last executing test programs: 1m26.5310255s ago: executing program 3 (id=332): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10001, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) (async) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a40, 0x18) (async) r5 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64) ftruncate(r1, 0x0) (rerun: 64) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0xfffffffd) (async) accept4(r7, 0x0, 0x0, 0x0) (async) copy_file_range(r4, 0x0, r4, 0x0, 0xfffffffffffffffe, 0x0) (async, rerun: 64) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) (async, rerun: 64) close(r1) (async, rerun: 64) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) 1m26.423290399s ago: executing program 3 (id=333): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x70) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r4, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 1m26.268860211s ago: executing program 3 (id=335): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x54, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x0, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x547102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 1m26.071060848s ago: executing program 3 (id=337): mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x40000000001000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(0x0, r1) fallocate(r0, 0x1, 0x9, 0x81) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 1m25.920356651s ago: executing program 3 (id=339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008a"]) 1m25.431326582s ago: executing program 3 (id=343): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = open$dir(&(0x7f0000000140)='./cgroup\x00', 0x80, 0x1) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000200)={{0x0, 0x2710}, {r1, r2/1000+60000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="370426bd7000fcdbdf250400000005000a00010000000800010034"], 0x24}}, 0x4) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r3], 0x9) rename(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') 1m25.237616095s ago: executing program 32 (id=343): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = open$dir(&(0x7f0000000140)='./cgroup\x00', 0x80, 0x1) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000200)={{0x0, 0x2710}, {r1, r2/1000+60000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="370426bd7000fcdbdf250400000005000a00010000000800010034"], 0x24}}, 0x4) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r3], 0x9) rename(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') 4.605081573s ago: executing program 0 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000033"], 0xfdef) (fail_nth: 25) 4.293846684s ago: executing program 0 (id=848): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000e00)={'veth0_to_team\x00', &(0x7f0000000dc0)=@ethtool_ts_info}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xc0240, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648b000) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000340)={0x58, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x29, r5}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x0, @ax25={0x3, @default, 0x2}, @can={0x1d, r5}, @ethernet={0x6, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7f, 0x0, 0x19e9}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', r9, 0x8000, 0x7800, 0x6, 0x10001, {{0x1a, 0x4, 0x2, 0x1, 0x68, 0x66, 0x0, 0x69, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@rr={0x7, 0x7, 0x5a, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0x4a, [@dev={0xac, 0x14, 0x14, 0xff}]}, @generic={0x81, 0xc, "93fba21d420e164e9abb"}, @timestamp_prespec={0x44, 0x1c, 0xaa, 0x3, 0x6, [{@remote, 0xf28}, {@empty, 0xffffff04}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x8}]}, @rr={0x7, 0x13, 0x60, [@local, @private=0xa010102, @private=0xa010100, @loopback]}, @ra={0x94, 0x4, 0x1}, @noop, @end, @ra={0x94, 0x4, 0x1}]}}}}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.069531117s ago: executing program 1 (id=849): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000001f0001"]) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f00001fa000/0x2000)=nil, &(0x7f000063e000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000274000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000543000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44084) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x802) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) read$qrtrtun(r3, &(0x7f0000000100)=""/215, 0xd7) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000300)='id_resolver\x00', &(0x7f0000000380)='/dev/input/mice\x00') 3.807331608s ago: executing program 0 (id=850): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_read(r2, 0x2, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) r6 = getpid() syz_pidfd_open(r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r9, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r8, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) write$FUSE_ENTRY(r5, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}]}}) 3.800246899s ago: executing program 1 (id=851): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xbc, 0xb7, 0xf6, 0x20, 0xfe9, 0xd501, 0x2350, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x7b, 0xe3, 0x79}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000000), 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x4060010) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x24000050) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext4\x00', 0x24004e, 0x0) 3.598947543s ago: executing program 4 (id=853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x44005) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x130, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x24008002}, 0x4010) r3 = geteuid() sendmsg$nl_generic(r0, &(0x7f0000001880)={&(0x7f00000003c0), 0xc, &(0x7f0000001840)={&(0x7f0000000400)={0x1434, 0x1c, 0x300, 0x70bd28, 0x25dfdbff, {0x1}, [@nested={0x1251, 0x12f, 0x0, 0x1, [@generic="41d46f69b5cde4afc7aae13f40568093a23eeb227b606ee15926d6443881da0ac93fae4500bd3cd08f6a9b51c8b6623d6709d63344ce803c054a35d037849798af3df96d", @generic="458c9c43299efdabcf00f51b0c5b12064dfa80f7727e9d7469dd1b6f21cfade46b69390ee1742b921b8554a5a7cbbcfcfe9994807ae53fc84abbb462de0326d19cf0fe84bc6e7f1a521b7ab464107f5435e41e11adbe402b7abe2ade929dd96a2823b162e17e44c0f1ab91e59b13a5ec5a5d146399c47077ea18b30cce16950582c6ded7b144017e7878e2a42451f6b24bb6e46ef0b4d8c1529e908af9165eebe8a616abb382a1", @generic="6312bb274a60dfe3cc608ea4dd8c2cf812f07c8ab86dca46021198715b973afd8788e92a169e3f65f6242f20fdf0fb8627c5ed99753b2cc286c061a53da795c311e745be225a48e675a60e2268314d5754daa433e24461dc234a3c842d119910c82ae82774f01462469d56c2fdc87e356d7326e19b88cd38a412e9c5e136d9c1834644982aa41275b9021a1f53dbdee739f2ddda75a30064939c96f1b7e5f2de6296f4f27be4fe5cba3e90772eb6718ea919b8402d4f3881ff98d2b53ec38feca165869b80ae6de3e7ad07bf530ae05ee5de8a2587c13683d8208010b9598b84159cf443202931eded52fd7bfb13c31b6c1b6529a3", @generic="e9ea6e91873b612144751a43d5e9542a926d987eccc62ab6da19a6d2b394cb3a0946351b8c58f46074d085dedda02326115a3620077381a7092b8efbed3a638b1a96f9fbfacb3dc4e6378e0fa76d6b54d0acb545cca6ddc46d4d5d1a38e4618164", @nested={0x4, 0xaa}, @typed={0x8, 0x27, 0x0, 0x0, @u32=0x2}, @generic="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"]}, @generic="5084a7d9278749f9b63c94d0e0aece834a46aa22c6b08f6d66dc14805e98274806e7a56808f3df3e0cc2819e4786b9de12ea89a81747d69f338817eb281c1520fcf0d89e1825ff3138dd8af87b46a6efe9ceccb5e4a4240a647d22c57dc6a8870dee0c073185d867b97f9978cbf95a96e8497c1a59407b", @generic="774bdaf75d0290fd01f67b4b8f60538fffaeb40e56732558e64b3cc7daa3467b856260fbff083baae3df21d8274bff107fa936702205e553c3efd804df4bc4e24116cd2f7cc71e59adba15b761a3813e2bd99bfbc1e2ba27c593d5ee50fd6835d54ac4b65bdc078c539d526e07f1c4c38fd5f13bfc9e62af7a424179fd85c8abae0b7e415b0e3366b2ffd16294c28ad941c7f1f473c1440d108355eca49fe17dbcf167d5777fff390b6a493f0235b0c022b5aa02766a72893e022d5a06eec189de68d93582b1a872161d93ed5a048d6927dc856b6ad621af59a24d1d362960ed8d1f4aed2d528d695e9a8e97590d", @generic, @typed={0x8, 0x5a, 0x0, 0x0, @uid=r3}, @nested={0x2e, 0xd7, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x14e}, @generic="6149117fb9051a69c32468ba098d811db6c1f6a60ae4fa8e5fa0edbb3ad4"]}, @generic="c8040566f9d2b29e045935ac846b9a6d69b1ff49654d8293fb3fef4a3d63f0e07427265da0bada3f3af3d0d1b3ea"]}, 0x1434}, 0x1, 0x0, 0x0, 0x4000808}, 0x4008844) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {r3, 0xffffffffffffffff}}, './file0\x00'}) mount$fuse(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900), 0x220a000, &(0x7f0000001980)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@blksize}, {@default_permissions}, {@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@euid_gt={'euid>', r3}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_gt={'uid>', r3}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@dont_appraise}, {@uid_gt}, {@appraise}, {@uid_eq={'uid', 0x3d, r3}}, {@euid_gt={'euid>', r3}}, {@dont_hash}]}}) write$binfmt_misc(r4, &(0x7f0000001b80)="9a7c30f8ee8cca950368ef4dfd2e64acc4ac331fa9c3dcd6572fb1894a6d9e866bd09fc3ebe07d63d1417fdbb26785f3e1515c21d95e6745eb9fb5c5130a117229942f6e10f4c674c0be1cd329decaecd9e0be42d3f107069dea4d6bc90c8f7c71c718464f42dde4ebf65dd615fbbc7879a893b995d9e0b6297bb6de", 0x7c) inotify_init() quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001c00)=@sr0, r3, &(0x7f0000001c40)='./file0/file0\x00') r7 = gettid() getresgid(&(0x7f0000004000)=0x0, &(0x7f0000004040)=0x0, &(0x7f0000004080)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004240)='./file0\x00', &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_fuse_handle_req(r4, &(0x7f0000001c80)="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", 