last executing test programs: 2m56.923952683s ago: executing program 1 (id=5482): mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 2m56.722398735s ago: executing program 1 (id=5483): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b15, &(0x7f0000000080)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x10, r1, 0x5708d000) 2m56.632529444s ago: executing program 1 (id=5485): creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa8, 0x14, 0xef, 0x20, 0x108c, 0x159, 0xda8d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x0, 0x0, 0x9b, 0x43, 0x6c}}]}}]}}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0xe, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x8000) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 2m55.333413583s ago: executing program 1 (id=5490): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) (async) accept$alg(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast2, 0x5}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@llc={0x1a, 0x1b, 0xe, 0x4, 0x8, 0xc, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)="43a3d513687858b6d319ce99660b7a87ef61d8aaad8236d71fda5f34a85aaf7b1bc75fae39a1ceea507f7d810b2e26b096f7e022377fd52739e8c5bb95e93e631f66e168c1c59ebd78882a3dbaac6a603f88aed830637dbe25b60fbc02f36121dd4477ac78e0a9d95bdfca6a7cfdb5ae49be3446", 0x74}, {&(0x7f0000000240)="cc1a58e8ea4458468098f218eeea6a5044c6dd0e1fae941fe8e716283aff826d84d59d5de51fb0caff216b606957", 0x2e}, {&(0x7f0000000280)="4a8b8972dde9c1278c8f1f7020340ab92aabaaf49da452b45daf57d0099a682faa183c84e2c50f1323b66f3c08e1e534f130fcb33b7ece71fee4b77ee6c3e30f6cc408ed7713504f69c5ce0d9dc4ab13645d331fe553b0a3", 0x58}, {&(0x7f0000000300)="7e4a27524e609b3d9c7babfd62bad022067bfb7a2d974dc03e233b3edfb845165dd6d31f6a31e19b498b20cdc37ab7d4a41a23486a007450da6e41ce7a71043f17a2219d78b55bf8807f45da234e4dac946391ccb51ee30029fbe1c3acda", 0x5e}, {&(0x7f00000003c0)="fa3be6128241336e606d2a5908d4041c16c5275d823f3d8307ab361a4f1292d8e1ce8179747b53c89ab2a77bda24cc2218c82829f08b288f2f0e65e0badc311fbaefa181317e404827c4a075cf0fc087", 0x50}, {&(0x7f0000000480)="65f00db8a1029ba060dc9e57fad76d3f93fef9db0d14d13e98ac543e6ca3ea1dd1a8a4392a8f855bb3ff773226a70e3b232949358d51d2423dcafa5706d07995bdd5fa4d5049dd0e6e9843855484751f0b1d334bd51932932e80b68fc03fe9715c65482a1f280deeac48258512d7b3f66c204ead8b9de711deca86561164b3d98a504e7ec37bc671be0966e6a8f555cba730b34f2601145b179c7f41cf9dcba93eb65a7b3c49486f256682eef3324409e203f8f28fcb0a155e81cc9f80d2311206ece175dbc90fe8452068", 0xcb}, {&(0x7f0000000a00)="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", 0x121}, {&(0x7f0000000640)="c2454f583bf6d7cc16db83d874846da169300563d2357ab2b76a90fafd8cf7ef1909daf3f6f6e747ab4eddac984bc905647413e4943b1bebd7d9d838a0439bf57a7c066132504a0b", 0x48}, {&(0x7f0000000580)="25a79ae1df83292c38f842c9f8077f1b60ddc82cea82abda453a60e4949cc3a16c7579e1f6a1affadbda5871abba63993cb8ae9d694a30096baf9bb165e2ee52be64d3ff8fad8767833f7fdfd6d298fbb1e9c6b0fe7fafd540af7ed30cd52cfc57e75cf1001d1f6fd646f3f7248f281ffb466b214b96c48e01ce5619de91a17468b30ad9606ac2ed00006fc5da6be13856b38b13c8212d4392d43bbab80493461c442a837879c0c0afcc5d9340ec218994de099c2fdf11", 0xb7}, {&(0x7f0000000780)="53bb4ca8240a1b88d5b56a06983f9ca985d3e53aae1e092cf8fa8dac86635139ec670ee1372020bb3c75694c7e5205131f04d6f3f37463be6fffc07284c2c07031232cc9a2602f4a05f67480caca8524ad17bcc9e8ca9ece9defad86b3dc7c5ef956240fa4fe5c307a93d6293905558183a953b903458f60a7bdead8a5a7ed6aa66286093c2f39bd8be0af7037127f4778aa9aab0356d4fd22b8af078a8728ccf1ac3ba3e4c92f7b427ca6", 0xab}], 0xa}, 0x85) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f00000002c0)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="94000000120011"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) (async) dup2(r9, r8) (async) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x4f27, 0x0, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x1ff, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x8, 0x3, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) (async) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r8, 0x7dfff000) r10 = syz_pidfd_open(r7, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0xff05, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) 2m55.176076405s ago: executing program 1 (id=5492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x8003, 0x3) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3fff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) recvmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000200)=@vsock, 0x80, &(0x7f0000001380)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000001300)=""/121, 0x79}], 0x3, &(0x7f00000013c0)=""/132, 0x84}, 0x3}, {{&(0x7f0000001480)=@nfc_llcp, 0x80, &(0x7f0000001580)=[{&(0x7f0000001500)=""/78, 0x4e}], 0x1, &(0x7f00000015c0)=""/76, 0x4c}, 0x4}, {{&(0x7f0000001640)=@llc, 0x80, &(0x7f0000001980)=[{&(0x7f00000016c0)=""/251, 0xfb}, {&(0x7f00000017c0)=""/4, 0x4}, {&(0x7f0000001800)=""/138, 0x8a}, {&(0x7f00000018c0)=""/39, 0x27}, {&(0x7f0000001900)=""/124, 0x7c}], 0x5}, 0x8}], 0x3, 0x22, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8541) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) fsync(r2) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 2m55.120921532s ago: executing program 1 (id=5493): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2m39.059528872s ago: executing program 32 (id=5493): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 10.198866702s ago: executing program 4 (id=6502): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='ntfs3\x00', 0x1008010, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) getrandom(&(0x7f0000000080)=""/289, 0x121, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r3, r2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x1c, 0x2, 0x0, "1a010100111400000100b64cd11e005c4b7c150000000000b200", 0x41416770}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) 10.051364967s ago: executing program 4 (id=6503): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0022220000009523b3"], 0x0}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="d0f16eb5abe2e56f861d632f80e6a8ebe2246cbf044c845cb067cbe8c2c96618a2620356789b29162e40028ea61c26c04c2778e9f06f1a77bea8999e5923ecce5b98134580e26a3fe5f65aef7eb5706e22e769c752424bd014a492caee6d4f3ecb68c46d4e57ac8e8bb02f1c02517b309a4d91217859e26fcd220cf845eb5da7d522873a7127ef83444a85b61fe57422c66355a2cdceae0b24f8f8c994f0fcec2b47d4274ca50f6d3e7f493c05462d188104d25fbada38ea6204131d6b6254a19ff00f51e3e612f5d8d5b0ed002e6a23", 0xd0}, {&(0x7f0000000000)="72189422e64df6f94f50fb93e01ab1395d324755710eb5976679cad383478c7aff6e4522065634ec5bf847fdb8f30094c1f6", 0x32}], 0x2, 0xffffffff, 0x6) 6.948190495s ago: executing program 0 (id=6530): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4) readv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000002500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000002540)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000002580)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000002640)={&(0x7f00000025c0)=[r1, r2], &(0x7f0000002600)=[0xfffffffffffffff9, 0xfffffffffffffffa, 0xeee, 0x8], 0x3, 0x2}) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000002680)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000026c0)=0x10, 0x0) setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000002700)=0x80000001, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000002740)=0x2) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000002780)={&(0x7f0000ffd000/0x2000)=nil, 0x6519, 0x2, 0x56}) connect$llc(r3, &(0x7f00000027c0)={0x1a, 0xfffe, 0x7f, 0x7, 0x6, 0x2, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000002800)=0xd1, 0x4) r4 = syz_open_dev$dri(&(0x7f0000002840), 0xb, 0x290040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002880)={0xc, 0x7, 0xec95}) r5 = syz_open_dev$sndpcmp(&(0x7f00000028c0), 0x7f, 0x4502) ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, &(0x7f0000002900)) r6 = syz_open_dev$vcsu(&(0x7f0000002940), 0x9, 0x400000) write$snddsp(r5, &(0x7f0000002980)="09f9ae984f8a411e53e708be055ef3c31d013bbd06bbafe639c4f3197555093734e874826dd65464b0effbac94596715dcc35af95196e35a4d538e1bcbee2cf786e9501bd7c4176a673017ae32e518ed9aaf5c4c46da663c893a7c7e175383ea45e2f2044038acf89f5b6509cdab6adcdd3c51fb7d4cb98c6951911d06", 0x7d) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000002a00)={0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000002a40)={0x2, 0x8, 0x4}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000002ac0)={0x1, &(0x7f0000002a80)=[0x3]}) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000002b00)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000002bc0)={0x0}, &(0x7f0000002c00)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000002cc0)={&(0x7f0000002b40)=@in6={0xa, 0x4e20, 0x5456, @remote, 0x4}, 0x1c, &(0x7f0000002b80), 0x0, &(0x7f0000002c40)=[@authinfo={0x18, 0x84, 0x6, {0x24d}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x1, 0x4, 0xffffffff, 0x8000, 0x40, 0xb, 0xffff0000, r7}}], 0x48, 0x4001}, 0x40001) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d40), r6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002e40)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$inet_sctp(r9, &(0x7f00000042c0)={&(0x7f0000002e80)=@in6={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000004240)=[{&(0x7f0000002ec0)="676b9642554a761796cb34eb90cddda6e0b23dd41545b4b04a64b5695b426e0f185fb97e4c4c386a9543d52d696cb0ac791d11a4e68a9f9ebc999e3355", 0x3d}, {&(0x7f0000002f00)="b296673cad01e04e26cb1b954b343daf82eaaa3c9ecdaf31428bc3aaf7af8de54c558dae2afdb285d7520d56183e7c36f90331b6ae3f25c2e88c95e79e59ee042fae4cc5660173a10b", 0x49}, {&(0x7f0000002f80)="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", 0xfa}, {&(0x7f0000003080)="be94e219dfca0baf70e965323382ae944f2368df95d97eb0d67944d3ef4cec986b974f04b5d533f2bb1119b1ed1be413ab9130d695fca8b50b15e6762237ae817f9a08ec2475cc17fe603b3141a30d697ed1b892e54bdd26cfa9b607b269990a4b10680c0e1e74a84916856da853a0b71f3c909410207d2295fce0eca266e78b890d84c856f984652ee144f69d91172f7818d812c0ab4142cbb77263ca54d2c561230f11904db3ce30603c0f3c070c314e68f2329cf956131ad191f9c946975a3ff957cf1345a23eae8dd8a24ba8f4cc98d7c590acf67b8e531e04842a7b3018437ad2eaeb6e1c949b9af99cef16cd3d0633423c2cd0b33f0f42a4b69895c461e02fd4bc4a9d8142809d60f53e75442331f2ea991f287ca217ad97671381a879b0e46f9d1d445c685a12181182208e785c168ffe919a21897f693b166472f2362102a96f52ccf5ace7c2c3259ce51f3a16663961db28a47a64c4c73da5e3ae599f7992918fab2610b681abc007bc4c362e288a5655a03b494c722e59f18c916e50bc73244e4c7661d4df0bc75c1940018d6f3689ec802542bcefbd9abf8dc40e48d32b6233acd31f24bcd47bce8717cdef159abc44edd4c65bdd804c34f06d6c7b7cc9d896fb6f3b937f4d399d1701e641143dd2c708cc95c68c9883093b2c37a5c327c70b6154003e2e1f999dfed6d31b7d13a158d95b399fc37495c623f061b32502e2b356b2772db2380251d5219daafa51281e0ab70b93a4b3169df0aeb9a4d28ba3ad43e658505162fa005f9037bccef236d8ffa2224cb24c7e945b72595f55d4519971f0e6e2e9ca6745827df4a0709b9a77773bee26516099ad2778ddcff980192be7d81564c9f7fabf5378fe7c0758276a0d5cfc89fb549b0df455b8ce7d2d402b8992f75b65241b75d5a03dff81920820f7028176bb562efe0b9bbf9c955c5bfeb89824a3f721ff3ecdf643e0016610ae11d3a2c9dbc386e4689163dd5721a8dbb8951ddce04b299fd4a88da80b10daf8131e0538736bef9f85a28bf3c5dd93cb4b6dfb760a833514206aa44f7dd6e7734da320b7b092eaee70c338f62b8ea4ee0ba88b99dbd2b09cd2553fc9a6579fdb096acd48beab0249e92f609702c9646ec04865996c47ffbf92bc46906a62379928d23a7755d58c753078d3b18eb8dea5f4943ebd454f3c946299788ca19201214cb0ff28879f62fd09e35e23752de638f9b9bb8c86469f0ff24aa9cfba93a041a789f0c2fb310a7c68cd29e2eba4766cc675b60fa20cd7bb9b6cb1ce5e7cbeda4d131261967c888d680cc13fa8f0e5d516a3e94439e1f3141e46b226d6f63783a233fce96a34c6e2ed2696bc7392f5bbd4218a24759bcb43319fc08c68ae77491601e2900b3a3cb63143f84a1c2f5f266e74f2e4443bc809df8730fa2a4ec914f18e2aea33a442c2d82fb3777ae00a94466cc8dc8c2c6072053db34d91e7d391c3d204691a2706a10a3ed1bb937eed9b4b45fd4c95f749194ad07075d4d4916c3b550ef231ef503aebc9610ab7326e98ee28106997ee738b4c049351c53010b7012d330131da155f85c34d9e8f834557d4c3ddb16189f1371ea78e58759e4bf0ef044c60409ce48fbdabef7c5a5d40e42800d94124f6326a0ca089f7d5227d760ee9c1685c20a1322df4cb07a2af152fca33f5fc2bfec20b0b5dac32db42685c1004c93ba5d38e1a8cfb15aba6ef221f5cb897c6e064f41a5aeba39d159bfd0217d1ab857810a8bf98e96d3db9a8d900dc0d5c48b526af12566e4279dc254f5628f0ebad3b7239d3a49f23c657854d81ac1531210c32e30fb91b10b4dd8b8e1b67e936a39f1210c904691b0b6f3ac28b27e0aee5b443c7db4998e7ddcb6d7601b9507d71b78597cebcd5c4365268a0ddda36cc1875660370a58f19dfe09ea5bb3c0ee0c1fb82dde34e84fbbee06a1e1c608dc70fd4e277e7b5c48df3f62e5f4fc2a10c9c5d63d3db677f3e9022da0c0b38549eb9a73f5c774c043c5adf92f768b662782f17b16c63e2e05217b0b4c8710a4da606b798b504cca6816d99a3d062e0ca5c7d9b8dfbcbee6980225fc17b6115cc914f8144e3816535cbcf3f4631caa84c7b92f7eae15ce783ce8f428b07c478cee14d924fcc442c4ab8ccb977832713ee6ff3c43eb4181e18aeea6ac1fa66fa1234258e2e86571956c5fabd8e08f0b5a9ff9b56d214d0364fd88346d247633df20dab3f6b564268c4f584b9e683d98d0971ba1ff1f9f81e42e2030c2b94e576ab35c2ac808e7755edd0ee851b7c916b0421ffbdb829dca0580793bfeb33ec2804ea6ced5cf4e32102d28ca6b3fbe2ee64f6e137da848225867f2072e4c9aa94c0eea294a67d1eabd7f41265b34647614747cfa8f77a4740ae0ef38c4d2ae591c7cc0f1d8a3db86775321748c16cc99f3e4ed8e1cdf83ac8194510f0defba525be7bbd068dc51a727cc2f6c0abb16a66622cd1ec66d3a12d55b1262d7f2a5aca828ea0892a55eefd717aa4b2bf0216ad39373d6e3481fa39f7515b7bcfa74e5a09ea9af18649bf75cb4a892dd21e0b6bc34ddaf91d4913532f026beadfad65a84d6fdf004aed6fbcdaeded1e44d55e34e97886bbe82aee2cd601ae2c93e75fe7ea5126e0cf04506760bbbf285c82bdd561597134e653321679b32773d29d28a79c262d32a1c8e3f8b00ce41e4e079ad65ea78a7ffe25f84c3d0e41c7683f23c39d49ab25feb6ce1b0d644b8de9e582fb1231a5272b743af3700e467b0590217e2d60bc36ac681fd7598def92310866f37289c791fb6e8b3d6233128167ddcc57674e22ba59b4adff550d3b3f4f2ebe47325ad921da692c9ab00de4d0cdb6e9bf041bd31048dd20a569af91b824e8e1bd42b1a551f58d37ce4f892a587b310d635340eed523384ea1bb65eaff4c318818b6868628ed523729f6edaa4aa83333d7fc13cf1edc9fae481fff41b21ca956b123e067cae2a7d5f38a6a2f7926084d2d16360ad5882c5639e4a2bb26b0bafa4e56de166494e72368154b268123c27ccf0a87e8a0bb3e6d89db7471b67cc352d2a6387c004771ff32d03453b766b1448de409e6f5d5408dbc41c1c8274a42cd2c3457699d1ef7d410fe11707622ce5b2e30d4de26b6a2ca27c45e9362f897fb26a02d1d755f890977deed4ddac51e306addde772385de908e0fefd9c67d49cb314e4985fd3fdcda347f76801f08fac27e35d4ef7f9ff815048ec373981714183106d3c4cb8a901dceb35c3bdee20a79a98952cf308eadf4ad0167d1ecc445d14cb22b22bbcd5e0068e6cc55c9faf1574694748d14ee07c5b4ebecae55fb13999603cdff35f27dcc03fa452cc0dd7674d840c369911fd0a4466d2f1def7b3cb6876453a43e5782664e8a3f1d8aceff150438f1cf9dad545deeb29e79f89f2e2d3f1ce48006e9ce919d8b475e5064e16b9f418639c7eeb62ed920be53978dc5e62d056ac5ce20c46c63bef0ee5b0faa29b87e5b3739a16e5e35ccbe3acdf8dfa4bd88a109c47ae9b944dbecd166ff213e984ccd60bf3d4381b983c30c9ce160f48e12675e75497e2acd9c50b64206a00c687bfa6e84b30df7e798cb0469058bf5d5b0dbfc1af4d9ec8512d53f782838934691c3097034aa67775ba2ef6de649fdeb3251e3ca9f1aeb57e013e938c9919c389ad5e67c707b5d5676210ba5f7b93889a16d96677d1aa176c2cfbc7b0ce5d29eb2d7de4813122335b28bfd51a8bf33b78ae5155e1e569ff4d098879821889f09c85328c877a52321b3753e6abc5618cc8abf19bcefe57d53dc5de9222cd3052a52ec035ca59717b19cccfa7afabb938f7fa9501b6ec3aab844503779a0dbf2fc640f3f4dfb76fd510679179e1609f8809694c0cc21c5d67381f23f5d9075aeaf447041c403e77295b84ca34e2a52f3e5d1c8cea7303d7652eed77a724d26edd898f95d34b6d63a6c8e64780185d3cd41c0e4978d7b881ef6f90942263861b925a98e01b2bdbf00b0e3a638370f245e3374af3869f93d214564a97db48b17b3dbcaa97469a830a9fa47bada678194c2ea8220d326584ab0ddccf64113a0ba376d5e90ed355f921f30393567d4902417d87176a369d831e0d791ed6ae05c2268bd095a16a40c1304a05ca1844cddf2d45235eb0ff626780d09ed093e395c139dac4117d307c4b59a683f8ab2e535c66909f75222f6da719b12f6c98cd7f16f94d353e93b6feb130a18e8613fb2b556635750094e96cf61c588912404e59d2b0d317166326d217eb38912faeadf8bbeb4cb94c4762b929485fddc169d072f96f2346b0a8fbc5e5e179610416e08373453f3425dc87df9233af95d7dc087abaf8c4b9cf81e39fcdabeeab433d73b05dd1e42c7b3537b9b7603db9db50d37584ebdab01d46e76ac7bf6a50971455e1480a5c643291fbde7d3fd464bfefce0088efd3de4f1a48633503249a8d160479f9590e7485aabe10e4b17320579ad900c236ba89b7be7d71340a83c79805a502a590e9b0eed24b6bff76be4b446d94edd7a2b6f271c677f7284ce832bf9af36f2949d3e1ad77f5022652b5c38fc06becb07641be1d69b3508fda64d9df41b359624261eb9694759c68a08dab16ffa613b55602caa79d1c53cf38379fdd08ec03cb6f898f08b2321539ed190e6fb1d17b391e807b797211cc3a94621c9d69197c2c22572debc26fe8008175be648ba0ee32931b80382abc3f3f7744172741bd691a42f22e05cc43ffed34d3fdcf49067b0b48c63b3097756630d0cbb284003378a4b348e73d07c9fb322cee57c83e3938402583ebfa05ed594223f8caac4ff82b4d5cfbd227c7e200f51462b52eaf799a859bb3a754a0d68a10ffcfbd83eb0bdb56b57e057d4e4e11434860de6f735e667dd35d9458356cde669f1b29f8ead5be39f65ae8ffa42c0ca22619b7a6d0d4ff12a02fbcf070ddfe342956591a0d096e3e2e0d692843f7466e9d4383b07d57757ffe22f78cf0e536dca2b647b35bbd75410a79517ba6ff83e49fd71833c09ead4d96239b0c393e8d7ed07111b99e052dd1d9ae05ad98dfb8d5ebb3ceb56ae82065696795b192c11118a20ffbd26fb7065468181c251187b25b97f0665765ab9029fd5a18912cae5bdb25d603ac7d31c25657f21272a340aebe80be8d1c54733cd7c80a099038ddbfecbb9de26eb8c1bc7d8f59b9b871d57f9cf1b9d096b4cab3140216cb640b57bfacd3cfb5f2925fd76c79b82edc9c5a8dfa4eb9ab0e676090c721658b5c64b915c0ada8f7f2b554a660da4780264413ea0e4af3db09c6fb6e9e0dd499f34817610fd6b096ddab4ace581114b567ae91b2bfa749bde3f31ddb94f8a7c51795b52b40f264eb99658ffd1659af01d9d86ce4bd8afdfaa558499517f7fceb27f3ae27d0dcd286a3372fc7f72187d102f14b54d0249400e2157ac5a41387cb6f60f96f934ac5931068c44a72d754fe3a273f39c1964d16fb78736c5c5722bfa9417546ea9337dd6f337966ffa37c52cad341e848f43435b58de87ad0e6c37b84946f7b4310ad4bf625c0af5f3ee5e5cbf020de316269f26e1fa6f45f991f81d474b114e6d108e112542dd4f606301c97a7fb44e480d18efef91d5b1032a4e8c641f29b6ec5f13dab41d005441018a283165ffb42af0561363bfda4dbf4b6318603ad561e0715a01b01e238cb99effc61e5490c85728bef464735d05a0bc879563e38b2b27f64dda8efde648102fe250365a6f873a1d0c45ee7dc0dd063fdf73736a6c373c8b4f6e58b06738b62d0ec9f53f0404dea9489678", 0x1000}, {&(0x7f0000004080)="816de7851e0ef7f8e367dbe1deb83a8e3a17cb00f56a7580ce6ce861067ee443895ced1ff2f6", 0x26}, {&(0x7f00000040c0)="7ee0072b8edb466c5a8ae56a8c559e6b1ab7b9dfde0b6fd234e889bf950b0b8ba15edd3caabba448eec7114645d3566f6ef52b6de463618c6c497788d114970416e3c521525fb6c67a534a36c271cace7376056cdf457d2501ec1494603d67aba848e0c30bb73a31245278c06f0a11c1d431d822e7ea7dd4e19a8eb50c63ca6d0916419f7e87b2435be7eb35b733a57d7e7ac54e5b4f63ad25543f7c994e5e045287e81a61ea24a023a9505b0cc32f16c1a73350970a595e69e4a89cc7b77a61ca9c389b39e3cd", 0xc7}, {&(0x7f00000041c0)="43b4b20b50e77a3cebdd0e9a481500cd424a6b500170e816224b2467e638cdc4626f393af26c7f451b12bc728919b669445b481f85a71d257fba064f4ade797a8b", 0x41}], 0x7, 0xfffffffffffffffe, 0x0, 0x10}, 0x4012) r10 = geteuid() quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000700, r10, &(0x7f0000004300)) 6.875912721s ago: executing program 2 (id=6531): gettid() mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0xfffd, 0x1, 0x5, 0x101}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './cgroup\x00'}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1, 0x1}, 0x10) 6.803205138s ago: executing program 0 (id=6532): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x5, 0xb60}}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async, rerun: 32) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r5, r5) (async, rerun: 32) r6 = socket$inet6(0xa, 0x2, 0x3a) (async, rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x600000000000000, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4) r8 = socket$rds(0x15, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r9, 0x0) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f00000001c0)={{0x28c480, 0x4d39}}, 0x10) (async) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000005) (async, rerun: 64) sendmmsg$inet6(r6, &(0x7f0000002dc0)=[{{&(0x7f00000006c0)={0xa, 0x4e24, 0x0, @remote, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="8000102ebf77d401", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[], 