last executing test programs: 3m19.763909086s ago: executing program 3 (id=693): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044581, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 3m19.695460187s ago: executing program 3 (id=694): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x96bcd03cc6d7df67, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@rose, @default, @rose, @netrom, @rose, @default, @netrom, @rose]}, &(0x7f0000000080)=0x48, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)={0x3, 'bridge0\x00', {0x9}, 0x9}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0xf1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r2], 0x1c}}, 0x20000080) (async) mmap$xdp(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x80000000) 3m19.547269511s ago: executing program 3 (id=697): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x20000000006, 0x4000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r3, r2, 0x80000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)=ANY=[]) fdatasync(r1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x7}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000af7000/0x1000)=nil, 0x1000, 0x15) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000080)='/dev/rnullb0\x00', 0xd) r7 = eventfd(0x9) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x2, r7}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r9 = gettid() ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000a12000/0x8000)=nil, &(0x7f0000998000/0x4000)=nil, 0x8000, 0xf290c871d62849d9}) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x7fffffff}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) write$sysctl(r3, &(0x7f0000000400)='4\x00', 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r10, @in6={{0xa, 0x4e22, 0x7fff00, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1000}}, 0x80000000, 0x8, 0xc, 0x7, 0x30, 0x81, 0x6}, 0x9c) 3m19.081896883s ago: executing program 3 (id=700): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, 0xffffffffffffffff, r2}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x240, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x1000, 0x3ff, 0x0, r7, 0x4, 0x4}}, {0x1ffffffffffffd, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}, {{0x5, 0x2, 0x1ff, 0x8d, 0x7fff, 0xe9e, {0x0, 0x7f, 0x0, 0x7fffffffffffffff, 0x6, 0x8, 0x80000000, 0x3, 0x5, 0x4000, 0x0, r6, r7, 0x401, 0x3}}, {0x5, 0x3ce, 0x29, 0x7f, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00'}}, {{0x0, 0x0, 0x1, 0x286, 0xc0, 0x8, {0x5, 0x8, 0x5, 0x100, 0x8000000000000000, 0x6, 0x3e, 0x1, 0x10, 0xa000, 0x6a3, r6, r7, 0x8, 0x7}}, {0x6, 0x129, 0x3, 0x3, '\\$\''}}]}, 0x0, 0x0, 0x0}) getdents64(r8, &(0x7f0000000100)=""/134, 0x86) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x140e, 0x200, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x54) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000319000/0x3000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0xb88) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) socket$nl_generic(0x10, 0x3, 0x10) 3m18.7155494s ago: executing program 3 (id=701): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="c250a857df0bfdf4114400000009060102000000b015000000030000000900020073797a3100000000050001001c0007800c00018008b43d5c726b71a51932c704b99afd967900014000000000"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) fadvise64(r0, 0x9, 0x9, 0x2) sendfile(r0, r0, 0x0, 0x7ffff000) (async) r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000c10000/0x7000)=nil, 0x7000}, 0x1}) 3m18.407349288s ago: executing program 3 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000004d80)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) (async) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ub\xce\x00\x00\x00') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) recvfrom$l2tp(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) io_setup(0x768, &(0x7f0000000100)) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)={0x32, 0x4, 0x0, {0x5, 0x2, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) 3m18.329180475s ago: executing program 32 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000004d80)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) (async) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ub\xce\x00\x00\x00') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) recvfrom$l2tp(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) io_setup(0x768, &(0x7f0000000100)) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)={0x32, 0x4, 0x0, {0x5, 0x2, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) 3.681431867s ago: executing program 0 (id=1857): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async, rerun: 32) mount(&(0x7f0000001400)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) (rerun: 32) 3.111530196s ago: executing program 1 (id=1862): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x29, 0x634ac3) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r3, 0x1a1c1000) (async, rerun: 64) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000080)=0x2) (async, rerun: 64) socket$kcm(0x29, 0xd, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e23, @broadcast}], 0x10) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) 3.107840026s ago: executing program 1 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x88) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendfile(r0, r0, 0x0, 0x7ffff000) 3.093945731s ago: executing program 1 (id=1864): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x80, &(0x7f00000000c0)}, 0x4048040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) 2.95834155s ago: executing program 1 (id=1865): ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100020, &(0x7f0000000000)=0x100000001}) socketpair(0xc6d091cf00223fc, 0x1, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) sendmsg$AUDIT_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x3e9, 0x100, 0x70bd29, 0x25dfdbfe, {0x20, 0x1, 0x2, r2, 0xdb, 0x9, 0x3, 0x4, 0x0, 0x0, 0xfff}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4050}, 0x4004010) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r4}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000580)={0xa, 0x4, 0xfa00, {r5}}, 0xc) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f00000005c0)={0x2}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f0000000640)={0x2, 0xe000}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000680), r5, r3}}, 0x18) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000700)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000780)=0x1) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x33}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0xc080) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000008c0)=0x8000) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000940)={0x16, 0x98, 0xfa00, {&(0x7f0000000900), 0x1, r5, 0x1c, 0x1, @ib={0x1b, 0xfff, 0x1ff, {"9bd7dc45577b277eecdfbfe771e5f42d"}, 0xffffffffffffff00, 0x9, 0x8000}}}, 0xa0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x2, 0xd]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x8040) r7 = syz_open_dev$sndpcmc(&(0x7f0000000b00), 0x8, 0x24101) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0x40084149, &(0x7f0000000b40)=0x6) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b80)={0x101, {{0xa, 0x4e24, 0x4, @mcast2, 0x46}}, 0x0, 0x5, [{{0xa, 0x4e20, 0x8, @private1, 0xc2427700}}, {{0xa, 0x4e23, 0x6, @private0, 0x3f48}}, {{0xa, 0x4e23, 0x5, @loopback, 0x10001}}, {{0xa, 0x4e20, 0x8001, @loopback}}, {{0xa, 0x4e24, 0x7, @private2, 0x24}}]}, 0x310) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x201402}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000001000)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}) syz_open_dev$video4linux(&(0x7f0000001040), 0x1, 0x200000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000001080)={0x680, @tick=0x7f, 0x0, {0x7, 0x4}, 0x0, 0x1, 0x4}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/cpu_byteorder', 0x20000, 0x128) syz_open_dev$admmidi(&(0x7f0000001100), 0x7, 0x109600) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000001140)={0x0, @reserved}) 2.895423029s ago: executing program 1 (id=1866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000280)="594403b17c6eb153c936434c85a7ea9f23a1bb6532482b8e1a1d5c04e2a69607b377409ee563f31ab5049d7fc33e1fd9bb6d9b11c87b6ea9b223a46522966523f4d3d20c5632db6b49bcf6fcc011275e0ef48c1062c285d85db109483ab22206ecaf92c74c12", 0x66}, {&(0x7f00000003c0)="3ea103d97bc3721a0c6ade1201b04a4227599134fd27a97ec9851bf7b1c65445eb309266a7f8501b8229ac895c55b30a034cbeec9d67e8cb0afdb85d361d6b863100dc5e92774b2db6480c70822d9737761ed3d342af3e423d8fabb44389867114c18b10f578d482f838bac047c87a566f50d82a48ac36390da845dd818468465ee5b43998a17eb313409ceea6960ea45bbc7ce5f037acb093248443079d005e94422f82378f68b52a4ca001ae28484cf8ba568f4f87837cf0ab11b2e0a715be04235b781b02702f6095d593ae42976f1f1d45715309cdb388d1fd25dce3bf", 0xdf}, {&(0x7f00000007c0)="953c1de5b316bb77f0c1bd88de79645b849dbcc82693f1f7a50d42a3ac332ab0112e4a00f44b83a9393f15234db7066096e4052bbf81fcb96ff47d2409b0e1b550d258f847048398a5a19659e8df34f7d9d060428afc8c89df9a36073eeab4859bdc18dc0ad5e7881891a617996f53f2ffa402b9", 0x74}, {&(0x7f0000000840)="95fb5200fc2f678c53363a615e392b60833698fe717d038f37e8030d063bb838df3a71c715413de87aa0040342c073527fd69595ac48", 0x36}, {&(0x7f00000008c0)="271a1f8a0f035343dc8507c6e0c561eea7a65fd4215ef621ab6cbde130db07540c207547cc85fea2898d581e3c06e8f7c5902bb9652a945ae3290a1c922b186365641d26388bc68ed5eb77c44cfc2706c82611abce387c4cfec47568a828021b20c1b6e5e75740b14dfb87b4d8aa60ab6a4f", 0x72}, {0x0}], 0x6, 0x0, 0x0, 0x8004}, 0x800) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x265, 0x4000, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000003000)={0x2020}, 0x2020) r2 = dup(r0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a32000000000500010007000000140007800800134000000000080012"], 0x64}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 2.810315853s ago: executing program 1 (id=1868): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0x8, 0xc9100120, 0x0, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 2.762605597s ago: executing program 0 (id=1869): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22052, r1, 0x2000) 2.47925602s ago: executing program 0 (id=1874): set_mempolicy(0x3, &(0x7f0000000080)=0x7e, 0x9) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x191) rmdir(&(0x7f0000000100)='./control\x00') openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x16d342, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0xd7dd, 0x6639, 0x101, 0x800, 0xd, 0xc, 0x8, 0x40000000400, 0xc, 0x3, 0x3, 0x0, 0x3a9, 0x9, 0xfffffffffffffffe, 0x1], 0xf000, 0x231c81}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000000000000000020000003c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a300000000eee000180090001007866726d000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fcntl$lock(r3, 0x24, &(0x7f0000000780)={0x1, 0x1, 0xffffffffffffff7f, 0x3}) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) r4 = memfd_secret(0x80000) write$binfmt_register(r3, &(0x7f0000000240)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '!\x85', 0x3a, 'system.posix_acl_default\x00', 0x3a, './control', 0x3a, [0x50]}, 0x45) close_range(r4, 0xffffffffffffffff, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000002700)={0xffff, [[0x9, 0x1, 0x5, 0x5, 0x7, 0x10, 0x3, 0x400], [0x5, 0x401, 0x1a, 0x4, 0x8, 0x6, 0x3, 0x3], [0x4, 0x1, 0xd1af, 0xffffb3c0, 0x3, 0x9, 0x4d90, 0x7]], '\x00', [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x401, 0xc, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x1, 0x1, 0x1}, {0x40, 0x7, 0x1, 0x0, 0x1}, {0xea, 0x101, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x100, 0x0, 0x1, 0x1}, {0x0, 0xff, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x9, 0x1, 0x1}, {0x752, 0x5, 0x0, 0x1, 0x1}, {0x8, 0x8, 0x1, 0x1}, {0xa7, 0x1, 0x0, 0x1}], '\x00', 0x7}) close_range(r8, 0xffffffffffffffff, 0x0) 2.477998354s ago: executing program 0 (id=1875): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2002) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000100)={0x32, 0x4, 0x0, [{0x7, 0xfffffffffffffc01, 0x40, 0x8, 0x6, 0x3, 0xf8, '\x00', 0xc}, {0x92, 0xb51, 0x0, 0x8, 0x8, 0x24, 0x82, '\x00', 0x1}, {0x1c1, 0x8, 0xe, 0x10, 0xf, 0x1, 0x2, '\x00', 0xb5}, {0xe, 0xffffffffffffda70, 0x8, 0x61, 0x6, 0x9, 0x10, '\x00', 0x1}]}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 2.445312179s ago: executing program 0 (id=1876): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x5, 0x978d}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) 2.141669867s ago: executing program 0 (id=1879): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40280, 0x0) 1.194609796s ago: executing program 4 (id=1888): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r1, 0x1a1c1000) (async) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x2) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.u'}, 0x15) 1.136390125s ago: executing program 4 (id=1889): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000140)=0x80000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0xfffff7fa, 0xb, 0x4}) r2 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r2, 0x0, 0x0, 0x5) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='rootfs\x00', 0x208002, 0x0) 991.340289ms ago: executing program 4 (id=1890): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000045"], 0x58) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x80045515, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x1, 0x100) close(r7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r8, 0x5708e000) 603.322734ms ago: executing program 4 (id=1891): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd4baf000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) mremap(&(0x7f000085f000/0x1000)=nil, 