0x2000, &(0x7f0000004600)={&(0x7f0000003c80)={0x50, 0x0, 0x3, {0x7, 0x2b, 0xfffffff9, 0x28000000, 0xc, 0x7, 0x1, 0x4, 0x0, 0x0, 0x10, 0x604c7da5}}, &(0x7f0000003d00)={0x18, 0xffffffffffffffda, 0x1, {0x2}}, &(0x7f0000003d40)={0x18, 0x0, 0x7f, {0x2}}, &(0x7f0000003d80)={0x18, 0x0, 0x0, {0x1}}, &(0x7f0000003dc0)={0x18, 0xffffffffffffffda, 0xc, {0xf}}, &(0x7f0000003e00)={0x28, 0x0, 0x44c, {{0x9, 0x9, 0x2, r7}}}, &(0x7f0000003e40)={0x60, 0xffffffffffffffda, 0xf, {{0x8000, 0xc, 0x1, 0x9, 0x4, 0x3ff, 0x5ed985a, 0x1}}}, &(0x7f0000003ec0)={0x18, 0x0, 0x0, {0x1}}, &(0x7f0000003f00)={0x16, 0x0, 0x2, {'\'}:-\'\x00'}}, &(0x7f0000003f40)={0x20, 0x0, 0x2, {0x0, 0x4}}, &(0x7f0000003f80)={0x78, 0x0, 0xd4, {0xfffffffffffffff2, 0xa, 0x0, {0x2, 0xfffffffffffffffe, 0x8, 0x3, 0x1, 0x1, 0x2, 0xfff, 0x3ff, 0xc000, 0xfb, r5, r6, 0x40d, 0xfffffffd}}}, &(0x7f00000040c0)={0x90, 0x0, 0xfffffffffffffff7, {0x2, 0x2, 0xc, 0x9f, 0x3, 0x3, {0x0, 0x2, 0x2, 0x8, 0xffffffff00000000, 0x1f, 0x0, 0x1, 0x10000, 0xa000, 0x58, r3, r10, 0x9}}}, &(0x7f0000004180)={0x90, 0xffffffffffffffda, 0xf9f, [{0x2, 0x12, 0x5, 0xb7, 'euid>'}, {0x2, 0x3, 0x2, 0x0, 'fd'}, {0x3, 0x9, 0x4, 0x0, 'pci\x00'}, {0x0, 0x7, 0x5, 0x30000, 'fuse\x00'}]}, &(0x7f0000004300)={0xb0, 0xfffffffffffffffe, 0x7, [{{0x2, 0x1, 0x401, 0x8, 0x2a, 0xfffffff7, {0x4, 0x7, 0x281, 0x2, 0x0, 0x4, 0x45, 0xfc26, 0x7f, 0x4000, 0x5d, r11, r6, 0x4, 0x2}}, {0x6, 0x0, 0x1, 0x548c2e26, '}'}}]}, &(0x7f00000043c0)={0xa0, 0x0, 0xfffffffffffffffc, {{0x0, 0x3, 0x9, 0x7, 0xfffff000, 0x3, {0x1, 0x0, 0x800, 0xf1, 0x3, 0x8000000000000001, 0x4, 0x200, 0x9393, 0x1000, 0xb, r5, r6, 0xc56, 0x7}}, {0x0, 0x1a}}}, &(0x7f0000004480)={0x20, 0x0, 0x8, {0x6, 0x0, 0xfffffffb, 0x10}}, &(0x7f00000044c0)={0x130, 0x0, 0x3, {0xffff, 0x5, 0x0, '\x00', {0x4000, 0x0, 0x4, 0x4, r5, r6, 0x6000, '\x00', 0x9, 0x7, 0x4acd, 0x8001, {0x8000000000000001, 0x81d2}, {0x1, 0x9272}, {0x5, 0x4}, {0x698e, 0x2}, 0x9, 0x1, 0x2, 0xffff0001}}}}) setxattr$system_posix_acl(&(0x7f00000046c0)='./file0\x00', &(0x7f0000004700)='system.posix_acl_access\x00', &(0x7f0000004740)={{}, {0x1, 0x1}, [{0x2, 0x4, r5}, {0x2, 0x4, r5}, {0x2, 0x5, r5}, {0x2, 0x0, 0xee00}, {0x2, 0x3, r5}], {0x4, 0x1}, [{0x8, 0x6, r12}, {0x8, 0x2, r8}, {0x8, 0x1, r6}, {0x8, 0x8, r9}], {0x10, 0x2}, {0x20, 0x6}}, 0x6c, 0x2) syz_open_dev$radio(&(0x7f00000047c0), 0x0, 0x2) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000004800)=0xa8ab) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000049c0)={&(0x7f0000004840), 0xc, &(0x7f0000004980)={&(0x7f0000004880)={0xfc, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x200408c4}, 0x4000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004a40), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000004b40)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004b00)={&(0x7f0000004ac0)={0x30, r13, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x54) fstat(r4, &(0x7f0000004b80)) r15 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000004c00), 0x1afb, 0x4001) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000004c40)={r4, 0x6, {0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x12, 0x16, 0x0, "0320df522b7fd33a57214ed3d06fba78eb2e47ffd948c2242e6dec58bbde15f296d1206e6dabc77b56efd2397130806ac355e58d5f6cb3672d2cd777ac920f13", "ea857b3c9d44f42d2bb1ede91486be1977af8d0ca08b98f420570efdb2d628a436082d83268e4af6f8b46f90efa75a691bd0eafd1ff22e33e63d74fed6bd90b0", "25fbff4803878cad042ffbf1396610d33000105ab0b9461643ac10643c1627dc", [0x18a, 0x3]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4) pwritev(r4, &(0x7f0000004e40)=[{&(0x7f0000004d80)="ab5ae8094054508616020e30e967abda1689f87e3caf7cf9ef1088cbc09d2846e34adeb9d9476933045058dd02156fee98fe5ce635b19e91ba6d94feec597f5cf984169e583b24bc50ac", 0x4a}, {&(0x7f0000004e00)="3a7d8e91bcec6660e98c5cebf5ccdf63dc31", 0x12}], 0x2, 0x1000, 0x4) ioctl$FIBMAP(r15, 0x1, &(0x7f0000004e80)=0x9) 3.591285826s ago: executing program 4 (id=854): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) rmdir(&(0x7f00000000c0)='./file0\x00') r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r2 = gettid() poll(0x0, 0x0, 0xffffffffffbffff8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x12) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r5 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) creat(&(0x7f0000000080)='./file0\x00', 0xac) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 2.531391545s ago: executing program 4 (id=856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000033"], 0xfdef) (fail_nth: 26) 2.06816332s ago: executing program 4 (id=858): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc8}}}, 0x4) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x1, 0x0) 1.664550894s ago: executing program 2 (id=861): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x98f905, 