0x18}}], 0x1, 0x240080c4) (rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r10, r10, 0x0) (async) r11 = syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)={0x10, 0x1b, 0x9}, 0x10}, {&(0x7f0000004740)={0x13cc, 0x1e, 0x10, 0x70bd25, 0x25dfdbfb, "", [@nested={0x10ea, 0xdf, 0x0, 0x1, [@generic="5afa18a2dee3edb8150bd7c2d334cd2dbabeb78a54f7c745b20d75c0331051a626f15c6b25be154b6eec5827d2f0913f6bf3847405350eacd18ba5ffc632f4950d81f4e416a8d8abd8920af75de37961d3fef9556b0c07181d394d656e4b96381ab834f62ab0161f551f89237fe436a26c9bc22f244e672a4493dab1e86149c552979f2ed59c30912ec3f58ba4a6a8dc274d37036620d66cd23883de2281f8d1fd0aed5c49cc771d013f7a0fd94346f9619f0dee47c698950318d33226343384fa04c7cf4b2e9e637fcb9b8e66026fa3fbc1d44e65ef", @typed={0x4, 0x5e}, @nested={0x4, 0xd9}, @nested={0x4, 0x98}, @nested={0x1004, 0xeb, 0x0, 0x1, [@generic="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"]}]}, @nested={0x25, 0x103, 0x0, 0x1, [@generic="f4c6f0fc36f0fb83b461aef03220677120f272407b6d0ba3d45e1bb167967143af"]}, @nested={0xd6, 0xc3, 0x0, 0x1, [@nested={0x4, 0x12b}, @generic="b57ac9fa8257919bab0dc780578761ff437ec8ecced86379a22f3bdfa3d1129bdf7715669f7781cae745742a1e7129aaa75de143fa351c00e99343120f9416d012b92d590f7db298c391fce3fbd90d3df317ee44d662c07b9b41cc757a851f1afc12618d154ee8bd617868b887fd10f70d6f33f3e133d9d20692187290a0dfe04822e2de7a7d7ed7483658fcfde027a8c5bf7bdeb7c97e84087f93e4f056e1f78bac447b93085beb1a91d5fa6b61", @typed={0x8, 0xda, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xb3}, @typed={0x14, 0xc5, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x4, 0x143}, @nested={0x7e, 0x13d, 0x0, 0x1, [@nested={0x4, 0x4f}, @generic="167ba184d3b05453d766b4f56cdb3821a8376895fdd684f3c486f4a72c356c7fda2771673dd3a8ffa14aac36a333f227da5b072d71722798f3574c96f9096496c5ceedd838472a53e59dd6ee67235f630b4f7a0c0005cc5fb4f221fab2ba3b56e7f8e99d0e26054b0bee5825b98c1a18975a59837873"]}, @generic="c9b8bfbfc7355b38ec4fea2462b62004416690c6cd3779f6a942047053a9ac5c50fe65aea55f1ceb355868e613607e2a13f63db34d91e0b12ee5d4bf51223d62d44ee6090ca8329fcc0dd7f138723a4080f056ae5ec582695aaa482c0431cf234c3f1b536222fda62859da0f7a84a1d8", @generic="9b4646a7728e9acc6ad13a1e4d6463681404bcd3d7625b345cf3a4beae7b1ba71c9f02897bca4ebd74d2195b0023ac27857ed7bfe82a614b196f286a17e813fcecbfa2f747a9105a80d512d35716e9d083ac97341149c955c9b4d0144ca34274c139e74347dc28f083c99a1d22d98463c3519f821b3fc5430be1b7dc8842a8e8cfa29c0f5f313cca3f8aa600d715ef1154eea2619cd863058481aaaba2447939072a09edb3cb194eb1ed8705bc08d7cf2e815b812ee60553733a0390ec015343231013c1cc0765927c6801fff5d615bd3df1", @generic="e5b7f7750521d07708"]}, 0x13cc}, {&(0x7f0000003280)={0x1488, 0x2e, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x10ac, 0x8d, 0x0, 0x1, [@nested={0x1088, 0x68, 0x0, 0x1, [@nested={0x1075, 0x107, 0x0, 0x1, [@generic="5bbe3f00b55fdc18f639f7a55e2ca6efe60b4c8e97a9ea752f0437a595bdd76c398a492631a4b3c106dbb88d671f39dd72b49b53d25630a84e0f87af29163783c2bbf4b3ba72482c9606bb4241b9eb13ec2c6a6321", @typed={0xc, 0x63, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x47, 0x0, 0x0, @fd=r11}, @nested={0x4, 0xb0}, @typed={0x1004, 0x34, 0x0, 0x0, @binary="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"}]}, @typed={0xc, 0xb6, 0x0, 0x0, @u64=0x7}]}, @nested={0x4, 0x21}, @nested={0x4, 0x112}, @nested={0x4, 0x7b}, @nested={0x4, 0x12a}, @nested={0x4, 0x108}, @nested={0x4, 0x2e}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=r5}]}, @generic="cff20cb09d6bc126b881f02d54974b73a57d6435bcac68929a30c8a3f6dd986b8f52a30b56c0cbb4fa449fd99fbc1d5b6e42b83ab8020b97772b7ccdd41809086d12d87bac2b0687646595e1f92fcca0022244e47fb5b765f1cad99ee740e30e125db59d2ccde2219726a2bb9b548bf9f105126911cbc687e72277e1b642e385ae5f26900b4127ad1e4cc32ac58adf52d977363a973799cce9060156b8a2ce6306da4a1f80cd1e78069bdc12588dc65737", @typed={0x4, 0xfc}, @generic="9ce09221c89ffb63926ade00cb7d338ebbb30d22aeeaba5523", @generic="1b4c711f6c00d9ecbada1c57c2ccc6049a6f1bd91af7e2bcd1fef6cdb599d6f96bb328738d2e75d83390d2909fa8d10c56d66c9c83f11302ff7e5b19078ae6cf23af08ed041717e7cf", @generic="c76b5617851d6be8c293214c75f4e10b0dc30b3f9eb770e59807e25e8f9eff095d2fc812d00e55b54f76bd9ba1d7f0d343ae274cf6eb3d05585fc069bd84f7f8a5ebeaac32294cdc3e59d32b3d39be92e83f2f9d28ef6787839293a1ef9e8f08e507ff03048605b9fb77e118cb79760b77023c7b2053ecd281e4222d5dbf37feb03c30a93be0564c9187d83730fef31054982ae6be128b5732ab2ed21a05e72fb065bcd97806726008e736f5e24894d301243998d66a52a728768ca7cb77063d98e449292d999a1897d61f36ef0ec30b2d291efa24faa694ca796a672e0b6afc7535ae677b7182ad0b", @typed={0x14, 0xef, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="25a9d5c6204a36de94fb6c4a0de56a0f45d6575d65b588b19b7e5748f1ea3206806d8ebc191e3f5a57afc575b5d2de8e779201771b6079f6d7d746b3c1ed6251803bd209ec8e3e67e012d9f30182afb3685a47993952d8d6a1af875a7aa1ba3d428822fa351c5380bc00102b86ac23207baf32163090fe742d59ca282cc1c035264e47e289ad78cc3ad5dfa732da4d57596e31bfd75e27d09560f318995908c59c4fc973a4e976c6806a747359378d7a54745f7d9bb2c2fa7132a500eb4047", @generic="ec93979934688a5cbe2381fe6efb1f11873abaaa2ddd063a26defae596b06be97b0557c4addcbba3292249e62cfbfa7b4cb4cf8a1e8d9e9273715b658932900e4833a904adf4cfed77d9a50570bf146ec4223740b637b881b5466664a737d54a71c7793ed07f945850553fbe9fccdd7ad841e48dac6dcf30e255474571866084e8d8e4b7e36a0adad6c50fdbf4ed37505e8211da92567ec8e2b67beb491a0a7fdf650422156cf7ed257b3c86ae7d498226d96a1ab55b631b8fae2b900953e98e7f406ce6df7432c9faa21900056f5d724532208e06d88ca493649f2a7f384205a05a0bb49c80a3c19d2cd62c4247f43a77b9da2b6d085922"]}, 0x1488}], 0x3}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25140000000c0006452ee4ec422c6155000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8c) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x7) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) 6.652244921s ago: executing program 2 (id=6533): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x208) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000140)="ed8117de3f402b95c5e06e56c859ed669e99f324fb9399d71ebb757a318a7c41e94e6dd50575b6559cc32eab4578c08fadfdc64793436ecd1a7781a591b3e813f6e01d87559380a8790487dd00a27e43a8cd62fc4a18f962c6191fa5fbf2dc06057db0dcded86074b33e519ae30e0d9a9714b5f8c0bccac6886eff2dc6444bb448ab45331b8f487bace284246109fcb74a1022fba4b4a4500249159379eb9df753922211e547877bad1f38dba7fb6367", 0xb0}, {&(0x7f0000000200)="a8a0fea1ac50cdb7db6eae3d469fd8f6de31f0629c28fa37d67b36027f5bc1c4cc920db639e74fe23929a68b020cebf5a4276d4a36cb9ce28da14ae176cadc52f61feac94533dac5b98b98763691ef56d04efde7a8573ec7e2a0fee6623a5adff289dcac13008607cef13ab7815e8e34ef699f2d0bfb717be21d8c8931eda8bd7b850487b46aa62b7bcaf1922aa4b5ff68d4e161db0273066abf3beaa8257083a48247d45e7709c85418a555f51814746a37ed3124", 0xb5}, {&(0x7f00000002c0)="b4738e46d3804494707ede93999b1384d76cbfc0f3cc43a6", 0x18}, {&(0x7f0000000300)="60b168549a2020dcac198b0068b82dd5af941374d56fdfd746c03871ec4f3e1ca78b2caa6d26e083a334a3265164e5e0b2de1cf44f91b32b0491b290ce70f662d7fa01af317c841e0fe3be38c963d5c5d1bf53e579d355fd74545e5f0e89c4b185cdbc062649610646e1596e60cd8f32da449e3538be17551d9c47dfc852cc8fca9f2893d2df5291cca52c039aaf6877e1bf38d995f7b8d60116ccd5370c4a7188dcf15a45ce930f48e340cd44ad58e7d9c611e25b48de7feb300da87b35d0a290d2e1bcae4765931dc87308d34dbb4c265fb15b62e500feebd82a3d4fc2e5aedc993ee56090ad050bf38e0b3870", 0xee}, {&(0x7f0000000400)="50e03308493fefcf3022ed1999e63533305cc9bfca502d4e6df0928b39ad46bc7b29e9fa2cd309efa3f9a887bd4bad7d29999b52d5115e1aee8d9b6d3668387e6ea44b506819bc89a8b253022f3d4654651d6e8f329fc0c59ca567898e2dc1295f6800ddf8c1d0d3578e046be4f21d407ea1d70adbdd51b4bf64805bb33d68018816d299a034fefd9a747b80461516ad8764d610e0ba7abc0e69fd8869506d3c1b6de06e418d8fd76b7e22e1cc9fcb140ab970af112eba555dd890a1ca1901ab6f2cd494", 0xc4}], 0x5, 0x6, 0x4, 0x8) 6.572220604s ago: executing program 0 (id=6534): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2400000044fe80000000000000000000000000002a37200000200002"], 0x6c}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='noinode32']) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x4e, 0x0, "966e49d5b8a5f9bcbb98226a8aa02da2fa3bc307e45f0ac0835e9df4172024ab39323390f33b09244f06fade849a1328407c710ad5f3d8132174a1ad1a6bd5a5b361d6681b400175cd366a76294b5610"}, 0xd8) (async) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0xa0}}, 0x20044000) (async) clock_gettime(0xa00, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xa) (async) setuid(0xee01) mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68) (async) creat(&(0x7f0000000080)='./file0\x00', 0xac) (async) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x88810, 0x0) 6.510156321s ago: executing program 4 (id=6535): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x10d101, 0x120) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r3, 0x0, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0xa, r3}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x400000008000f28, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x200, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x10d101, 0x120) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r3, 0x0, r2}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0xa, r3}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) pipe(&(0x7f00000001c0)) (async) splice(r4, 0x0, r5, 0x0, 0x400000008000f28, 0x0) (async) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x200, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) 6.356147922s ago: executing program 0 (id=6536): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x4, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f2, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x7ff, 0xa, "5dee000000594000"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900020073797a30000000000900010073797a30000000001400000011000100000000000000000003000085af73d9f64335b0e50a"], 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)="1c0000007b00050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x2, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2007}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff7f}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFACCT_FILTER={0x4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) shutdown(r8, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r7, 0x2000) 6.267818775s ago: executing program 4 (id=6537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, r0, 0xc3a51000) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x640000) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x8, 0x7f}}, 0x28) socket$kcm(0x10, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x5, 0x2f, &(0x7f0000000000)=ANY=[], 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) 5.17220842s ago: executing program 0 (id=6539): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffda1, &(0x7f0000000000)=ANY=[@ANYBLOB="6b0ee4b3d41b1b"]) syz_usb_control_io(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$inet6(0xa, 0x4, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) set_mempolicy_home_node(&(0x7f0000ba4000/0x2000)=nil, 0x2000, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000680)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4089, 0xff9}], 0x1, 0x94c, 0x80000000) getdents(r3, &(0x7f0000000040)=""/147, 0x93) 4.760491833s ago: executing program 2 (id=6541): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xee, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x7f}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x1, 0x36, 0x8, 0x6, 0x6}, @processing_unit={0xa, 0x24, 0x7, 0x1, 0x2, 0xf8, "ef75b9"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x1, 0x5, 0x34}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x8, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x2, 0x69, 0x1001}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe5, 0x4, 0x5, 0x1, "f69f28", "c3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x2, 0x2, {0x7, 0x25, 0x1, 0x82, 0x1, 0xca}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x9}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xe, 0x3, 0x7, 0x7}, @as_header={0x7, 0x24, 0x1, 0x3, 0xfe, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x9, 0xfd, "3c9043d2641b26"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x96, 0x1, 0x8, 0xcb, "19cead", "05c651"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x4, 0x43, 0xc1, "60d87b8868b70372"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x46, 0x7, 0x61, {0x7, 0x25, 0x1, 0x82, 0xbe}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xc6, 0x5, 0x3, 0x20, 0x8d}, 0x53, &(0x7f0000000180)={0x5, 0xf, 0x53, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x9, 0xff00, 0x4, [0xc000, 0x3f00, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0x8, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0xe, 0xce09}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x3, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a9b74480c43ce0f920e3d1c96278062a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xfc, 0xd1, 0x9d6b}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41c}}, {0xc9, &(0x7f0000000340)=@string={0xc9, 0x3, "8cc68b42c3e58dd7191bd678f91f778db6b374ad45d041e6d123e9120b11ebb8b6f95c5afbd6a957a9d88f1c588712a27a19089eb53145a6c7495f0ba19aeed2a86404c484628d914434473ba1097f2642249231611a7739bbabeb79632abad1adc17616c1897bcba17dfedbb30b413ea640a8cc0b7dca417e050d6e1fcb237344cd8bae5724814e65eaf1c6ff2888ff9d20d05f94e63e98fb946c1db836510cc3010d2e4792fb3f6fa7c65fd6a2b23483e815750bec758defdf55918da577cd12060b6802df3a"}}]}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) 3.324157782s ago: executing program 2 (id=6551): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bpf\x00', 0x232a000, 0x0) 3.323908454s ago: executing program 2 (id=6552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="310700000031f35a20e217"], 0x14}, 0x1, 0x2}, 0x0) r2 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r4, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x10, &(0x7f0000000180), 0x4) getsockopt$inet6_int(r7, 0x29, 0x10, 0x0, &(0x7f0000000080)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r8, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) recvfrom(r6, 0x0, 0x0, 0x40000000, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) socket(0x22, 0x2, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r9) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, 0x0) 2.936498654s ago: executing program 4 (id=6553): mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) (async) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) ioctl$COMEDI_UNLOCK(0xffffffffffffffff, 0x6406) 2.876528124s ago: executing program 4 (id=6554): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101841) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x889c0, 0x0) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r3 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000480)={0x1c, &(0x7f00000002c0)={0x20, 0x16}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x67}, 0x0}) (async) fadvise64(r2, 0x1, 0x9, 0x5) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 1.93666881s ago: executing program 3 (id=6557): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000019"], 0x14}}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r3, 0x93774000) 1.847915009s ago: executing program 0 (id=6558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)={0x28, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000700)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@remote, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x2200000, 0x0, 0x8, 0x100, 0x2, 0x81000000}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000101e04003100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_UNREGISTER(r5, 0xc020aa08, &(0x7f00000001c0)={&(0x7f00000b0000/0x2000)=nil, 0x2000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000003300)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x3f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x854}, 0x4040) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) syz_usb_connect(0x5, 0x3b, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xd6, 0x23, 0xd3, 0x8, 0x13d8, 0x1, 0x5a0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x3, 0x7, 0x40, 0x8, [{{0x9, 0x4, 0xad, 0x8, 0x0, 0xea, 0x7a, 0xb0, 0x80, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x7a9, 0x4}}]}}]}}]}}, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.680094846s ago: executing program 3 (id=6559): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@empty, @empty, @private1, 0x2000000, 0x0, 0x0, 0x3f000000, 0xea8, 0x500096, r1}) 1.642240467s ago: executing program 3 (id=6560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x24040000}, 0x1cea581eefa4ef3b) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000070900020073797a320000000028210480240001800b00010065787468647200001400028008000640000000010800054000000001140000001100010000000000000000000000000a00"/124], 0x7c}}, 0x0) unshare(0x2a020480) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x71) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x6b}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000001c0), 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000031408002abd7000fcdbdf250900000000000000a1000000080041007278650014003300626f6e64300000000000000000000000daf8ae226a155dec7ac185923d6236a559f802586b22b49927bf1c269bc43951ef7331e13b422d57eb02d6007cfb783185c37aa83d7e7e44121433ae15546f33568b3609160cb48a26e6285cdbd335952978076e91cd25a108ce"], 0x38}, 0x1, 0x0, 0x0, 0x4048041}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fchmod(r5, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r7, 0x303, 0xfffffffc, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082dbd7000fedbdf25090000000a0009002d1fe533aaaaaaaaaabb000008003c000e00000005003800000000000a080900aaaaaaaaaabb000005002a0000000000c7fa07a0498d444d598bf774b94baf389ed50b8940f4acea5e95d1a6104b5020d4180fb0b3248e578fc4cf946cafa8401638cebe2927115273a78f8f0eba9e43f760e189d6d0faf8abf05cc728c0df59c7b5bea1951ed74a577567683c38280fa5d224bca00e779941535404287ed6247c80aaa806b23ff0765babfeaa124f946e8affc20fe61ef6305bc6d78d91a654c9447c6b"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, 0x0) write(r6, &(0x7f0000000040)="cb", 0xfffffdef) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f00000000c0), 0x2) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 304.132141ms ago: executing program 3 (id=6561): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x20) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x9f0827d0a2334189, 0x4) 277.802077ms ago: executing program 3 (id=6562): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) fadvise64(r0, 0x92, 0x5, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) 52.163378ms ago: executing program 2 (id=6563): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x29, 0x21, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000080)) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000240)={0x8, 0x0, {0x0, 0x2, 0xb0e7, 0x4, 0xa55}, 0x948}) (async, rerun: 64) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r6, 0x2271, 0x0) r7 = dup(r4) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r9 = socket$kcm(0x2, 0x1, 0x2) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="0300080001000000000014000000450000281400000000019078ac1414bbac14020000000000000000000000000d0000010100000fff"], 0x36) (async) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r7}) (async, rerun: 32) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1}) (async, rerun: 32) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r11, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r10, 0x3b8c, &(0x7f0000000040)={0x30, r12, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0}) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 0s ago: executing program 3 (id=6564): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x0, 0x5, "d58838"}]}}, {"84ee99bcb4758d84986e49"}}}}}, 0x4d) fadvise64(r0, 0x7, 0x1ff, 0x1) ioctl$FIOCLEX(r0, 