.988034][ T6128] ops_init+0x360/0x5e0 [ 282.992208][ T6128] setup_net+0x4f2/0xbd0 [ 282.996483][ T6128] ? copy_net_ns+0x5b0/0x5b0 [ 283.001101][ T6128] ? copy_net_ns+0x324/0x5b0 [ 283.005720][ T6128] ? down_read_killable+0x1cc/0x340 [ 283.010963][ T6128] copy_net_ns+0x33e/0x5b0 [ 283.015403][ T6128] create_new_namespaces+0x3ce/0x700 [ 283.020702][ T6128] unshare_nsproxy_namespaces+0x116/0x160 [ 283.026432][ T6128] ksys_unshare+0x4f6/0x8e0 [ 283.030941][ T6128] ? sighand_ctor+0x40/0x40 [ 283.035446][ T6128] ? lock_chain_count+0x20/0x20 [ 283.040322][ T6128] ? syscall_enter_from_user_mode+0x21/0x80 [ 283.046243][ T6128] __x64_sys_unshare+0x34/0x40 [ 283.051015][ T6128] do_syscall_64+0x4c/0xa0 [ 283.055427][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 283.060112][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 283.065288][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.071194][ T6128] RIP: 0033:0x7f29d319e159 [ 283.075606][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.095229][ T6128] RSP: 002b:00007f29d40d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 283.103663][ T6128] RAX: ffffffffffffffda RBX: 00007f29d3426090 RCX: 00007f29d319e159 [ 283.111675][ T6128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 283.119661][ T6128] RBP: 00007f29d323506b R08: 0000000000000000 R09: 0000000000000000 [ 283.127637][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.135606][ T6128] R13: 00007f29d3426128 R14: 00007f29d3426090 R15: 00007ffd13f843f8 [ 283.143597][ T6128] [ 283.659083][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 283.668534][ T6135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.468'. [ 285.324118][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 285.324316][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 285.330192][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 285.336259][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 285.517210][ T6143] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 285.531420][ T6143] autofs4:pid:6143:autofs_fill_super: called with bogus options [ 287.601534][ T6161] syz.0.478: attempt to access beyond end of device [ 287.601534][ T6161] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 288.486557][ T6164] befs: (nbd2): No write support. Marking filesystem read-only [ 288.494551][ T6164] syz.2.479: attempt to access beyond end of device [ 288.494551][ T6164] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 289.630253][ T4277] Bluetooth: hci4: command 0x0405 tx timeout [ 290.534156][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 290.833945][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 291.043183][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.126883][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 291.137039][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.204187][ T7] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 291.273676][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 291.325694][ T7] usb 3-1: Product: syz [ 291.333034][ T7] usb 3-1: Manufacturer: syz [ 291.347152][ T6183] NILFS (nullb0): couldn't find nilfs on the device [ 291.349666][ T6164] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.362856][ T7] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 291.440727][ T7] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 291.588715][ T7] usb 3-1: USB disconnect, device number 8 [ 291.624425][ T7] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 291.692334][ T7] garmin_gps 3-1:1.0: device disconnected [ 291.777733][ T6193] ceph: separator ':' missing in source [ 295.275351][ T4322] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 295.470841][ T4322] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 295.488898][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.522747][ T4322] usb 1-1: config 0 descriptor?? [ 296.044197][ T4318] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 296.274154][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 296.296297][ T4318] usb 4-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 296.510285][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.522393][ T4318] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 296.688438][ T4318] usb 4-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 296.880457][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.963388][ T4318] usb 4-1: string descriptor 0 read error: -22 [ 297.077402][ T4318] usb 4-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 297.256028][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.756814][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.766258][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.828761][ T26] usb 4-1: USB disconnect, device number 6 [ 298.969305][ T6221] syz.1.491: attempt to access beyond end of device [ 298.969305][ T6221] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 299.028385][ T4322] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 299.152709][ T4322] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 299.257314][ T4322] [drm:udl_init] *ERROR* Selecting channel failed [ 300.003801][ T4322] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 300.011420][ T4322] [drm] Initialized udl on minor 2 [ 300.051511][ T4322] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 300.060964][ T4322] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 300.097839][ T4322] usb 1-1: USB disconnect, device number 8 [ 300.180073][ T4358] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 300.211612][ T4358] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 300.236330][ T4358] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 300.392186][ T6234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'. [ 303.405148][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.418888][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.427053][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.584091][ T129] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 305.931927][ T6261] syz.0.510: attempt to access beyond end of device [ 305.931927][ T6261] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 306.034040][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 306.214373][ T129] usb 4-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 306.294252][ T129] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 306.385869][ T129] usb 4-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 306.404012][ T4317] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 306.547748][ T129] usb 4-1: string descriptor 0 read error: -22 [ 306.596180][ T129] usb 4-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 306.658776][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.875664][ T4358] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 306.999531][ T4317] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.706654][ T4317] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 307.715817][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.717131][ T4358] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.725540][ T4317] usb 5-1: config 0 descriptor?? [ 307.749240][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.757826][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.766658][ T4317] pwc: Askey VC010 type 2 USB webcam detected. [ 307.811600][ T4358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.833203][ T4358] usb 2-1: Product: syz [ 307.846476][ T4358] usb 2-1: Manufacturer: syz [ 307.851148][ T4358] usb 2-1: SerialNumber: syz [ 307.877942][ T129] usb 4-1: USB disconnect, device number 7 [ 307.916695][ T4318] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 307.948610][ T4317] pwc: send_video_command error -71 [ 307.954921][ T4317] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 307.974041][ T4317] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 308.043570][ T4317] usb 5-1: USB disconnect, device number 4 [ 308.440448][ T129] usb 2-1: USB disconnect, device number 4 [ 308.480543][ T6281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 308.674207][ T4317] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 309.110444][ T4317] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.175306][ T4317] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.175715][ T4318] usb 2-1: Service connection timeout for: 256 [ 310.184819][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.319620][ T4318] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 310.417681][ T4318] ath9k_htc: Failed to initialize the device [ 310.479591][ T4317] usb 5-1: config 0 descriptor?? [ 310.483372][ T129] usb 2-1: ath9k_htc: USB layer deinitialized [ 310.600272][ T4317] usb 5-1: can't set config #0, error -71 [ 310.615970][ T4317] usb 5-1: USB disconnect, device number 5 [ 310.858355][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.871883][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.880918][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.947751][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.525'. [ 313.803954][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 315.007611][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 315.065055][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.073205][ T7] usb 2-1: Product: syz [ 315.079544][ T7] usb 2-1: Manufacturer: syz [ 315.086349][ T7] usb 2-1: SerialNumber: syz [ 315.870983][ T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 316.056547][ T6352] befs: (nbd4): No write support. Marking filesystem read-only [ 316.064963][ T6352] syz.4.535: attempt to access beyond end of device [ 316.064963][ T6352] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 316.312442][ T126] usb 2-1: USB disconnect, device number 5 [ 316.403966][ T4321] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 316.595701][ T4321] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.610438][ T4321] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 316.634711][ T4321] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.670004][ T4321] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 316.689927][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 316.699792][ T6360] FAULT_INJECTION: forcing a failure. [ 316.699792][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 316.707093][ T4321] usb 5-1: Product: syz [ 316.720048][ T6360] CPU: 1 PID: 6360 Comm: syz.3.532 Not tainted syzkaller #0 [ 316.726889][ T4321] usb 5-1: Manufacturer: syz [ 316.727348][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.727370][ T6360] Call Trace: [ 316.727378][ T6360] [ 316.727385][ T6360] dump_stack_lvl+0x188/0x24e [ 316.739255][ T6352] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 316.742010][ T6360] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 316.748989][ T4321] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 316.752897][ T6360] ? show_regs_print_info+0x12/0x12 [ 316.752928][ T6360] ? load_image+0x410/0x410 [ 316.775378][ T4321] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 316.778100][ T6360] should_fail_ex+0x390/0x4c0 [ 316.778139][ T6360] should_failslab+0x5/0x20 [ 316.799480][ T6360] slab_pre_alloc_hook+0x59/0x300 [ 316.804530][ T6360] ? tomoyo_encode+0x28a/0x550 [ 316.809318][ T6360] __kmem_cache_alloc_node+0x4f/0x270 [ 316.814715][ T6360] ? tomoyo_encode+0x28a/0x550 [ 316.819506][ T6360] __kmalloc+0xa3/0x240 [ 316.823682][ T6360] tomoyo_encode+0x28a/0x550 [ 316.828291][ T6360] tomoyo_realpath_from_path+0x578/0x5c0 [ 316.833948][ T6360] ? tomoyo_domain+0xd2/0x120 [ 316.838650][ T6360] ? tomoyo_path_number_perm+0x205/0x650 [ 316.844312][ T6360] tomoyo_path_number_perm+0x22f/0x650 [ 316.849796][ T6360] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 316.855277][ T6360] ? futex_wake_mark+0x150/0x150 [ 316.860257][ T6360] ? __fget_files+0x28/0x460 [ 316.864887][ T6360] security_file_ioctl+0x6c/0xa0 [ 316.869855][ T6360] __se_sys_ioctl+0x48/0x170 [ 316.874476][ T6360] do_syscall_64+0x4c/0xa0 [ 316.878908][ T6360] ? clear_bhb_loop+0x60/0xb0 [ 316.883606][ T6360] ? clear_bhb_loop+0x60/0xb0 [ 316.888307][ T6360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.894218][ T6360] RIP: 0033:0x7f788b19e159 [ 316.898651][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.918278][ T6360] RSP: 002b:00007f788c136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.926725][ T6360] RAX: ffffffffffffffda RBX: 00007f788b425fa0 RCX: 00007f788b19e159 [ 316.934722][ T6360] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 316.942756][ T6360] RBP: 00007f788b23506b R08: 0000000000000000 R09: 0000000000000000 [ 316.950756][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.958752][ T6360] R13: 00007f788b426038 R14: 00007f788b425fa0 R15: 00007ffe535c04d8 [ 316.966320][ T4321] usb 5-1: USB disconnect, device number 6 [ 316.966742][ T6360] [ 317.009311][ T4321] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 317.029241][ T4321] garmin_gps 5-1:1.0: device disconnected [ 317.040050][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.047477][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.075268][ T6360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.113955][ T7] usb 2-1: Service connection timeout for: 256 [ 317.121870][ T7] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 319.784662][ T7] ath9k_htc: Failed to initialize the device [ 319.796873][ T126] usb 2-1: ath9k_htc: USB layer deinitialized [ 320.087800][ T6373] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 320.087800][ T6373] [ 320.101643][ T6373] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 320.114749][ T6373] CIFS mount error: No usable UNC path provided in device string! [ 320.114749][ T6373] [ 320.125064][ T6373] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 325.144099][ T126] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 326.074658][ T126] usb 2-1: config 1 has an invalid interface number: 36 but max is 1 [ 326.087661][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.100763][ T126] usb 2-1: config 1 has no interface number 1 [ 326.114016][ T126] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.145375][ T126] usb 2-1: config 1 interface 36 has no altsetting 0 [ 326.178925][ T126] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.217019][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.245974][ T126] usb 2-1: Product: syz [ 326.257192][ T126] usb 2-1: Manufacturer: syz [ 326.271188][ T126] usb 2-1: SerialNumber: syz [ 326.332981][ T126] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 326.360608][ T126] cdc_ncm 2-1:1.0: bind() failure [ 326.537977][ T6435] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 326.537977][ T6435] [ 326.551805][ T6435] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 326.564866][ T6435] CIFS mount error: No usable UNC path provided in device string! [ 326.564866][ T6435] [ 326.574992][ T6435] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 327.464431][ T126] usb 2-1: USB disconnect, device number 6 [ 331.081402][ T6465] jffs2: notice: (6465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 331.462183][ T6476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.476730][ T6476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.485197][ T6476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.081264][ T6504] NILFS (nullb0): couldn't find nilfs on the device [ 335.216860][ T6505] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 335.230602][ T6505] autofs4:pid:6505:autofs_fill_super: called with bogus options [ 340.071384][ T6537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 340.084145][ T6537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.092238][ T6537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.705680][ T6550] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 341.719120][ T6550] autofs4:pid:6550:autofs_fill_super: called with bogus options [ 343.146746][ T6557] ip_tables: iptables: counters copy to user failed while replacing table [ 343.336852][ T6559] jffs2: notice: (6559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 345.746547][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 345.759422][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.767536][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 346.812335][ T6592] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 349.078666][ T6604] jffs2: notice: (6604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 349.101563][ T6605] block nbd3: shutting down sockets [ 349.774034][ T4326] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 350.880398][ T6641] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 351.417114][ T4326] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 352.148574][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.156868][ T4326] usb 2-1: Product: syz [ 352.161066][ T4326] usb 2-1: Manufacturer: syz [ 352.165749][ T4326] usb 2-1: SerialNumber: syz [ 352.503194][ T4321] usb 2-1: USB disconnect, device number 7 [ 352.520742][ T4326] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 352.584166][ T4321] usb 2-1: ath9k_htc: USB layer deinitialized [ 353.576891][ T6652] jffs2: notice: (6652) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 353.893971][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 354.085185][ T6662] netlink: 'syz.0.621': attribute type 4 has an invalid length. [ 354.098685][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.116383][ T7] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 354.139066][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.185017][ T7] as10x_usb: device has been detected [ 354.200907][ T7] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 354.243096][ T7] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 354.405468][ T7] as10x_usb: error during firmware upload part1 [ 354.414116][ T7] Registered device Abilis Systems DVB-Titan [ 354.606521][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 354.620927][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.628604][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.539981][ T4321] usb 5-1: USB disconnect, device number 7 [ 355.813294][ T4321] Unregistered device Abilis Systems DVB-Titan [ 355.888342][ T4321] as10x_usb: device has been disconnected [ 356.284053][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 357.021954][ T6704] jffs2: notice: (6704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 357.278318][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 357.296347][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.304967][ T7] usb 2-1: Product: syz [ 357.309194][ T7] usb 2-1: Manufacturer: syz [ 357.355342][ T7] usb 2-1: SerialNumber: syz [ 357.383756][ T4323] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 358.570435][ T4323] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 358.607272][ T4323] ath9k_htc: Failed to initialize the device [ 359.008470][ T4321] usb 2-1: USB disconnect, device number 8 [ 359.019448][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.066157][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.077616][ T4321] usb 2-1: ath9k_htc: USB layer deinitialized [ 359.123746][ T6727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.084753][ T4358] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 363.466574][ T4358] usb 2-1: not running at top speed; connect to a high speed hub [ 363.725816][ T6752] jffs2: notice: (6752) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 364.127245][ T4358] usb 2-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 364.154105][ T4358] usb 2-1: config 1 interface 0 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 364.167636][ T4358] usb 2-1: config 1 interface 0 has no altsetting 0 [ 364.177061][ T4358] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.186249][ T4358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.194371][ T4358] usb 2-1: Product: у [ 364.198521][ T4358] usb 2-1: SerialNumber: Ñ [ 364.206387][ T6746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 364.215920][ T6746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 364.436173][ T4358] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 364.540106][ T4358] usb 2-1: USB disconnect, device number 9 [ 365.975764][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 365.984362][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.991815][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.073923][ T4321] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 367.043682][ T4321] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 367.053967][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.062904][ T4321] usb 5-1: Product: syz [ 367.067297][ T4321] usb 5-1: Manufacturer: syz [ 367.072100][ T4321] usb 5-1: SerialNumber: syz [ 367.339160][ T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 368.451339][ T6217] usb 5-1: USB disconnect, device number 8 [ 369.469882][ T7] usb 5-1: Service connection timeout for: 256 [ 369.476576][ T7] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 369.554544][ T7] ath9k_htc: Failed to initialize the device [ 369.576277][ T6217] usb 5-1: ath9k_htc: USB layer deinitialized [ 371.238249][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 371.246662][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.254132][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.333936][ T6217] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 371.528295][ T6822] jffs2: notice: (6822) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 371.554681][ T6217] usb 5-1: Using ep0 maxpacket: 16 [ 372.064934][ T6217] usb 5-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 372.095091][ T6217] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 372.105536][ T6217] usb 5-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 372.168010][ T6217] usb 5-1: string descriptor 0 read error: -22 [ 372.174998][ T6217] usb 5-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 372.186560][ T6217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.544181][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.552735][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.562607][ T6217] usb 5-1: USB disconnect, device number 9 [ 373.300342][ T6839] ip_tables: iptables: counters copy to user failed while replacing table [ 373.730441][ T6847] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 373.730441][ T6847] [ 373.744295][ T6847] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 373.757191][ T6847] CIFS mount error: No usable UNC path provided in device string! [ 373.757191][ T6847] [ 373.767308][ T6847] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 374.615955][ T6848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 374.624458][ T6848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.631875][ T6848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.895157][ T6865] jffs2: notice: (6865) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 377.013817][ C1] sched: RT throttling activated [ 377.021330][ T6880] NILFS (nullb0): couldn't find nilfs on the device [ 378.480093][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.486640][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.824156][ T4321] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 379.059842][ T4321] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 379.108146][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.343926][ T4321] usb 2-1: config 0 descriptor?? [ 379.735402][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.757225][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.925930][ T4321] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 379.945921][ T4321] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 379.992844][ T4321] [drm:udl_init] *ERROR* Selecting channel failed [ 380.060299][ T4321] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 380.095386][ T4321] [drm] Initialized udl on minor 2 [ 380.362715][ T4321] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 380.402128][ T4321] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 380.429598][ T6905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 380.459131][ T4321] usb 2-1: USB disconnect, device number 10 [ 381.494651][ T6905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.503151][ T6905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.518182][ T4319] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 381.574257][ T4319] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 381.604056][ T4319] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 382.624543][ T6924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.690532][ T6924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.701637][ T6924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.409903][ T6933] No source specified [ 384.952937][ T6953] IPVS: sh: FWM 3 0x00000003 - no destination available [ 385.013879][ T4321] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 385.618563][ T6970] NILFS (nullb0): couldn't find nilfs on the device [ 387.098222][ T4321] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 387.117886][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.147755][ T4321] usb 1-1: config 0 descriptor?? [ 389.277139][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.351924][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.049437][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.067772][ T4321] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 390.076737][ T4321] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 390.092005][ T4321] [drm:udl_init] *ERROR* Selecting channel failed [ 390.104673][ T4321] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 390.112376][ T4321] [drm] Initialized udl on minor 2 [ 390.119571][ T4321] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 390.179051][ T4321] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 390.188318][ T4321] usb 1-1: USB disconnect, device number 9 [ 390.197355][ T7] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 390.219734][ T7] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 390.268998][ T7] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 390.367121][ T6994] No source specified [ 391.799694][ T7005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.873843][ T7005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 391.889018][ T7005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 394.853745][ T7027] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 394.853745][ T7027] [ 394.867579][ T7027] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 394.880407][ T7027] CIFS mount error: No usable UNC path provided in device string! [ 394.880407][ T7027] [ 394.890533][ T7027] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 396.364937][ T7045] NILFS (nullb0): couldn't find nilfs on the device [ 397.196375][ T7050] No source specified [ 401.754245][ T129] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 401.809202][ T7082] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 401.809202][ T7082] [ 401.823073][ T7082] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 401.836371][ T7082] CIFS mount error: No usable UNC path provided in device string! [ 401.836371][ T7082] [ 401.846464][ T7082] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 401.983430][ T129] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 402.040421][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.261328][ T129] usb 3-1: config 0 descriptor?? [ 402.713429][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.783494][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.933956][ T129] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 402.942579][ T129] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 403.696671][ T129] [drm:udl_init] *ERROR* Selecting channel failed [ 403.710442][ T129] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 403.718136][ T129] [drm] Initialized udl on minor 2 [ 403.724053][ T129] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 403.732178][ T129] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 404.228010][ T129] usb 3-1: USB disconnect, device number 9 [ 404.234393][ T4318] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 404.257180][ T4318] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 404.280737][ T4318] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 405.265053][ T7107] NILFS (nullb0): couldn't find nilfs on the device [ 406.474210][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 406.522930][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.543824][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.057715][ T7118] ceph: separator ':' missing in source [ 407.912103][ T7121] ======================================================= [ 407.912103][ T7121] WARNING: The mand mount option has been deprecated and [ 407.912103][ T7121] and is ignored by this kernel. Remove the mand [ 407.912103][ T7121] option from the mount to silence this warning. [ 407.912103][ T7121] ======================================================= [ 407.947003][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.197813][ T7128] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 414.064301][ T7164] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 414.075645][ T7164] autofs4:pid:7164:autofs_fill_super: called with bogus options [ 415.550905][ T7170] ceph: separator ':' missing in source [ 416.478312][ T7175] binder: 7174:7175 ioctl c0306201 200000000080 returned -14 [ 416.511906][ T7175] binder: 7174:7175 ioctl c0306201 2000000003c0 returned -14 [ 416.984318][ T7191] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 418.802343][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.820234][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.828856][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.535960][ T7214] ceph: separator ':' missing in source [ 422.982497][ T7230] NILFS (nullb0): couldn't find nilfs on the device [ 424.073929][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 426.031324][ T7245] IPVS: sh: FWM 3 0x00000003 - no destination available [ 426.043928][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 426.056146][ T7] usb 5-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 426.097331][ T7] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 426.127874][ T7] usb 5-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 426.184729][ T7] usb 5-1: string descriptor 0 read error: -22 [ 426.191002][ T7] usb 5-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 426.237753][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.284029][ T7] usb 5-1: USB disconnect, device number 10 [ 428.619833][ T7267] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 432.583932][ T4317] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 433.965895][ T4317] usb 3-1: Using ep0 maxpacket: 16 [ 433.977770][ T4317] usb 3-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 434.019927][ T4317] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 435.677907][ T4317] usb 3-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 435.787216][ T4317] usb 3-1: string descriptor 0 read error: -71 [ 435.795840][ T4317] usb 3-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 435.805237][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.815588][ T4317] usb 3-1: can't set config #4, error -71 [ 435.822411][ T4317] usb 3-1: USB disconnect, device number 10 [ 436.664011][ T7319] netlink: 'syz.1.798': attribute type 4 has an invalid length. [ 437.036269][ T7331] ip_tables: iptables: counters copy to user failed while replacing table [ 437.546465][ T7332] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 439.916521][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.922841][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.217552][ T7353] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 440.217552][ T7353] [ 440.231498][ T7353] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 440.244303][ T7353] CIFS mount error: No usable UNC path provided in device string! [ 440.244303][ T7353] [ 440.254390][ T7353] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 441.523891][ T4326] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 442.413938][ T4326] usb 1-1: Using ep0 maxpacket: 16 [ 442.425241][ T7370] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 442.425241][ T7370] [ 442.438994][ T7370] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 442.451846][ T7370] CIFS mount error: No usable UNC path provided in device string! [ 442.451846][ T7370] [ 442.462064][ T7370] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 443.235749][ T4326] usb 1-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 443.255228][ T4326] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 443.265123][ T4326] usb 1-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 443.281981][ T4326] usb 1-1: string descriptor 0 read error: -22 [ 443.288607][ T4326] usb 1-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 443.297704][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.501560][ T7375] ceph: separator ':' missing in source [ 443.721105][ T4326] usb 1-1: USB disconnect, device number 10 [ 445.093349][ T7388] netlink: 'syz.1.813': attribute type 4 has an invalid length. [ 450.722990][ T7420] ceph: separator ':' missing in source [ 450.743993][ T26] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 450.934003][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 451.735781][ T26] usb 5-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 451.746555][ T26] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 451.757007][ T26] usb 5-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 451.777795][ T26] usb 5-1: string descriptor 0 read error: -22 [ 451.785146][ T26] usb 5-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 451.794968][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.926320][ T26] usb 5-1: USB disconnect, device number 11 [ 455.814347][ T7460] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 455.814347][ T7460] [ 455.828191][ T7460] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 455.840981][ T7460] CIFS mount error: No usable UNC path provided in device string! [ 455.840981][ T7460] [ 455.851138][ T7460] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 457.180727][ T7469] jffs2: notice: (7469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 457.444013][ T4319] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 457.654055][ T4319] usb 2-1: Using ep0 maxpacket: 16 [ 457.688839][ T4319] usb 2-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 457.838886][ T4319] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 457.983036][ T4319] usb 2-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 458.171277][ T4319] usb 2-1: string descriptor 0 read error: -22 [ 458.262171][ T4319] usb 2-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 458.330646][ T7478] netlink: 'syz.3.832': attribute type 4 has an invalid length. [ 458.385559][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.794122][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.803418][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.861337][ T14] usb 2-1: USB disconnect, device number 11 [ 462.619112][ T7493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 462.631919][ T7493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 462.640306][ T7493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.749386][ T7495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.757790][ T7495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.765285][ T7495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.549969][ T7522] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 466.603724][ T7523] jffs2: notice: (7523) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 468.409546][ T7552] NILFS (nullb0): couldn't find nilfs on the device [ 468.584116][ T4318] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 469.790856][ T4318] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 469.952653][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.165823][ T4318] usb 5-1: selecting invalid altsetting 3 [ 470.171613][ T4318] comedi comedi5: could not set alternate setting 3 in high speed [ 470.209416][ T4318] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 472.868270][ T4318] usbduxsigma: probe of 5-1:128.0 failed with error -22 [ 472.945535][ T7567] autofs4:pid:7567:autofs_fill_super: called with bogus options [ 473.594506][ T4318] usb 5-1: USB disconnect, device number 12 [ 479.127105][ T7601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 479.839003][ T7601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.882889][ T7601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.059749][ T7062] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 481.259260][ T7062] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 481.312759][ T7062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.613281][ T7062] usb 3-1: selecting invalid altsetting 3 [ 481.706418][ T7062] comedi comedi5: could not set alternate setting 3 in high speed [ 481.805280][ T7062] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 481.952825][ T7062] usbduxsigma: probe of 3-1:128.0 failed with error -22 [ 482.277608][ T4318] usb 3-1: USB disconnect, device number 11 [ 483.394161][ T129] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 483.605996][ T129] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 483.664860][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.759548][ T129] usb 3-1: Product: syz [ 483.814467][ T129] usb 3-1: Manufacturer: syz [ 483.867357][ T129] usb 3-1: SerialNumber: syz [ 485.160859][ T129] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 486.111412][ T7651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 486.119718][ T7651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 486.127148][ T7651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.184546][ T6217] usb 3-1: USB disconnect, device number 12 [ 486.277697][ T129] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 486.294279][ T129] ath9k_htc: Failed to initialize the device [ 486.300790][ T6217] usb 3-1: ath9k_htc: USB layer deinitialized [ 487.125803][ T7659] autofs4:pid:7659:autofs_fill_super: called with bogus options [ 489.242348][ T7672] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 491.121612][ T7686] jffs2: notice: (7686) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 491.173953][ T4358] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 491.379040][ T4358] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 492.264039][ T4358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.380100][ T4358] usb 1-1: selecting invalid altsetting 3 [ 492.400688][ T4358] comedi comedi5: could not set alternate setting 3 in high speed [ 492.443434][ T4358] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 492.498303][ T4358] usbduxsigma: probe of 1-1:128.0 failed with error -22 [ 492.549049][ T4358] usb 1-1: USB disconnect, device number 11 [ 492.699146][ T7704] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 492.710892][ T7704] autofs4:pid:7704:autofs_fill_super: called with bogus options [ 492.734123][ T4281] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 492.965606][ T4281] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 493.019148][ T4281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.115940][ T4281] usb 3-1: Product: syz [ 493.165926][ T4281] usb 3-1: Manufacturer: syz [ 493.227620][ T4281] usb 3-1: SerialNumber: syz [ 493.599695][ T14] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 494.255075][ T4281] usb 3-1: USB disconnect, device number 13 [ 494.305004][ T7711] ip_tables: iptables: counters copy to user failed while replacing table [ 495.096871][ T14] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 495.132174][ T14] ath9k_htc: Failed to initialize the device [ 495.150345][ T4281] usb 3-1: ath9k_htc: USB layer deinitialized [ 495.496381][ T7722] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 495.497022][ T7725] NILFS (nullb0): couldn't find nilfs on the device [ 497.503239][ T7744] jffs2: notice: (7744) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 498.103837][ T4281] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 498.223814][ T7750] binder: 7749:7750 ioctl c0306201 200000000080 returned -14 [ 498.259884][ T7750] binder: 7749:7750 ioctl c0306201 2000000003c0 returned -14 [ 498.269921][ T4317] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 498.305327][ T4281] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 498.333828][ T4281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.358301][ T4281] usb 3-1: selecting invalid altsetting 3 [ 498.373868][ T4281] comedi comedi5: could not set alternate setting 3 in high speed [ 498.384023][ T4281] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 498.404954][ T4281] usbduxsigma: probe of 3-1:128.0 failed with error -22 [ 498.465735][ T4317] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 498.480309][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.508483][ T4317] usb 4-1: config 0 descriptor?? [ 498.594093][ T7755] netlink: 'syz.1.914': attribute type 4 has an invalid length. [ 498.702171][ T7761] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 498.715442][ T7761] autofs4:pid:7761:autofs_fill_super: called with bogus options [ 498.841125][ T4281] usb 3-1: USB disconnect, device number 14 [ 499.339143][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.908137][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.103924][ T4281] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 501.309829][ T7780] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 501.582002][ T7783] NILFS (nullb0): couldn't find nilfs on the device [ 501.825699][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.835706][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.854785][ T4317] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 501.868132][ T4317] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 501.884665][ T4317] [drm:udl_init] *ERROR* Selecting channel failed [ 501.909509][ T4281] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 501.932865][ T4281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.090012][ T4317] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 502.142838][ T4281] usb 1-1: Product: syz [ 502.190218][ T4317] [drm] Initialized udl on minor 2 [ 502.203068][ T4281] usb 1-1: Manufacturer: syz [ 502.260740][ T4281] usb 1-1: SerialNumber: syz [ 502.282815][ T4317] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 502.409839][ T4317] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 502.649195][ T4317] usb 4-1: USB disconnect, device number 8 [ 502.775513][ T7062] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 502.809529][ T7792] jffs2: notice: (7792) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 502.833645][ T7062] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 502.863972][ T7062] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 502.907739][ T7062] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 503.064774][ T7799] binder: 7797:7799 ioctl c0306201 200000000080 returned -14 [ 503.224333][ T7799] binder: 7797:7799 ioctl c0306201 2000000003c0 returned -14 [ 503.573154][ T6217] usb 1-1: USB disconnect, device number 12 [ 503.773995][ T7062] usb 1-1: ath9k_htc: Unable to allocate URBs [ 503.780269][ T6217] usb 1-1: ath9k_htc: USB layer deinitialized [ 504.293976][ T4317] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 504.536634][ T4317] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 504.588983][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.753127][ T7815] netlink: 'syz.3.930': attribute type 4 has an invalid length. [ 504.795564][ T7817] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 504.809426][ T7817] autofs4:pid:7817:autofs_fill_super: called with bogus options [ 505.765833][ T4317] usb 5-1: selecting invalid altsetting 3 [ 505.772439][ T4317] comedi comedi5: could not set alternate setting 3 in high speed [ 505.780403][ T4317] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 505.791182][ T4317] usbduxsigma: probe of 5-1:128.0 failed with error -22 [ 505.812275][ T4358] usb 5-1: USB disconnect, device number 13 [ 505.912563][ T7821] ceph: separator ':' missing in source [ 506.033589][ T7826] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 506.943855][ T4317] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 507.550630][ T7838] NILFS (nullb0): couldn't find nilfs on the device [ 508.054074][ T4317] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 508.063191][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.081913][ T4317] usb 4-1: config 0 descriptor?? [ 508.133862][ T7062] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 508.387144][ T7062] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 508.453618][ T7062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.575263][ T7062] usb 5-1: Product: syz [ 508.600882][ T7847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.647253][ T7062] usb 5-1: Manufacturer: syz [ 508.712354][ T7062] usb 5-1: SerialNumber: syz [ 508.981515][ T7847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.028370][ T7062] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 509.135247][ T7851] jffs2: notice: (7851) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 509.258609][ T4317] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 509.278428][ T4317] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 509.299077][ T4317] [drm:udl_init] *ERROR* Selecting channel failed [ 509.322633][ T4317] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 509.341051][ T4317] [drm] Initialized udl on minor 2 [ 509.361881][ T4317] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 509.372754][ T4317] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 509.397733][ T7859] netlink: 'syz.0.943': attribute type 4 has an invalid length. [ 509.397973][ T4317] usb 4-1: USB disconnect, device number 9 [ 509.422491][ T4319] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 509.455136][ T4319] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 509.465845][ T4319] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 509.487805][ T4319] usb 5-1: USB disconnect, device number 14 [ 509.612906][ T7862] autofs4:pid:7862:autofs_fill_super: called with bogus options [ 510.163881][ T7062] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 510.188987][ T7062] ath9k_htc: Failed to initialize the device [ 510.287889][ T4319] usb 5-1: ath9k_htc: USB layer deinitialized [ 512.240923][ T7872] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 513.539070][ T7062] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 513.861359][ T7062] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 514.431671][ T7062] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 514.446345][ T7062] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 514.456315][ T7062] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.469328][ T7062] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 514.478576][ T7062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.544219][ T7889] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 514.544219][ T7889] [ 514.558128][ T7889] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 514.571138][ T7889] CIFS mount error: No usable UNC path provided in device string! [ 514.571138][ T7889] [ 514.581303][ T7889] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 514.752438][ T7062] usb 5-1: invalid MIDI out EP 0 [ 515.016263][ T7062] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 515.088469][ T7896] udevd[7896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.168820][ T7902] ceph: separator ':' missing in source [ 515.290122][ T7906] autofs4:pid:7906:autofs_fill_super: called with bogus options [ 516.730464][ T7912] jffs2: notice: (7912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 516.757999][ T4358] usb 5-1: USB disconnect, device number 15 [ 516.851430][ T7916] binder: 7915:7916 ioctl c0306201 200000000080 returned -14 [ 516.882308][ T7916] binder: 7915:7916 ioctl c0306201 2000000003c0 returned -14 [ 516.901904][ T7916] binder_alloc: 7915: binder_alloc_buf, no vma [ 516.943859][ T4319] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 518.263553][ T7926] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 518.462293][ T7930] ip_tables: iptables: counters copy to user failed while replacing table [ 518.497636][ T4319] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 518.555790][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.895687][ T4319] usb 3-1: config 0 descriptor?? [ 519.981274][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.044533][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.847697][ T4319] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 520.860343][ T4319] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 520.866928][ T7943] befs: (nbd1): No write support. Marking filesystem read-only [ 520.878499][ T4319] [drm:udl_init] *ERROR* Selecting channel failed [ 520.900916][ T4319] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 520.918717][ T4319] [drm] Initialized udl on minor 2 [ 520.939516][ T7943] syz.1.966: attempt to access beyond end of device [ 520.939516][ T7943] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 520.955199][ T4319] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 521.088699][ T4319] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 521.191758][ T4319] usb 3-1: USB disconnect, device number 15 [ 521.204043][ T7062] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 521.212649][ T7062] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 521.241659][ T7062] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 521.307683][ T7951] NILFS (nullb0): couldn't find nilfs on the device [ 521.503884][ T6217] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 521.780005][ T6217] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.873378][ T6217] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 521.914355][ T6217] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.046858][ T7956] autofs4:pid:7956:autofs_fill_super: called with bogus options [ 523.680846][ T6217] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 523.690925][ T6217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 523.700342][ T6217] usb 2-1: Product: syz [ 523.705252][ T6217] usb 2-1: Manufacturer: syz [ 524.797830][ T6217] usb 2-1: can't set config #1, error -71 [ 524.824749][ T6217] usb 2-1: USB disconnect, device number 12 [ 524.947999][ T7969] ip_tables: iptables: counters copy to user failed while replacing table [ 527.122968][ T7985] ceph: separator ':' missing in source [ 527.143857][ T4319] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 527.459836][ T4319] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 527.569467][ T7999] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 528.341470][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.357559][ T4319] usb 2-1: config 0 descriptor?? [ 529.456662][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.574293][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.837003][ T4319] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 529.857969][ T4319] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 529.876678][ T4319] [drm:udl_init] *ERROR* Selecting channel failed [ 529.876764][ T8014] befs: (nbd4): No write support. Marking filesystem read-only [ 529.900986][ T4319] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 529.908747][ T4319] [drm] Initialized udl on minor 2 [ 529.939827][ T4319] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 529.959258][ T4319] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 529.986036][ T8014] syz.4.985: attempt to access beyond end of device [ 529.986036][ T8014] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 530.044733][ T14] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 530.064927][ T4319] usb 2-1: USB disconnect, device number 13 [ 530.896940][ T14] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 530.920077][ T14] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 531.041475][ T8022] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 531.053571][ T8022] autofs4:pid:8022:autofs_fill_super: called with bogus options [ 531.104191][ T14] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 531.329326][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.523505][ T14] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 531.829650][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.426362][ T14] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 532.484005][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 532.523903][ T14] usb 5-1: Product: syz [ 532.541139][ T14] usb 5-1: Manufacturer: syz [ 533.959043][ T14] usb 5-1: can't set config #1, error -71 [ 534.111202][ T14] usb 5-1: USB disconnect, device number 16 [ 535.183647][ T8043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.993'. [ 536.790302][ T8046] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 539.860150][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 539.874729][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 539.882872][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 541.004255][ T8070] befs: (nbd3): No write support. Marking filesystem read-only [ 541.011993][ T8070] syz.3.1001: attempt to access beyond end of device [ 541.011993][ T8070] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 541.394315][ T4317] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 542.265182][ T4317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.292704][ T4317] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 542.852431][ T4317] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.355904][ T4317] usb 4-1: string descriptor 0 read error: -71 [ 544.362175][ T4317] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 544.376362][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 544.395549][ T4317] usb 4-1: can't set config #1, error -71 [ 544.405350][ T4317] usb 4-1: USB disconnect, device number 10 [ 545.680245][ T8100] ceph: separator ':' missing in source [ 545.723340][ T8103] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 549.020618][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 549.033011][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 549.041050][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 550.933970][ T7062] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 552.763855][ T7062] usb 2-1: Using ep0 maxpacket: 16 [ 552.811084][ T7062] usb 2-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 552.854045][ T7062] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 552.955769][ T7062] usb 2-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 553.020919][ T7062] usb 2-1: string descriptor 0 read error: -22 [ 553.048914][ T7062] usb 2-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 553.074896][ T7062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.292552][ T8147] NILFS (nullb0): couldn't find nilfs on the device [ 553.861545][ T7062] usb 2-1: can't set config #4, error -71 [ 553.968238][ T7062] usb 2-1: USB disconnect, device number 14 [ 554.522151][ T8156] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 556.449492][ T8177] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 556.449492][ T8177] [ 556.463389][ T8177] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 556.476253][ T8177] CIFS mount error: No usable UNC path provided in device string! [ 556.476253][ T8177] [ 556.486322][ T8177] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 557.762017][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 557.776338][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 557.785353][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.199915][ T8192] ceph: separator ':' missing in source [ 559.275826][ T8202] NILFS (nullb0): couldn't find nilfs on the device [ 560.143986][ T4317] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 560.364275][ T4317] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 560.409062][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.824720][ T4317] usb 5-1: Product: syz [ 560.845664][ T4317] usb 5-1: Manufacturer: syz [ 561.157928][ T4317] usb 5-1: SerialNumber: syz [ 561.201327][ T4317] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 561.616849][ T4318] usb 5-1: USB disconnect, device number 17 [ 562.234024][ T4317] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 562.255701][ T4317] ath9k_htc: Failed to initialize the device [ 562.425674][ T8229] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 562.453175][ T4318] usb 5-1: ath9k_htc: USB layer deinitialized [ 562.797053][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.803568][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.366429][ T8260] device syzkaller0 entered promiscuous mode [ 572.941978][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 572.955069][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 572.963056][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 573.766780][ T8317] ceph: separator ':' missing in source [ 574.418678][ T8326] device syzkaller0 entered promiscuous mode [ 576.522196][ T8346] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 578.023853][ T4358] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 578.265504][ T4358] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 578.289345][ T4358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.314846][ T4358] usb 5-1: config 0 descriptor?? [ 579.514008][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.572170][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.568999][ T8384] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 580.580268][ T8384] autofs4:pid:8384:autofs_fill_super: called with bogus options [ 581.326319][ T4358] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 581.374383][ T4358] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 581.390444][ T4358] [drm:udl_init] *ERROR* Selecting channel failed [ 582.383135][ T4358] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 582.391851][ T4358] [drm] Initialized udl on minor 2 [ 582.399309][ T4358] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 582.407630][ T4358] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 582.425630][ T4358] usb 5-1: USB disconnect, device number 18 [ 582.431963][ T4318] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 582.443407][ T4318] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 582.451641][ T4318] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 584.540296][ T8418] ceph: separator ':' missing in source [ 585.589616][ T8429] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 585.589616][ T8429] [ 585.603730][ T8429] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 585.616594][ T8429] CIFS mount error: No usable UNC path provided in device string! [ 585.616594][ T8429] [ 585.626714][ T8429] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 589.053814][ T4317] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 589.261788][ T4317] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 589.594361][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.945884][ T4317] usb 3-1: config 0 descriptor?? [ 590.965411][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.016960][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.454636][ T4317] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 591.489382][ T4317] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 591.517661][ T4317] [drm:udl_init] *ERROR* Selecting channel failed [ 591.569100][ T4317] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 592.233771][ T4317] [drm] Initialized udl on minor 2 [ 592.247800][ T4317] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 