0x9}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r2, 0x891b, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 1.343257773s ago: executing program 2 (id=862): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 1.294885908s ago: executing program 1 (id=863): preadv(0xffffffffffffffff, &(0x7f0000001080)=[{0x0}], 0x1, 0x0, 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.044095243s ago: executing program 2 (id=864): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400041, 0x1) open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x801) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) 719.815398ms ago: executing program 2 (id=865): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x450040, 0x0) writev(r3, &(0x7f0000002740)=[{&(0x7f00000023c0)="a4", 0x1}], 0x7) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000016cff00000000000000000000ffffffea0000ff020000000000000000000000000001"], 0x4b) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 626.046412ms ago: executing program 4 (id=866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000083ffffffffffffff0000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 617.794746ms ago: executing program 0 (id=867): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x96, 0x101000) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x6ead5a59194af6eb}, "0a15946dc0e97fcc", "f08bfdcff7a7180ab03b59857ebe504d", '\x00', "4d1e2d67fc136b4f"}, 0x28) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000180)='affs\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}}, 0x4c}}, 0x800) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000080)={0x1c, 0x2a, 0x11, 0x3, 0x2, 0x0, 0x5, 0x21, 0xffffffffffffffff}) 381.108314ms ago: executing program 1 (id=868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005412000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000033"], 0xfdef) 356.640239ms ago: executing program 4 (id=869): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x12c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000280)={r2, 0xaf}, 0x8) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x8008af00, &(0x7f00000000c0)) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) sendto$l2tp(r0, &(0x7f0000000100)="240a429eb457cc0adc10135d1f12d5827a89307acaf28a14ce2f49276d0c97fa3730e5cf15fb55dadfad075e5f9b8a03140d97459ba8eb9b0da6e4e7f22a960a105429c21e3551ceec0dd2b4d754", 0x4e, 0x20044000, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) 275.35653ms ago: executing program 2 (id=870): r0 = add_key$user(&(0x7f0000002f00), &(0x7f0000002f40)={'syz', 0x2}, &(0x7f0000003280)='#', 0x1, 0xfffffffffffffffd) (async) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x500, 0x2, 0x3234564e, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x0, 0x2, 0x7}}) (async) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="7f552b84e40eb0d1e0c60392d34009a8d15935f66db347340898c2e0f212f85cad7ac3f784dfae9e2c53707f5981b94efba342bf6ea89c2fe35ff39a38881be90a1e482e8d0fdf58964318951543a417277a0e3a0adb9989076d5c1b9941a2b8f139cca669b9fc683015ab1adb8a060778a9f41e527ecff8fcc5afee883d0c918620145dcdc9103a900628b4581ba106c5d4d7e42f07e2b7a352feab745e52fea48d92fab11fa01ac963d54a1d2152def9dd63ff551d815e8cdb5b15ee48d922", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001080)={r0, r2, r0}, &(0x7f00000010c0)=""/48, 0x30, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) (async) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x22052, r3, 0x93771000) 210.126117ms ago: executing program 0 (id=871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x3900022, 0x0) 138.823697ms ago: executing program 1 (id=872): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x16) fsopen(&(0x7f00000001c0)='udf\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x6, @mcast2, 0x8000}, @in={0x2, 0x4e21, @remote}], 0x2c) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 91.379797ms ago: executing program 2 (id=873): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x266000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) syz_clone(0x2a94a500, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 59.665913ms ago: executing program 0 (id=874): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) chdir(&(0x7f0000000380)='./file0\x00') recvfrom(r1, 0x0, 0xd, 0x3, 0x0, 0xfffffdd1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) listen(r3, 0x314e) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) preadv(r5, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x1, 0x1fffff, 0xa3ab) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007c00200bc24eabb56a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c9534835651ea4eebd280485cb56107c042ff9c2b6f4eb3d305105993e26088415b07435f28cb7c4875274b0822c737075cca9ec9b2569fe3b2b7ecd5bed951f0adfabd5229b25188de4d70cbc4f0ffcaf16f6259cb03ba559b24fcd56e98c86aeb202f0d5b96460a231bf9b91", 