0x5451) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) kernel console output (not intermixed with test programs): iptor or descriptor too short [ 1185.904062][T21211] usb 4-1: config 8 has an invalid interface number: 43 but max is 0 [ 1185.922509][T21211] usb 4-1: config 8 has no interface number 0 [ 1185.928700][T21211] usb 4-1: config 8 interface 43 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 64 [ 1185.942177][T21211] usb 4-1: config 8 interface 43 has no altsetting 0 [ 1185.961072][T21211] usb 4-1: New USB device found, idVendor=0582, idProduct=935b, bcdDevice=be.6c [ 1185.976160][T21211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.984587][T21211] usb 4-1: Product: syz [ 1185.999558][T21211] usb 4-1: Manufacturer: syz [ 1186.004221][T21211] usb 4-1: SerialNumber: syz [ 1186.021668][T23378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1186.928087][T23421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.949598][T23421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.976897][T23421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.994639][T23428] /dev/rnullb0: Can't open blockdev [ 1187.005707][T23421] /dev/rnullb0: Can't open blockdev [ 1187.387531][ T5931] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1187.527036][T23449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5575'. [ 1187.557259][ T5931] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1187.588318][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.618929][ T5931] usb 3-1: Product: syz [ 1187.633215][ T5931] usb 3-1: Manufacturer: syz [ 1187.637976][ T5931] usb 3-1: SerialNumber: syz [ 1187.652297][ T5931] usb 3-1: config 0 descriptor?? [ 1187.852180][T23471] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1187.900599][ T5931] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1187.926776][T23473] fuse: Bad value for 'fd' [ 1188.030317][T23480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5586'. [ 1188.100124][T23482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1188.281450][T23496] PM: Enabling pm_trace changes system date and time during resume. [ 1188.281450][T23496] PM: Correct system time has to be restored manually after resume. [ 1188.399237][T23500] fuse: Bad value for 'fd' [ 1188.488016][T23504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5595'. [ 1188.560146][T23509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1188.631432][T23515] /dev/rnullb0: Can't open blockdev [ 1188.794739][T23522] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5600'. [ 1189.723936][ T5931] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1189.764358][ T5931] usb 3-1: USB disconnect, device number 57 [ 1189.769079][T23535] fuse: Bad value for 'fd' [ 1189.931808][T23543] /dev/rnullb0: Can't open blockdev [ 1189.937868][T23543] /dev/rnullb0: Can't open blockdev [ 1189.948383][T23543] /dev/rnullb0: Can't open blockdev [ 1189.955018][T23543] /dev/rnullb0: Can't open blockdev [ 1189.961258][T23543] /dev/rnullb0: Can't open blockdev [ 1189.967633][T23543] /dev/rnullb0: Can't open blockdev [ 1189.973756][T23543] /dev/rnullb0: Can't open blockdev [ 1189.980107][T23543] /dev/rnullb0: Can't open blockdev [ 1189.986815][T23543] /dev/rnullb0: Can't open blockdev [ 1190.048663][T23547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1190.135046][T23553] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 1190.142355][T23553] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 1190.149367][T23553] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1190.156310][T23553] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1190.162904][T23553] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1190.169493][T23553] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1190.177151][T23553] /dev/rnullb0: Can't open blockdev [ 1190.355623][T23557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.365076][T23557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.013103][T23572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5613'. [ 1191.031491][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1191.047387][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1191.057942][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1191.080015][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1191.088276][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1191.771838][T22446] udevd[22446]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1191.925214][T23573] chnl_net:caif_netlink_parms(): no params data found [ 1192.093871][T23696] /dev/rnullb0: Can't lookup blockdev [ 1192.232113][T23573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.239400][T23573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.247403][T23573] bridge_slave_0: entered allmulticast mode [ 1192.257312][T23573] bridge_slave_0: entered promiscuous mode [ 1192.267015][T23573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.276499][T23573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.284072][T23573] bridge_slave_1: entered allmulticast mode [ 1192.292191][T23573] bridge_slave_1: entered promiscuous mode [ 1192.353326][T23573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.375265][T23573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.471882][T23573] team0: Port device team_slave_0 added [ 1192.485741][T23573] team0: Port device team_slave_1 added [ 1192.558053][T23573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.565904][T23573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.597632][T23573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.613851][T23573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.626451][T23573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.655445][T23573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.813437][T23573] hsr_slave_0: entered promiscuous mode [ 1192.831369][T23573] hsr_slave_1: entered promiscuous mode [ 1192.837917][T23573] debugfs: 'hsr0' already exists in 'hsr' [ 1192.850513][T23573] Cannot create hsr debugfs directory [ 1193.124698][T23896] C: renamed from team_slave_0 (while UP) [ 1193.135399][T23896] netlink: 'syz.2.5619': attribute type 3 has an invalid length. [ 1193.149149][T23896] netlink: 'syz.2.5619': attribute type 1 has an invalid length. [ 1193.157498][T23896] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5619'. [ 1193.258522][ T51] Bluetooth: hci3: command tx timeout [ 1193.364513][T23926] /dev/rnullb0: Can't open blockdev [ 1193.382186][T23573] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1193.406735][T23573] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1193.421690][T23573] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1193.448012][T23573] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1193.711169][T23573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.776848][T23573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.808005][T12616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.815314][T12616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.862039][T12616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.869310][T12616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.984730][T23948] tmpfs: Bad value for 'mpol' [ 1193.992707][T23944] tmpfs: Bad value for 'mpol' [ 1194.299327][T23961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.323802][T23961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.431836][T23573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.109256][T23573] veth0_vlan: entered promiscuous mode [ 1195.133798][T23573] veth1_vlan: entered promiscuous mode [ 1195.283386][T23573] veth0_macvtap: entered promiscuous mode [ 1195.307241][T23573] veth1_macvtap: entered promiscuous mode [ 1195.396215][T23573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1195.399148][T23998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.442631][T23573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.465705][T23998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.483017][T12616] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.513701][ T51] Bluetooth: hci3: command tx timeout [ 1195.516799][T12616] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.558003][T12616] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.587060][T12616] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.827119][T21467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.851462][T21467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.916433][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.927640][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.297076][T24035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.321505][T24035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.494942][T24045] netlink: 'syz.4.5642': attribute type 4 has an invalid length. [ 1196.529288][T24045] netlink: 'syz.4.5642': attribute type 4 has an invalid length. [ 1196.726169][T24062] /dev/rnullb0: Can't lookup blockdev [ 1196.783481][T24062] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.880423][T19699] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1196.892322][T24062] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.984183][T24062] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.062301][T19699] usb 3-1: Using ep0 maxpacket: 8 [ 1197.076295][T19699] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1197.094802][T19699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.102870][T19699] usb 3-1: Product: syz [ 1197.142705][T19699] usb 3-1: Manufacturer: syz [ 1197.158937][T19699] usb 3-1: SerialNumber: syz [ 1197.161019][T24062] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.180350][T19699] usb 3-1: config 0 descriptor?? [ 1197.211445][T24081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.228244][T24081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.336425][T24094] /dev/rnullb0: Can't open blockdev [ 1197.407838][T21462] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.415290][T19699] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1197.482523][T12616] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.518265][ T1111] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.548693][T12616] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.703839][ T5862] Bluetooth: hci3: command tx timeout [ 1198.064223][T19699] usb write operation failed. (-71) [ 1198.109364][T19699] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1198.124978][T19699] dvbdev: DVB: registering new adapter (Terratec H7) [ 1198.132918][T19699] usb 3-1: media controller created [ 1198.139931][T19699] usb read operation failed. (-71) [ 1198.145897][T19699] usb write operation failed. (-71) [ 1198.165279][T19699] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1198.186417][T19699] usb 3-1: USB disconnect, device number 58 [ 1198.470198][T24130] /dev/rnullb0: Can't open blockdev [ 1198.554440][T24134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.570085][T24134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.911976][ T5862] Bluetooth: hci4: command 0x0406 tx timeout [ 1199.079863][T24150] /dev/rnullb0: Can't lookup blockdev [ 1199.616751][T24156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5664'. [ 1199.927795][ T51] Bluetooth: hci3: command tx timeout [ 1200.062807][T24175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.079395][T24175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.869367][T24201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5678'. [ 1202.195280][ T30] audit: type=1326 audit(1197.993:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24210 comm="syz.3.5681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30a0b8eb69 code=0x0 [ 1202.479577][T24217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.506708][T24217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.722341][T24230] /dev/rnullb0: Can't lookup blockdev [ 1203.011538][T24233] netlink: 'syz.0.5685': attribute type 10 has an invalid length. [ 1203.011671][T24234] netlink: 'syz.0.5685': attribute type 10 has an invalid length. [ 1203.030491][T24233] hsr_slave_0: entered allmulticast mode [ 1203.056513][T24233] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 1203.069148][T24235] /dev/rnullb0: Can't lookup blockdev [ 1203.070333][T24234] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 1203.225550][T24247] /dev/rnullb0: Can't open blockdev [ 1203.270890][T24251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5689'. [ 1203.280783][T24251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5689'. [ 1203.292659][T24251] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1203.369910][ T24] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1203.546134][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1203.555358][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.566168][ T24] usb 3-1: Product: syz [ 1203.570396][ T24] usb 3-1: Manufacturer: syz [ 1203.575109][ T24] usb 3-1: SerialNumber: syz [ 1203.581975][ T24] usb 3-1: config 0 descriptor?? [ 1203.650748][T24255] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1203.807171][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1204.240620][ T51] Bluetooth: hci0: link tx timeout [ 1204.247986][ T51] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1204.900718][T24269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.914067][T24269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.580534][ T24] usb 3-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1205.599301][ T24] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1205.608930][ T24] usb 3-1: media controller created [ 1205.625048][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1205.654687][ T24] dvb_usb_rtl28xxu 3-1:0.0: unknown tuner MT2063 [ 1205.896731][ T24] usb 3-1: USB disconnect, device number 59 [ 1206.428022][ T5862] Bluetooth: hci0: command 0x0406 tx timeout [ 1206.795673][T24323] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5704'. [ 1206.820148][T24323] unsupported nlmsg_type 40 [ 1206.913462][T24330] netlink: 'syz.2.5704': attribute type 10 has an invalid length. [ 1206.963204][T24330] team0: Port device C removed [ 1207.056294][T24334] overlayfs: missing 'lowerdir' [ 1207.525222][T24346] overlayfs: failed to clone lowerpath [ 1210.887656][T24418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5724'. [ 1210.898012][T24418] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1211.186092][T24423] /dev/rnullb0: Can't open blockdev [ 1211.305794][T24430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1211.418567][T24440] syz.2.5730: attempt to access beyond end of device [ 1211.418567][T24440] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1211.434843][T24440] XFS (loop2): SB validate failed with error -5. [ 1211.503520][T24451] /dev/rnullb0: Can't open blockdev [ 1211.724722][T24464] /dev/rnullb0: Can't open blockdev [ 1212.032528][T24474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.048750][T24474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.214382][T24474] syz.3.5739: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1212.262244][T24474] CPU: 1 UID: 0 PID: 24474 Comm: syz.3.5739 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1212.262279][T24474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1212.262293][T24474] Call Trace: [ 1212.262302][T24474] [ 1212.262313][T24474] dump_stack_lvl+0x189/0x250 [ 1212.262353][T24474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1212.262384][T24474] ? __pfx__printk+0x10/0x10 [ 1212.262414][T24474] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1212.262443][T24474] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1212.262481][T24474] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1212.262513][T24474] warn_alloc+0x214/0x310 [ 1212.262538][T24474] ? stack_depot_save_flags+0x40/0x860 [ 1212.262565][T24474] ? __pfx_warn_alloc+0x10/0x10 [ 1212.262591][T24474] ? kasan_save_track+0x4f/0x80 [ 1212.262621][T24474] ? xskq_create+0x56/0x170 [ 1212.262649][T24474] ? xsk_init_queue+0xb0/0x110 [ 1212.262676][T24474] ? xsk_setsockopt+0x4dc/0x8d0 [ 1212.262701][T24474] ? do_sock_setsockopt+0x17c/0x1b0 [ 1212.262722][T24474] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1212.262743][T24474] ? do_syscall_64+0xfa/0x3b0 [ 1212.262762][T24474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.262793][T24474] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1212.262862][T24474] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1212.262892][T24474] ? __kasan_kmalloc+0x93/0xb0 [ 1212.262924][T24474] vmalloc_user_noprof+0xad/0xf0 [ 1212.262947][T24474] ? xskq_create+0xbf/0x170 [ 1212.262978][T24474] xskq_create+0xbf/0x170 [ 1212.263009][T24474] xsk_init_queue+0xb0/0x110 [ 1212.263043][T24474] xsk_setsockopt+0x4dc/0x8d0 [ 1212.263075][T24474] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1212.263101][T24474] ? __pfx_aa_sk_perm+0x10/0x10 [ 1212.263130][T24474] ? aa_sock_opt_perm+0xff/0x1b0 [ 1212.263161][T24474] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1212.263189][T24474] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1212.263219][T24474] do_sock_setsockopt+0x17c/0x1b0 [ 1212.263249][T24474] __x64_sys_setsockopt+0x13f/0x1b0 [ 1212.263280][T24474] do_syscall_64+0xfa/0x3b0 [ 1212.263299][T24474] ? lockdep_hardirqs_on+0x9c/0x150 [ 1212.263330][T24474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.263351][T24474] ? clear_bhb_loop+0x60/0xb0 [ 1212.263375][T24474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.263396][T24474] RIP: 0033:0x7f30a0b8eb69 [ 1212.263416][T24474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.263436][T24474] RSP: 002b:00007f30a1abc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1212.263460][T24474] RAX: ffffffffffffffda RBX: 00007f30a0db5fa0 RCX: 00007f30a0b8eb69 [ 1212.263478][T24474] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1212.263491][T24474] RBP: 00007f30a0c11df1 R08: 0000000000000004 R09: 0000000000000000 [ 1212.263504][T24474] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.263519][T24474] R13: 0000000000000000 R14: 00007f30a0db5fa0 R15: 00007ffd0651ac18 [ 1212.263554][T24474] [ 1212.558308][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.567853][T24474] Mem-Info: [ 1212.573371][T24474] active_anon:6563 inactive_anon:0 isolated_anon:0 [ 1212.573371][T24474] active_file:24091 inactive_file:51924 isolated_file:0 [ 1212.573371][T24474] unevictable:2832 dirty:1070 writeback:0 [ 1212.573371][T24474] slab_reclaimable:12856 slab_unreclaimable:102981 [ 1212.573371][T24474] mapped:31252 shmem:1375 pagetables:1266 [ 1212.573371][T24474] sec_pagetables:0 bounce:0 [ 1212.573371][T24474] kernel_misc_reclaimable:0 [ 1212.573371][T24474] free:1265812 free_pcp:19881 free_cma:0 [ 1212.618980][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.625526][T24474] Node 0 active_anon:26252kB inactive_anon:0kB active_file:94548kB inactive_file:207484kB unevictable:10292kB isolated(anon):0kB isolated(file):0kB mapped:124964kB dirty:4280kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12456kB pagetables:4944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1212.657540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.702697][T24474] Node 1 active_anon:0kB inactive_anon:0kB active_file:2216kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1212.814002][T24474] Node 0 DMA free:15312kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:32kB free_cma:0kB [ 1212.882429][T24482] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5739'. [ 1212.914849][T24474] lowmem_reserve[]: 0 2496 2497 2497 2497 [ 1212.923400][T24474] Node 0 DMA32 free:1163192kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26104kB inactive_anon:0kB active_file:95148kB inactive_file:210456kB unevictable:12792kB writepending:8376kB present:3129332kB managed:2556208kB mlocked:11256kB bounce:0kB free_pcp:49480kB local_pcp:29824kB free_cma:0kB [ 1212.956358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.970543][T24474] lowmem_reserve[]: 