0x1000, 0x13000, 0x4, &(0x7f0000018000/0x13000)=nil) 566.162908ms ago: executing program 4 (id=1892): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000200)={0x10, 0xfffffffffffffffd}, 0x4c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004001) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x400}, {0xb, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0xa84bf5a6, 0x1, 0x32, 0xb}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10, 0x7) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 407.419764ms ago: executing program 4 (id=1893): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000040)={0x0, 0xa, 0x1, 0x83}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 179.459225ms ago: executing program 2 (id=1896): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xc0) splice(r0, 0x0, r1, 0x0, 0x800000000fe, 0x0) 179.01423ms ago: executing program 2 (id=1897): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x10, r0, 0x5708e000) 143.857082ms ago: executing program 2 (id=1898): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) lseek(r0, 0x0, 0x4) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x10001}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 91.034265ms ago: executing program 2 (id=1899): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) mremap(&(0x7f00000c0000/0xa000)=nil, 0xa000, 0x2000, 0x3, &(0x7f00000b4000/0x2000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000017b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/78, 0x4e, 0x0, &(0x7f0000000080)=""/142, 0x8e}, &(0x7f0000000180)=0x40) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 3.486713ms ago: executing program 2 (id=1900): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={0x0}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, 0x8) 0s ago: executing program 2 (id=1901): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc2700, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7) read(r0, &(0x7f0000000000)=""/212, 0xd4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) timerfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x7fff, 0x2, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000580), 0x4) close(0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r3, &(0x7f0000000180), 0x12) setuid(0xee01) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x26002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x6000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRESOCT=r0, @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x2000c801) ioctl$BLKRRPART(r5, 0x125f, 0x0) kernel console output (not intermixed with test programs): has an invalid descriptor for endpoint zero, skipping [ 219.191910][ T5928] usb 5-1: config 6 interface 141 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 219.203971][ T5928] usb 5-1: config 6 interface 141 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 219.227740][ T5928] usb 5-1: config 6 interface 141 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 219.239493][ T5928] usb 5-1: config 6 interface 141 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 219.256661][ T5928] usb 5-1: config 6 interface 141 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 219.267667][ T5928] usb 5-1: config 6 interface 141 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 219.283912][ T5928] usb 5-1: config 6 interface 141 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 219.298307][ T5928] usb 5-1: config 6 interface 141 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 219.312402][ T5928] usb 5-1: New USB device found, idVendor=7392, idProduct=b722, bcdDevice=35.23 [ 219.321924][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.330466][ T5928] usb 5-1: Product: syz [ 219.334908][ T5928] usb 5-1: Manufacturer: syz [ 219.336215][T10041] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 219.339578][ T5928] usb 5-1: SerialNumber: syz [ 219.342775][T10028] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 219.391570][T10041] tmpfs: Bad value for 'gid' [ 219.397743][T10041] tmpfs: Bad value for 'gid' [ 219.409259][ T952] usbhid 2-1:1.0: can't add hid device: -71 [ 219.418548][ T952] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 219.431453][ T952] usb 2-1: USB disconnect, device number 44 [ 219.651483][T10048] /dev/rnullb0: Can't open blockdev [ 219.761853][T10052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.775333][T10052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.061045][T10055] /dev/rnullb0: Can't open blockdev [ 220.525651][ T5928] usb 5-1: USB disconnect, device number 19 [ 220.802354][ T6060] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 220.962709][ T6060] usb 2-1: Using ep0 maxpacket: 8 [ 220.969882][ T6060] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 220.978933][ T6060] usb 2-1: config 1 has no interface number 1 [ 220.985133][ T6060] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 220.998443][ T6060] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 221.011010][ T6060] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.020160][ T6060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.028246][ T6060] usb 2-1: Product: syz [ 221.032410][ T6060] usb 2-1: Manufacturer: syz [ 221.037014][ T6060] usb 2-1: SerialNumber: syz [ 221.188260][ T1212] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 221.203766][T10089] sctp: [Deprecated]: syz.4.1184 (pid 10089) Use of int in maxseg socket option. [ 221.203766][T10089] Use struct sctp_assoc_value instead [ 221.336694][ T1212] usb 3-1: device descriptor read/64, error -71 [ 221.553611][T10105] /dev/rnullb0: Can't open blockdev [ 221.603975][ T1212] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 221.764128][ T1212] usb 3-1: device descriptor read/64, error -71 [ 221.820992][ T6060] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 221.848803][ T6060] usb 2-1: USB disconnect, device number 45 [ 221.876461][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.894974][ T1212] usb usb3-port1: attempt power cycle [ 222.266170][ T1212] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 222.288587][ T1212] usb 3-1: device descriptor read/8, error -71 [ 222.458529][ T5928] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 222.554689][ T1212] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 222.588849][ T1212] usb 3-1: device descriptor read/8, error -71 [ 222.597398][ T5928] usb 5-1: device descriptor read/64, error -71 [ 222.715248][ T1212] usb usb3-port1: unable to enumerate USB device [ 222.853815][ T5928] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 222.992902][ T5928] usb 5-1: device descriptor read/64, error -71 [ 223.016900][T10145] /dev/rnullb0: Can't open blockdev [ 223.121294][ T5928] usb usb5-port1: attempt power cycle [ 223.207056][ T952] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 223.366692][ T952] usb 2-1: Using ep0 maxpacket: 32 [ 223.373172][ T952] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 223.382300][ T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.391459][ T952] usb 2-1: config 0 descriptor?? [ 223.399425][ T952] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 223.484310][ T5928] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 223.506666][ T5928] usb 5-1: device descriptor read/8, error -71 [ 223.762026][ T5928] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 223.784523][ T5928] usb 5-1: device descriptor read/8, error -71 [ 223.912382][ T5928] usb usb5-port1: unable to enumerate USB device [ 224.235075][T10169] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.241081][T10169] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 224.250644][T10169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.257240][T10169] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.263415][T10169] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.272760][T10169] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.282592][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.296086][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.305233][T10169] /dev/rnullb0: Can't open blockdev [ 224.562015][T10173] dlm: no locking on control device [ 224.866752][T10184] netlink: 'syz.2.1215': attribute type 6 has an invalid length. [ 225.124892][ T952] gspca_vc032x: reg_w err -71 [ 225.129791][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.135137][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.140829][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.146133][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.152374][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.157662][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.163018][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.168295][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.174517][ T5928] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 225.182140][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.187683][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.193233][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.198663][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.203950][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.209251][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.214630][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.220054][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.225425][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.230735][ T952] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.236015][ T952] gspca_vc032x: Unknown sensor... [ 225.241175][ T952] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 225.250954][ T952] usb 2-1: USB disconnect, device number 46 [ 225.343410][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 225.351485][ T5928] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 225.360643][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.368977][ T5928] usb 3-1: Product: syz [ 225.373302][ T5928] usb 3-1: Manufacturer: syz [ 225.377925][ T5928] usb 3-1: SerialNumber: syz [ 225.383371][ T5928] usb 3-1: config 0 descriptor?? [ 225.390133][ T5928] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 225.758421][T10205] /dev/rnullb0: Can't open blockdev [ 225.798902][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 225.816960][T10210] unsupported nlmsg_type 40 [ 225.817028][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1221'. [ 225.958362][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.968005][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.230961][ T952] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 226.260895][ T5928] gspca_stk1135: reg_w 0x5 err -71 [ 226.271452][ T5928] gspca_stk1135: serial bus timeout: status=0x00 [ 226.278233][ T5928] gspca_stk1135: Sensor write failed [ 226.283869][ T5928] gspca_stk1135: serial bus timeout: status=0x00 [ 226.290278][ T5928] gspca_stk1135: Sensor write failed [ 226.296547][ T5928] gspca_stk1135: serial bus timeout: status=0x00 [ 226.302944][ T5928] gspca_stk1135: Sensor read failed [ 226.308751][ T5928] gspca_stk1135: serial bus timeout: status=0x00 [ 226.315140][ T5928] gspca_stk1135: Sensor read failed [ 226.326475][ T5928] gspca_stk1135: Detected sensor type unknown (0x0) [ 226.333216][ T5928] gspca_stk1135: serial bus timeout: status=0x00 [ 226.339586][ T5928] gspca_stk1135: Sensor read failed [ 226.344846][ T5928] gspca_stk1135: serial bus timeout: status=0x00 [ 226.351755][ T5928] gspca_stk1135: Sensor read failed [ 226.357029][ T5928] gspca_stk1135: serial bus timeout: status=0x00 [ 226.363414][ T5928] gspca_stk1135: Sensor write failed [ 226.369256][ T5928] gspca_stk1135: serial bus timeout: status=0x00 [ 226.375779][ T5928] gspca_stk1135: Sensor write failed [ 226.381235][ T5928] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 226.394409][ T5928] usb 3-1: USB disconnect, device number 50 [ 226.411940][ T952] usb 2-1: Using ep0 maxpacket: 16 [ 226.423492][ T952] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=71.c9 [ 226.432674][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.442340][ T51] Bluetooth: hci3: command 0x0401 tx timeout [ 226.444980][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 226.448600][ T5187] Bluetooth: hci0: command 0x080f tx timeout [ 226.465517][ T952] usb 2-1: Product: syz [ 226.469699][ T952] usb 2-1: Manufacturer: syz [ 226.482023][ T952] usb 2-1: SerialNumber: syz [ 226.497728][ T952] usb 2-1: config 0 descriptor?? [ 226.505790][ T952] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 226.603329][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1231'. [ 226.755178][ T5187] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 227.117437][ T1212] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 227.292283][ T1212] usb 3-1: Using ep0 maxpacket: 8 [ 227.949488][T10270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.973388][T10270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.272822][ T952] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 228.455955][ T952] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 228.464042][ T952] usb 5-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 228.474571][ T952] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.483587][ T952] usb 5-1: config 1 has no interface number 1 [ 228.490805][ T952] usb 5-1: config 1 interface 4 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.504326][ T952] usb 5-1: config 1 interface 4 has no altsetting 0 [ 228.513886][ T952] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.525133][ T952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.534350][ T952] usb 5-1: Product: syz [ 228.539432][ T952] usb 5-1: Manufacturer: syz [ 228.544091][ T952] usb 5-1: SerialNumber: syz [ 228.656920][ T5187] Bluetooth: hci3: command 0x0401 tx timeout [ 229.047314][ T952] usb 5-1: 0:2 : does not exist [ 229.069506][T10292] GUP no longer grows the stack in syz.0.1243 (10292): 200000004000-20000000a000 (200000002000) [ 229.083615][ T952] usb 5-1: USB disconnect, device number 24 [ 229.112876][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.117243][T10292] CPU: 1 UID: 0 PID: 10292 Comm: syz.0.1243 Not tainted syzkaller #0 PREEMPT(full) [ 229.117270][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.117281][T10292] Call Trace: [ 229.117288][T10292] [ 229.117295][T10292] dump_stack_lvl+0x189/0x250 [ 229.117325][T10292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.117349][T10292] ? __pfx__printk+0x10/0x10 [ 229.117370][T10292] ? find_vma+0xe7/0x160 [ 229.117392][T10292] ? vma_is_secretmem+0xd/0x50 [ 229.117416][T10292] __get_user_pages+0x24d0/0x2ce0 [ 229.117450][T10292] get_user_pages_remote+0x2f1/0xad0 [ 229.117472][T10292] ? __pfx_mtree_load+0x10/0x10 [ 229.117494][T10292] ? __pfx_get_user_pages_remote+0x10/0x10 [ 229.117513][T10292] ? __access_remote_vm+0xa0/0x7d0 [ 229.117534][T10292] ? __access_remote_vm+0x367/0x7d0 [ 229.117557][T10292] __access_remote_vm+0x211/0x7d0 [ 229.117581][T10292] ? __pfx___access_remote_vm+0x10/0x10 [ 229.117604][T10292] ? alloc_pages_noprof+0xbe/0x190 [ 229.117621][T10292] proc_pid_cmdline_read+0x430/0x810 [ 229.117645][T10292] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 229.117665][T10292] ? bpf_lsm_inode_getlsmprop+0x10/0x10 [ 229.117685][T10292] ? security_file_permission+0x75/0x290 [ 229.117702][T10292] ? rw_verify_area+0x2a6/0x4d0 [ 229.117719][T10292] vfs_readv+0x5a7/0x850 [ 229.117738][T10292] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 229.117759][T10292] ? __pfx_vfs_readv+0x10/0x10 [ 229.117783][T10292] ? rcu_is_watching+0x15/0xb0 [ 229.117806][T10292] ? lock_release+0x4b/0x3e0 [ 229.117825][T10292] ? __fget_files+0x3a0/0x420 [ 229.117843][T10292] ? __fget_files+0x2a/0x420 [ 229.117864][T10292] __x64_sys_preadv+0x197/0x2a0 [ 229.117882][T10292] ? __pfx___x64_sys_preadv+0x10/0x10 [ 229.117900][T10292] ? rcu_is_watching+0x15/0xb0 [ 229.117918][T10292] do_syscall_64+0xfa/0xfa0 [ 229.117939][T10292] ? rcu_is_watching+0x15/0xb0 [ 229.117955][T10292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.117971][T10292] ? clear_bhb_loop+0x60/0xb0 [ 229.117988][T10292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.118003][T10292] RIP: 0033:0x7faad598ebe9 [ 229.118031][T10292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.118047][T10292] RSP: 002b:00007faad6725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 229.118072][T10292] RAX: ffffffffffffffda RBX: 00007faad5bc6090 RCX: 00007faad598ebe9 [ 229.118085][T10292] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 229.118096][T10292] RBP: 00007faad5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 229.118108][T10292] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 229.118118][T10292] R13: 00007faad5bc6128 R14: 00007faad5bc6090 R15: 00007ffec44135e8 [ 229.118138][T10292] [ 229.131851][T10292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.414557][T10292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.460041][ T6060] usb 2-1: USB disconnect, device number 47 [ 230.076619][T10310] /dev/rnullb0: Can't open blockdev [ 230.088739][ T1212] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.100484][ T1212] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 230.112731][ T1212] usb 3-1: can't read configurations, error -71 [ 230.128100][T10313] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.683695][T10333] tmpfs: Bad value for 'huge' [ 230.717595][T10335] /dev/rnullb0: Can't open blockdev [ 230.836245][T10339] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.879346][ T5187] Bluetooth: hci3: command 0x0401 tx timeout [ 230.997507][T10350] nfs: Deprecated parameter 'intr' [ 231.005081][T10350] /dev/rnullb0: Can't open blockdev [ 231.124005][ T952] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 231.297775][ T952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 231.309055][ T952] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 231.318373][ T952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.328115][ T952] usb 5-1: config 0 descriptor?? [ 231.333603][T10345] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.380635][ T1212] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 231.474808][T10366] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 231.538432][T10371] sctp: [Deprecated]: syz.1.1267 (pid 10371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.538432][T10371] Use struct sctp_sack_info instead [ 231.564974][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 231.574201][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 46601, setting to 1024 [ 231.586521][ T1212] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 231.592859][ T30] audit: type=1326 audit(1756781764.171:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.1.1268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11ccf8ebe9 code=0x0 [ 231.600019][ T1212] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 3.6c [ 231.628723][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.636816][ T1212] usb 3-1: Product: syz [ 231.640977][ T1212] usb 3-1: Manufacturer: syz [ 231.645555][ T1212] usb 3-1: SerialNumber: syz [ 231.657475][ T1212] usb 3-1: config 0 descriptor?? [ 231.661711][T10377] /dev/rnullb0: Can't open blockdev [ 231.663149][T10352] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 231.677533][ T1212] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 231.774347][ T952] uclogic 0003:5543:0064.0013: unknown main item tag 0x0 [ 231.781888][ T952] uclogic 0003:5543:0064.0013: item fetching failed at offset 3/5 [ 231.790379][ T952] uclogic 0003:5543:0064.0013: parse failed [ 231.796347][ T952] uclogic 0003:5543:0064.0013: probe with driver uclogic failed with error -22 [ 231.954532][T10352] /dev/rnullb0: Can't open blockdev [ 231.961927][ T952] usb 3-1: USB disconnect, device number 53 [ 231.962010][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 231.993040][ T9] usb 5-1: USB disconnect, device number 25 [ 234.004486][T10425] MPI: mpi too large (130952 bits) [ 234.049349][ T5858] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 234.060490][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 234.060514][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.060525][ T5858] Call Trace: [ 234.060531][ T5858] [ 234.060538][ T5858] dump_stack_lvl+0x189/0x250 [ 234.060566][ T5858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.060588][ T5858] ? __pfx__printk+0x10/0x10 [ 234.060611][ T5858] ? rcu_is_watching+0x15/0xb0 [ 234.060630][ T5858] dump_header+0xd3/0x480 [ 234.060647][ T5858] oom_kill_process+0x387/0x920 [ 234.060667][ T5858] out_of_memory+0xf09/0x12a0 [ 234.060686][ T5858] ? mem_cgroup_iter+0x3b/0x460 [ 234.060705][ T5858] ? __pfx_out_of_memory+0x10/0x10 [ 234.060724][ T5858] mem_cgroup_out_of_memory+0x145/0x240 [ 234.060742][ T5858] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 234.060763][ T5858] ? _raw_spin_unlock+0x28/0x50 [ 234.060781][ T5858] ? memcg1_oom_prepare+0x37f/0x450 [ 234.060801][ T5858] try_charge_memcg+0xdff/0x1290 [ 234.060822][ T5858] ? rcu_is_watching+0x15/0xb0 [ 234.060844][ T5858] ? __pfx_try_charge_memcg+0x10/0x10 [ 234.060865][ T5858] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 234.060882][ T5858] ? xa_load+0x60/0x210 [ 234.060902][ T5858] ? rcu_is_watching+0x15/0xb0 [ 234.060920][ T5858] ? rcu_is_watching+0x15/0xb0 [ 234.060936][ T5858] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 234.060966][ T5858] charge_memcg+0x9f/0x180 [ 234.060987][ T5858] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 234.061008][ T5858] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 234.061030][ T5858] __read_swap_cache_async+0x28c/0x510 [ 234.061053][ T5858] swap_cluster_readahead+0x4cf/0x5f0 [ 234.061074][ T5858] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 234.061094][ T5858] ? rcu_is_watching+0x15/0xb0 [ 234.061110][ T5858] ? filemap_get_entry+0xad/0x2f0 [ 234.061129][ T5858] ? get_vma_policy+0x27c/0x3c0 [ 234.061151][ T5858] swapin_readahead+0x17d/0xb50 [ 234.061169][ T5858] ? __pfx_filemap_get_entry+0x10/0x10 [ 234.061188][ T5858] ? get_swap_device_info+0x1c/0x2b0 [ 234.061206][ T5858] ? rcu_is_watching+0x15/0xb0 [ 234.061221][ T5858] ? __pfx_swapin_readahead+0x10/0x10 [ 234.061241][ T5858] ? __filemap_get_folio+0x9a6/0xaf0 [ 234.061261][ T5858] ? swap_cache_get_folio+0xae/0x3b0 [ 234.061281][ T5858] do_swap_page+0x525/0x5ac0 [ 234.061307][ T5858] ? ___pte_offset_map+0x29/0x250 [ 234.061327][ T5858] ? lock_acquire+0x5f/0x360 [ 234.061341][ T5858] ? do_swap_page+0x184/0x5ac0 [ 234.061360][ T5858] ? __pfx_do_swap_page+0x10/0x10 [ 234.061379][ T5858] ? __pfx_filemap_map_pages+0x10/0x10 [ 234.061397][ T5858] ? rcu_is_watching+0x15/0xb0 [ 234.061414][ T5858] ? __pfx_default_wake_function+0x10/0x10 [ 234.061430][ T5858] ? ___pte_offset_map+0x45/0x250 [ 234.061449][ T5858] ? ___pte_offset_map+0x1cf/0x250 [ 234.061469][ T5858] ? pte_offset_map_rw_nolock+0xea/0x160 [ 234.061491][ T5858] __handle_mm_fault+0xe55/0x5400 [ 234.061518][ T5858] ? __pfx___handle_mm_fault+0x10/0x10 [ 234.061539][ T5858] ? rcu_is_watching+0x15/0xb0 [ 234.061560][ T5858] ? lock_vma_under_rcu+0x3cb/0x450 [ 234.061575][ T5858] ? rcu_is_watching+0x15/0xb0 [ 234.061593][ T5858] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 234.061611][ T5858] handle_mm_fault+0x40a/0x8e0 [ 234.061635][ T5858] do_user_addr_fault+0xa81/0x1390 [ 234.061655][ T5858] ? rcu_is_watching+0x15/0xb0 [ 234.061671][ T5858] ? trace_page_fault_user+0x84/0x1e0 [ 234.061688][ T5858] exc_page_fault+0x82/0x100 [ 234.061708][ T5858] asm_exc_page_fault+0x26/0x30 [ 234.061724][ T5858] RIP: 0033:0x7faad598eb4f [ 234.061739][ T5858] Code: 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 64 48 8b 04 25 28 00 00 00 <48> 89 44 24 18 31 c0 89 f8 48 69 c0 83 de 1b 43 48 c1 e8 32 89 c1 [ 234.061753][ T5858] RSP: 002b:00007ffec4413940 EFLAGS: 00010246 [ 234.061769][ T5858] RAX: 73165cf98a034500 RBX: 0000000000000415 RCX: 0000000000038267 [ 234.061781][ T5858] RDX: 0000000000000bb8 RSI: 0000000000000000 RDI: 0000000000002710 [ 234.061790][ T5858] RBP: 00007ffec44139ac R08: 000000003b1f633b R09: 0000000000000000 [ 234.061802][ T5858] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388 [ 234.061814][ T5858] R13: 00000000000927c0 R14: 0000000000037c48 R15: 00007ffec4413a00 [ 234.061832][ T5858] [ 234.061839][ T5858] memory: usage 307084kB, limit 307200kB, failcnt 12898 [ 234.478556][ T5858] memory+swap: usage 308696kB, limit 9007199254740988kB, failcnt 0 [ 234.486528][ T5858] kmem: usage 8516kB, limit 9007199254740988kB, failcnt 0 [ 234.511077][ T5858] Memory cgroup stats for /syz0: [ 234.511210][ T5858] cache 304615424 [ 234.519795][ T5858] rss 1212416 [ 234.523165][ T5858] rss_huge 0 [ 234.526366][ T5858] shmem 304615424 [ 234.529991][ T5858] mapped_file 0 [ 234.543288][ T5858] dirty 0 [ 234.546251][ T5858] writeback 0 [ 234.549528][ T5858] workingset_refault_anon 1283 [ 234.554590][ T5858] workingset_refault_file 3213 [ 234.559873][ T5858] swap 1531904 [ 234.563254][ T5858] swapcached 24576 [ 234.567093][ T5858] pgpgin 584104 [ 234.570602][ T5858] pgpgout 512499 [ 234.574140][ T5858] pgfault 180173 [ 234.577729][ T5858] pgmajfault 2907 [ 234.581354][ T5858] inactive_anon 8192 [ 234.585246][ T5858] active_anon 16384 [ 234.589507][ T5858] inactive_file 0 [ 234.593138][ T5858] active_file 0 [ 234.596888][ T5858] unevictable 305827840 [ 234.601123][ T5858] hierarchical_memory_limit 314572800 [ 234.617780][ T5858] hierarchical_memsw_limit 9223372036854771712 [ 234.624125][ T5858] total_cache 304615424 [ 234.628786][ T5858] total_rss 1212416 [ 234.632656][ T5858] total_rss_huge 0 [ 234.636367][ T5858] total_shmem 304615424 [ 234.641877][ T5858] total_mapped_file 0 [ 234.645926][ T5858] total_dirty 0 [ 234.649386][ T5858] total_writeback 0 [ 234.654088][ T5858] total_workingset_refault_anon 1283 [ 234.659427][ T5858] total_workingset_refault_file 3213 [ 234.666375][ T5858] total_swap 1531904 [ 234.670333][ T5858] total_swapcached 24576 [ 234.675070][ T5858] total_pgpgin 584104 [ 234.682144][ T5858] total_pgpgout 512499 [ 234.686222][ T5858] total_pgfault 180173 [ 234.690354][ T5858] total_pgmajfault 2907 [ 234.695107][ T5858] total_inactive_anon 8192 [ 234.702256][ T5858] total_active_anon 16384 [ 234.714045][ T5858] total_inactive_file 0 [ 234.718214][ T5858] total_active_file 0 [ 234.722199][ T5858] total_unevictable 305827840 [ 234.740470][T10445] /dev/rnullb0: Can't open blockdev [ 234.744875][ T5858] anon_cost 0 [ 234.749170][ T5858] file_cost 0 [ 234.752524][ T5858] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1270,pid=10383,uid=0 [ 234.767699][ T5858] Memory cgroup out of memory: Killed process 10383 (syz.0.1270) total-vm:98316kB, anon-rss:2172kB, file-rss:21660kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 234.991918][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 235.130800][ T5862] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 235.155824][ T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 235.165269][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.175022][ T9] usb 5-1: config 0 descriptor?? [ 235.182284][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 235.291308][ T5862] usb 3-1: device descriptor read/64, error -71 [ 235.568900][ T5862] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 235.614113][ T9] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 235.706195][T10461] /dev/rnullb0: Can't open blockdev [ 235.715088][ T5862] usb 3-1: device descriptor read/64, error -71 [ 235.753067][T10463] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.846973][ T5862] usb usb3-port1: attempt power cycle [ 235.961797][T10482] /dev/rnullb0: Can't open blockdev [ 236.042303][ T9] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 236.231363][ T5862] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 236.253079][ T5862] usb 3-1: device descriptor read/8, error -71 [ 236.261924][ T5864] usb 5-1: USB disconnect, device number 26 [ 236.530680][ T5862] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 236.552923][ T5862] usb 3-1: device descriptor read/8, error -71 [ 236.670091][ T5862] usb usb3-port1: unable to enumerate USB device [ 237.035646][T10509] mkiss: ax0: crc mode is auto. [ 237.047956][T10509] /dev/rnullb0: Can't open blockdev [ 237.053905][T10509] /dev/rnullb0: Can't open blockdev [ 237.128860][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 237.240130][T10516] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 237.247998][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 237.260469][T10516] /dev/rnullb0: Can't open blockdev [ 237.293399][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 237.303416][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 237.311767][ T9] usb 5-1: Product: syz [ 237.315924][ T9] usb 5-1: SerialNumber: syz [ 237.322577][ T9] usb 5-1: config 0 descriptor?? [ 237.544815][ T9] hso 5-1:0.0: Failed to find BULK IN ep [ 237.760993][ T9] usb 5-1: USB disconnect, device number 27 [ 237.933437][T10529] /dev/rnullb0: Can't open blockdev [ 238.218211][T10547] tipc: Enabling of bearer rejected, failed to enable media [ 238.362134][T10558] kvm: user requested TSC rate below hardware speed [ 238.390622][T10560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.399887][T10560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.485890][ T5928] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 238.648609][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.658507][ T5928] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 238.667799][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.676806][ T5928] usb 3-1: config 0 descriptor?? [ 238.763615][ T5862] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 238.926547][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.937145][ T5862] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 238.946373][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.956310][ T5862] usb 2-1: config 0 descriptor?? [ 238.963260][ T5862] pwc: Askey VC010 type 2 USB webcam detected. [ 239.117518][ T5928] pantherlord 0003:0810:0001.0014: unknown main item tag 0x0 [ 239.129058][ T5928] pantherlord 0003:0810:0001.0014: unknown main item tag 0x0 [ 239.143017][ T5928] pantherlord 0003:0810:0001.0014: hidraw0: USB HID v0.03 Device [HID 0810:0001] on usb-dummy_hcd.2-1/input0 [ 239.158329][ T5928] pantherlord 0003:0810:0001.0014: no output reports found [ 239.177896][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.188087][ T5862] pwc: recv_control_msg error -32 req 02 val 2b00 [ 239.188169][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.204509][ T5862] pwc: recv_control_msg error -32 req 02 val 2700 [ 239.224543][ T5862] pwc: recv_control_msg error -32 req 02 val 2c00 [ 239.231529][ T5862] pwc: recv_control_msg error -32 req 04 val 1000 [ 239.240456][ T5862] pwc: recv_control_msg error -32 req 04 val 1300 [ 239.248685][ T5862] pwc: recv_control_msg error -32 req 04 val 1400 [ 239.261018][T10583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.268493][ T5862] pwc: recv_control_msg error -71 req 02 val 2000 [ 239.276337][ T5862] pwc: recv_control_msg error -71 req 02 val 2100 [ 239.277836][T10583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.285691][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 239.308385][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 239.318869][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 239.321637][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 239.334072][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 239.334315][T10539] /dev/rnullb0: Can't open blockdev [ 239.342089][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 239.354716][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 239.363911][ T6060] usb 3-1: USB disconnect, device number 58 [ 239.373554][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 239.384333][ T5862] pwc: Registered as video103. [ 239.385405][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 239.409844][ T5862] usb 2-1: USB disconnect, device number 48 [ 239.492559][T10585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967292 (17179869168 ns) > initial count (56 ns). Using initial count to start timer. [ 239.748908][T10600] /dev/rnullb0: Can't open blockdev [ 239.906983][ T5862] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 240.035953][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 240.056524][ T5862] usb 2-1: device descriptor read/64, error -71 [ 240.196551][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 240.203061][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.213468][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.225534][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.235284][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 240.247614][T10613] sctp: [Deprecated]: syz.0.1344 (pid 10613) Use of int in max_burst socket option. [ 240.247614][T10613] Use struct sctp_assoc_value instead [ 240.262396][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.277793][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.287103][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.295329][ T9] usb 5-1: Manufacturer: syz [ 240.301415][ T9] usb 5-1: config 0 descriptor?? [ 240.334340][ T5862] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 240.483982][ T5862] usb 2-1: device descriptor read/64, error -71 [ 240.571516][ T9] rc_core: IR keymap rc-hauppauge not found [ 240.577898][ T9] Registered IR keymap rc-empty [ 240.583057][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.601511][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.601776][ T5862] usb usb2-port1: attempt power cycle [ 240.623628][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 240.637929][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 240.651491][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.676313][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.697640][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.719615][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.741611][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.761799][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.783133][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.804508][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.825830][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.847714][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.870374][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 240.879625][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 240.890881][ T9] usb 5-1: USB disconnect, device number 28 [ 240.975723][ T5862] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 240.997829][ T5862] usb 2-1: device descriptor read/8, error -71 [ 241.069992][T10611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.077444][T10611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.083539][T10611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.265569][ T5862] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 241.271440][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.280963][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.288963][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.290580][ T5862] usb 2-1: device descriptor read/8, error -71 [ 241.298113][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.314068][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.322013][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.329981][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.338012][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.345970][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.349458][ T9] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 241.354641][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.368958][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.376806][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.384644][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.392289][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.399918][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.407645][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.415261][ T6060] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 241.416393][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.423017][ T5862] usb usb2-port1: unable to enumerate USB device [ 241.431038][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.445178][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.454252][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.461988][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.469784][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.478487][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.486343][T10630] binder: 10628:10630 ioctl 4020ae46 7faad6723be0 returned -22 [ 241.494084][T10630] binder: 10628:10630 ioctl 4020ae46 7faad67238e0 returned -22 [ 241.522108][ T9] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 241.533082][ T9] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.546067][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 241.555755][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.40 [ 241.566792][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.576802][ T9] usb 5-1: Product: 鄁쮥婡䯅㏸㔬衒앣ᩩ䚡堃ᝉ劇ᰠ鞻퐤믙㮇섎䵷쿖邤斒ꈭ㻛㕗䭲蚗⧺鬄滇熭쮫煌㗮䪓ꀜ฿ᢀ튚ᛊ굣飴 [ 241.592898][ T9] usb 5-1: Manufacturer: ခ [ 241.597830][ T9] usb 5-1: SerialNumber: ꢴ掬蹾貲餞ᇚ⩙᷐뾐ꀯ㱚쯦◅௻뻥뷠㐏찯鐵暐桀錖槼ꞅ톼ꪏ侎愣嫜荻ꕱ鉤䬶ग竾䃫䞎夵姕䡞F꣑롍뿓싵㭪曠谞雂妒⩓棼껿【㖤㣹䐚薡擉怣ꪥ鈇閽䄊᫂䤈猰⟦㷅৙ቘ᪉彭兲 [ 241.626885][T10619] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 241.629652][ T6060] usb 3-1: Using ep0 maxpacket: 16 [ 241.648952][ T6060] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 241.660749][ T6060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 241.683014][ T6060] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.692429][ T6060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.700503][ T6060] usb 3-1: Product: syz [ 241.705166][ T6060] usb 3-1: Manufacturer: syz [ 241.709770][ T6060] usb 3-1: SerialNumber: syz [ 241.717126][ T6060] usb 3-1: config 0 descriptor?? [ 241.724914][ T6060] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 241.737322][ T6060] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 241.876052][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 241.883172][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 241.897340][ T9] usb 5-1: USB disconnect, device number 29 [ 242.368769][ T6060] em28xx 3-1:0.0: chip ID is em2874 [ 242.419138][ T5187] Bluetooth: hci0: command 0x080f tx timeout [ 242.591364][T10661] /dev/rnullb0: Can't open blockdev [ 242.593431][ T9] usb 3-1: USB disconnect, device number 59 [ 242.609056][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 242.619614][ T9] em28xx 3-1:0.0: Freeing device [ 242.662343][T10666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.676221][T10666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.987287][ T5187] Bluetooth: hci1: ISO packet for unknown connection handle 201 [ 243.251278][ T5862] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 243.273092][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.279277][ T5187] Bluetooth: hci3: command 0x0401 tx timeout [ 243.405187][T10707] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 243.414519][T10707] /dev/rnullb0: Can't open blockdev [ 243.461613][ T5862] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 243.483813][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.495073][ T5862] usb 2-1: Product: syz [ 243.502856][ T5862] usb 2-1: Manufacturer: syz [ 243.511343][ T5862] usb 2-1: SerialNumber: syz [ 243.528217][ T5862] usb 2-1: config 0 descriptor?? [ 243.541963][ T5862] ch341 2-1:0.0: ch341-uart converter detected [ 243.732476][ T9] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 243.756774][T10727] /dev/rnullb0: Can't open blockdev [ 243.860395][ T6060] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 243.871595][ T9] usb 3-1: device descriptor read/64, error -71 [ 243.979746][T10730] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1362'. [ 244.002652][ T5862] usb 2-1: failed to send control message: -71 [ 244.009283][ T5862] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 244.020139][ T5862] usb 2-1: USB disconnect, device number 53 [ 244.027343][ T6060] usb 5-1: Using ep0 maxpacket: 16 [ 244.033854][ T5862] ch341 2-1:0.0: device disconnected [ 244.041016][ T6060] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 244.053438][ T6060] usb 5-1: config 0 has no interface number 0 [ 244.064782][ T6060] usb 5-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 244.075170][ T6060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.083837][ T6060] usb 5-1: Product: syz [ 244.088477][ T6060] usb 5-1: Manufacturer: syz [ 244.095394][ T30] audit: type=1107 audit(1756781775.880:9): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@ߣ>ߵ(_AdOirYhVTU2k`DJ˧C v3;>Id,q1L`PYy' [ 244.097367][ T6060] usb 5-1: SerialNumber: syz [ 244.125438][ T30] audit: type=1107 audit(1756781775.880:10): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@ߣ>ߵ(_AdOirYhVTU2k`DJ˧C v3;>Id,q1L`PYy' [ 244.128738][ T6060] usb 5-1: config 0 descriptor?? [ 244.146962][ T9] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 244.147090][ T30] audit: type=1107 audit(1756781775.880:11): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@ߣ>ߵ(_AdOirYhVTU2k`DJ˧C v3;>Id,q1L`PYy' [ 244.147122][ T30] audit: type=1107 audit(1756781775.880:12): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@ߣ>ߵ(_AdOirYhVTU2k`DJ˧C v3;>Id,q1L`PYy' [ 