592.264218][ T4317] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 592.273186][ T4317] usb 3-1: USB disconnect, device number 16 [ 592.279813][ T7062] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 592.288277][ T7062] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 592.298141][ T7062] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 594.301152][ T8520] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 595.428503][ T8519] ceph: separator ':' missing in source [ 596.023799][ T4326] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 596.575596][ T8536] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 596.575596][ T8536] [ 596.589390][ T8536] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 596.602269][ T8536] CIFS mount error: No usable UNC path provided in device string! [ 596.602269][ T8536] [ 596.612365][ T8536] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 596.687979][ T4326] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 597.314497][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.360718][ T4326] usb 5-1: config 0 descriptor?? [ 597.429086][ T8538] binder: 8537:8538 ioctl c0306201 200000000080 returned -14 [ 597.475474][ T8538] binder: 8537:8538 ioctl c0306201 2000000003c0 returned -14 [ 597.643675][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.665206][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.127299][ T4326] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 598.278321][ T4326] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 598.286803][ T4326] [drm:udl_init] *ERROR* Selecting channel failed [ 598.299114][ T4326] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 598.306678][ T4326] [drm] Initialized udl on minor 2 [ 598.314497][ T4326] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 598.322526][ T4326] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 598.337984][ T4326] usb 5-1: USB disconnect, device number 19 [ 598.344380][ T4318] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 598.352478][ T4318] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 598.360492][ T4318] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 599.561585][ T8561] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 599.572482][ T8561] autofs4:pid:8561:autofs_fill_super: called with bogus options [ 601.359777][ T8572] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 601.359777][ T8572] [ 601.373834][ T8572] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 601.386672][ T8572] CIFS mount error: No usable UNC path provided in device string! [ 601.386672][ T8572] [ 601.396855][ T8572] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 602.190832][ T8580] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 602.190832][ T8580] [ 602.204697][ T8580] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 602.217462][ T8580] CIFS mount error: No usable UNC path provided in device string! [ 602.217462][ T8580] [ 602.227574][ T8580] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 603.820471][ T8591] binder: 8590:8591 ioctl c0306201 200000000080 returned -14 [ 603.834801][ T8591] binder: BINDER_SET_CONTEXT_MGR already set [ 603.841185][ T8591] binder: 8590:8591 ioctl 4018620d 200000004a80 returned -16 [ 603.851601][ T8591] binder: 8590:8591 ioctl c0306201 2000000003c0 returned -14 [ 604.891445][ T8602] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 604.905952][ T8602] autofs4:pid:8602:autofs_fill_super: called with bogus options [ 605.083814][ T4326] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 605.277849][ T4326] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 605.317636][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.346091][ T8611] ceph: separator ':' missing in source [ 605.364481][ T4326] usb 1-1: config 0 descriptor?? [ 605.424027][ T4318] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 605.803041][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.999924][ T4318] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 606.067999][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.244198][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.252441][ T4318] usb 4-1: Product: syz [ 606.293781][ T4318] usb 4-1: Manufacturer: syz [ 606.298466][ T4318] usb 4-1: SerialNumber: syz [ 606.400227][ T4318] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 606.425045][ T4326] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 606.449842][ T4326] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 606.526735][ T8625] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 606.844289][ T4326] [drm:udl_init] *ERROR* Selecting channel failed [ 606.868867][ T4326] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 606.877547][ T4326] [drm] Initialized udl on minor 2 [ 606.883409][ T4326] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 606.891692][ T4326] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 606.979607][ T8629] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 606.979607][ T8629] [ 606.993642][ T8629] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 607.006453][ T8629] CIFS mount error: No usable UNC path provided in device string! [ 607.006453][ T8629] [ 607.016513][ T8629] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 607.045861][ T4326] usb 1-1: USB disconnect, device number 13 [ 607.215599][ T6217] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 607.300785][ T6217] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 607.439195][ T6217] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 607.461252][ T4318] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 607.485115][ T4318] ath9k_htc: Failed to initialize the device [ 607.585112][ T6217] usb 4-1: USB disconnect, device number 11 [ 607.725024][ T6217] usb 4-1: ath9k_htc: USB layer deinitialized [ 608.892114][ T8643] binder: 8642:8643 ioctl c0306201 200000000080 returned -14 [ 610.812217][ T8643] binder: BINDER_SET_CONTEXT_MGR already set [ 610.884323][ T8643] binder: 8642:8643 ioctl 4018620d 200000004a80 returned -16 [ 610.924527][ T8655] binder: 8642:8655 ioctl c0306201 2000000003c0 returned -14 [ 612.042017][ T8661] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 612.053445][ T8661] autofs4:pid:8661:autofs_fill_super: called with bogus options [ 614.938509][ T8681] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 615.286723][ T6217] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 615.611182][ T6217] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 616.152961][ T6217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.161540][ T6217] usb 3-1: Product: syz [ 616.165951][ T6217] usb 3-1: Manufacturer: syz [ 616.170554][ T6217] usb 3-1: SerialNumber: syz [ 616.211334][ T6217] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 617.274063][ T6217] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 618.103189][ T6217] ath9k_htc: Failed to initialize the device [ 618.137271][ T4318] usb 3-1: USB disconnect, device number 17 [ 618.149389][ T4318] usb 3-1: ath9k_htc: USB layer deinitialized [ 619.348838][ T8701] ceph: separator ':' missing in source [ 619.418506][ T8712] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 619.432360][ T8712] autofs4:pid:8712:autofs_fill_super: called with bogus options [ 622.531710][ T8728] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 624.238649][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.248128][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.742388][ T8753] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 625.753808][ T8753] autofs4:pid:8753:autofs_fill_super: called with bogus options [ 634.937925][ T8804] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 634.949791][ T8804] autofs4:pid:8804:autofs_fill_super: called with bogus options [ 635.132025][ T8805] binder: 8803:8805 ioctl c0306201 2000000003c0 returned -14 [ 640.563977][ T6217] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 640.930434][ T8853] nfs: Unknown parameter 'ÿÿÿÿ' [ 641.174336][ T6217] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 641.254188][ T6217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.279625][ T6217] usb 3-1: config 0 descriptor?? [ 641.491614][ T8855] binder: 8854:8855 ioctl c0306201 2000000003c0 returned -14 [ 641.735153][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.928584][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.447059][ T8865] ceph: separator ':' missing in source [ 643.688317][ T8878] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 643.700139][ T8878] autofs4:pid:8878:autofs_fill_super: called with bogus options [ 643.972699][ T6217] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 644.343571][ T6217] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 644.353211][ T6217] [drm:udl_init] *ERROR* Selecting channel failed [ 644.366394][ T6217] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 644.374471][ T6217] [drm] Initialized udl on minor 2 [ 644.381222][ T6217] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 644.389500][ T6217] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 644.398874][ T6217] usb 3-1: USB disconnect, device number 18 [ 644.405839][ T4318] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 644.414276][ T4318] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 644.422238][ T4318] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 650.495568][ T8924] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 650.505652][ T8924] autofs4:pid:8924:autofs_fill_super: called with bogus options [ 654.406171][ T8941] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 654.406171][ T8941] [ 654.419987][ T8941] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 654.432771][ T8941] CIFS mount error: No usable UNC path provided in device string! [ 654.432771][ T8941] [ 654.442846][ T8941] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 655.242753][ T8947] FAULT_INJECTION: forcing a failure. [ 655.242753][ T8947] name failslab, interval 1, probability 0, space 0, times 0 [ 655.255812][ T8947] CPU: 1 PID: 8947 Comm: syz.1.1225 Not tainted syzkaller #0 [ 655.263169][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.273209][ T8947] Call Trace: [ 655.276477][ T8947] [ 655.279388][ T8947] dump_stack_lvl+0x188/0x24e [ 655.284057][ T8947] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 655.289852][ T8947] ? show_regs_print_info+0x12/0x12 [ 655.295032][ T8947] ? load_image+0x410/0x410 [ 655.299523][ T8947] ? vxlan_switchdev_event+0x1b3/0xa70 [ 655.304984][ T8947] should_fail_ex+0x390/0x4c0 [ 655.309651][ T8947] should_failslab+0x5/0x20 [ 655.314139][ T8947] slab_pre_alloc_hook+0x59/0x300 [ 655.319150][ T8947] kmem_cache_alloc_node+0x5a/0x310 [ 655.324330][ T8947] ? __alloc_skb+0xf9/0x7d0 [ 655.328815][ T8947] __alloc_skb+0xf9/0x7d0 [ 655.333127][ T8947] fdb_notify+0xa6/0x160 [ 655.337357][ T8947] fdb_add_local+0x14e/0x240 [ 655.341931][ T8947] br_fdb_changeaddr+0x2c2/0x410 [ 655.346856][ T8947] br_device_event+0x49e/0x8f0 [ 655.351606][ T8947] ? br_switchdev_event+0x480/0x480 [ 655.356788][ T8947] ? packet_notifier+0xa22/0xa40 [ 655.361712][ T8947] ? lockdep_rtnl_is_held+0x22/0x30 [ 655.366916][ T8947] ? packet_notifier+0x74/0xa40 [ 655.371810][ T8947] raw_notifier_call_chain+0xcb/0x160 [ 655.377184][ T8947] call_netdevice_notifiers+0x8d/0xd0 [ 655.382548][ T8947] ? netdev_adjacent_rename_links+0x4f0/0x4f0 [ 655.388609][ T8947] ? dev_ifsioc+0x514/0xd50 [ 655.393103][ T8947] dev_ifsioc+0x521/0xd50 [ 655.397451][ T8947] ? dev_ioctl+0xe80/0xe80 [ 655.401868][ T8947] ? apparmor_capable+0x12c/0x190 [ 655.406879][ T8947] ? full_name_hash+0x8e/0xe0 [ 655.411541][ T8947] ? dev_load+0x1d/0x1e0 [ 655.415773][ T8947] ? dev_load+0x1d/0x1e0 [ 655.420011][ T8947] dev_ioctl+0x55e/0xe80 [ 655.424246][ T8947] sock_do_ioctl+0x245/0x320 [ 655.428848][ T8947] ? sock_show_fdinfo+0xb0/0xb0 [ 655.433704][ T8947] sock_ioctl+0x48a/0x700 [ 655.438021][ T8947] ? sock_poll+0x420/0x420 [ 655.442431][ T8947] ? bpf_lsm_file_ioctl+0x5/0x10 [ 655.447373][ T8947] ? security_file_ioctl+0x7c/0xa0 [ 655.452502][ T8947] ? sock_poll+0x420/0x420 [ 655.456908][ T8947] __se_sys_ioctl+0xfa/0x170 [ 655.461492][ T8947] do_syscall_64+0x4c/0xa0 [ 655.465900][ T8947] ? clear_bhb_loop+0x60/0xb0 [ 655.470566][ T8947] ? clear_bhb_loop+0x60/0xb0 [ 655.475239][ T8947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.481142][ T8947] RIP: 0033:0x7fdaef79e159 [ 655.485541][ T8947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.505135][ T8947] RSP: 002b:00007fdaf06df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.513536][ T8947] RAX: ffffffffffffffda RBX: 00007fdaefa25fa0 RCX: 00007fdaef79e159 [ 655.521511][ T8947] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000007 [ 655.529488][ T8947] RBP: 00007fdaef83506b R08: 0000000000000000 R09: 0000000000000000 [ 655.537453][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.545412][ T8947] R13: 00007fdaefa26038 R14: 00007fdaefa25fa0 R15: 00007ffdcf96e748 [ 655.553399][ T8947] [ 658.425386][ T8967] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 658.744506][ T129] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 659.027292][ T129] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 659.071233][ T129] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 659.151966][ T129] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.320470][ T129] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 659.811989][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 659.830673][ T129] usb 2-1: Product: syz [ 659.843777][ T129] usb 2-1: Manufacturer: syz [ 659.855546][ T129] usb 2-1: SerialNumber: syz [ 661.335015][ T129] usb 2-1: can't set config #1, error -71 [ 661.671700][ T129] usb 2-1: USB disconnect, device number 15 [ 667.022219][ T9028] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 667.022219][ T9028] [ 667.036046][ T9028] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 667.048916][ T9028] CIFS mount error: No usable UNC path provided in device string! [ 667.048916][ T9028] [ 667.059650][ T9028] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 667.462821][ T9036] binder: BINDER_SET_CONTEXT_MGR already set [ 667.480896][ T9036] binder: 9035:9036 ioctl 4018620d 200000004a80 returned -16 [ 675.051631][ T27] audit: type=1326 audit(1791068663.726:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.2.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f80d9e159 code=0x7ffc0000 [ 675.974193][ T27] audit: type=1326 audit(1791068663.726:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.2.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f80d9e159 code=0x7ffc0000 [ 676.048414][ T9090] binder: 9089:9090 ioctl c0306201 200000000080 returned -14 [ 676.100344][ T9090] binder: 9089:9090 ioctl c0306201 2000000003c0 returned -14 [ 676.114231][ T27] audit: type=1326 audit(1791068663.726:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.2.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4f80d9e159 code=0x7ffc0000 [ 676.230923][ T27] audit: type=1326 audit(1791068663.726:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.2.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f80d9e159 code=0x7ffc0000 [ 677.107351][ T27] audit: type=1326 audit(1791068663.726:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.2.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f80d9e159 code=0x7ffc0000 [ 677.132255][ T27] audit: type=1326 audit(1791068663.726:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.2.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4f80d9e159 code=0x7ffc0000 [ 677.156688][ T27] audit: type=1326 audit(1791068663.726:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.2.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f80d9e159 code=0x7ffc0000 [ 677.180869][ T27] audit: type=1326 audit(1791068663.726:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.2.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f80d9e159 code=0x7ffc0000 [ 677.204906][ T27] audit: type=1326 audit(1791068663.726:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.2.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f80d9e159 code=0x7ffc0000 [ 677.229369][ T27] audit: type=1326 audit(1791068663.726:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.2.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f80d9e159 code=0x7ffc0000 [ 683.163803][ T6217] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 684.398865][ T6217] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 684.428604][ T6217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.478800][ T6217] usb 1-1: config 0 descriptor?? [ 684.664588][ T9154] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 684.676736][ T9154] autofs4:pid:9154:autofs_fill_super: called with bogus options [ 685.685511][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.692203][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.045202][ T6217] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 686.064867][ T6217] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 686.091704][ T6217] [drm:udl_init] *ERROR* Selecting channel failed [ 686.120942][ T6217] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 686.131489][ T6217] [drm] Initialized udl on minor 2 [ 686.139524][ T6217] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 686.149329][ T6217] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 686.179927][ T6217] usb 1-1: USB disconnect, device number 14 [ 686.238666][ T4326] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 686.262079][ T4326] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 686.275996][ T4326] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 694.308048][ T9198] ip_tables: iptables: counters copy to user failed while replacing table [ 694.885678][ T9204] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 694.897249][ T9204] autofs4:pid:9204:autofs_fill_super: called with bogus options [ 696.823787][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 697.018822][ T7] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 697.078095][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.276987][ T7] usb 1-1: config 0 descriptor?? [ 698.695304][ T7] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 698.719727][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 698.751138][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 698.851883][ T7] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 698.874838][ T7] [drm] Initialized udl on minor 2 [ 698.894462][ T7] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 698.980174][ T9237] syz.3.1296 uses obsolete (PF_INET,SOCK_PACKET) [ 699.051324][ T7] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 699.592688][ T7] usb 1-1: USB disconnect, device number 15 [ 699.599192][ T4317] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 700.184501][ T4317] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 700.192553][ T4317] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 700.601641][ T9254] ip_tables: iptables: counters copy to user failed while replacing table [ 701.034021][ T4323] kworker/dying (4323) used greatest stack depth: 19424 bytes left [ 702.107773][ T9262] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 702.118219][ T9262] autofs4:pid:9262:autofs_fill_super: called with bogus options [ 703.674376][ T9275] befs: (nbd1): No write support. Marking filesystem read-only [ 703.731742][ T9275] syz.1.1306: attempt to access beyond end of device [ 703.731742][ T9275] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 704.623827][ T6217] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 704.829243][ T6217] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.023758][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 706.227516][ T6217] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 706.282192][ T6217] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.402111][ T6217] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 706.475313][ T6217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 706.533252][ T6217] usb 2-1: Product: syz [ 706.571730][ T6217] usb 2-1: Manufacturer: syz [ 706.958890][ T7] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 706.999888][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.138395][ T7] usb 4-1: config 0 descriptor?? [ 707.383814][ T6217] usb 2-1: can't set config #1, error -71 [ 707.410855][ T6217] usb 2-1: USB disconnect, device number 16 [ 708.500345][ T7] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 708.613950][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 708.788572][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 709.798471][ T9298] ip_tables: iptables: counters copy to user failed while replacing table [ 709.820123][ T7] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 709.828064][ T7] [drm] Initialized udl on minor 2 [ 709.925828][ T7] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 709.941883][ T7] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 709.962590][ T7] usb 4-1: USB disconnect, device number 12 [ 709.984125][ T14] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 710.650386][ T14] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 710.659390][ T14] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 710.670752][ T9310] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 710.678757][ T9310] autofs4:pid:9310:autofs_fill_super: called with bogus options [ 713.130943][ T9327] befs: (nbd1): No write support. Marking filesystem read-only [ 713.175745][ T9327] syz.1.1321: attempt to access beyond end of device [ 713.175745][ T9327] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 713.291154][ T9332] FAULT_INJECTION: forcing a failure. [ 713.291154][ T9332] name failslab, interval 1, probability 0, space 0, times 0 [ 713.369202][ T9332] CPU: 1 PID: 9332 Comm: syz.2.1323 Not tainted syzkaller #0 [ 713.376645][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.386719][ T9332] Call Trace: [ 713.390011][ T9332] [ 713.392950][ T9332] dump_stack_lvl+0x188/0x24e [ 713.397660][ T9332] ? show_regs_print_info+0x12/0x12 [ 713.402881][ T9332] ? load_image+0x410/0x410 [ 713.407413][ T9332] ? __might_sleep+0xd0/0xd0 [ 713.412018][ T9332] ? __lock_acquire+0x7ea0/0x7ea0 [ 713.417066][ T9332] should_fail_ex+0x390/0x4c0 [ 713.421767][ T9332] should_failslab+0x5/0x20 [ 713.426284][ T9332] slab_pre_alloc_hook+0x59/0x300 [ 713.431333][ T9332] ? nf_nat_register_fn+0x29a/0x540 [ 713.436555][ T9332] __kmem_cache_alloc_node+0x4f/0x270 [ 713.441951][ T9332] ? nf_nat_register_fn+0x29a/0x540 [ 713.447179][ T9332] kmalloc_trace+0x26/0xe0 [ 713.451613][ T9332] nf_nat_register_fn+0x29a/0x540 [ 713.456676][ T9332] iptable_nat_table_init+0xd0/0x2d0 [ 713.461990][ T9332] xt_find_table_lock+0x220/0x360 [ 713.467043][ T9332] xt_request_find_table_lock+0x22/0x100 [ 713.472701][ T9332] do_ipt_get_ctl+0x6e2/0x11a0 [ 713.477490][ T9332] ? do_ipt_set_ctl+0xe00/0xe00 [ 713.482378][ T9332] ? nf_getsockopt+0x21b/0x280 [ 713.487171][ T9332] ? __lock_acquire+0x7ea0/0x7ea0 [ 713.492214][ T9332] ? trace_contention_end+0x5f/0x170 [ 713.497519][ T9332] ? __mutex_lock+0x1ab/0xae0 [ 713.502217][ T9332] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 713.507874][ T9332] ? mutex_unlock+0x10/0x10 [ 713.512399][ T9332] ? __might_fault+0xa6/0x120 [ 713.517091][ T9332] ? __lock_acquire+0x7ea0/0x7ea0 [ 713.522142][ T9332] nf_getsockopt+0x25e/0x280 [ 713.526761][ T9332] ip_getsockopt+0x19b/0x230 [ 713.531374][ T9332] ? ip_get_mcast_msfilter+0x3c0/0x3c0 [ 713.536851][ T9332] ? aa_sock_opt_perm+0x74/0x100 [ 713.541809][ T9332] ? sctp_getsockopt+0x9e/0x8a0 [ 713.546677][ T9332] ? sock_recv_errqueue+0x590/0x590 [ 713.551889][ T9332] __sys_getsockopt+0x1b0/0x230 [ 713.556761][ T9332] __x64_sys_getsockopt+0xb1/0xc0 [ 713.561802][ T9332] do_syscall_64+0x4c/0xa0 [ 713.566235][ T9332] ? clear_bhb_loop+0x60/0xb0 [ 713.570927][ T9332] ? clear_bhb_loop+0x60/0xb0 [ 713.575631][ T9332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.581542][ T9332] RIP: 0033:0x7f4f80d9e159 [ 713.585971][ T9332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.605601][ T9332] RSP: 002b:00007f4f81d5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 713.614057][ T9332] RAX: ffffffffffffffda RBX: 00007f4f81025fa0 RCX: 00007f4f80d9e159 [ 713.622049][ T9332] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 713.630039][ T9332] RBP: 00007f4f80e3506b R08: 00002000000000c0 R09: 0000000000000000 [ 713.638065][ T9332] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 713.646057][ T9332] R13: 00007f4f81026038 R14: 00007f4f81025fa0 R15: 00007fffad3c6248 [ 713.654063][ T9332] [ 714.413772][ T14] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 714.620553][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.642626][ T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 714.672637][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.714554][ T14] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 714.725673][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 714.734090][ T14] usb 2-1: Product: syz [ 714.738405][ T14] usb 2-1: Manufacturer: syz [ 714.765565][ T9327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 714.784741][ T14] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 714.820656][ T14] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 715.845726][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1317'. [ 717.387300][ T7] usb 2-1: USB disconnect, device number 17 [ 717.403821][ T7] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 717.413734][ T7] garmin_gps 2-1:1.0: device disconnected [ 718.609775][ T9357] binder: 9355:9357 ioctl c0306201 200000000080 returned -14 [ 718.626924][ T9357] binder: 9355:9357 ioctl c0306201 2000000003c0 returned -14 [ 718.843808][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 722.849565][ T14] usb 4-1: device descriptor read/all, error -71 [ 723.344398][ T9388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1336'. [ 725.424764][ T9398] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 725.432338][ T9398] autofs4:pid:9398:autofs_fill_super: called with bogus options [ 727.693562][ T9416] NILFS (nullb0): couldn't find nilfs on the device [ 728.163722][ T7062] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 728.303245][ T9428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1347'. [ 729.516114][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1348'. [ 730.549889][ T7062] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 730.574628][ T7062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.685998][ T7062] usb 5-1: Product: syz [ 730.690211][ T7062] usb 5-1: Manufacturer: syz [ 730.694965][ T7062] usb 5-1: SerialNumber: syz [ 730.769046][ T7062] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 731.870791][ T7062] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 731.887542][ T7062] ath9k_htc: Failed to initialize the device [ 732.014246][ T7] usb 5-1: USB disconnect, device number 20 [ 732.282352][ T7] usb 5-1: ath9k_htc: USB layer deinitialized [ 733.366287][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'. [ 735.390130][ T9469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1359'. [ 735.992958][ T9475] befs: (nbd3): No write support. Marking filesystem read-only [ 736.031131][ T9475] syz.3.1360: attempt to access beyond end of device [ 736.031131][ T9475] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 736.423908][ T4326] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 736.641052][ T4326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.653829][ T6217] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 736.673864][ T4326] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 736.684176][ T4326] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.711232][ T4326] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 736.756382][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 736.869254][ T4326] usb 4-1: Product: syz [ 736.873588][ T4326] usb 4-1: Manufacturer: syz [ 736.892773][ T6217] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 736.912047][ T9477] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 736.927017][ T4326] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 736.934640][ T6217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.974114][ T6217] usb 1-1: Product: syz [ 737.042090][ T4326] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 737.079930][ T6217] usb 1-1: Manufacturer: syz [ 737.166871][ T6217] usb 1-1: SerialNumber: syz [ 737.754416][ T4358] usb 4-1: USB disconnect, device number 15 [ 737.775356][ T6217] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 737.795209][ T4358] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 737.869011][ T4358] garmin_gps 4-1:1.0: device disconnected [ 737.918001][ T9490] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 737.935782][ T9490] autofs4:pid:9490:autofs_fill_super: called with bogus options [ 738.252369][ T4358] usb 1-1: USB disconnect, device number 16 [ 738.286958][ T9500] ------------[ cut here ]------------ [ 738.292686][ T9500] fmt: 'level=%s [ 738.292686][ T9500] ' current_buffer: ' <...>-4455 [001] ..... 80.804584: dwc3_ctrl_req: Get Device Status(Length = 0) [ 738.292686][ T9500] <...>-1970561396 [001] .p.35 80.859877: Unknown type 25955 [ 738.292686][ T9500] -0 [001] ..... 80.885109: initcall_level: level=' [ 738.292894][ T9500] WARNING: CPU: 0 PID: 9500 at kernel/trace/trace.c:3891 trace_check_vprintf+0xd4a/0x1080 [ 738.335946][ T9500] Modules linked in: [ 738.339856][ T9500] CPU: 0 PID: 9500 Comm: syz.3.1367 Not tainted syzkaller #0 [ 738.347256][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.357322][ T9500] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 738.363298][ T9500] Code: e8 9b 20 fc ff c6 05 93 49 86 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 20 84 90 8a 48 8b 74 24 60 48 89 c2 e8 b6 93 c7 ff <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 738.382921][ T9500] RSP: 0018:ffffc90003a7fa60 EFLAGS: 00010246 [ 738.388995][ T9500] RAX: 953feefb75094d00 RBX: 0000000000000000 RCX: 0000000000080000 [ 738.396975][ T9500] RDX: ffffc90010a50000 RSI: 0000000000009587 RDI: 0000000000009588 [ 738.404950][ T9500] RBP: ffff888075a080d8 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 738.412919][ T9500] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffffffff8a800540 [ 738.420936][ T9500] R13: ffffc90003a7fba0 R14: dffffc0000000000 R15: 0000000000000002 [ 738.428935][ T9500] FS: 00007f788c0f46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 738.437898][ T9500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.444525][ T9500] CR2: 0000200000009180 CR3: 0000000058efe000 CR4: 00000000003506f0 [ 738.452513][ T9500] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 738.460522][ T9500] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 738.468521][ T9500] Call Trace: [ 738.471806][ T9500] [ 738.474797][ T9500] trace_event_printf+0xea/0x140 [ 738.479748][ T9500] ? trace_print_seq+0x160/0x160 [ 738.484722][ T9500] ? trace_raw_output_prep+0x230/0x230 [ 738.490195][ T9500] trace_raw_output_initcall_level+0x93/0xd0 [ 738.496209][ T9500] tracing_read_pipe+0x53b/0xb10 [ 738.501224][ T9500] ? s_show+0x300/0x300 [ 738.505427][ T9500] vfs_read+0x2db/0x960 [ 738.509620][ T9500] ? kernel_read+0x1e0/0x1e0 [ 738.514290][ T9500] ? __fget_files+0x28/0x460 [ 738.518907][ T9500] ? __fget_files+0x3fc/0x460 [ 738.523653][ T9500] ? __fdget_pos+0x2ae/0x360 [ 738.528262][ T9500] ? ksys_read+0x70/0x260 [ 738.532622][ T9500] ksys_read+0x14d/0x260 [ 738.536929][ T9500] ? vfs_write+0x9a0/0x9a0 [ 738.541373][ T9500] ? lockdep_hardirqs_on+0x94/0x140 [ 738.546630][ T9500] do_syscall_64+0x4c/0xa0 [ 738.551061][ T9500] ? clear_bhb_loop+0x60/0xb0 [ 738.555776][ T9500] ? clear_bhb_loop+0x60/0xb0 [ 738.560470][ T9500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.566407][ T9500] RIP: 0033:0x7f788b19e159 [ 738.570832][ T9500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.590546][ T9500] RSP: 002b:00007f788c0f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 738.599009][ T9500] RAX: ffffffffffffffda RBX: 00007f788b426180 RCX: 00007f788b19e159 [ 738.607041][ T9500] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000009 [ 738.615070][ T9500] RBP: 00007f788b23506b R08: 0000000000000000 R09: 0000000000000000 [ 738.623059][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.631060][ T9500] R13: 00007f788b426218 R14: 00007f788b426180 R15: 00007ffe535c04d8 [ 738.639096][ T9500] [ 738.642133][ T9500] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 738.649423][ T9500] CPU: 0 PID: 9500 Comm: syz.3.1367 Not tainted syzkaller #0 [ 738.656806][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.666868][ T9500] Call Trace: [ 738.670154][ T9500] [ 738.673102][ T9500] dump_stack_lvl+0x188/0x24e [ 738.677778][ T9500] ? memcpy+0x3c/0x60 [ 738.681771][ T9500] ? show_regs_print_info+0x12/0x12 [ 738.686976][ T9500] ? load_image+0x410/0x410 [ 738.691517][ T9500] panic+0x2d3/0x710 [ 738.695429][ T9500] ? bpf_jit_dump+0xd0/0xd0 [ 738.699969][ T9500] __warn+0x2f8/0x4f0 [ 738.703954][ T9500] ? trace_check_vprintf+0xd4a/0x1080 [ 738.709336][ T9500] ? trace_check_vprintf+0xd4a/0x1080 [ 738.714846][ T9500] report_bug+0x2ba/0x4f0 [ 738.719185][ T9500] ? trace_check_vprintf+0xd4a/0x1080 [ 738.724574][ T9500] handle_bug+0x3a/0x70 [ 738.728742][ T9500] exc_invalid_op+0x16/0x40 [ 738.733259][ T9500] asm_exc_invalid_op+0x16/0x20 [ 738.738110][ T9500] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 738.744097][ T9500] Code: e8 9b 20 fc ff c6 05 93 49 86 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 20 84 90 8a 48 8b 74 24 60 48 89 c2 e8 b6 93 c7 ff <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 738.763694][ T9500] RSP: 0018:ffffc90003a7fa60 EFLAGS: 00010246 [ 738.769753][ T9500] RAX: 953feefb75094d00 RBX: 0000000000000000 RCX: 0000000000080000 [ 738.777733][ T9500] RDX: ffffc90010a50000 RSI: 0000000000009587 RDI: 0000000000009588 [ 738.785713][ T9500] RBP: ffff888075a080d8 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 738.793692][ T9500] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffffffff8a800540 [ 738.801656][ T9500] R13: ffffc90003a7fba0 R14: dffffc0000000000 R15: 0000000000000002 [ 738.809680][ T9500] trace_event_printf+0xea/0x140 [ 738.814628][ T9500] ? trace_print_seq+0x160/0x160 [ 738.819567][ T9500] ? trace_raw_output_prep+0x230/0x230 [ 738.825056][ T9500] trace_raw_output_initcall_level+0x93/0xd0 [ 738.831049][ T9500] tracing_read_pipe+0x53b/0xb10 [ 738.836019][ T9500] ? s_show+0x300/0x300 [ 738.840190][ T9500] vfs_read+0x2db/0x960 [ 738.844356][ T9500] ? kernel_read+0x1e0/0x1e0 [ 738.848948][ T9500] ? __fget_files+0x28/0x460 [ 738.853580][ T9500] ? __fget_files+0x3fc/0x460 [ 738.858267][ T9500] ? __fdget_pos+0x2ae/0x360 [ 738.862875][ T9500] ? ksys_read+0x70/0x260 [ 738.867223][ T9500] ksys_read+0x14d/0x260 [ 738.871497][ T9500] ? vfs_write+0x9a0/0x9a0 [ 738.875923][ T9500] ? lockdep_hardirqs_on+0x94/0x140 [ 738.881135][ T9500] do_syscall_64+0x4c/0xa0 [ 738.885581][ T9500] ? clear_bhb_loop+0x60/0xb0 [ 738.890251][ T9500] ? clear_bhb_loop+0x60/0xb0 [ 738.894940][ T9500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.900851][ T9500] RIP: 0033:0x7f788b19e159 [ 738.905281][ T9500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.924908][ T9500] RSP: 002b:00007f788c0f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 738.933339][ T9500] RAX: ffffffffffffffda RBX: 00007f788b426180 RCX: 00007f788b19e159 [ 738.941332][ T9500] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000009 [ 738.949326][ T9500] RBP: 00007f788b23506b R08: 0000000000000000 R09: 0000000000000000 [ 738.957329][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.965325][ T9500] R13: 00007f788b426218 R14: 00007f788b426180 R15: 00007ffe535c04d8 [ 738.973326][ T9500] [ 738.976628][ T9500] Kernel Offset: disabled [ 738.981007][ T9500] Rebooting in 86400 seconds..