0 0 1 1 1 [ 1212.975427][T24474] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1076kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1213.015921][T24474] lowmem_reserve[]: 0 0 0 0 0 [ 1213.021801][T24474] Node 1 Normal free:3880532kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:2216kB inactive_file:212kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26564kB local_pcp:8768kB free_cma:0kB [ 1213.053463][ C1] vkms_vblank_simulate: vblank timer overrun [ 1213.067561][T24474] lowmem_reserve[]: 0 0 0 0 0 [ 1213.072525][T24474] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15312kB [ 1213.091151][T24474] Node 0 DMA32: 1206*4kB (UME) 813*8kB (ME) 449*16kB (M) 443*32kB (UM) 165*64kB (UME) 61*128kB (UM) 12*256kB (UME) 7*512kB (UM) 2*1024kB (UE) 5*2048kB (UM) 266*4096kB (UM) = 1159536kB [ 1213.142914][T24474] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1213.156946][T24474] Node 1 Normal: 29*4kB (UME) 6*8kB (UME) 5*16kB (UME) 168*32kB (UME) 62*64kB (UME) 18*128kB (UE) 4*256kB (UM) 2*512kB (UM) 0*1024kB 2*2048kB (UE) 943*4096kB (UM) = 3880564kB [ 1213.175328][T24474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1213.186453][T24474] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1213.195849][T24474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1213.205484][T24474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1213.214804][T24474] 80836 total pagecache pages [ 1213.233389][T24474] 0 pages in swap cache [ 1213.238325][T24474] Free swap = 124996kB [ 1213.242511][T24474] Total swap = 124996kB [ 1213.246843][T24474] 2097051 pages RAM [ 1213.251381][T24474] 0 pages HighMem/MovableOnly [ 1213.256196][T24474] 426101 pages reserved [ 1213.269894][T24474] 0 pages cma reserved [ 1213.868325][ T5862] Bluetooth: hci3: command 0x0405 tx timeout [ 1214.291404][T24501] Mount JFS Failure: -22 [ 1214.674729][T24503] /dev/rnullb0: Can't open blockdev [ 1214.682497][T24504] /dev/rnullb0: Can't open blockdev [ 1214.730112][T24507] fuse: Bad value for 'group_id' [ 1214.735365][T24507] fuse: Bad value for 'group_id' [ 1215.035178][T24519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.068981][T24519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.085461][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5753'. [ 1215.107787][T24528] /dev/rnullb0: Can't open blockdev [ 1215.113071][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5753'. [ 1215.123839][T24531] /dev/rnullb0: Can't lookup blockdev [ 1215.134994][T24524] /dev/rnullb0: Can't open blockdev [ 1215.525355][T19699] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1215.708663][T19699] usb 3-1: Using ep0 maxpacket: 32 [ 1215.732491][T19699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.758765][T19699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.782384][T19699] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1215.791715][T19699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.804204][T19699] usb 3-1: config 0 descriptor?? [ 1215.823472][T19699] hub 3-1:0.0: USB hub found [ 1216.116888][T24562] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1216.300287][T19699] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1216.361084][T19699] usbhid 3-1:0.0: can't add hid device: -71 [ 1216.381283][T19699] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1216.434658][T19699] usb 3-1: USB disconnect, device number 60 [ 1216.725886][T24594] /dev/rnullb0: Can't open blockdev [ 1216.859413][T24600] mmap: syz.0.5767 (24600) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1216.912818][T24603] /dev/rnullb0: Can't open blockdev [ 1217.560753][T24630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.574110][T24630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.605035][T24633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.624173][T24633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.643764][T24630] /dev/rnullb0: Can't open blockdev [ 1218.602891][T24663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.617106][T24663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.805980][T24667] /dev/rnullb0: Can't open blockdev [ 1218.969564][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5788'. [ 1219.244001][T19699] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1219.363423][T24687] /dev/rnullb0: Can't open blockdev [ 1219.448562][T19699] usb 3-1: Using ep0 maxpacket: 8 [ 1219.458641][T19699] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1219.478974][T19699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.513346][T19699] usb 3-1: Product: syz [ 1219.517615][T19699] usb 3-1: Manufacturer: syz [ 1219.522233][T19699] usb 3-1: SerialNumber: syz [ 1219.568003][T19699] usb 3-1: config 0 descriptor?? [ 1219.982117][T19699] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1220.001872][T19699] gspca_sunplus: reg_w_riv err -71 [ 1220.009274][T19699] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1220.038615][T19699] usb 3-1: USB disconnect, device number 61 [ 1220.169766][T24720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.189698][T24720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.275521][T24730] Bluetooth: MGMT ver 1.23 [ 1220.881857][T24755] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1220.901102][T24755] /dev/rnullb0: Can't open blockdev [ 1220.914346][T24752] /dev/rnullb0: Can't lookup blockdev [ 1221.100981][T24765] /dev/rnullb0: Can't open blockdev [ 1221.433386][T24775] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1221.469177][T24777] /dev/rnullb0: Can't open blockdev [ 1221.469947][T24774] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.5809'. [ 1221.491519][T24775] Error validating options; rc = [-22] [ 1221.741479][T24793] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5813'. [ 1222.022412][T24810] /dev/rnullb0: Can't open blockdev [ 1222.110733][ T5903] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1222.146129][T24817] /dev/rnullb0: Can't open blockdev [ 1222.167651][T24817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.193604][T24817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.260105][ T5903] usb 3-1: device descriptor read/64, error -71 [ 1222.516598][ T5903] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1222.669165][ T5903] usb 3-1: device descriptor read/64, error -71 [ 1222.784269][ T5903] usb usb3-port1: attempt power cycle [ 1222.996264][T24830] /dev/rnullb0: Can't open blockdev [ 1223.147291][ T5903] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1223.190685][ T5903] usb 3-1: device descriptor read/8, error -71 [ 1223.447547][ T5903] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1223.479565][ T5903] usb 3-1: device descriptor read/8, error -71 [ 1223.596768][ T5903] usb usb3-port1: unable to enumerate USB device [ 1224.946356][T24867] openvswitch: netlink: IP tunnel dst address not specified [ 1224.955878][T24867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.969239][T24867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.980678][T24867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.990060][T24867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.007462][T24867] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5833'. [ 1225.028365][T24867] /dev/rnullb0: Can't open blockdev [ 1225.142816][T24883] netlink: 'syz.2.5835': attribute type 10 has an invalid length. [ 1225.151190][T24883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5835'. [ 1225.163911][T24883] team0: entered promiscuous mode [ 1225.170277][T24883] team_slave_1: entered promiscuous mode [ 1225.176227][T24883] team0: entered allmulticast mode [ 1225.181488][T24883] team_slave_1: entered allmulticast mode [ 1225.188706][T24883] bridge0: port 3(team0) entered blocking state [ 1225.196446][T24883] bridge0: port 3(team0) entered disabled state [ 1225.208826][T24883] bridge0: port 3(team0) entered blocking state [ 1225.215427][T24883] bridge0: port 3(team0) entered forwarding state [ 1225.650454][ T5935] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1225.701381][T24907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.722801][T24907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.820043][ T5935] usb 3-1: device descriptor read/64, error -71 [ 1226.087288][ T5935] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1226.236890][ T5935] usb 3-1: device descriptor read/64, error -71 [ 1226.356902][ T5935] usb usb3-port1: attempt power cycle [ 1226.538771][T24932] /dev/rnullb0: Can't open blockdev [ 1226.730425][ T5935] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1226.879056][ T5935] usb 3-1: device descriptor read/8, error -71 [ 1227.145626][ T5935] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1227.179620][ T5935] usb 3-1: device descriptor read/8, error -71 [ 1227.306643][ T5935] usb usb3-port1: unable to enumerate USB device [ 1227.530222][T24954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.550251][T24954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.714109][T24979] /dev/rnullb0: Can't open blockdev [ 1228.922469][T24986] syz.4.5864: attempt to access beyond end of device [ 1228.922469][T24986] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1228.948800][T24986] hpfs: hpfs_map_sector(): read error [ 1229.069991][T24990] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5863'. [ 1229.102243][T24994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.135082][T24994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.218067][T25001] /dev/rnullb0: Can't lookup blockdev [ 1229.859411][T25018] /dev/rnullb0: Can't open blockdev [ 1229.897167][T25020] /dev/rnullb0: Can't open blockdev [ 1230.558424][ T30] audit: type=1326 audit(1224.512:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f358eb69 code=0x7fc00000 [ 1230.589426][ T30] audit: type=1326 audit(1224.512:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f358eb69 code=0x7fc00000 [ 1230.619149][ T30] audit: type=1326 audit(1224.512:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f358eb69 code=0x7fc00000 [ 1230.651835][ T30] audit: type=1326 audit(1224.512:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f358eb69 code=0x7fc00000 [ 1230.689849][ T30] audit: type=1326 audit(1224.512:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f358eb69 code=0x7fc00000 [ 1230.721917][ T30] audit: type=1326 audit(1224.512:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f358eb69 code=0x7fc00000 [ 1230.756720][ T30] audit: type=1326 audit(1224.512:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f358eb69 code=0x7fc00000 [ 1230.785337][T25037] /dev/rnullb0: Can't open blockdev [ 1230.792816][ T30] audit: type=1326 audit(1224.512:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f358eb69 code=0x7fc00000 [ 1230.820444][ T30] audit: type=1326 audit(1224.512:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f358eb69 code=0x7fc00000 [ 1230.843411][ T30] audit: type=1326 audit(1224.512:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.2.5875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f358eb69 code=0x7fc00000 [ 1231.131661][T25044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.156742][T25044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.177679][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1231.440862][T25042] /dev/rnullb0: Can't open blockdev [ 1231.698251][T25061] /dev/rnullb0: Can't open blockdev [ 1231.804929][T25067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.860755][T25067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.945147][T25073] fuse: Unknown parameter 'group_i00000000000000000000' [ 1232.026488][T25076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5888'. [ 1232.085922][T25078] /dev/rnullb0: Can't open blockdev [ 1232.150313][T25082] /dev/rnullb0: Can't open blockdev [ 1232.205093][T25084] /dev/rnullb0: Can't open blockdev [ 1232.521023][T25097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.539023][T25097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.552324][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1233.214571][T25116] fuse: Unknown parameter 'group_i00000000000000000000' [ 1233.395785][T25121] netlink: 'syz.3.5898': attribute type 28 has an invalid length. [ 1233.595381][T25132] netlink: 'syz.0.5900': attribute type 15 has an invalid length. [ 1233.625869][T25132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5900'. [ 1233.798824][T25138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5902'. [ 1233.816699][T25138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5902'. [ 1234.033646][T25142] /dev/rnullb0: Can't lookup blockdev [ 1234.043772][T25143] /dev/rnullb0: Can't lookup blockdev [ 1234.512860][T25149] fuse: Unknown parameter 'group_i00000000000000000000' [ 1235.844753][T25167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.864014][T25167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.286053][T25178] fuse: Unknown parameter 'group_id00000000000000000000' [ 1236.378229][T25184] input: syz1 as /devices/virtual/input/input186 [ 1236.584069][T25198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.599140][T25198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.833707][T25198] /dev/rnullb0: Can't open blockdev [ 1236.869244][T25211] fuse: Unknown parameter 'group_id00000000000000000000' [ 1236.923614][T25213] sctp: [Deprecated]: syz.2.5926 (pid 25213) Use of int in maxseg socket option. [ 1236.923614][T25213] Use struct sctp_assoc_value instead [ 1237.216419][ T5935] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1237.376579][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 1237.391633][ T5935] usb 3-1: config 9 has an invalid interface number: 70 but max is 0 [ 1237.408610][ T5935] usb 3-1: config 9 has no interface number 0 [ 1237.452301][ T5935] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.7d [ 1237.468742][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.488088][ T5935] usb 3-1: Product: syz [ 1237.498228][ T5935] usb 3-1: Manufacturer: syz [ 1237.507637][ T5935] usb 3-1: SerialNumber: syz [ 1237.525358][T25241] /dev/rnullb0: Can't lookup blockdev [ 1237.537090][T25242] /dev/rnullb0: Can't lookup blockdev [ 1237.701959][T25247] fuse: Unknown parameter 'group_id00000000000000000000' [ 1237.862892][ T5935] ttusb_dec_send_command: command bulk message failed: error -22 [ 1237.889362][ T5935] ttusb-dec 3-1:9.70: probe with driver ttusb-dec failed with error -22 [ 1237.930272][ T5935] usb 3-1: USB disconnect, device number 70 [ 1238.178573][T25264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5936'. [ 1238.255240][T25264] /dev/rnullb0: Can't open blockdev [ 1238.542767][T25271] /dev/rnullb0: Can't open blockdev [ 1239.073832][T25286] fuse: Bad value for 'user_id' [ 1239.087947][T25286] fuse: Bad value for 'user_id' [ 1239.366584][T25290] syz.4.5944 (25290): /proc/25288/oom_adj is deprecated, please use /proc/25288/oom_score_adj instead. [ 1239.411134][T25290] /dev/rnullb0: Can't open blockdev [ 1239.696861][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1239.707324][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1239.720969][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1239.745036][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1239.757026][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1239.864154][T25300] Invalid/unusable pipe [ 1240.001290][T21462] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.328765][T21462] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.667301][T21462] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.791540][T25326] /dev/rnullb0: Can't open blockdev [ 1240.875071][T21462] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.109178][T25354] fuse: Bad value for 'user_id' [ 1241.114115][T25354] fuse: Bad value for 'user_id' [ 1241.458187][T25291] chnl_net:caif_netlink_parms(): no params data found [ 1241.536218][T21462] bridge_slave_1: left allmulticast mode [ 1241.550168][T25451] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1241.562150][T21462] bridge_slave_1: left promiscuous mode [ 1241.571920][T21462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.586038][T25451] qnx6: wrong signature (magic) in superblock #1. [ 1241.596727][T25451] qnx6: unable to read the first superblock [ 1241.614134][T21462] bridge_slave_0: left allmulticast mode [ 1241.619923][T21462] bridge_slave_0: left promiscuous mode [ 1241.642743][T21462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.844817][T25463] /dev/rnullb0: Can't open blockdev [ 1242.016247][ T5862] Bluetooth: hci5: command tx timeout [ 1242.172110][T25470] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1242.179672][T25470] /dev/rnullb0: Can't open blockdev [ 1242.377929][T25476] sctp: [Deprecated]: syz.3.5957 (pid 25476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1242.377929][T25476] Use struct sctp_sack_info instead [ 1242.537787][T25481] fuse: Bad value for 'user_id' [ 1242.547745][T25481] fuse: Bad value for 'user_id' [ 1242.900552][T25492] /dev/rnullb0: Can't open blockdev [ 1243.095409][T21462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.158882][T21462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.188400][T21462] bond0 (unregistering): Released all slaves [ 1243.308997][T25532] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5967'. [ 1243.348498][T25532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.358192][T25532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.368584][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1243.368604][ T30] audit: type=1326 audit(1236.504:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.3.5967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a0b8eb69 code=0x7fc00000 [ 1243.401131][T19699] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1243.443579][T21462] : left promiscuous mode [ 1243.489321][T25547] fuse: Bad value for 'fd' [ 1243.580002][T19699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1243.600876][T19699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.612286][T19699] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1243.627260][T19699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.660982][T19699] usb 3-1: config 0 descriptor?? [ 1243.670219][T25291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.684977][T25291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.692381][T25291] bridge_slave_0: entered allmulticast mode [ 1243.713898][T25291] bridge_slave_0: entered promiscuous mode [ 1243.725955][T25291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.736874][T25291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.745511][T25291] bridge_slave_1: entered allmulticast mode [ 1243.755325][T25291] bridge_slave_1: entered promiscuous mode [ 1243.966974][T25291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.202203][T25291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.232937][ T5862] Bluetooth: hci5: command tx timeout [ 1244.311885][T25625] syz.3.5971: attempt to access beyond end of device [ 1244.311885][T25625] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1244.342527][T25625] SQUASHFS error: Failed to read block 0x0: -5 [ 1244.371877][T25627] cgroup2: Unknown parameter 'smackfstransmute' [ 1244.389195][T25625] unable to read squashfs_super_block [ 1244.420177][T19699] hid-generic 0003:04F3:0754.008D: unknown main item tag 0x0 [ 1244.445660][T19699] hid-generic 0003:04F3:0754.008D: unknown main item tag 0x0 [ 1244.462927][T19699] hid-generic 0003:04F3:0754.008D: unknown main item tag 0x0 [ 1244.496582][T19699] hid-generic 0003:04F3:0754.008D: unknown main item tag 0x0 [ 1244.525959][T19699] hid-generic 0003:04F3:0754.008D: unknown main item tag 0x0 [ 1244.567651][T25650] netlink: 37 bytes leftover after parsing attributes in process `syz.3.5972'. [ 1244.572457][T19699] hid-generic 0003:04F3:0754.008D: failed to start in urb: -90 [ 1244.646643][T19699] hid-generic 