244.147669][ T30] audit: type=1107 audit(1756781775.880:13): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@ߣ>ߵ(_AdOirYhVTU2k`DJ˧C v3;>Id,q1L`PYy' [ 244.147701][ T30] audit: type=1107 audit(1756781775.880:14): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@ߣ>ߵ(_AdOirYhVTU2k`DJ˧C v3;>Id,q1L`PYy' [ 244.147730][ T30] audit: type=1107 audit(1756781775.880:15): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@ߣ>ߵ(_AdOirYhVTU2k`DJ˧C v3;>Id,q1L`PYy' [ 244.147756][ T30] audit: type=1107 audit(1756781775.880:16): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@ߣ>ߵ(_AdOirYhVTU2k`DJ˧C v3;>Id,q1L`PYy' [ 244.148473][ T30] audit: type=1107 audit(1756781775.880:17): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@ߣ>ߵ(_AdOirYhVTU2k`DJ˧C v3;>Id,q1L`PYy' [ 244.162412][ T6060] usb 5-1: bad CDC descriptors [ 244.194024][ T30] audit: type=1107 audit(1756781775.880:18): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@ߣ>ߵ(_AdOirYhVTU2k`DJ˧C v3;>Id,q1L`PYy' [ 244.250714][T10740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.360096][T10743] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 244.369054][ T9] usb 3-1: device descriptor read/64, error -71 [ 244.381987][ T5928] usb 5-1: USB disconnect, device number 30 [ 244.491048][ T9] usb usb3-port1: attempt power cycle [ 244.621227][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.641244][T10757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.656175][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.667009][T10757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.855528][ T9] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 244.876768][ T9] usb 3-1: device descriptor read/8, error -71 [ 245.142489][ T9] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 245.175214][ T9] usb 3-1: device descriptor read/8, error -71 [ 245.522529][T10776] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 245.625929][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.653177][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.679045][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.702423][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.923694][ T9] usb usb3-port1: unable to enumerate USB device [ 246.339256][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 246.511799][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.522579][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 246.552271][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 246.573796][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.589995][ T9] usb 5-1: config 0 descriptor?? [ 246.671653][T10794] /dev/rnullb0: Can't open blockdev [ 246.728283][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.738006][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.747231][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.757568][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.035032][T10780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.043681][T10780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.055777][T10805] binder: 10779:10805 ioctl c0306201 2000000003c0 returned -14 [ 247.060655][ T9] kovaplus 0003:1E7D:2D50.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 247.108595][ T6060] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 247.269589][ T9] kovaplus 0003:1E7D:2D50.0015: couldn't init struct kovaplus_device [ 247.279541][ T6060] usb 3-1: Using ep0 maxpacket: 32 [ 247.279656][ T9] kovaplus 0003:1E7D:2D50.0015: couldn't install mouse [ 247.287028][ T6060] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 247.294269][ T9] kovaplus 0003:1E7D:2D50.0015: probe with driver kovaplus failed with error -71 [ 247.302822][ T6060] usb 3-1: config 4 has no interface number 0 [ 247.319612][ T6060] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.330907][ T6060] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.338080][ T9] usb 5-1: USB disconnect, device number 31 [ 247.341658][ T6060] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 247.357382][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.370764][ T6060] hub 3-1:4.128: USB hub found [ 247.579545][T10819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.585960][ T6060] hub 3-1:4.128: 2 ports detected [ 247.590793][T10819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.594821][ T6060] hub 3-1:4.128: Using single TT (err -22) [ 247.817653][T10796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1391'. [ 247.832758][ T6060] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 247.852732][ T6060] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 247.871974][T10829] usb usb8: usbfs: process 10829 (syz.4.1398) did not claim interface 0 before use [ 247.904004][ T6060] usb 3-1: USB disconnect, device number 64 [ 248.205064][T10847] pim6reg9: entered allmulticast mode [ 248.307285][T10854] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 248.413643][T10862] ucma_write: process 548 (syz.4.1409) changed security contexts after opening file descriptor, this is not allowed. [ 248.441998][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.457420][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.603437][T10874] /dev/rnullb0: Can't open blockdev [ 248.678221][T10880] netlink: 'syz.0.1415': attribute type 10 has an invalid length. [ 248.701747][ T43] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 248.702882][T10880] team0: Cannot enslave team device to itself [ 248.727452][T10880] /dev/rnullb0: Can't open blockdev [ 248.735395][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.747554][T10885] netlink: 'syz.0.1415': attribute type 10 has an invalid length. [ 248.748020][T10880] /dev/rnullb0: Can't open blockdev [ 248.760746][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.770506][T10885] team0: Cannot enslave team device to itself [ 248.771763][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.804582][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.814982][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.862543][T10891] tipc: Can't bind to reserved service type 0 [ 248.885488][ T43] usb 5-1: config 8 has an invalid interface number: 127 but max is 0 [ 248.894610][ T43] usb 5-1: config 8 has no interface number 0 [ 248.899531][T10893] /dev/rnullb0: Can't open blockdev [ 248.900708][ T43] usb 5-1: config 8 interface 127 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 248.926779][ T43] usb 5-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=45.36 [ 248.938535][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.946966][ T43] usb 5-1: Product: syz [ 248.951202][ T43] usb 5-1: Manufacturer: syz [ 248.955797][ T43] usb 5-1: SerialNumber: syz [ 249.084677][T10899] /dev/rnullb0: Can't open blockdev [ 249.094868][T10899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.111221][T10899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.185189][ T43] io_ti 5-1:8.127: required endpoints missing [ 249.195036][ T43] usb 5-1: USB disconnect, device number 32 [ 249.206928][T10901] /dev/rnullb0: Can't open blockdev [ 249.208676][T10902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.233426][T10902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.523471][ T9] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 249.658402][T10911] /dev/rnullb0: Can't open blockdev [ 249.687801][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.705172][ T9] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 249.714257][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.734669][ T9] usb 2-1: config 0 descriptor?? [ 249.940243][ T5187] Bluetooth: hci1: command 0x0c1a tx timeout [ 250.179439][ T9] petalynx 0003:18B1:0037.0016: item fetching failed at offset 0/2 [ 250.187821][ T9] petalynx 0003:18B1:0037.0016: parse failed [ 250.193821][ T9] petalynx 0003:18B1:0037.0016: probe with driver petalynx failed with error -22 [ 250.313987][ T43] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 250.396318][ T6060] usb 2-1: USB disconnect, device number 54 [ 250.475481][ T43] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 250.483824][ T43] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 250.492938][ T43] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 250.503261][ T43] usb 3-1: config 220 has no interface number 2 [ 250.509661][ T43] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 250.522830][ T43] usb 3-1: config 220 interface 0 has no altsetting 0 [ 250.529742][ T43] usb 3-1: config 220 interface 76 has no altsetting 0 [ 250.536920][ T43] usb 3-1: config 220 interface 1 has no altsetting 0 [ 250.545247][ T43] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 250.554399][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.562466][ T43] usb 3-1: Product: syz [ 250.566615][ T43] usb 3-1: Manufacturer: syz [ 250.571637][ T43] usb 3-1: SerialNumber: syz [ 250.797580][T10928] /dev/rnullb0: Can't open blockdev [ 250.810827][ T43] usb 3-1: selecting invalid altsetting 0 [ 250.819920][ T43] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 250.826350][ T43] usb 3-1: No valid video chain found. [ 250.839007][ T43] usb 3-1: selecting invalid altsetting 0 [ 250.848708][ T43] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 250.874041][ T43] usb 3-1: USB disconnect, device number 65 [ 250.957746][T10933] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 251.016190][T10935] block nbd1: NBD_DISCONNECT [ 251.022863][T10935] fuse: Bad value for 'fd' [ 251.028043][T10935] /dev/rnullb0: Can't open blockdev [ 251.052400][T10937] /dev/rnullb0: Can't open blockdev [ 251.115579][ T6060] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 251.275632][ T6060] usb 5-1: Using ep0 maxpacket: 32 [ 251.282014][ T6060] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 251.290596][ T6060] usb 5-1: config 0 has no interface number 0 [ 251.299016][ T6060] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=68.96 [ 251.308683][ T6060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.316673][ T6060] usb 5-1: Product: syz [ 251.322188][ T6060] usb 5-1: Manufacturer: syz [ 251.326787][ T6060] usb 5-1: SerialNumber: syz [ 251.334054][ T6060] usb 5-1: config 0 descriptor?? [ 251.342005][ T6060] powermate 5-1:0.108: probe with driver powermate failed with error -5 [ 251.600214][ T43] usb 5-1: USB disconnect, device number 33 [ 251.745854][ T6060] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 251.900133][T10972] kvm: pic: level sensitive irq not supported [ 251.900185][T10972] kvm: pic: non byte read [ 251.919464][ T6060] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.927698][ T6060] usb 3-1: config 0 has no interface number 0 [ 251.933805][ T6060] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.944393][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.955886][ T6060] usb 3-1: config 0 descriptor?? [ 251.964344][ T6060] cp210x 3-1:0.1: cp210x converter detected [ 252.392519][ T6060] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 252.639366][ T6060] usb 3-1: cp210x converter now attached to ttyUSB1 [ 252.875372][ T43] usb 3-1: USB disconnect, device number 66 [ 252.890726][ T43] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 252.908130][ T43] cp210x 3-1:0.1: device disconnected [ 253.005359][T10997] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 253.035588][T10997] CIFS mount error: No usable UNC path provided in device string! [ 253.035588][T10997] [ 253.048339][T10997] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 253.062593][T10997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.073225][T10997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.773041][T11020] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1462'. [ 254.042134][T11031] /dev/rnullb0: Can't open blockdev [ 254.058054][T11032] syzkaller1: entered promiscuous mode [ 254.074443][T11032] syzkaller1: entered allmulticast mode [ 254.420996][T11050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.429757][T11050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.451541][T11050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.464569][T11050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.488841][T11045] random: crng reseeded on system resumption [ 254.495490][T11054] /dev/rnullb0: Can't open blockdev [ 254.545404][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1475'. [ 254.656443][T11060] FAULT_INJECTION: forcing a failure. [ 254.656443][T11060] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 254.671911][T11060] CPU: 0 UID: 0 PID: 11060 Comm: syz.2.1477 Not tainted syzkaller #0 PREEMPT(full) [ 254.671935][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.671958][T11060] Call Trace: [ 254.671964][T11060] [ 254.671969][T11060] dump_stack_lvl+0x189/0x250 [ 254.671995][T11060] ? __pfx____ratelimit+0x10/0x10 [ 254.672016][T11060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.672037][T11060] ? __pfx__printk+0x10/0x10 [ 254.672057][T11060] ? __might_fault+0xb0/0x130 [ 254.672081][T11060] ? rcu_is_watching+0x15/0xb0 [ 254.672099][T11060] should_fail_ex+0x414/0x560 [ 254.672122][T11060] _copy_from_user+0x2d/0xb0 [ 254.672140][T11060] kstrtoull_from_user+0xc4/0x170 [ 254.672163][T11060] ? __pfx_kstrtoull_from_user+0x10/0x10 [ 254.672192][T11060] timerslack_ns_write+0xb5/0x650 [ 254.672210][T11060] ? __pfx_timerslack_ns_write+0x10/0x10 [ 254.672226][T11060] ? security_file_permission+0x75/0x290 [ 254.672243][T11060] ? preempt_count_add+0x91/0x1a0 [ 254.672260][T11060] ? __pfx_timerslack_ns_write+0x10/0x10 [ 254.672276][T11060] vfs_write+0x27b/0xb30 [ 254.672295][T11060] ? __pfx_vfs_write+0x10/0x10 [ 254.672313][T11060] ? __fget_files+0x3a0/0x420 [ 254.672329][T11060] ? __fget_files+0x2a/0x420 [ 254.672350][T11060] ksys_write+0x145/0x250 [ 254.672365][T11060] ? __pfx_ksys_write+0x10/0x10 [ 254.672382][T11060] ? rcu_is_watching+0x15/0xb0 [ 