0003:04F3:0754.008D: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.2-1/input0 [ 1244.686496][T25291] team0: Port device team_slave_0 added [ 1244.888018][T25291] team0: Port device team_slave_1 added [ 1245.147539][T21462] hsr_slave_0: left promiscuous mode [ 1245.191668][T21462] hsr_slave_1: left promiscuous mode [ 1245.199485][T21462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.237062][T21462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.256772][T21462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.284077][T21462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.556088][T21462] veth1_macvtap: left promiscuous mode [ 1245.561703][T21462] veth0_macvtap: left promiscuous mode [ 1245.579833][T21462] veth1_vlan: left promiscuous mode [ 1245.585282][T21462] veth0_vlan: left promiscuous mode [ 1245.606761][T25696] fuse: Bad value for 'fd' [ 1245.946136][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.982057][T25707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.994806][T25707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.427100][T21462] team0 (unregistering): Port device team_slave_1 removed [ 1246.463562][ T5862] Bluetooth: hci5: command tx timeout [ 1246.489508][T21462] team0 (unregistering): Port device team_slave_0 removed [ 1247.109483][T25291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.118730][T25291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.162162][T25291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.213662][T19699] usb 3-1: USB disconnect, device number 71 [ 1247.279988][T25291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.301963][T25291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.364113][T25291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.610899][T25291] hsr_slave_0: entered promiscuous mode [ 1247.638573][T25291] hsr_slave_1: entered promiscuous mode [ 1247.649385][T25291] debugfs: 'hsr0' already exists in 'hsr' [ 1247.656333][T25291] Cannot create hsr debugfs directory [ 1247.938815][ T5935] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 1248.110763][ T5935] usb 3-1: device descriptor read/64, error -71 [ 1248.366800][ T5935] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 1248.516041][ T5935] usb 3-1: device descriptor read/64, error -71 [ 1248.648281][ T5935] usb usb3-port1: attempt power cycle [ 1248.676927][ T5862] Bluetooth: hci5: command tx timeout [ 1248.824274][T25291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1248.840895][T25291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1248.857478][T25291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1248.881602][T25291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1249.044522][ T5935] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 1249.115691][ T5935] usb 3-1: device descriptor read/8, error -71 [ 1249.170546][T25291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.217042][T25291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.262967][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.270339][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.292251][T25910] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1249.342999][T20956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.350328][T20956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.426645][ T5935] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 1249.490826][ T5935] usb 3-1: device descriptor read/8, error -71 [ 1249.526869][T25918] fuse: Bad value for 'fd' [ 1249.618695][ T5935] usb usb3-port1: unable to enumerate USB device [ 1250.037904][T25291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.132363][T25291] veth0_vlan: entered promiscuous mode [ 1250.167469][T25291] veth1_vlan: entered promiscuous mode [ 1250.194083][T25949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.221880][T25949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.252126][T25291] veth0_macvtap: entered promiscuous mode [ 1250.276323][T25291] veth1_macvtap: entered promiscuous mode [ 1250.328204][T25291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.370754][T25291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.502244][T21467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.534702][T21467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.595982][T21467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.616529][T12616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.864184][T12616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.889092][T12616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.997677][T20956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.023412][T20956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.418361][T25987] fuse: Bad value for 'fd' [ 1251.909562][T26007] /dev/rnullb0: Can't open blockdev [ 1252.019832][T26012] /dev/rnullb0: Can't open blockdev [ 1252.386117][ T5931] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1252.572056][ T5931] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 1252.595287][ T5931] usb 3-1: config 5 has no interface number 0 [ 1252.620579][ T5931] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1252.661111][ T5931] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1252.684475][ T5931] usb 3-1: config 5 interface 123 has no altsetting 0 [ 1252.710757][ T5931] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1252.752666][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.776220][ T5931] usb 3-1: Product: syz [ 1252.794639][ T5931] usb 3-1: Manufacturer: syz [ 1252.812001][ T5931] usb 3-1: SerialNumber: syz [ 1253.078620][T26012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.135528][T26012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.143423][T26038] fuse: Bad value for 'fd' [ 1253.232326][ T5931] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1253.312148][ T5931] usb 3-1: USB disconnect, device number 76 [ 1253.403765][T26050] QAT: failed to copy from user. [ 1253.413075][T26050] /dev/rnullb0: Can't open blockdev [ 1253.952797][T26094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.971297][T26094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.004612][ T5862] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1254.171513][T19699] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1254.171980][ T5931] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1254.347402][T19699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1254.360732][T19699] usb 1-1: not running at top speed; connect to a high speed hub [ 1254.372140][T19699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.387513][ T5931] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1254.393447][T19699] usb 1-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 1254.397280][ T5931] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1254.422650][T19699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.428031][ T5931] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.433299][T19699] usb 1-1: Product: syz [ 1254.449308][ T5931] usb 3-1: config 220 has no interface number 2 [ 1254.451069][T19699] usb 1-1: Manufacturer: syz [ 1254.455665][ T5931] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1254.465085][T19699] usb 1-1: SerialNumber: syz [ 1254.481468][ T5931] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1254.488505][ T5931] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1254.502816][ T5931] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1254.517702][ T5931] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1254.526942][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.535819][ T5931] usb 3-1: Product: syz [ 1254.540088][ T5931] usb 3-1: Manufacturer: syz [ 1254.544765][ T5931] usb 3-1: SerialNumber: syz [ 1254.672088][T26105] fuse: Bad value for 'fd' [ 1254.868105][T19699] pwc: Visionite VCS-UC300 USB webcam detected. [ 1254.896149][T19699] pwc: Failed to set LED on/off time (-71) [ 1254.911161][T19699] pwc: send_video_command error -71 [ 1254.932833][T19699] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1254.964901][T19699] Philips webcam 1-1:1.0: probe with driver Philips webcam failed with error -71 [ 1254.978186][T19699] usb 1-1: USB disconnect, device number 2 [ 1255.117918][T26120] /dev/rnullb0: Can't open blockdev [ 1255.137796][T26122] /dev/rnullb0: Can't open blockdev [ 1255.324608][T26127] /dev/rnullb0: Can't open blockdev [ 1255.739204][T26142] fuse: Invalid rootmode [ 1256.331956][T26153] /dev/rnullb0: Can't open blockdev [ 1257.133292][ T1213] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1257.303914][ T1213] usb 1-1: Using ep0 maxpacket: 32 [ 1257.319986][ T5931] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1257.329177][ T1213] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1257.335763][ T5931] usb 3-1: No valid video chain found. [ 1257.342921][ T5931] usb 3-1: selecting invalid altsetting 0 [ 1257.362781][ T1213] usb 1-1: config 0 has no interface number 0 [ 1257.383759][ T1213] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1257.408090][T26179] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6031'. [ 1257.420231][ T5931] usb 3-1: selecting invalid altsetting 0 [ 1257.433381][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.433930][ T5931] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1257.441418][ T1213] usb 1-1: Product: syz [ 1257.441439][ T1213] usb 1-1: Manufacturer: syz [ 1257.498275][ T1213] usb 1-1: SerialNumber: syz [ 1257.515138][ T5931] usb 3-1: USB disconnect, device number 77 [ 1257.543565][T26184] fuse: Invalid rootmode [ 1257.559329][ T1213] usb 1-1: config 0 descriptor?? [ 1257.616489][ T1213] smsc95xx v2.0.0 [ 1257.622093][ T51] Bluetooth: hci3: link tx timeout [ 1257.628836][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1257.660319][T26196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6033'. [ 1258.620869][T26201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.669845][T26201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.723120][T26206] netlink: 'syz.2.6037': attribute type 7 has an invalid length. [ 1258.788438][T26206] : entered promiscuous mode [ 1258.884018][ T1213] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1258.912169][ T1213] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1258.939854][ T1213] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1258.962877][ T1213] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1258.997901][ T1213] usb 1-1: USB disconnect, device number 3 [ 1259.386877][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6040'. [ 1259.660792][T26228] bond0: (slave bond_slave_0): Releasing backup interface [ 1259.715407][T26235] input: syz0 as /devices/virtual/input/input188 [ 1259.794692][ T5862] Bluetooth: hci3: command 0x0405 tx timeout [ 1260.031880][T26256] fuse: Invalid rootmode [ 1260.333114][T26266] QAT: Invalid ioctl 1075352617 [ 1260.498344][T26278] /dev/rnullb0: Can't open blockdev [ 1261.162688][T26296] vxcan0: entered promiscuous mode [ 1261.304766][T26308] fuse: Bad value for 'rootmode' [ 1261.399342][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1261.591780][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.619433][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1261.648406][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1261.665614][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.684764][ T24] usb 1-1: Product: syz [ 1261.708478][ T24] usb 1-1: Manufacturer: syz [ 1261.727829][ T24] usb 1-1: SerialNumber: syz [ 1261.741769][ T24] usb 1-1: config 0 descriptor?? [ 1261.989997][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1262.023194][ T5910] usb 1-1: USB disconnect, device number 4 [ 1262.074214][T26345] /dev/rnullb0: Can't open blockdev [ 1262.617012][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 1262.636705][ T1213] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1262.670086][ T1213] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1262.766824][T26363] /dev/rnullb0: Can't open blockdev [ 1262.996377][T26370] fuse: Bad value for 'rootmode' [ 1263.180277][T26378] /dev/rnullb0: Can't open blockdev [ 1263.532762][T26390] /dev/rnullb0: Can't open blockdev [ 1265.034559][T26449] fuse: Bad value for 'rootmode' [ 1265.269461][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1265.276083][ T1213] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1265.283009][T26465] /dev/rnullb0: Can't open blockdev [ 1265.300638][ T1213] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1265.327502][T26463] /dev/rnullb0: Can't open blockdev [ 1265.358777][T26466] /dev/sg0: Can't lookup blockdev [ 1265.824183][ T5931] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1266.071954][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 1266.085545][T26496] netlink: 'syz.3.6077': attribute type 11 has an invalid length. [ 1266.102468][ T5931] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1266.118351][ T5931] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 439 [ 1266.146455][ T5931] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1266.173090][ T5931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1266.199616][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.224532][ T5931] usb 1-1: Product: syz [ 1266.229697][ T5931] usb 1-1: Manufacturer: syz [ 1266.235998][ T5931] usb 1-1: SerialNumber: syz [ 1266.249135][T26473] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1266.275309][T26473] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1266.774056][ T5931] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 1266.835502][ T5931] usb 1-1: USB disconnect, device number 5 [ 1266.872938][ T5931] usblp0: removed [ 1266.953332][T26533] fuse: Unknown parameter 'use00000000000000000000' [ 1267.174390][T26539] i2c i2c-0: Invalid block write size 254 [ 1267.194156][T26539] /dev/rnullb0: Can't open blockdev [ 1267.292547][T26543] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1267.299126][T26543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1267.343831][T26543] vhci_hcd vhci_hcd.0: Device attached [ 1267.507432][T26558] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1267.535063][T26558] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1267.554502][T26544] vhci_hcd: connection closed [ 1267.554815][T20956] vhci_hcd: stop threads [ 1267.590900][T20956] vhci_hcd: release socket [ 1267.598892][ T5931] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1267.613753][T20956] vhci_hcd: disconnect device [ 1267.753330][ T1213] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1267.759890][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1267.789275][ T1213] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1267.909198][ T5903] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1267.955270][T21211] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1268.089454][ T5903] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1268.107272][T21211] usb 1-1: device descriptor read/64, error -71 [ 1268.124793][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.133138][ T5903] usb 3-1: Product: syz [ 1268.138898][ T5903] usb 3-1: Manufacturer: syz [ 1268.159652][ T5903] usb 3-1: SerialNumber: syz [ 1268.182900][ T5903] usb 3-1: config 0 descriptor?? [ 1268.210512][ T5903] ch341 3-1:0.0: ch341-uart converter detected [ 1268.317233][T26587] /dev/rnullb0: Can't open blockdev [ 1268.411774][T21211] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1268.571678][T21211] usb 1-1: device descriptor read/64, error -71 [ 1268.629767][T26598] fuse: Unknown parameter 'use00000000000000000000' [ 1268.715644][T21211] usb usb1-port1: attempt power cycle [ 1269.085126][T21211] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1269.117728][T21211] usb 1-1: device descriptor read/8, error -71 [ 1269.277879][ T5903] usb 3-1: failed to send control message: -71 [ 1269.284499][ T5903] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1269.316303][ T5903] usb 3-1: USB disconnect, device number 78 [ 1269.337278][ T5903] ch341 3-1:0.0: device disconnected [ 1269.400066][T21211] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1269.442647][T21211] usb 1-1: device descriptor read/8, error -71 [ 1269.549730][T26639] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1269.570739][T21211] usb usb1-port1: unable to enumerate USB device [ 1269.677224][T26641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.688286][T26641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.768770][T26644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6096'. [ 1270.041554][T26651] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6099'. [ 1270.096089][T26654] fuse: Unknown parameter 'use00000000000000000000' [ 1270.314375][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1270.314585][ T1213] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1270.326837][ T1213] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1271.269653][T26671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1271.374557][T26678] tipc: Can't bind to reserved service type 0 [ 1271.429503][T26680] /dev/rnullb0: Can't open blockdev [ 1272.295900][T26689] /dev/rnullb0: Can't open blockdev [ 1272.453137][T26695] fuse: Unknown parameter 'user_i00000000000000000000' [ 1272.709349][ T1213] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1272.709449][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 1272.721642][ T1213] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1272.795799][T21212] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1272.850652][T26711] syz.4.6112: attempt to access beyond end of device [ 1272.850652][T26711] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1272.863932][T26711] hpfs: hpfs_map_sector(): read error [ 1272.955325][T21212] usb 1-1: device descriptor read/64, error -71 [ 1273.047077][T26718] /dev/rnullb0: Can't open blockdev [ 1273.126007][ T5931] vhci_hcd: vhci_device speed not set [ 1273.212647][T21212] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1273.371736][T21212] usb 1-1: device descriptor read/64, error -71 [ 1273.490889][T21212] usb usb1-port1: attempt power cycle [ 1273.647647][T26750] fuse: Unknown parameter 'user_i00000000000000000000' [ 1273.863837][T21212] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1273.900660][T21212] usb 1-1: device descriptor read/8, error -71 [ 1274.184708][T21212] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1274.201687][T26768] /dev/rnullb0: Can't open blockdev [ 1274.217167][T21212] usb 1-1: device descriptor read/8, error -71 [ 1274.233026][T26768] pim6reg: entered allmulticast mode [ 1274.245928][T26768] pim6reg: left allmulticast mode [ 1274.334480][T21212] usb usb1-port1: unable to enumerate USB device [ 1274.506088][T26786] /dev/rnullb0: Can't open blockdev [ 1274.658666][T26792] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1274.688607][T26792] /dev/rnullb0: Can't open blockdev [ 1274.713125][T26795] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1274.721547][T26795] /dev/rnullb0: Can't open blockdev [ 1274.897262][T26806] fuse: Unknown parameter 'user_i00000000000000000000' [ 1275.310065][T26817] /dev/rnullb0: Can't open blockdev [ 1275.466580][T26819] /dev/rnullb0: Can't open blockdev [ 1275.850024][T26838] /dev/rnullb0: Can't open blockdev [ 1275.931566][T26847] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6134'. [ 1275.944482][T26847] devtmpfs: Unknown parameter '' [ 1275.973136][T26847] syzkaller0: entered promiscuous mode [ 1275.979139][T26847] syzkaller0: entered allmulticast mode [ 1276.015780][T26846] syzkaller0: left allmulticast mode [ 1276.021278][T26846] syzkaller0: left promiscuous mode [ 1276.043381][T26856] fuse: Unknown parameter 'user_id00000000000000000000' [ 1276.130247][ T5936] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1276.200304][T26861] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6138'. [ 1276.210037][T26860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6138'. [ 1276.212723][T26861] /dev/rnullb0: Can't open blockdev [ 1276.261159][T26863] /dev/rnullb0: Can't open blockdev [ 1276.308232][T26865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.317229][T26865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.330792][ T5936] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1276.341025][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.349751][ T5936] usb 3-1: Product: syz [ 1276.353984][ T5936] usb 3-1: Manufacturer: syz [ 1276.358759][ T5936] usb 3-1: SerialNumber: syz [ 1276.365734][ T5936] usb 3-1: config 0 descriptor?? [ 1276.374071][ T5936] ch341 3-1:0.0: ch341-uart converter detected [ 1277.158500][T26878] /dev/rnullb0: Can't open blockdev [ 1277.172303][T26881] /dev/rnullb0: Can't open blockdev [ 1277.254955][T26883] /dev/rnullb0: Can't open blockdev [ 1277.289532][T26885] fuse: Unknown parameter 'user_id00000000000000000000' [ 1277.385051][T26888] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1277.400668][T26888] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1277.443083][T26888] can0: slcan on ttyS3. [ 1277.452721][ T5936] usb 3-1: failed to send control message: -71 [ 1277.464742][ T5936] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1277.480225][T26897] /dev/rnullb0: Can't open blockdev [ 1277.509293][ T5936] usb 3-1: USB disconnect, device number 79 [ 1277.526323][ T5936] ch341 3-1:0.0: device disconnected [ 1277.640271][T26887] can0 (unregistered): slcan off ttyS3. [ 1277.814860][T26921] /dev/rnullb0: Can't open blockdev [ 1278.011611][ T5903] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1278.193676][ T5903] usb 1-1: device descriptor read/64, error -71 [ 1278.460745][ T5903] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1278.611439][ T5903] usb 1-1: device descriptor read/64, error -71 [ 1278.741199][ T5903] usb usb1-port1: attempt power cycle [ 1279.112631][ T5903] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1279.127088][T26960] fuse: Unknown parameter 'user_id00000000000000000000' [ 1279.167283][ T5903] usb 1-1: device descriptor read/8, error -71 [ 1279.362173][T26967] /dev/rnullb0: Can't open blockdev [ 1279.422677][ T5903] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1279.448835][ T5903] usb 1-1: device descriptor read/8, error -71 [ 1279.576112][ T5903] usb usb1-port1: unable to enumerate USB device [ 1279.860959][ T5903] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1280.023830][ T5903] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1280.033419][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.050841][ T5903] usb 3-1: config 0 descriptor?? [ 1280.714713][T26979] /dev/rnullb0: Can't open blockdev [ 1280.723235][ T5903] ath6kl: Failed to read usb control message: -71 [ 1280.752749][ T5903] ath6kl: Unable to read the bmi data from the device: -71 [ 1280.766265][ T5903] ath6kl: unable to read target info byte count: -71 [ 1280.777165][ T5903] ath6kl: Failed to init ath6kl core: -71 [ 1280.785656][ T5903] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1280.816552][ T5903] usb 3-1: USB disconnect, device number 80 [ 1281.374547][T27019] /dev/rnullb0: Can't open blockdev [ 1281.411772][ T5931] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1281.499112][T27021] fuse: Bad value for 'fd' [ 1281.592832][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 1281.599959][ T5931] usb 1-1: config 0 has an invalid interface number: 124 but max is 0 [ 1281.618447][ T5931] usb 1-1: config 0 has no interface number 0 [ 1281.641779][ T5931] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 1281.659875][T27024] fuse: Bad value for 'group_id' [ 1281.664895][T27024] fuse: Bad value for 'group_id' [ 1281.670507][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.689078][ T5931] usb 1-1: Product: syz [ 1281.693353][ T5931] usb 1-1: Manufacturer: syz [ 1281.698017][ T5931] usb 1-1: SerialNumber: syz [ 1281.715044][ T5931] usb 1-1: config 0 descriptor?? [ 1281.831097][T27031] /dev/rnullb0: Can't open blockdev [ 1281.939124][T27036] /dev/rnullb0: Can't open blockdev [ 1281.949483][ T1213] usb 1-1: USB disconnect, device number 18 [ 1282.072392][T27042] /dev/rnullb0: Can't open blockdev [ 1282.178096][T27050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.187838][T27050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.688355][T27063] /dev/rnullb0: Can't open blockdev [ 1282.822287][ T5931] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1282.839058][T27069] fuse: Bad value for 'fd' [ 1282.983050][ T5931] usb 1-1: device descriptor read/64, error -71 [ 1283.229470][ T1213] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1283.249901][ T5931] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1283.410518][ T5931] usb 1-1: device descriptor read/64, error -71 [ 1283.489861][ T1213] usb 3-1: Using ep0 maxpacket: 16 [ 1283.502960][ T1213] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 1283.525240][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.528246][ T5931] usb usb1-port1: attempt power cycle [ 1283.545966][ T1213] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1283.588869][ T1213] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1283.617780][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.667898][ T1213] usb 3-1: config 0 descriptor?? [ 1283.686642][T27089] /dev/rnullb0: Can't open blockdev [ 1283.853725][T27094] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1283.878873][T27094] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1283.972298][ T5931] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1283.999000][ T5931] usb 1-1: device descriptor read/8, error -71 [ 1284.113295][ T1213] samsung 0003:0419:0001.008E: item fetching failed at offset 10/11 [ 1284.128501][T27101] /dev/rnullb0: Can't open blockdev [ 1284.140182][ T1213] samsung 0003:0419:0001.008E: parse failed [ 1284.146212][ T1213] samsung 0003:0419:0001.008E: probe with driver samsung failed with error -22 [ 1284.242330][T27108] /dev/rnullb0: Can't open blockdev [ 1284.256746][ T5931] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1284.276867][ T5931] usb 1-1: device descriptor read/8, error -71 [ 1284.329061][T27077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.346018][T27077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.390493][ T1213] usb 3-1: USB disconnect, device number 81 [ 1284.394115][ T5931] usb usb1-port1: unable to enumerate USB device [ 1284.480194][T27131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6184'. [ 1285.469590][T27143] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6187'. [ 1286.650875][T27156] syz.2.6190: attempt to access beyond end of device [ 1286.650875][T27156] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1286.664346][T27156] gfs2: error -5 reading superblock [ 1287.077392][T27168] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1287.109859][T27168] Error validating options; rc = [-22] [ 1287.341418][T27174] /dev/rnullb0: Can't open blockdev [ 1287.713151][T27177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6195'. [ 1287.742390][T27177] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.6195'. [ 1287.765706][T27180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.808677][T27180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.033077][T27194] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1288.040569][T27194] /dev/rnullb0: Can't open blockdev [ 1288.111405][T27196] binder: 27195:27196 ioctl c0306201 2000000003c0 returned -14 [ 1288.220994][ T5931] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1288.381332][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 1288.392108][ T5931] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1288.400860][ T5931] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.411322][ T5931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1288.423525][ T5931] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1288.433230][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.441827][T21211] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1288.449788][ T5931] usb 3-1: Product: syz [ 1288.454097][ T5931] usb 3-1: Manufacturer: syz [ 1288.460882][ T5931] usb 3-1: SerialNumber: syz [ 1288.463569][T27204] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6202'. [ 1288.480162][T27203] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6202'. [ 1288.628516][T21211] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1288.644877][T21211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.653705][T21211] usb 1-1: Product: syz [ 1288.663935][T21211] usb 1-1: Manufacturer: syz [ 1288.670497][T21211] usb 1-1: SerialNumber: syz [ 1288.685664][T21211] usb 1-1: config 0 descriptor?? [ 1288.695477][ T5931] usb 3-1: 0:2 : does not exist [ 1288.705235][T21211] ch341 1-1:0.0: ch341-uart converter detected [ 1288.921550][T21211] usb 1-1: failed to receive control message: -32 [ 1288.928381][T21211] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 1288.957747][ T5931] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1289.022554][ T5931] usb 3-1: USB disconnect, device number 82 [ 1289.073294][T22446] udevd[22446]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.286693][T27242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.308541][T27242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.988477][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1290.038791][T27249] /dev/rnullb0: Can't open blockdev [ 1290.264313][ T1213] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1290.448182][ T1213] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1290.463739][ T1213] usb 3-1: not running at top speed; connect to a high speed hub [ 1290.848840][ T1213] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 1290.863559][ T1213] usb 3-1: config 7 has no interface number 0 [ 1290.873883][ T1213] usb 3-1: config 7 interface 101 has no altsetting 0 [ 1290.883953][ T1213] usb 3-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=d5.84 [ 1290.893234][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.901391][ T1213] usb 3-1: Product: syz [ 1290.906173][ T1213] usb 3-1: Manufacturer: syz [ 1290.910920][ T1213] usb 3-1: SerialNumber: syz [ 1291.157574][ T1213] usb 3-1: USB disconnect, device number 83 [ 1291.423868][ T1213] usb 1-1: USB disconnect, device number 23 [ 1291.443229][ T1213] ch341 1-1:0.0: device disconnected [ 1291.500305][T27289] netlink: 'syz.0.6210': attribute type 21 has an invalid length. [ 1291.512465][T27289] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.6210'. [ 1291.584347][T27291] /dev/rnullb0: Can't open blockdev [ 1291.600586][T27293] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6212'. [ 1291.614721][T27291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1291.777556][T27307] /dev/rnullb0: Can't open blockdev [ 1291.898790][ T5903] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1292.059063][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 1292.067460][ T5903] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1292.076864][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.084995][ T5903] usb 1-1: Product: syz [ 1292.089204][ T5903] usb 1-1: Manufacturer: syz [ 1292.094116][ T5903] usb 1-1: SerialNumber: syz [ 1292.101031][ T5903] usb 1-1: config 0 descriptor?? [ 1292.101693][T21211] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1292.108316][ T5903] hub 1-1:0.0: bad descriptor, ignoring hub [ 1292.119887][ T5903] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1292.305027][T21211] usb 3-1: Using ep0 maxpacket: 8 [ 1292.312496][T21211] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1292.320632][T21211] usb 3-1: config 0 has no interface number 0 [ 1292.326830][T21211] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1292.338785][T21211] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1292.351540][T21211] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1292.364930][T21211] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1292.374160][T21211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.385673][T21211] usb 3-1: config 0 descriptor?? [ 1292.391917][T27309] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1292.404023][T21211] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1292.628293][T21211] usb 3-1: USB disconnect, device number 84 [ 1292.901965][T27332] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1293.278722][T27342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.302277][T27342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.349172][T27347] /dev/rnullb0: Can't open blockdev [ 1293.489157][T27353] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1293.501155][T27353] /dev/rnullb0: Can't open blockdev [ 1293.541887][ T1213] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1293.551439][ T1213] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1293.566949][ T1213] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1293.577565][ T1213] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1293.586451][ T1213] rtc rtc0: __rtc_set_alarm: err=-22 [ 1293.929989][T21212] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1293.980141][T27363] /dev/rnullb0: Can't open blockdev [ 1294.102784][T21212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.128384][T21212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.150695][T21212] usb 3-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 1294.169708][T21212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.194330][T21212] usb 3-1: config 0 descriptor?? [ 1294.558564][T27374] ntfs3(loop4): try to read out of volume at offset 0x0 [ 1294.664095][T27377] /dev/rnullb0: Can't open blockdev [ 1294.672933][T21212] lenovo 0003:17EF:6049.008F: unknown main item tag 0x0 [ 1294.710157][T21212] lenovo 0003:17EF:6049.008F: unknown main item tag 0x0 [ 1294.717185][T21212] lenovo 0003:17EF:6049.008F: unknown main item tag 0x0 [ 1294.745095][T21212] lenovo 0003:17EF:6049.008F: unknown main item tag 0x0 [ 1294.752203][T21212] lenovo 0003:17EF:6049.008F: unknown main item tag 0x0 [ 1294.765976][T27380] /dev/rnullb0: Can't open blockdev [ 1294.771624][T21212] lenovo 0003:17EF:6049.008F: unknown main item tag 0x0 [ 1294.782999][T21212] lenovo 0003:17EF:6049.008F: unknown main item tag 0x0 [ 1294.813487][T21212] lenovo 0003:17EF:6049.008F: hidraw0: USB HID v0.00 Device [HID 17ef:6049] on usb-dummy_hcd.2-1/input0 [ 1294.859375][T27385] 9pnet: Unknown protocol version 9p2010 [ 1294.864385][T27355] /dev/rnullb0: Can't open blockdev [ 1294.897605][T21212] usb 3-1: USB disconnect, device number 85 [ 1295.011188][T27387] fido_id[27387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1295.022436][ T5903] usb 1-1: USB disconnect, device number 24 [ 1295.320813][T27416] /dev/rnullb0: Can't open blockdev [ 1295.435888][T27418] /dev/rnullb0: Can't open blockdev [ 1295.455704][T27418] /dev/rnullb0: Can't open blockdev [ 1295.491889][T27418] /dev/rnullb0: Can't open blockdev [ 1295.498360][T27418] /dev/rnullb0: Can't open blockdev [ 1295.510927][T27418] /dev/rnullb0: Can't open blockdev [ 1295.517503][T27418] /dev/rnullb0: Can't open blockdev [ 1295.529422][T27418] /dev/rnullb0: Can't open blockdev [ 1295.537425][T27418] /dev/rnullb0: Can't open blockdev [ 1295.543682][T27418] /dev/rnullb0: Can't open blockdev [ 1295.564880][T27418] /dev/rnullb0: Can't open blockdev [ 1295.572531][T27418] /dev/rnullb0: Can't open blockdev [ 1295.579785][T27418] /dev/rnullb0: Can't open blockdev [ 1295.595820][T27418] /dev/rnullb0: Can't open blockdev [ 1295.605467][T27418] /dev/rnullb0: Can't open blockdev [ 1295.615431][T27418] /dev/rnullb0: Can't open blockdev [ 1295.625893][T27418] /dev/rnullb0: Can't open blockdev [ 1295.635750][T27418] /dev/rnullb0: Can't open blockdev [ 1295.666759][T27418] /dev/rnullb0: Can't open blockdev [ 1295.817905][T27430] fuse: Unknown parameter 'fd0x0000000000000004' [ 1296.119776][T27439] /dev/rnullb0: Can't open blockdev [ 1296.364410][T27444] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6238'. [ 1297.072149][T27464] fuse: Unknown parameter 'fd0x0000000000000004' [ 1297.212853][T27471] /dev/rnullb0: Can't open blockdev [ 1297.215758][T27470] netlink: 'syz.2.6246': attribute type 1 has an invalid length. [ 1298.227600][ T5931] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1298.416787][ T5931] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.433487][ T5931] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1298.448243][ T5931] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1298.466900][ T5931] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1298.474539][T27484] /dev/rnullb0: Can't open blockdev [ 1298.477501][ T5931] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1298.518885][ T5931] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1298.534408][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.543019][ T5931] usb 3-1: Product: syz [ 1298.547213][ T5931] usb 3-1: Manufacturer: syz [ 1298.552292][ T5931] usb 3-1: SerialNumber: syz [ 1298.618832][ T5931] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1298.640714][ T5931] imon 3-1:155.0: unable to initialize intf0, err -90 [ 1298.661220][ T5931] imon:imon_probe: failed to initialize context! [ 1298.681391][ T5931] imon 3-1:155.0: unable to register, err -19 [ 1298.911831][T27491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.932707][T27491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.597769][T27507] use of bytesused == 0 is deprecated and will be removed in the future, [ 1299.606238][T27507] use the actual size instead. [ 1299.777583][ T5935] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1299.822804][T27511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6257'. [ 1299.834785][T27511] nbd: illegal input index -1900544 [ 1299.959427][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 1299.968975][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1299.982892][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.994435][T27518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.998865][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1300.015536][T27518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.023767][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.040516][ T5935] usb 1-1: config 0 descriptor?? [ 1300.292043][ T5935] logitech 0003:046D:C298.0090: report_id 0 is invalid [ 1300.303345][ T5935] logitech 0003:046D:C298.0090: item 0 0 1 8 parsing failed [ 1300.311703][ T5935] logitech 0003:046D:C298.0090: parse failed [ 1300.324411][ T5935] logitech 0003:046D:C298.0090: probe with driver logitech failed with error -22 [ 1300.640009][ T5931] usb 1-1: USB disconnect, device number 25 [ 1301.040798][ T5935] usb 3-1: USB disconnect, device number 86 [ 1301.085330][T27562] /dev/rnullb0: Can't open blockdev [ 1301.472381][T27583] /dev/rnullb0: Can't open blockdev [ 1301.851111][ T30] audit: type=1326 audit(1292.209:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27588 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559e18eb69 code=0x7fc00000 [ 1301.928547][T27607] serio: Serial port ptm0 [ 1301.986200][T27611] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20002 [ 1302.139829][T27617] netlink: 'syz.2.6273': attribute type 10 has an invalid length. [ 1302.177844][T27617] batman_adv: batadv0: Adding interface: netdevsim0 [ 1302.197848][T27617] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.275134][T27617] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1302.700113][T27632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6274'. [ 1302.915024][T27638] netlink: 'syz.4.6276': attribute type 21 has an invalid length. [ 1302.930916][T27638] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6276'. [ 1302.947487][T27638] /dev/nullb0: Can't open blockdev [ 1303.653919][T27661] /dev/rnullb0: Can't open blockdev [ 1303.685176][T27666] /dev/rnullb0: Can't open blockdev [ 