254.672399][T11060] do_syscall_64+0xfa/0xfa0 [ 254.672420][T11060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.672436][T11060] ? clear_bhb_loop+0x60/0xb0 [ 254.672453][T11060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.672469][T11060] RIP: 0033:0x7fe2c1b8ebe9 [ 254.672484][T11060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.672498][T11060] RSP: 002b:00007fe2c2a28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.672517][T11060] RAX: ffffffffffffffda RBX: 00007fe2c1dc5fa0 RCX: 00007fe2c1b8ebe9 [ 254.672529][T11060] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 254.672539][T11060] RBP: 00007fe2c2a28090 R08: 0000000000000000 R09: 0000000000000000 [ 254.672550][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.672560][T11060] R13: 00007fe2c1dc6038 R14: 00007fe2c1dc5fa0 R15: 00007ffcd086e158 [ 254.672579][T11060] [ 254.902727][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.945744][T11062] /dev/rnullb0: Can't open blockdev [ 254.954958][T11062] /dev/rnullb0: Can't open blockdev [ 255.221769][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.233008][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.305942][T11075] /dev/rnullb0: Can't open blockdev [ 255.362133][T11078] block nbd4: Attempted send on invalid socket [ 255.369197][T11078] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 255.501083][T11087] FAULT_INJECTION: forcing a failure. [ 255.501083][T11087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.514856][T11087] CPU: 1 UID: 0 PID: 11087 Comm: syz.4.1486 Not tainted syzkaller #0 PREEMPT(full) [ 255.514880][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.514891][T11087] Call Trace: [ 255.514897][T11087] [ 255.514904][T11087] dump_stack_lvl+0x189/0x250 [ 255.514930][T11087] ? __pfx____ratelimit+0x10/0x10 [ 255.514951][T11087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.514972][T11087] ? __pfx__printk+0x10/0x10 [ 255.514996][T11087] ? rcu_is_watching+0x15/0xb0 [ 255.515014][T11087] should_fail_ex+0x414/0x560 [ 255.515037][T11087] _copy_to_user+0x31/0xb0 [ 255.515056][T11087] simple_read_from_buffer+0xe1/0x170 [ 255.515076][T11087] proc_fail_nth_read+0x1b3/0x220 [ 255.515099][T11087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.515120][T11087] ? rw_verify_area+0x2a6/0x4d0 [ 255.515135][T11087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.515156][T11087] vfs_read+0x200/0xa30 [ 255.515167][T11087] ? fdget_pos+0x247/0x320 [ 255.515186][T11087] ? __pfx___mutex_lock+0x10/0x10 [ 255.515207][T11087] ? __pfx_vfs_read+0x10/0x10 [ 255.515223][T11087] ? __fget_files+0x3a0/0x420 [ 255.515239][T11087] ? __fget_files+0x2a/0x420 [ 255.515259][T11087] ksys_read+0x145/0x250 [ 255.515275][T11087] ? __pfx_ksys_read+0x10/0x10 [ 255.515291][T11087] ? rcu_is_watching+0x15/0xb0 [ 255.515308][T11087] do_syscall_64+0xfa/0xfa0 [ 255.515327][T11087] ? rcu_is_watching+0x15/0xb0 [ 255.515343][T11087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.515359][T11087] ? clear_bhb_loop+0x60/0xb0 [ 255.515375][T11087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.515390][T11087] RIP: 0033:0x7f04c0d8d5fc [ 255.515405][T11087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.515419][T11087] RSP: 002b:00007f04c1c86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.515438][T11087] RAX: ffffffffffffffda RBX: 00007f04c0fc5fa0 RCX: 00007f04c0d8d5fc [ 255.515451][T11087] RDX: 000000000000000f RSI: 00007f04c1c860a0 RDI: 0000000000000005 [ 255.515462][T11087] RBP: 00007f04c1c86090 R08: 0000000000000000 R09: 0000000000000000 [ 255.515472][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.515482][T11087] R13: 00007f04c0fc6038 R14: 00007f04c0fc5fa0 R15: 00007fff625adfc8 [ 255.515501][T11087] [ 255.843815][T11094] /dev/rnullb0: Can't open blockdev [ 255.860159][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'. [ 256.028057][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 256.038323][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 256.047707][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 256.058235][T11116] /dev/rnullb0: Can't open blockdev [ 256.201258][ T5187] Bluetooth: hci3: unexpected event for opcode 0x041b [ 256.254848][ T43] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 256.393761][ T43] usb 3-1: device descriptor read/64, error -71 [ 256.503811][T11140] block nbd4: not configured, cannot reconfigure [ 256.538641][T11144] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 256.545154][T11144] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 256.555111][T11144] vhci_hcd vhci_hcd.0: Device attached [ 256.650196][ T43] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 256.746344][ T5862] vhci_hcd: vhci_device speed not set [ 256.789088][ T43] usb 3-1: device descriptor read/64, error -71 [ 256.810532][ T5862] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 256.917595][ T43] usb usb3-port1: attempt power cycle [ 257.293131][ T43] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 257.323831][ T43] usb 3-1: device descriptor read/8, error -71 [ 257.427228][T11145] vhci_hcd: connection reset by peer [ 257.432888][ T6923] vhci_hcd: stop threads [ 257.437361][ T6923] vhci_hcd: release socket [ 257.442196][ T6923] vhci_hcd: disconnect device [ 257.580354][ T43] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 257.601702][ T43] usb 3-1: device descriptor read/8, error -71 [ 257.719292][ T43] usb usb3-port1: unable to enumerate USB device [ 258.056521][T11172] rdma_rxe: rxe_newlink: failed to add wlan1 [ 258.109202][T11176] /dev/rnullb0: Can't open blockdev [ 258.419993][T11194] /dev/rnullb0: Can't open blockdev [ 258.427042][T11194] /dev/rnullb0: Can't open blockdev [ 258.433192][T11194] /dev/rnullb0: Can't open blockdev [ 258.439402][T11194] /dev/rnullb0: Can't open blockdev [ 258.447054][T11194] /dev/rnullb0: Can't open blockdev [ 258.452764][T11194] /dev/rnullb0: Can't open blockdev [ 258.459898][T11194] /dev/rnullb0: Can't open blockdev [ 258.465608][T11194] /dev/rnullb0: Can't open blockdev [ 258.476718][T11194] /dev/rnullb0: Can't open blockdev [ 258.479129][T11196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1519'. [ 258.482604][T11194] /dev/rnullb0: Can't open blockdev [ 258.498028][T11194] /dev/rnullb0: Can't open blockdev [ 258.503794][T11194] /dev/rnullb0: Can't open blockdev [ 258.510910][T11194] /dev/rnullb0: Can't open blockdev [ 258.516702][T11194] /dev/rnullb0: Can't open blockdev [ 258.524535][T11194] /dev/rnullb0: Can't open blockdev [ 258.530274][T11194] /dev/rnullb0: Can't open blockdev [ 258.536378][T11194] /dev/rnullb0: Can't open blockdev [ 258.548412][T11194] /dev/rnullb0: Can't open blockdev [ 258.555237][T11194] /dev/rnullb0: Can't open blockdev [ 258.560898][T11194] /dev/rnullb0: Can't open blockdev [ 258.566655][T11194] /dev/rnullb0: Can't open blockdev [ 258.572311][T11194] /dev/rnullb0: Can't open blockdev [ 258.580121][T11194] /dev/rnullb0: Can't open blockdev [ 258.585936][T11194] /dev/rnullb0: Can't open blockdev [ 258.591682][T11194] /dev/rnullb0: Can't open blockdev [ 258.598748][T11194] /dev/rnullb0: Can't open blockdev [ 258.600610][T11204] block nbd0: Dead connection, failed to find a fallback [ 258.604508][T11194] /dev/rnullb0: Can't open blockdev [ 258.612087][T11204] block nbd0: shutting down sockets [ 258.619206][T11194] /dev/rnullb0: Can't open blockdev [ 258.621995][T11204] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.630416][T11194] /dev/rnullb0: Can't open blockdev [ 258.637425][T11204] hpfs: hpfs_map_sector(): read error [ 258.643427][T11194] /dev/rnullb0: Can't open blockdev [ 258.653855][T11194] /dev/rnullb0: Can't open blockdev [ 258.660085][T11194] /dev/rnullb0: Can't open blockdev [ 258.665639][T11194] /dev/rnullb0: Can't open blockdev [ 258.671312][T11194] /dev/rnullb0: Can't open blockdev [ 258.676817][T11194] /dev/rnullb0: Can't open blockdev [ 258.683079][T11194] /dev/rnullb0: Can't open blockdev [ 258.688553][T11194] /dev/rnullb0: Can't open blockdev [ 258.694582][T11194] /dev/rnullb0: Can't open blockdev [ 258.700106][T11194] /dev/rnullb0: Can't open blockdev [ 258.706496][T11194] /dev/rnullb0: Can't open blockdev [ 258.712049][T11194] /dev/rnullb0: Can't open blockdev [ 258.717727][T11194] /dev/rnullb0: Can't open blockdev [ 258.723789][T11194] /dev/rnullb0: Can't open blockdev [ 258.729389][T11194] /dev/rnullb0: Can't open blockdev [ 258.735564][T11194] /dev/rnullb0: Can't open blockdev [ 258.741500][T11194] /dev/rnullb0: Can't open blockdev [ 258.747187][T11194] /dev/rnullb0: Can't open blockdev [ 258.752661][T11194] /dev/rnullb0: Can't open blockdev [ 258.758304][T11194] /dev/rnullb0: Can't open blockdev [ 258.763866][T11194] /dev/rnullb0: Can't open blockdev [ 258.769643][T11194] /dev/rnullb0: Can't open blockdev [ 258.775133][T11194] /dev/rnullb0: Can't open blockdev [ 258.780791][T11194] /dev/rnullb0: Can't open blockdev [ 258.786639][T11194] /dev/rnullb0: Can't open blockdev [ 258.792574][T11194] /dev/rnullb0: Can't open blockdev [ 258.798483][T11194] /dev/rnullb0: Can't open blockdev [ 258.803981][T11194] /dev/rnullb0: Can't open blockdev [ 258.809904][T11194] /dev/rnullb0: Can't open blockdev [ 258.815521][T11194] /dev/rnullb0: Can't open blockdev [ 258.821266][T11194] /dev/rnullb0: Can't open blockdev [ 258.826843][T11194] /dev/rnullb0: Can't open blockdev [ 258.832622][T11194] /dev/rnullb0: Can't open blockdev [ 258.838141][T11194] /dev/rnullb0: Can't open blockdev [ 258.843829][T11194] /dev/rnullb0: Can't open blockdev [ 258.849771][T11194] /dev/rnullb0: Can't open blockdev [ 259.108800][T11213] /dev/rnullb0: Can't open blockdev [ 259.227866][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 259.377403][T11224] Invalid ELF header magic: != ELF [ 259.411514][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 259.425515][ T9] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 259.456833][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.470934][ T9] usb 5-1: Product: syz [ 259.475122][ T9] usb 5-1: Manufacturer: syz [ 259.494043][ T9] usb 5-1: SerialNumber: syz [ 259.508996][ T9] usb 5-1: config 0 descriptor?? [ 259.528987][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 259.795478][T11242] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3750965248 (120030887936 ns) > initial count (91985811744 ns). Using initial count to start timer. [ 259.960115][ T9] gspca_se401: ExtraFeatures: 148 [ 259.974091][ T9] gspca_se401: Too many frame sizes [ 260.009915][T11247] could not allocate digest TFM handle hmac(sha1-avx2) [ 260.018821][ T9] IPVS: starting estimator thread 0... [ 260.033663][T11261] /dev/rnullb0: Can't open blockdev [ 260.133823][T11259] IPVS: using max 50 ests per chain, 120000 per kthread [ 260.189717][ T6060] usb 5-1: USB disconnect, device number 34 [ 260.418859][T11282] /dev/rnullb0: Can't open blockdev [ 260.539691][ T5187] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 260.548001][ T5187] Bluetooth: hci3: Injecting HCI hardware error event [ 260.555458][ T51] Bluetooth: hci3: hardware error 0x00 [ 261.022272][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 261.022288][ T30] audit: type=1326 audit(1756781791.724:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.0.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad598ebe9 code=0x7fc00000 [ 261.141488][T11296] syzkaller1: entered promiscuous mode [ 261.147752][T11296] syzkaller1: entered allmulticast mode [ 261.311209][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.319533][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.540347][T11319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.550072][T11319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.682737][ T6060] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 261.843055][ T6060] usb 3-1: Using ep0 maxpacket: 8 [ 261.849470][ T6060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 261.859326][ T6060] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 261.870709][ T6060] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 261.879802][ T6060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.887822][ T6060] usb 3-1: Product: syz [ 261.891989][ T6060] usb 3-1: Manufacturer: syz [ 261.896597][ T6060] usb 3-1: SerialNumber: syz [ 261.902164][ T6060] usb 3-1: config 0 descriptor?? [ 261.907275][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 262.068233][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 262.075667][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 262.085827][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.40 [ 262.094999][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.103087][ T10] usb 2-1: Product: ᐇ [ 262.107250][ T10] usb 2-1: Manufacturer: Ꝡ뮽휙톅鬣荋Ⲛ毻蝽᪟䰷ᒙ嬨˵ᡩ㙹䪍楼珬晸봪왳欖ᩎ챯浤㉥葄孆ᷖ畁⮳솋뀖㹁涔璄験眿뇀筯嘀埮캜խﷷ엏ܶﶄ༗뫺ᨬ꧜ቓ৹룻㷜⫪堒⛁퐄峥湻깤媌쾶䷴㰫뽹誏㲘敫ଭḽ䏯䀲滸缬䲥冔 [ 262.133896][ T10] usb 2-1: SerialNumber: Ц [ 262.205712][T11344] /dev/rnullb0: Can't open blockdev [ 262.238598][ T5862] vhci_hcd: vhci_device speed not set [ 262.302467][ T5928] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 262.365754][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 262.374803][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 262.388847][ T10] usb 2-1: USB disconnect, device number 55 [ 262.414913][T11349] /dev/rnullb0: Can't open blockdev [ 262.430208][ T6060] usb 3-1: USB disconnect, device number 71 [ 262.443187][ T5928] usb 5-1: device descriptor read/64, error -71 [ 262.660887][T11351] /dev/rnullb0: Can't open blockdev [ 262.708573][ T5928] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 262.762051][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 262.847534][ T5928] usb 5-1: device descriptor read/64, error -71 [ 262.965770][ T5928] usb usb5-port1: attempt power cycle [ 263.328212][ T5928] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 263.350622][ T5928] usb 5-1: device descriptor read/8, error -71 [ 