1303.777660][T27671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.790140][T27671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.879142][T27705] binder_alloc: 27702: binder_alloc_buf size 61696 failed, no address space [ 1304.911999][T27705] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 1305.356135][T27715] netlink: 18128 bytes leftover after parsing attributes in process `syz.0.6295'. [ 1305.387090][T27715] program syz.0.6295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1305.480149][T27717] /dev/rnullb0: Can't open blockdev [ 1305.487135][T27718] /dev/rnullb0: Can't open blockdev [ 1305.756319][T27720] /dev/rnullb0: Can't open blockdev [ 1305.830266][T27722] tmpfs: Bad value for 'mpol' [ 1306.022410][T27724] tmpfs: Bad value for 'mpol' [ 1306.356191][T27730] /dev/rnullb0: Can't open blockdev [ 1306.940449][ T5903] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1307.113410][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1307.129989][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1307.143224][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1307.179782][ T5903] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1307.194246][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.212820][ T5903] usb 1-1: Product: syz [ 1307.217195][ T5903] usb 1-1: Manufacturer: syz [ 1307.221991][ T5903] usb 1-1: SerialNumber: syz [ 1307.237283][ T5903] usb 1-1: config 0 descriptor?? [ 1307.245524][T27737] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1307.261808][ T5903] usb 1-1: ucan: probing device on interface #0 [ 1307.268266][ T5903] usb 1-1: ucan: invalid in_ep MaxPacketSize [ 1307.279073][ T5903] usb 1-1: ucan: probe failed; try to update the device firmware [ 1307.490139][T27737] netlink: 'syz.0.6303': attribute type 5 has an invalid length. [ 1307.508841][T27737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6303'. [ 1307.543809][T27737] /dev/rnullb0: Can't open blockdev [ 1307.555892][ T1213] usb 1-1: USB disconnect, device number 26 [ 1307.856258][T27775] /dev/rnullb0: Can't open blockdev [ 1308.268610][T27785] dlm: no locking on control device [ 1308.274202][T27787] netlink: 'syz.0.6314': attribute type 2 has an invalid length. [ 1308.347816][T27791] openvswitch: netlink: EtherType 0 is less than min 600 [ 1308.380223][T27792] Bluetooth: MGMT ver 1.23 [ 1308.393646][T27792] /dev/rnullb0: Can't open blockdev [ 1309.503968][T27809] /dev/rnullb0: Can't open blockdev [ 1309.628445][T27812] syz.3.6321: attempt to access beyond end of device [ 1309.628445][T27812] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1309.681597][T27812] syz.3.6321: attempt to access beyond end of device [ 1309.681597][T27812] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1309.724698][T27812] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1309.744277][T27812] syz.3.6321: attempt to access beyond end of device [ 1309.744277][T27812] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1309.758315][T27812] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1309.782546][T27812] syz.3.6321: attempt to access beyond end of device [ 1309.782546][T27812] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1309.796375][T27812] syz.3.6321: attempt to access beyond end of device [ 1309.796375][T27812] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1309.812909][T27812] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1309.823104][T27812] syz.3.6321: attempt to access beyond end of device [ 1309.823104][T27812] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1309.846039][T27812] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1309.857872][T27812] syz.3.6321: attempt to access beyond end of device [ 1309.857872][T27812] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1309.871652][T27812] syz.3.6321: attempt to access beyond end of device [ 1309.871652][T27812] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1309.890068][T27812] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1309.900471][T27812] syz.3.6321: attempt to access beyond end of device [ 1309.900471][T27812] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1309.917663][T27812] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1309.927682][T27812] syz.3.6321: attempt to access beyond end of device [ 1309.927682][T27812] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1309.941931][T27812] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1309.952604][T27812] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1309.962402][T27812] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1310.060114][T27827] /dev/rnullb0: Can't open blockdev [ 1310.085697][T27827] overlay: Unknown parameter 'rootcontext' [ 1310.788842][T21211] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1310.939698][T21211] usb 1-1: device descriptor read/64, error -71 [ 1311.213464][T21211] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1311.310250][T27852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1311.340280][T27852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1311.384224][T27857] syzkaller1: entered promiscuous mode [ 1311.389927][T21211] usb 1-1: device descriptor read/64, error -71 [ 1311.396409][T27857] syzkaller1: entered allmulticast mode [ 1311.507432][T21211] usb usb1-port1: attempt power cycle [ 1311.609595][T27865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.632202][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1311.657028][T27865] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1311.789272][T27869] /dev/rnullb0: Can't open blockdev [ 1312.140654][T21211] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1312.168617][T21211] usb 1-1: device descriptor read/8, error -71 [ 1312.445912][T21211] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1312.478945][T21211] usb 1-1: device descriptor read/8, error -71 [ 1312.617161][T21211] usb usb1-port1: unable to enumerate USB device [ 1313.023409][T27876] /dev/rnullb0: Can't open blockdev [ 1313.197209][T27894] virtio-fs: tag not found [ 1313.428167][T27904] /dev/rnullb0: Can't open blockdev [ 1313.857506][ T5862] Bluetooth: hci2: command tx timeout [ 1314.086255][T27949] /dev/rnullb0: Can't open blockdev [ 1314.254749][T27953] /dev/rnullb0: Can't open blockdev [ 1315.003455][T27975] /dev/rnullb0: Can't open blockdev [ 1315.466272][T27995] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1315.493610][T27989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1315.537705][T27989] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1315.553734][T27989] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1315.581104][T27989] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 1315.601263][T27989] iommufd_mock iommufd_mock4: Adding to iommu group 4 [ 1315.623160][T27989] iommufd_mock iommufd_mock5: Adding to iommu group 5 [ 1315.645904][T27989] iommufd_mock iommufd_mock6: Adding to iommu group 6 [ 1315.669359][T27989] iommufd_mock iommufd_mock7: Adding to iommu group 7 [ 1315.702052][T27989] iommufd_mock iommufd_mock8: Adding to iommu group 8 [ 1315.707025][ T5931] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1315.724166][T27989] iommufd_mock iommufd_mock9: Adding to iommu group 9 [ 1315.729724][T28017] /dev/rnullb0: Can't open blockdev [ 1315.746263][T27989] iommufd_mock iommufd_mock10: Adding to iommu group 10 [ 1315.771683][T27989] iommufd_mock iommufd_mock11: Adding to iommu group 11 [ 1315.795554][T27989] iommufd_mock iommufd_mock12: Adding to iommu group 12 [ 1315.826314][T27989] iommufd_mock iommufd_mock13: Adding to iommu group 13 [ 1315.845284][T27989] iommufd_mock iommufd_mock14: Adding to iommu group 14 [ 1315.858680][T27989] iommufd_mock iommufd_mock15: Adding to iommu group 15 [ 1315.886340][T27989] iommufd_mock iommufd_mock16: Adding to iommu group 16 [ 1315.900701][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.930129][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.941415][ T5931] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1315.949022][T27989] iommufd_mock iommufd_mock17: Adding to iommu group 17 [ 1315.951069][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.999146][T27989] iommufd_mock iommufd_mock18: Adding to iommu group 18 [ 1315.999383][ T5931] usb 3-1: config 0 descriptor?? [ 1316.065520][T27989] iommufd_mock iommufd_mock19: Adding to iommu group 19 [ 1316.103401][T27989] iommufd_mock iommufd_mock20: Adding to iommu group 20 [ 1316.127380][T27989] iommufd_mock iommufd_mock21: Adding to iommu group 21 [ 1316.152908][T27989] iommufd_mock iommufd_mock22: Adding to iommu group 22 [ 1316.184909][T27989] iommufd_mock iommufd_mock23: Adding to iommu group 23 [ 1316.206416][T27989] iommufd_mock iommufd_mock24: Adding to iommu group 24 [ 1316.236908][T27989] iommufd_mock iommufd_mock25: Adding to iommu group 25 [ 1316.257856][T27989] iommufd_mock iommufd_mock26: Adding to iommu group 26 [ 1316.286776][T27989] iommufd_mock iommufd_mock27: Adding to iommu group 27 [ 1316.310778][T27989] iommufd_mock iommufd_mock28: Adding to iommu group 28 [ 1316.713078][T27990] netlink: 'syz.2.6361': attribute type 3 has an invalid length. [ 1316.744062][T27990] netlink: 'syz.2.6361': attribute type 1 has an invalid length. [ 1316.765770][T27990] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6361'. [ 1316.818684][T28093] batadv_slave_0: entered promiscuous mode [ 1316.861905][ T5931] usb 3-1: language id specifier not provided by device, defaulting to English [ 1317.226657][T28066] batadv_slave_0: left promiscuous mode [ 1317.298081][ T5931] uclogic 0003:256C:006D.0091: failed retrieving string descriptor #200: -71 [ 1317.318635][ T5931] uclogic 0003:256C:006D.0091: failed retrieving pen parameters: -71 [ 1317.337971][ T5931] uclogic 0003:256C:006D.0091: failed probing pen v2 parameters: -71 [ 1317.352924][ T5931] uclogic 0003:256C:006D.0091: failed probing parameters: -71 [ 1317.372905][ T5931] uclogic 0003:256C:006D.0091: probe with driver uclogic failed with error -71 [ 1317.401418][ T5931] usb 3-1: USB disconnect, device number 87 [ 1317.542571][T28155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.560293][T28155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.740134][T28164] /dev/rnullb0: Can't open blockdev [ 1317.900941][T28169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6373'. [ 1318.765985][T21212] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1318.782275][T28212] sctp: [Deprecated]: syz.3.6383 (pid 28212) Use of int in max_burst socket option. [ 1318.782275][T28212] Use struct sctp_assoc_value instead [ 1318.935338][T21212] usb 1-1: Using ep0 maxpacket: 32 [ 1318.953597][T21212] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1318.991359][T21212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.008396][T21212] usb 1-1: config 0 descriptor?? [ 1319.031130][T21212] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1319.190675][T28224] /dev/rnullb0: Can't open blockdev [ 1319.204579][T28224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.221623][T28224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.062369][T28230] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1320.072059][T28229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1320.082021][T28229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1320.093260][T28229] /dev/rnullb0: Can't open blockdev [ 1320.139811][T28232] /dev/rnullb0: Can't open blockdev [ 1320.145968][T28233] /dev/rnullb0: Can't open blockdev [ 1320.345763][T28243] tc_dump_action: action bad kind [ 1320.354072][T28243] /dev/rnullb0: Can't open blockdev [ 1320.570210][T28200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.590119][T28200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.627284][T21212] gspca_sunplus: reg_w_riv err -71 [ 1320.639033][T21212] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1320.668765][T21212] usb 1-1: USB disconnect, device number 31 [ 1321.268583][T28282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.299258][T28282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.388955][T28282] /dev/rnullb0: Can't open blockdev [ 1321.575712][ T5931] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 1321.757840][ T5931] usb 3-1: device descriptor read/64, error -71 [ 1321.822608][T28301] /dev/rnullb0: Can't open blockdev [ 1321.832023][T28302] /dev/rnullb0: Can't open blockdev [ 1322.025205][ T5931] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 1322.066129][T28316] /dev/rnullb0: Can't open blockdev [ 1322.153228][T21212] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1322.207900][ T5931] usb 3-1: device descriptor read/64, error -71 [ 1322.326916][T21212] usb 1-1: Using ep0 maxpacket: 8 [ 1322.334170][ T5931] usb usb3-port1: attempt power cycle [ 1322.352476][T21212] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1322.376784][T21212] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1322.397186][T21212] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1322.411844][T21212] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1322.426484][T21212] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1322.443150][T21212] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1322.458429][T21212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.701423][T28304] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1322.716899][T28304] /dev/rnullb0: Can't open blockdev [ 1322.727061][T21212] usb 1-1: usb_control_msg returned -71 [ 1322.748555][T21212] usbtmc 1-1:16.0: can't read capabilities [ 1322.755034][ T5931] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 1322.789953][ T5931] usb 3-1: device descriptor read/8, error -71 [ 1322.805387][T21212] usb 1-1: USB disconnect, device number 32 [ 1323.057118][T28367] /dev/rnullb0: Can't open blockdev [ 1323.072682][ T5931] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 1323.110351][ T5931] usb 3-1: device descriptor read/8, error -71 [ 1323.233195][ T5931] usb usb3-port1: unable to enumerate USB device [ 1323.291944][T28374] netlink: 'syz.4.6414': attribute type 10 has an invalid length. [ 1323.303500][T28374] team0: Device tunl0 is of different type [ 1323.783337][ T5903] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 1323.821178][ T5903] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 1323.830883][ T5903] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 1323.863947][ T5903] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 1323.871421][ T5903] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 1323.928134][ T5903] hid-generic 0000:0000:0000.0092: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1324.020777][T28387] fido_id[28387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1324.763069][T28424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6422'. [ 1325.326831][T28432] netlink: 'syz.0.6423': attribute type 83 has an invalid length. [ 1325.344825][ T30] audit: type=1326 audit(1315.184:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28431 comm="syz.0.6423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff98258eb69 code=0x0 [ 1326.304940][T28455] /dev/rnullb0: Can't open blockdev [ 1327.858673][T28512] /dev/rnullb0: Can't open blockdev [ 1327.984367][T28517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1328.025790][T28522] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1328.939657][T28595] hfs: can't find a HFS filesystem on dev nullb0 [ 1329.140090][T28605] /dev/rnullb0: Can't open blockdev [ 1329.148167][T28605] /dev/rnullb0: Can't open blockdev [ 1329.166161][T28611] /dev/rnullb0: Can't open blockdev [ 1329.177973][T28605] /dev/rnullb0: Can't open blockdev [ 1329.188442][T28605] /dev/rnullb0: Can't open blockdev [ 1329.226492][T28613] /dev/rnullb0: Can't open blockdev [ 1329.237339][T28605] /dev/rnullb0: Can't open blockdev [ 1329.264071][T28605] /dev/rnullb0: Can't open blockdev [ 1329.281095][T28605] /dev/rnullb0: Can't open blockdev [ 1329.318239][T28605] /dev/rnullb0: Can't open blockdev [ 1329.368311][T28605] /dev/rnullb0: Can't open blockdev [ 1329.392305][T28605] /dev/rnullb0: Can't open blockdev [ 1329.414927][T28605] /dev/rnullb0: Can't open blockdev [ 1329.439918][T28605] /dev/rnullb0: Can't open blockdev [ 1329.456886][T28605] /dev/rnullb0: Can't open blockdev [ 1329.496739][T28605] /dev/rnullb0: Can't open blockdev [ 1329.530679][T28605] /dev/rnullb0: Can't open blockdev [ 1329.562600][T28605] /dev/rnullb0: Can't open blockdev [ 1329.616082][T28605] /dev/rnullb0: Can't open blockdev [ 1329.665083][T28605] /dev/rnullb0: Can't open blockdev [ 1329.720545][T28605] /dev/rnullb0: Can't open blockdev [ 1329.762635][T28605] /dev/rnullb0: Can't open blockdev [ 1329.783534][T28605] /dev/rnullb0: Can't open blockdev [ 1329.820985][T28605] /dev/rnullb0: Can't open blockdev [ 1329.828227][T28668] /dev/rnullb0: Can't open blockdev [ 1329.868216][T28605] /dev/rnullb0: Can't open blockdev [ 1329.883371][T28605] /dev/rnullb0: Can't open blockdev [ 1329.904790][T28605] /dev/rnullb0: Can't open blockdev [ 1329.946587][T28605] /dev/rnullb0: Can't open blockdev [ 1329.969469][T28605] /dev/rnullb0: Can't open blockdev [ 1329.979572][T28605] /dev/rnullb0: Can't open blockdev [ 1329.987535][T28605] /dev/rnullb0: Can't open blockdev [ 1329.994335][T28605] /dev/rnullb0: Can't open blockdev [ 1330.310287][ T5910] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1330.323404][T28704] /dev/rnullb0: Can't open blockdev [ 1330.364697][T28706] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1330.411718][T28707] kvm: pic: non byte write [ 1330.429905][T28707] /dev/rnullb0: Can't open blockdev [ 1330.449990][T28706] /dev/rnullb0: Can't open blockdev [ 1330.495912][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1330.520828][ T5910] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.537768][ T5910] usb 3-1: string descriptor 0 read error: -22 [ 1330.546803][ T5910] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1330.589202][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.758420][T28726] usb usb9: usbfs: process 28726 (syz.3.6462) did not claim interface 0 before use [ 1330.763578][T28725] /dev/rnullb0: Can't open blockdev [ 1330.791028][ T5910] usb 3-1: reset high-speed USB device number 92 using dummy_hcd [ 1330.829965][T28726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.837863][T28726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.867348][T28726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.874939][T28726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.933943][T28738] /dev/rnullb0: Can't open blockdev [ 1331.004944][ T1213] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1331.099907][T28748] trusted_key: encrypted_key: master key parameter '' is invalid [ 1331.188928][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.223444][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.258629][ T1213] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1331.272870][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.302003][ T1213] usb 1-1: config 0 descriptor?? [ 1331.528737][ T5910] usb 3-1: device descriptor read/64, error -71 [ 1331.751816][T28721] C: renamed from team_slave_0 (while UP) [ 1331.766896][T28721] netlink: 'syz.0.6460': attribute type 3 has an invalid length. [ 1331.785507][ T5910] usb 3-1: reset high-speed USB device number 92 using dummy_hcd [ 1331.795936][T28721] netlink: 'syz.0.6460': attribute type 1 has an invalid length. [ 1331.803831][T28721] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6460'. [ 1331.865416][T28772] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1331.873916][T28772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1331.972813][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1332.057522][ T1213] usb 1-1: language id specifier not provided by device, defaulting to English [ 1332.853010][T28776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.864639][T28776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.341576][T21211] usb 