263.413747][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 263.574385][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 263.581338][ T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 263.591749][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.616800][ T5928] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 263.648778][ T5928] usb 5-1: device descriptor read/8, error -71 [ 263.766692][ T5928] usb usb5-port1: unable to enumerate USB device [ 266.368855][ T10] usb 2-1: string descriptor 0 read error: -71 [ 266.375476][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.384799][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.394243][ T10] usb 2-1: can't set config #1, error -71 [ 266.401768][ T10] usb 2-1: USB disconnect, device number 56 [ 325.971387][T11371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.986418][T11371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.079098][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.087990][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.101737][T11393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.111020][T11393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.130083][T11396] netlink: 'syz.4.1575': attribute type 1 has an invalid length. [ 326.138717][T11396] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1575'. [ 326.166145][ T5928] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 326.338329][ T5928] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 326.346633][ T5928] usb 2-1: config 0 has no interface number 0 [ 326.354071][ T5928] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=ad.73 [ 326.363854][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.373720][ T5928] usb 2-1: config 0 descriptor?? [ 326.384502][ T5928] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 326.393899][ T5928] dvb-usb: bulk message failed: -22 (2/0) [ 326.400891][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.410634][ T5928] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 326.420394][ T5928] usb 2-1: media controller created [ 326.432306][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.448529][ T5928] cxusb: set interface failed [ 326.453225][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 326.459057][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 326.465173][ T5928] usb 2-1: bluebird_gpio_write failed. [ 326.486705][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 326.492491][ T5928] usb 2-1: bluebird_gpio_write failed. [ 326.513607][ T5928] DVB: Unable to find symbol dib7000p_attach() [ 326.519829][ T5928] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 326.572793][ T5928] rc_core: IR keymap rc-dvico-mce not found [ 326.579251][ T5928] Registered IR keymap rc-empty [ 326.586065][ T5928] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 326.598858][ T5928] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input26 [ 326.612271][ T5928] dvb-usb: schedule remote query interval to 100 msecs. [ 326.619512][ T5928] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 326.713845][T11372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.725468][T11372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.732439][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 326.790575][T11404] tipc: Enabling of bearer rejected, failed to enable media [ 326.804540][ T43] usb 2-1: USB disconnect, device number 57 [ 326.842039][ T43] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 326.845327][T11408] /dev/rnullb0: Can't open blockdev [ 326.858938][T11409] /dev/rnullb0: Can't open blockdev [ 326.945655][ T30] audit: type=1326 audit(1756781853.419:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11410 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad598ebe9 code=0x7fc00000 [ 326.970622][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.970666][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.999325][T11416] /dev/rnullb0: Can't open blockdev [ 327.562213][T11448] /dev/rnullb0: Can't open blockdev [ 327.720660][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.755304][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.068132][T11377] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 328.636506][T11463] /dev/rnullb0: Can't open blockdev [ 328.656217][T11465] /dev/rnullb0: Can't open blockdev [ 328.663160][ T952] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 328.849873][ T952] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 328.858476][ T952] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 328.867950][ T952] usb 2-1: config 0 has no interface number 0 [ 328.874868][ T952] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 328.886437][ T952] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 328.896706][ T952] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 328.909500][ T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.919398][ T952] usb 2-1: config 0 descriptor?? [ 328.986972][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 329.151268][ T10] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 329.159638][ T10] usb 3-1: config 0 has no interface number 0 [ 329.165774][ T10] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 329.177749][ T10] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.194312][ T10] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 329.203682][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.212129][ T10] usb 3-1: Product: syz [ 329.216398][ T10] usb 3-1: Manufacturer: syz [ 329.221051][ T10] usb 3-1: SerialNumber: syz [ 329.233161][ T10] usb 3-1: config 0 descriptor?? [ 329.241204][T11473] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 329.252751][ T10] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 329.276598][ T10] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 329.367774][T11479] /dev/nullb0: Can't open blockdev [ 329.408154][ T952] usb 2-1: USB disconnect, device number 58 [ 329.470170][T11484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.479913][T11484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.557412][T11484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.567238][T11484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.715463][T11473] netlink: 'syz.2.1598': attribute type 6 has an invalid length. [ 329.798099][ T952] usb 3-1: USB disconnect, device number 72 [ 329.809512][ T952] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1 [ 329.825630][ T952] cyberjack 3-1:0.69: device disconnected [ 330.019119][T11490] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 330.146759][T11495] CIFS mount error: No usable UNC path provided in device string! [ 330.146759][T11495] [ 330.157017][T11495] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 330.167338][T11495] /dev/rnullb0: Can't open blockdev [ 330.286683][T11503] /dev/rnullb0: Can't open blockdev [ 330.292622][ T30] audit: type=1326 audit(1756781856.545:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.1.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ccf8ebe9 code=0x7ffc0000 [ 330.316871][ T30] audit: type=1326 audit(1756781856.545:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.1.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f11ccf8ebe9 code=0x7ffc0000 [ 330.346149][ T30] audit: type=1326 audit(1756781856.545:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ccf8ebe9 code=0x7ffc0000 [ 330.368789][ T30] audit: type=1326 audit(1756781856.545:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f11ccf8ebe9 code=0x7ffc0000 [ 330.396164][ T30] audit: type=1326 audit(1756781856.545:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ccf8ebe9 code=0x7ffc0000 [ 330.438045][T11507] sctp: [Deprecated]: syz.2.1610 (pid 11507) Use of int in max_burst socket option deprecated. [ 330.438045][T11507] Use struct sctp_assoc_value instead [ 330.468785][T11509] /dev/nullb0: Can't open blockdev [ 330.477701][T11509] /dev/rnullb0: Can't open blockdev [ 330.500314][ T30] audit: type=1326 audit(1756781856.545:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f11ccf8ebe9 code=0x7ffc0000 [ 330.522487][ T30] audit: type=1326 audit(1756781856.554:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ccf8ebe9 code=0x7ffc0000 [ 330.549179][ T30] audit: type=1326 audit(1756781856.554:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ccf8ebe9 code=0x7ffc0000 [ 330.588234][T11515] /dev/rnullb0: Can't open blockdev [ 330.605664][T11515] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 330.615266][T11515] sctp: [Deprecated]: syz.4.1613 (pid 11515) Use of int in max_burst socket option. [ 330.615266][T11515] Use struct sctp_assoc_value instead [ 330.836606][ T952] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 330.843298][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.869850][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.974696][ T952] usb 3-1: device descriptor read/64, error -71 [ 331.195371][ T51] Bluetooth: hci1: Unknown advertising packet type: 0x31 [ 331.230842][ T952] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 331.359011][ T5928] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 331.381000][ T952] usb 3-1: device descriptor read/64, error -71 [ 331.442501][T11553] /dev/rnullb0: Can't open blockdev [ 331.498026][ T5928] usb 5-1: device descriptor read/64, error -71 [ 331.505090][ T952] usb usb3-port1: attempt power cycle [ 331.754527][ T5928] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 331.871936][ T952] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 331.893277][ T5928] usb 5-1: device descriptor read/64, error -71 [ 331.899828][ T952] usb 3-1: device descriptor read/8, error -71 [ 332.011754][ T5928] usb usb5-port1: attempt power cycle [ 332.145365][T11563] netlink: 'syz.1.1627': attribute type 10 has an invalid length. [ 332.159797][T11563] veth0_vlan: left promiscuous mode [ 332.160427][ T952] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 332.166412][T11563] veth0_vlan: entered promiscuous mode [ 332.180609][T11563] team0: Device veth0_vlan failed to register rx_handler [ 332.192962][ T952] usb 3-1: device descriptor read/8, error -71 [ 332.311582][ T952] usb usb3-port1: unable to enumerate USB device [ 332.374248][ T5928] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 332.391032][T11570] serio: Serial port ptm0 [ 332.406522][ T5928] usb 5-1: device descriptor read/8, error -71 [ 332.618017][T11573] wlan1 speed is unknown, defaulting to 1000 [ 332.629782][T11576] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1632'. [ 332.642317][T11576] /dev/rnullb0: Can't open blockdev [ 332.674246][ T5928] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 332.696145][ T5928] usb 5-1: device descriptor read/8, error -71 [ 332.704057][T11579] /dev/rnullb0: Can't open blockdev [ 332.812368][ T5928] usb usb5-port1: unable to enumerate USB device [ 332.968006][T11588] /dev/rnullb0: Can't open blockdev [ 332.992095][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.000932][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.446547][T11592] /dev/rnullb0: Can't open blockdev [ 333.471582][T11594] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.480585][T11594] /dev/rnullb0: Can't open blockdev [ 333.513824][T11596] /dev/rnullb0: Can't open blockdev [ 333.799708][T11618] /dev/rnullb0: Can't open blockdev [ 333.851185][T11624] /dev/rnullb0: Can't open blockdev [ 333.857722][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'. [ 334.010313][T11630] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 334.149596][T11647] /dev/rnullb0: Can't open blockdev [ 334.436642][T11675] /dev/rnullb0: Can't open blockdev [ 334.459865][T11675] /dev/rnullb0: Can't open blockdev [ 334.470631][T11675] /dev/rnullb0: Can't open blockdev [ 334.477296][T11675] /dev/rnullb0: Can't open blockdev [ 334.484619][T11675] /dev/rnullb0: Can't open blockdev [ 334.494216][T11675] /dev/rnullb0: Can't open blockdev [ 334.505975][T11679] /dev/rnullb0: Can't open blockdev [ 334.665141][T11695] /dev/rnullb0: Can't open blockdev [ 334.691414][T11698] /dev/rnullb0: Can't open blockdev [ 334.715538][T11700] /dev/rnullb0: Can't open blockdev [ 334.748878][T11702] /dev/rnullb0: Can't open blockdev [ 334.809286][T11713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.820173][T11713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.162890][ T952] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 335.222573][T11723] NILFS (loop4): device size too small [ 335.335319][ T952] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 335.346716][ T952] usb 3-1: config 0 has no interface number 0 [ 335.378145][ T952] usb 3-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=6b.bb [ 335.391709][ T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.402327][ T952] usb 3-1: Product: syz [ 335.406869][ T952] usb 3-1: Manufacturer: syz [ 335.412065][ T952] usb 3-1: SerialNumber: syz [ 335.419805][ T952] usb 3-1: config 0 descriptor?? [ 335.479898][T11738] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314442, 8, 0, 0, 0) [ 335.645037][T11748] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 335.657343][T11747] /dev/rnullb0: Can't open blockdev [ 335.700360][ T5928] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 335.723767][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.733742][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.744809][ T952] usb 3-1: Found UVC 0.00 device syz (045e:0723) [ 335.752316][ T952] usb 3-1: No valid video chain found. [ 335.775429][ T952] usb 3-1: USB disconnect, device number 77 [ 335.865275][T11766] /dev/rnullb0: Can't open blockdev [ 335.875299][ T5928] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 335.885754][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.895389][ T5928] usb 2-1: Product: syz [ 335.899564][ T5928] usb 2-1: Manufacturer: syz [ 335.905195][ T5928] usb 2-1: SerialNumber: syz [ 335.917460][ T5928] usb 2-1: config 0 descriptor?? [ 335.974992][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 336.138523][ T5928] usb-storage 2-1:0.0: USB Mass Storage device detected [ 336.147167][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.158804][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.168638][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 336.177674][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.189987][ T10] usb 5-1: config 0 descriptor?? [ 336.284740][ T952] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 336.385809][ T5928] usb 2-1: USB disconnect, device number 59 [ 336.417950][T11775] netlink: 'syz.0.1693': attribute type 3 has an invalid length. [ 336.425991][T11775] netlink: 716 bytes leftover after parsing attributes in process `syz.0.1693'. [ 336.438351][T11775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.447094][ T952] usb 3-1: Using ep0 maxpacket: 16 [ 336.451100][T11775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.453609][ T952] usb 3-1: config 9 has an invalid interface number: 74 but max is 0 [ 336.469934][ T952] usb 3-1: config 9 has no interface number 0 [ 336.476020][ T952] usb 3-1: config 9 interface 74 has no altsetting 0 [ 336.485145][ T952] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 336.494593][ T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.502633][ T952] usb 3-1: Product: syz [ 336.506802][ T952] usb 3-1: Manufacturer: syz [ 336.511577][ T952] usb 3-1: SerialNumber: syz [ 336.630254][ T10] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 336.637345][ T10] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 336.644446][ T10] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 336.651617][ T10] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 336.658651][ T10] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 336.665623][ T10] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 336.672747][ T10] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 336.681393][ T10] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 336.740469][ T952] go7007 3-1:9.74: probe with driver go7007 failed with error -12 [ 336.752529][ T952] usb 3-1: USB disconnect, device number 78 [ 336.842234][ T10] cp2112 0003:10C4:EA90.0017: Part Number: 0x00 Device Version: 0x00 [ 337.035250][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.048197][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.214452][ T952] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 337.363896][ T952] usb 2-1: device descriptor read/64, error -71 [ 337.487861][T11738] cp2112 0003:10C4:EA90.0017: Error starting transaction: -38 [ 337.515741][ T10] cp2112 0003:10C4:EA90.0017: error reading lock byte: -71 [ 337.526749][ T10] usb 5-1: USB disconnect, device number 43 [ 337.620482][ T952] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 337.641891][ T6060] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 337.759287][ T952] usb 2-1: device descriptor read/64, error -71 [ 337.803296][ T6060] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 337.812359][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.821575][ T6060] usb 3-1: config 0 descriptor?? [ 337.828143][ T6060] cp210x 3-1:0.0: cp210x converter detected [ 337.877068][ T952] usb usb2-port1: attempt power cycle [ 338.241660][ T952] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 338.259548][ T6060] usb 3-1: cp210x converter now attached to ttyUSB1 [ 338.263485][ T952] usb 2-1: device descriptor read/8, error -71 [ 338.317967][T11795] /dev/rnullb0: Can't open blockdev [ 338.377178][T11799] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1701'. [ 338.480109][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.489031][T11804] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 338.496128][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.499947][ T5915] Process accounting resumed [ 338.528576][ T952] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 338.550522][ T952] usb 2-1: device descriptor read/8, error -71 [ 338.584924][ T43] usb 3-1: USB disconnect, device number 79 [ 338.594732][ T43] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 338.621512][ T43] cp210x 3-1:0.0: device disconnected [ 338.668594][ T952] usb usb2-port1: unable to enumerate USB device [ 338.727417][T11813] wlan1 speed is unknown, defaulting to 1000 [ 338.899596][T11829] xt_limit: Overflow, try lower: 604147548/4200216962 [ 339.084190][ T43] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 339.256327][ T43] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 339.264608][ T43] usb 3-1: config 0 has no interface number 0 [ 339.272995][ T43] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 339.282183][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.290207][ T43] usb 3-1: Product: syz [ 339.294348][ T43] usb 3-1: Manufacturer: syz [ 339.298948][ T43] usb 3-1: SerialNumber: syz [ 339.304548][ T43] usb 3-1: config 0 descriptor?? [ 340.152673][ T5915] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 340.176812][T11825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.187574][T11825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.201279][ T43] usb 3-1: Firmware version (0.0) predates our first public release. [ 340.209414][ T43] usb 3-1: Please update to version 0.2 or newer [ 340.241748][ T43] usb 3-1: USB disconnect, device number 80 [ 340.257464][T11843] Unsupported ieee802154 address type: 0 [ 340.265845][T11843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.274496][T11843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.291712][ T5915] usb 5-1: device descriptor read/64, error -71 [ 340.363933][T11853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.372534][T11853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.381443][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.390499][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.549093][ T5915] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 340.644214][ T952] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 340.686984][ T5915] usb 5-1: device descriptor read/64, error -71 [ 340.754722][T11856] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 340.805371][ T5915] usb usb5-port1: attempt power cycle [ 340.812576][ T952] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.821609][ T952] usb 2-1: not running at top speed; connect to a high speed hub [ 340.831613][ T952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.842175][ T952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.853804][ T952] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.854238][T11860] sctp: [Deprecated]: syz.2.1717 (pid 11860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.854238][T11860] Use struct sctp_sack_info instead [ 340.864129][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.887697][ T952] usb 2-1: Product: syz [ 340.892683][ T952] usb 2-1: Manufacturer: syz [ 340.897283][ T952] usb 2-1: SerialNumber: syz [ 341.124010][T11844] overlay: filesystem on ./bus not supported as upperdir [ 341.147289][ T43] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 341.178811][ T5915] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 341.201958][ T5915] usb 5-1: device descriptor read/8, error -71 [ 341.295698][T11882] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 341.304646][T11882] netlink: 'syz.0.1722': attribute type 101 has an invalid length. [ 341.312838][T11882] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1722'. [ 341.319283][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.333187][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df [ 341.342734][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.353150][ T43] usb 3-1: config 0 descriptor?? [ 341.361003][ T43] pwc: Philips PCA646VC USB webcam detected. [ 341.374635][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 341.456619][ T5915] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 341.478536][ T5915] usb 5-1: device descriptor read/8, error -71 [ 341.574661][ T43] pwc: send_video_command error -71 [ 341.580962][ T43] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 341.588779][ T43] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 341.596589][ T5915] usb usb5-port1: unable to enumerate USB device [ 341.600122][ T43] usb 3-1: USB disconnect, device number 81 [ 341.817694][T11900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.827471][T11900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.451298][T11905] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 342.460180][T11905] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1730'. [ 342.587760][T11915] fuse: Unknown parameter 'u9%U-$UDA 8;`D@ku ٕ֠:Vx5U0_*kțZ&tJ%hB6p}AlĩuTuק"n5kQbvcġL1̡1wI9H 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 357.298834][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 357.304913][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff888056994480 [ 357.312889][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880535de000 [ 357.320864][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 357.328829][ C0] R10: dffffc0000000000 R11: ffffffff88f963e0 R12: dffffc0000000000 [ 357.336789][ C0] R13: ffff888056994438 R14: 0000000000000000 R15: ffff888056994400 [ 357.344746][ C0] FS: 00007fe2c2a286c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 357.353658][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.360222][ C0] CR2: 0000001b33023ffc CR3: 000000004b4ae000 CR4: 00000000003526f0 [ 357.368176][ C0] Call Trace: [ 357.371437][ C0] [ 357.374267][ C0] ? __pfx_das16m1_ai_munge+0x10/0x10 [ 357.379626][ C0] comedi_buf_write_samples+0x369/0x5a0 [ 357.385155][ C0] das16m1_handler+0x213/0x4b0 [ 357.389904][ C0] das16m1_interrupt+0xaf/0x180 [ 357.394741][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 357.400181][ C0] __handle_irq_event_percpu+0x289/0x980 [ 357.405799][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 357.411934][ C0] ? rcu_is_watching+0x15/0xb0 [ 357.416691][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 357.421888][ C0] handle_irq_event+0x8b/0x1e0 [ 357.426652][ C0] ? handle_edge_irq+0x229/0xa10 [ 357.431585][ C0] handle_edge_irq+0x23b/0xa10 [ 357.436343][ C0] __common_interrupt+0x141/0x1f0 [ 357.441351][ C0] common_interrupt+0xb6/0xe0 [ 357.446014][ C0] [ 357.448928][ C0] [ 357.451839][ C0] asm_common_interrupt+0x26/0x40 [ 357.456844][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 357.463337][ C0] Code: 74 05 e8 3b c1 3f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b3 6d 08 f6 65 8b 05 bc 07 5d 07 85 c0 74 40 48 c7 04 24 0e 36 [ 357.482945][ C0] RSP: 0018:ffffc9000402fbe0 EFLAGS: 00000206 [ 357.489004][ C0] RAX: e1c7ebcdbb6f9e00 RBX: 0000000000000a02 RCX: e1c7ebcdbb6f9e00 [ 357.496956][ C0] RDX: 0000000000000000 RSI: ffffffff8c04e5e0 RDI: 0000000000000001 [ 357.504914][ C0] RBP: ffffc9000402fc70 R08: ffffffff8fe52d37 R09: 1ffffffff1fca5a6 [ 357.512866][ C0] R10: dffffc0000000000 R11: fffffbfff1fca5a7 R12: dffffc0000000000 [ 357.520816][ C0] R13: dffffc0000000000 R14: ffffffff9a246b80 R15: 1ffff92000805f7c [ 357.528781][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.535093][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 357.540966][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.547276][ C0] ? read_tsc+0x9/0x20 [ 357.551325][ C0] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 357.556853][ C0] uart_port_unlock_deref+0x111/0x2f0 [ 357.562204][ C0] uart_write+0xe8/0x130 [ 357.566429][ C0] sixpack_open+0x6ce/0x9c0 [ 357.570912][ C0] ? __pfx_sixpack_open+0x10/0x10 [ 357.576086][ C0] ? down_write+0x162/0x1f0 [ 357.580569][ C0] ? up_write+0x1c4/0x420 [ 357.584881][ C0] tty_ldisc_open+0x9e/0x100 [ 357.589451][ C0] tty_set_ldisc+0x373/0x560 [ 357.594026][ C0] tty_ioctl+0xc38/0xde0 [ 357.598247][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 357.602989][ C0] __se_sys_ioctl+0xf9/0x170 [ 357.607564][ C0] do_syscall_64+0xfa/0xfa0 [ 357.612049][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.618092][ C0] ? clear_bhb_loop+0x60/0xb0 [ 357.622750][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.628625][ C0] RIP: 0033:0x7fe2c1b8ebe9 [ 357.633028][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.652617][ C0] RSP: 002b:00007fe2c2a28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.661019][ C0] RAX: ffffffffffffffda RBX: 00007fe2c1dc5fa0 RCX: 00007fe2c1b8ebe9 [ 357.668971][ C0] RDX: 0000200000000240 RSI: 0000000000005423 RDI: 0000000000000003 [ 357.676946][ C0] RBP: 00007fe2c1c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 357.684899][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.692854][ C0] R13: 00007fe2c1dc6038 R14: 00007fe2c1dc5fa0 R15: 00007ffcd086e158 [ 357.700812][ C0] [ 357.703820][ C0] Modules linked in: [ 357.707705][ C0] ---[ end trace 0000000000000000 ]--- [ 357.713164][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 357.719224][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 357.738819][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 357.744872][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff888056994480 [ 357.752827][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880535de000 [ 357.760779][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 357.768734][ C0] R10: dffffc0000000000 R11: ffffffff88f963e0 R12: dffffc0000000000 [ 357.776691][ C0] R13: ffff888056994438 R14: 0000000000000000 R15: ffff888056994400 [ 357.784646][ C0] FS: 00007fe2c2a286c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 357.793556][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.800122][ C0] CR2: 0000001b33023ffc CR3: 000000004b4ae000 CR4: 00000000003526f0 [ 357.808078][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 357.815522][ C0] Kernel Offset: disabled [ 357.819827][ C0] Rebooting in 86400 seconds..