3-1: USB disconnect, device number 92 [ 1333.349046][ T1213] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0093/input/input190 [ 1333.474662][ T1213] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0093/input/input191 [ 1333.560229][ T1213] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0093/input/input192 [ 1333.675088][T28801] /dev/rnullb0: Can't open blockdev [ 1333.681836][ T1213] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0093/input/input193 [ 1333.837332][ T1213] uclogic 0003:256C:006D.0093: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1333.913682][ T1213] usb 1-1: USB disconnect, device number 33 [ 1333.993107][T28816] /dev/rnullb0: Can't open blockdev [ 1334.026338][T28811] fido_id[28811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1334.039266][T28808] /dev/rnullb0: Can't open blockdev [ 1334.441826][T28838] program syz.2.6480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1334.741801][T28853] /dev/rnullb0: Can't open blockdev [ 1335.398958][ T5935] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1335.577573][ T5935] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1335.594332][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.606220][ T5935] usb 3-1: Product: syz [ 1335.610513][ T5935] usb 3-1: Manufacturer: syz [ 1335.618444][ T5935] usb 3-1: SerialNumber: syz [ 1335.631228][ T5935] usb 3-1: config 0 descriptor?? [ 1335.898997][T28870] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1335.929628][T28870] hugetlbfs: Bad value 't' for mount option 'nr_inodes' [ 1335.929628][T28870] [ 1335.930005][T28884] /dev/rnullb0: Can't open blockdev [ 1336.061447][ T1213] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1336.191475][ T5910] usb 3-1: USB disconnect, device number 93 [ 1336.252223][ T1213] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1336.276297][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.305098][ T1213] usb 1-1: Product: syz [ 1336.320397][ T1213] usb 1-1: Manufacturer: syz [ 1336.327619][ T1213] usb 1-1: SerialNumber: syz [ 1336.340607][ T1213] usb 1-1: config 0 descriptor?? [ 1336.358233][ T1213] ch341 1-1:0.0: ch341-uart converter detected [ 1336.571865][ T1213] usb 1-1: failed to receive control message: -121 [ 1336.580470][ T1213] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1337.087351][T28911] /dev/rnullb0: Can't open blockdev [ 1337.098802][T28908] /dev/rnullb0: Can't open blockdev [ 1337.119287][T28913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.137491][T28913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.793776][ T1213] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1337.839011][T28926] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a) [ 1337.860114][T28926] affs: No valid root block on device nullb0 [ 1337.920778][T21211] usb 1-1: USB disconnect, device number 34 [ 1337.941918][T21211] ch341 1-1:0.0: device disconnected [ 1337.955435][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 1337.999020][ T1213] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1338.029805][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.037861][ T1213] usb 3-1: Product: syz [ 1338.051794][T28937] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 1338.060551][ T1213] usb 3-1: Manufacturer: syz [ 1338.070825][ T1213] usb 3-1: SerialNumber: syz [ 1338.097461][ T1213] usb 3-1: config 0 descriptor?? [ 1338.126129][ T1213] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1338.235403][T28950] /dev/rnullb0: Can't open blockdev [ 1338.468145][T28961] binder: BINDER_SET_CONTEXT_MGR already set [ 1338.506852][T28961] binder: 28960:28961 ioctl 4018620d 2000000002c0 returned -16 [ 1338.716096][T28971] sp0: Synchronizing with TNC [ 1338.764834][T28919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.774460][T28919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.109953][T28997] overlayfs: overlapping lowerdir path [ 1339.187568][T29002] /dev/rnullb0: Can't open blockdev [ 1339.251140][ T1213] gspca_sq905: bulk read fail (-22) len 0/4 [ 1339.257195][ T1213] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 1339.370898][T29010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.383807][T29010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.508893][ T1213] usb 3-1: USB disconnect, device number 94 [ 1339.538761][T29021] /dev/rnullb0: Can't open blockdev [ 1340.163391][T29043] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20002 [ 1340.259507][T29047] netlink: 'syz.3.6510': attribute type 33 has an invalid length. [ 1340.272334][T29047] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6510'. [ 1340.451455][T29057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.471537][T29057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.061432][T29077] /dev/rnullb0: Can't open blockdev [ 1341.064691][T19699] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1341.249012][T19699] usb 3-1: not running at top speed; connect to a high speed hub [ 1341.262542][T19699] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1341.274080][T19699] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1341.285073][T19699] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1341.298204][T19699] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1341.329344][T19699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.337938][T19699] usb 3-1: Product: syz [ 1341.342149][T19699] usb 3-1: Manufacturer: syz [ 1341.351580][T19699] usb 3-1: SerialNumber: syz [ 1341.612261][T19699] usb 3-1: 0:2 : does not exist [ 1341.641457][T19699] usb 3-1: USB disconnect, device number 95 [ 1341.653910][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6521'. [ 1341.687013][T28538] udevd[28538]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.786881][T29113] bio_check_eod: 2 callbacks suppressed [ 1341.786895][T29113] syz.3.6522: attempt to access beyond end of device [ 1341.786895][T29113] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1341.806527][T29113] gfs2: error -5 reading superblock [ 1341.818045][ T51] Bluetooth: hci1: command 0x1003 tx timeout [ 1341.824578][ T5862] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1341.963904][T29121] /dev/rnullb0: Can't open blockdev [ 1342.246358][T29154] /dev/rnullb0: Can't open blockdev [ 1342.496248][T29163] /dev/rnullb0: Can't open blockdev [ 1342.800272][T29182] tipc: Enabling of bearer rejected, failed to enable media [ 1342.820737][T29182] tmpfs: Unknown parameter 'noinode32' [ 1342.832329][T29157] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1342.835306][T29186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1342.868372][T29186] /dev/rnullb0: Can't open blockdev [ 1342.967664][T19699] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1343.139725][T19699] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1343.172240][T19699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1343.205521][T19699] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1343.224636][T19699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1343.243136][T19699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1343.265086][T19699] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1343.286478][T19699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1343.315590][T19699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1343.331990][T19699] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1343.354260][T19699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1343.377349][T19699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1343.395257][T19699] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1343.414878][T19699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1343.428715][T19699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1343.443403][T19699] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1343.456766][T19699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1343.465109][T19699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1343.474155][T19699] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1343.496011][T19699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1343.509427][T19699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1343.520200][T19699] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1343.531458][T19699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1343.540824][T19699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1343.549989][T19699] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1343.566239][T19699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1343.580229][T19699] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1343.598289][T19699] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1343.617773][T19699] usb 3-1: Product: syz [ 1343.628337][T19699] usb 3-1: Manufacturer: syz [ 1343.639117][T19699] usb 3-1: SerialNumber: syz [ 1343.656519][T19699] usb 3-1: config 0 descriptor?? [ 1343.697334][T19699] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1343.920806][T29173] /dev/rnullb0: Can't open blockdev [ 1343.929929][T21211] usb 3-1: USB disconnect, device number 96 [ 1343.951904][T21211] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1344.301800][T29255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.319878][T29255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.443006][T21211] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1344.604067][T21211] usb 1-1: device descriptor read/64, error -71 [ 1344.817223][T21212] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1344.859978][T21211] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1344.917892][T29273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6542'. [ 1344.948378][T29273] /dev/rnullb0: Can't open blockdev [ 1344.977759][T21212] usb 3-1: Using ep0 maxpacket: 32 [ 1344.994211][T21212] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1344.994924][T29276] "syz.3.6543" (29276) uses obsolete ecb(arc4) skcipher [ 1345.005461][T21211] usb 1-1: device descriptor read/64, error -71 [ 1345.016982][T21212] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.022565][T29276] /dev/rnullb0: Can't open blockdev [ 1345.028820][T21212] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1345.045279][T21212] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1345.054770][T21212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.062806][T21212] usb 3-1: Product: syz [ 1345.067884][T21212] usb 3-1: Manufacturer: 욌䊋힍ᬙ磖Ό起뎶굴큅⏑ዩᄋ룫禮婜훻垩᲏蝘ꈒ᥺鸈ㆵꙅ䧇ୟ骡틮撨쐄抄醍㑄㭇ড♿⑂㆒ᩡ㥷ꮻ秫⩣톺솭ᙶ见쭻綡ள㹁䂦첨紋䇊վ渍쬟猣쵄꺋⑗亁웱⣿ネ₝忐頾铻ᵬ㚸౑ǃ⸍鉇㿻ꝯ忆ꋖ㒲甕赵酕ꖍ쵷ؒ栋 [ 1345.097988][T21212] usb 3-1: SerialNumber: syz [ 1345.138318][T21211] usb usb1-port1: attempt power cycle [ 1345.347486][T21212] usb 3-1: 0:2 : does not exist [ 1345.373348][T21212] usb 3-1: USB disconnect, device number 97 [ 1345.512234][T21211] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1345.540706][T21211] usb 1-1: device descriptor read/8, error -71 [ 1345.800828][T21211] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1345.825908][T21211] usb 1-1: device descriptor read/8, error -71 [ 1345.884376][T29313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.894105][T29313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.945907][T21211] usb usb1-port1: unable to enumerate USB device [ 1346.377199][T29327] vivid-000: disconnect [ 1346.383950][T29326] vivid-000: reconnect [ 1346.503742][T29339] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6555'. [ 1346.515608][T29339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6555'. [ 1346.526630][T29339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6555'. [ 1346.760461][T29341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.772403][T29341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.783846][T29341] /dev/rnullb0: Can't open blockdev [ 1347.452837][T29350] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1347.665758][T29357] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6560'. [ 1347.842810][T21211] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1347.988086][T29359] /dev/rnullb0: Can't open blockdev [ 1348.024435][T21211] usb 1-1: Using ep0 maxpacket: 16 [ 1348.036668][T21211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.052407][T21211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.065162][T21211] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1348.077692][T21211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.094917][T21211] usb 1-1: config 0 descriptor?? [ 1348.550090][T21211] input: HID 041e:3100 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.0094/input/input194 [ 1348.633571][T21211] creative-sb0540 0003:041E:3100.0094: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.0-1/input0 [ 1348.836743][T29374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.860969][T29374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.884320][T21211] usb 1-1: USB disconnect, device number 39 [ 1349.027265][T29392] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6562'. [ 1349.300660][T29402] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1349.314912][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 1349.314941][T29396] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1349.321007][ C0] CPU: 0 UID: 0 PID: 29398 Comm: syz.3.6564 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1349.340491][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1349.350554][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 1349.356647][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 1349.376366][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 1349.382438][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff88807bcd0480 [ 1349.390412][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880557a9000 [ 1349.398406][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 1349.406381][ C0] R10: dffffc0000000000 R11: ffffffff88f55f30 R12: dffffc0000000000 [ 1349.414361][ C0] R13: ffff88807bcd0438 R14: 0000000000000000 R15: ffff88807bcd0400 [ 1349.422436][ C0] FS: 00007f30a1abc6c0(0000) GS:ffff88812580a000(0000) knlGS:0000000000000000 [ 1349.431399][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1349.438083][ C0] CR2: 00007f30a0b74620 CR3: 0000000075e9a000 CR4: 00000000003526f0 [ 1349.446060][ C0] Call Trace: [ 1349.449341][ C0] [ 1349.452201][ C0] ? __pfx_das16m1_ai_munge+0x10/0x10 [ 1349.457578][ C0] comedi_buf_write_samples+0x369/0x5a0 [ 1349.463136][ C0] das16m1_handler+0x213/0x4b0 [ 1349.467898][ C0] das16m1_interrupt+0xaf/0x180 [ 1349.472749][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 1349.478218][ C0] __handle_irq_event_percpu+0x28c/0x980 [ 1349.483854][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 1349.490011][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1349.495216][ C0] handle_irq_event+0x8b/0x1e0 [ 1349.499989][ C0] ? handle_edge_irq+0x229/0xa10 [ 1349.504929][ C0] handle_edge_irq+0x23b/0xa10 [ 1349.509697][ C0] __common_interrupt+0x143/0x250 [ 1349.514727][ C0] common_interrupt+0xb6/0xe0 [ 1349.519403][ C0] [ 1349.522417][ C0] [ 1349.525345][ C0] asm_common_interrupt+0x26/0x40 [ 1349.530363][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 1349.535648][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 8b b0 43 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 1349.556395][ C0] RSP: 0018:ffffc900116af290 EFLAGS: 00000206 [ 1349.562481][ C0] RAX: c4a1b6391c3f2c00 RBX: 0000000000000202 RCX: c4a1b6391c3f2c00 [ 1349.570457][ C0] RDX: 0000000000000000 RSI: ffffffff8de563b2 RDI: ffffffff8c04ce00 [ 1349.578432][ C0] RBP: ffff88806588e4f0 R08: ffffc900116af418 R09: 0000000000000000 [ 1349.586432][ C0] R10: ffffc900116af478 R11: fffff520022d5e91 R12: 0000000000000000 [ 1349.594405][ C0] R13: 0000000000000000 R14: ffffffff8e539f20 R15: ffff88806588da00 [ 1349.602390][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1349.607512][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1349.612625][ C0] unwind_next_frame+0x19a9/0x2390 [ 1349.617742][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1349.622853][ C0] ? __unwind_start+0xf8/0x760 [ 1349.627616][ C0] __unwind_start+0x5b9/0x760 [ 1349.632297][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1349.638454][ C0] arch_stack_walk+0xe4/0x150 [ 1349.643134][ C0] ? arch_stack_walk+0xe4/0x150 [ 1349.647994][ C0] stack_trace_save+0x9c/0xe0 [ 1349.652674][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1349.658049][ C0] ? stack_depot_save_flags+0x40/0x860 [ 1349.663507][ C0] kasan_save_track+0x3e/0x80 [ 1349.668208][ C0] __kasan_kmalloc+0x93/0xb0 [ 1349.672802][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 1349.677655][ C0] ? iter_file_splice_write+0x1cb/0x1000 [ 1349.683306][ C0] iter_file_splice_write+0x1cb/0x1000 [ 1349.688792][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1349.694708][ C0] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1349.700096][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1349.706005][ C0] direct_splice_actor+0x101/0x160 [ 1349.711137][ C0] splice_direct_to_actor+0x5a5/0xcc0 [ 1349.716518][ C0] ? __pfx_direct_splice_actor+0x10/0x10 [ 1349.722155][ C0] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1349.728053][ C0] do_splice_direct+0x181/0x270 [ 1349.732911][ C0] ? __pfx_do_splice_direct+0x10/0x10 [ 1349.738290][ C0] ? common_file_perm+0x1b5/0x230 [ 1349.743319][ C0] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1349.749213][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 1349.754588][ C0] ? security_file_permission+0x75/0x290 [ 1349.760230][ C0] ? rw_verify_area+0x255/0x4d0 [ 1349.765093][ C0] do_sendfile+0x4da/0x7e0 [ 1349.769516][ C0] ? __pfx_do_sendfile+0x10/0x10 [ 1349.774458][ C0] __se_sys_sendfile64+0xd9/0x190 [ 1349.779482][ C0] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1349.785115][ C0] ? rcu_is_watching+0x15/0xb0 [ 1349.789883][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1349.794567][ C0] do_syscall_64+0xfa/0x3b0 [ 1349.799066][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1349.804265][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.810409][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1349.815125][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.821033][ C0] RIP: 0033:0x7f30a0b8eb69 [ 1349.825472][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1349.845083][ C0] RSP: 002b:00007f30a1abc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1349.853503][ C0] RAX: ffffffffffffffda RBX: 00007f30a0db5fa0 RCX: 00007f30a0b8eb69 [ 1349.861477][ C0] RDX: 0000200000001000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1349.869532][ C0] RBP: 00007f30a0c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1349.877505][ C0] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 1349.885479][ C0] R13: 0000000000000000 R14: 00007f30a0db5fa0 R15: 00007ffd0651ac18 [ 1349.893456][ C0] [ 1349.896473][ C0] Modules linked in: [ 1349.900367][ C0] ---[ end trace 0000000000000000 ]--- [ 1349.905819][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 1349.911898][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 1349.931516][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 1349.937598][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff88807bcd0480 [ 1349.945574][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880557a9000 [ 1349.953547][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 1349.961516][ C0] R10: dffffc0000000000 R11: ffffffff88f55f30 R12: dffffc0000000000 [ 1349.969490][ C0] R13: ffff88807bcd0438 R14: 0000000000000000 R15: ffff88807bcd0400 [ 1349.977462][ C0] FS: 00007f30a1abc6c0(0000) GS:ffff88812580a000(0000) knlGS:0000000000000000 [ 1349.986400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1349.992988][ C0] CR2: 00007f30a0b74620 CR3: 0000000075e9a000 CR4: 00000000003526f0 [ 1350.000967][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1350.008310][ C0] Kernel Offset: disabled [ 1350.012639][ C0] Rebooting in 86400 seconds..