0xc7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r9, 0x5453, 0x0) ioctl$TIOCMGET(r9, 0x5415, 0x0) r10 = dup(r8) r11 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x101280, 0x0) connect$pppoe(r11, &(0x7f0000000280)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'veth0_to_bond\x00'}}, 0x1e) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000097000040"]) 0s ago: executing program 1 (id=875): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x4008af25, &(0x7f0000000080)) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) kernel console output (not intermixed with test programs): an active interface with an up link [ 140.803969][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.953896][ T7012] team0: Port device team_slave_0 added [ 140.992721][ T7012] team0: Port device team_slave_1 added [ 141.170947][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.185078][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.211233][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.234207][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.296250][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.307901][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.522834][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.679108][ T10] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 141.788779][ T7012] hsr_slave_0: entered promiscuous mode [ 141.804886][ T7012] hsr_slave_1: entered promiscuous mode [ 141.819425][ T7012] debugfs: 'hsr0' already exists in 'hsr' [ 141.836277][ T7012] Cannot create hsr debugfs directory [ 141.863160][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.913025][ T10] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 141.933066][ T10] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.968034][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 142.000610][ T10] usb 3-1: config 1 interface 0 has no altsetting 1 [ 142.036578][ T10] usb 3-1: string descriptor 0 read error: -22 [ 142.043170][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.067666][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.107528][ T7122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.148865][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 142.228776][ T51] Bluetooth: hci3: command tx timeout [ 142.605082][ T7155] exFAT-fs (nullb0): invalid boot record signature [ 142.615127][ T7155] exFAT-fs (nullb0): failed to read boot sector [ 142.615146][ T7155] exFAT-fs (nullb0): failed to recognize exfat type [ 142.655037][ T7012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.657103][ T10] usb 1-1: USB disconnect, device number 14 [ 142.712716][ T7012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.799674][ T7012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.834474][ T7012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.170830][ T5930] usb 3-1: USB disconnect, device number 15 [ 143.174001][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.201858][ T7149] netlink: 40 bytes leftover after parsing attributes in process `syz.1.370'. [ 143.239094][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 143.290091][ T7012] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.319887][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.327079][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.353340][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.360760][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.448632][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 143.471733][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 143.529136][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.559742][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 143.594223][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.610478][ T7163] hfs: can't find a HFS filesystem on dev rnullb0 [ 143.635860][ T10] usb 1-1: config 0 descriptor?? [ 144.146074][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.241234][ T7193] Can't find a SQUASHFS superblock on rnullb0 [ 144.308904][ T51] Bluetooth: hci3: command tx timeout [ 144.915188][ T7012] veth0_vlan: entered promiscuous mode [ 144.956125][ T7012] veth1_vlan: entered promiscuous mode [ 145.015827][ T7012] veth0_macvtap: entered promiscuous mode [ 145.035155][ T7012] veth1_macvtap: entered promiscuous mode [ 145.082490][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.111546][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.142224][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.166387][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.206518][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.236379][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.387684][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.427801][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.507771][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.543888][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.821468][ T5900] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 145.904002][ T7229] smc: net device veth1_virt_wifi applied user defined pnetid SYZ2 [ 146.051935][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 146.062246][ T5900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.078732][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 146.113987][ T5900] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 146.142376][ T10] usb 1-1: USB disconnect, device number 15 [ 146.151384][ T5900] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.209204][ T5900] usb 2-1: config 1 interface 0 has no altsetting 0 [ 146.216243][ T5900] usb 2-1: config 1 interface 0 has no altsetting 1 [ 146.231611][ T7243] netlink: 92 bytes leftover after parsing attributes in process `syz.4.384'. [ 146.275337][ T5900] usb 2-1: string descriptor 0 read error: -22 [ 146.288693][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.308113][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.349480][ T7221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.406883][ T5900] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 147.197586][ T7275] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 147.468602][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 147.468704][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 147.550751][ T981] usb 2-1: USB disconnect, device number 16 [ 147.639487][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 147.646946][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 147.659521][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 147.675489][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.675607][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.702265][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 147.713534][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.724299][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.738454][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.764425][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.774580][ T10] usb 1-1: config 0 descriptor?? [ 147.785667][ T24] usb 3-1: Product: syz [ 147.792775][ T24] usb 3-1: Manufacturer: syz [ 147.797714][ T24] usb 3-1: SerialNumber: syz [ 147.998785][ T981] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 148.017085][ T7275] Invalid ELF header magic: != ELF [ 148.161893][ T981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.192800][ T981] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 148.222199][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.247984][ T981] usb 2-1: Product: syz [ 148.259181][ T981] usb 2-1: Manufacturer: syz [ 148.270183][ T981] usb 2-1: SerialNumber: syz [ 148.290260][ T981] usb 2-1: config 0 descriptor?? [ 148.310850][ T981] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 148.551950][ T7293] syz.1.395: attempt to access beyond end of device [ 148.551950][ T7293] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 148.658287][ T24] usb 3-1: 0:2 : does not exist [ 148.684875][ T5900] usb 2-1: USB disconnect, device number 17 [ 148.730804][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 148.837316][ T24] usb 3-1: USB disconnect, device number 16 [ 148.984544][ T6598] udevd[6598]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.599977][ T7329] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 149.803039][ T7333] FAULT_INJECTION: forcing a failure. [ 149.803039][ T7333] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.819865][ T7333] CPU: 1 UID: 0 PID: 7333 Comm: syz.1.401 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 149.819894][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.819910][ T7333] Call Trace: [ 149.819920][ T7333] [ 149.819928][ T7333] dump_stack_lvl+0x189/0x250 [ 149.819971][ T7333] ? __pfx____ratelimit+0x10/0x10 [ 149.820002][ T7333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.820031][ T7333] ? __pfx__printk+0x10/0x10 [ 149.820074][ T7333] should_fail_ex+0x414/0x560 [ 149.820107][ T7333] _copy_to_user+0x31/0xb0 [ 149.820132][ T7333] simple_read_from_buffer+0xe1/0x170 [ 149.820167][ T7333] proc_fail_nth_read+0x1b3/0x220 [ 149.820193][ T7333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.820219][ T7333] ? rw_verify_area+0x2a6/0x4d0 [ 149.820244][ T7333] ? __lock_acquire+0xab9/0xd20 [ 149.820265][ T7333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.820300][ T7333] vfs_read+0x1fd/0x980 [ 149.820324][ T7333] ? fdget_pos+0x247/0x320 [ 149.820346][ T7333] ? __pfx___mutex_lock+0x10/0x10 [ 149.820377][ T7333] ? __pfx_vfs_read+0x10/0x10 [ 149.820405][ T7333] ? __fget_files+0x2a/0x420 [ 149.820440][ T7333] ? __fget_files+0x3a0/0x420 [ 149.820468][ T7333] ? __fget_files+0x2a/0x420 [ 149.820508][ T7333] ksys_read+0x145/0x250 [ 149.820533][ T7333] ? __fget_files+0x3a0/0x420 [ 149.820564][ T7333] ? __pfx_ksys_read+0x10/0x10 [ 149.820596][ T7333] ? do_syscall_64+0xbe/0x3b0 [ 149.820631][ T7333] do_syscall_64+0xfa/0x3b0 [ 149.820660][ T7333] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.820688][ T7333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.820708][ T7333] ? clear_bhb_loop+0x60/0xb0 [ 149.820732][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.820751][ T7333] RIP: 0033:0x7fa6e318d3bc [ 149.820775][ T7333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 149.820792][ T7333] RSP: 002b:00007fa6e3fce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.820813][ T7333] RAX: ffffffffffffffda RBX: 00007fa6e33b5fa0 RCX: 00007fa6e318d3bc [ 149.820828][ T7333] RDX: 000000000000000f RSI: 00007fa6e3fce0a0 RDI: 0000000000000006 [ 149.820840][ T7333] RBP: 00007fa6e3fce090 R08: 0000000000000000 R09: 0000000000000000 [ 149.820852][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.820863][ T7333] R13: 0000000000000000 R14: 00007fa6e33b5fa0 R15: 00007ffd0ef62a28 [ 149.820895][ T7333] [ 150.374512][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 150.389387][ T24] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 150.414290][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 150.440743][ T10] usb 1-1: USB disconnect, device number 16 [ 150.594122][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.611342][ T24] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 150.627636][ T24] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.696517][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 150.741634][ T24] usb 5-1: config 1 interface 0 has no altsetting 1 [ 150.763866][ T24] usb 5-1: string descriptor 0 read error: -22 [ 150.790871][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.814821][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.841289][ T7336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.864494][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 151.146142][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 151.578434][ T7392] binder: BC_ATTEMPT_ACQUIRE not supported [ 151.586120][ T7392] binder: 7390:7392 ioctl c0306201 2000000001c0 returned -22 [ 151.738782][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 151.807892][ T5893] usb 5-1: USB disconnect, device number 2 [ 151.848676][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 151.910978][ T24] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 151.923289][ T24] usb 1-1: config 0 has no interface number 0 [ 151.934397][ T24] usb 1-1: config 0 interface 253 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.950895][ T24] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0018, bcdDevice=e4.3c [ 151.960532][ T7395] /dev/rnullb0: Can't open blockdev [ 151.964253][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.975741][ T24] usb 1-1: Product: syz [ 151.982563][ T24] usb 1-1: Manufacturer: syz [ 151.987484][ T24] usb 1-1: SerialNumber: syz [ 151.999236][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 152.011604][ T24] usb 1-1: config 0 descriptor?? [ 152.023593][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.033358][ T24] kvaser_usb 1-1:0.253: error -ENODEV: Cannot get usb endpoint(s) [ 152.040123][ T10] usb 2-1: config 1 has an invalid interface number: 26 but max is 1 [ 152.057681][ T10] usb 2-1: config 1 has an invalid interface number: 89 but max is 1 [ 152.085618][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.098127][ T10] usb 2-1: config 1 has no interface number 0 [ 152.123410][ T10] usb 2-1: config 1 has no interface number 1 [ 152.132066][ T10] usb 2-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 152.147882][ T10] usb 2-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.166283][ T10] usb 2-1: config 1 interface 26 has no altsetting 0 [ 152.177037][ T10] usb 2-1: config 1 interface 89 has no altsetting 0 [ 152.196148][ T10] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 152.205640][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 152.214282][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.223734][ T10] usb 2-1: Product: syz [ 152.234166][ T10] usb 2-1: Manufacturer: syz [ 152.239294][ T10] usb 2-1: SerialNumber: syz [ 152.375359][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 152.389677][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 152.406104][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.414703][ T9] usb 3-1: Product: syz [ 152.419014][ T9] usb 3-1: Manufacturer: syz [ 152.423872][ T9] usb 3-1: SerialNumber: syz [ 152.480210][ T10] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 152.497631][ T10] usb 2-1: 26:2 : does not exist [ 152.517196][ T10] usb 2-1: unknown interface protocol 0x13, assuming v1 [ 152.524844][ T10] usb 2-1: 89:0 : does not exist [ 152.562680][ T10] usb 2-1: USB disconnect, device number 18 [ 152.671879][ T5848] usb 1-1: USB disconnect, device number 17 [ 152.729395][ T7410] netlink: 'syz.4.421': attribute type 15 has an invalid length. [ 152.737513][ T7410] netlink: 666 bytes leftover after parsing attributes in process `syz.4.421'. [ 152.775206][ T6598] udevd[6598]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.521632][ T7432] Mount JFS Failure: -22 [ 153.538988][ T5848] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 153.712121][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.736947][ T5848] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 153.748262][ T5848] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.765672][ T5848] usb 2-1: config 1 interface 0 has no altsetting 0 [ 153.784431][ T5848] usb 2-1: config 1 interface 0 has no altsetting 1 [ 153.806968][ T5848] usb 2-1: string descriptor 0 read error: -22 [ 153.825519][ T5848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.846537][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.867076][ T7426] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.881207][ T5848] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 154.312135][ T5848] usb 2-1: USB disconnect, device number 19 [ 154.495596][ T7455] cgroup2: Unknown parameter 'pidents' [ 154.508319][ T7455] hfs: can't find a HFS filesystem on dev rnullb0 [ 155.061883][ T9] usb 3-1: probing VID:PID(0424:012C) [ 155.103757][ T9] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 155.122204][ T9] vub300 3-1:2.0: probe with driver vub300 failed with error -22 [ 155.158359][ T9] usb 3-1: USB disconnect, device number 17 [ 155.241558][ T51] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 155.510211][ T7486] netlink: 'syz.0.446': attribute type 17 has an invalid length. [ 155.518015][ T7486] netlink: 'syz.0.446': attribute type 16 has an invalid length. [ 155.532410][ T7486] netlink: 152 bytes leftover after parsing attributes in process `syz.0.446'. [ 155.550317][ T7486] sctp: [Deprecated]: syz.0.446 (pid 7486) Use of int in maxseg socket option. [ 155.550317][ T7486] Use struct sctp_assoc_value instead [ 155.590851][ T5893] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 155.755460][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 155.776602][ T5893] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 156.121016][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.139102][ T5893] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 156.157912][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.183799][ T5893] usb 2-1: config 0 descriptor?? [ 156.327506][ T7505] qnx6: unable to set blocksize [ 156.439430][ T5848] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 156.640595][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.675334][ T5848] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 156.687413][ T7520] process 'syz.0.454' launched '/dev/fd/7' with NULL argv: empty string added [ 156.696215][ T5848] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.724977][ T5848] usb 3-1: config 1 interface 0 has no altsetting 0 [ 156.732324][ T5848] usb 3-1: config 1 interface 0 has no altsetting 1 [ 156.746056][ T5848] usb 3-1: string descriptor 0 read error: -22 [ 156.760853][ T5848] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.798163][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.815102][ T7501] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 156.835815][ T5848] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 157.218040][ T5900] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.274242][ T5848] usb 3-1: USB disconnect, device number 18 [ 157.392144][ T5900] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 157.414141][ T5900] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 157.444965][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.468139][ T5900] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.478668][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.488031][ T5900] usb 5-1: Product: syz [ 157.498034][ T5900] usb 5-1: Manufacturer: ä€î•Ší„§ï˜ŸáŽ›áŒµë½”냖殻㞗戴ꃧ㶽社潡怘冥Йë‚絎࠸Ｊ냹ï¤éŸ§á½è€Žë ™æ©¦ã…¢ê‚Ÿï‚¸ [ 157.547996][ T5900] usb 5-1: SerialNumber: syz [ 157.865915][ T5900] usb 5-1: 0:2 : does not exist [ 157.905905][ T5900] usb 5-1: USB disconnect, device number 3 [ 157.972079][ T6598] udevd[6598]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.072021][ T7558] veth1: entered promiscuous mode [ 158.176028][ T7558] veth1: left promiscuous mode [ 158.539141][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 158.563106][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 158.592304][ T7573] sctp: [Deprecated]: syz.2.460 (pid 7573) Use of int in maxseg socket option. [ 158.592304][ T7573] Use struct sctp_assoc_value instead [ 158.608946][ T5893] usb 2-1: USB disconnect, device number 20 [ 159.022083][ T7581] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 159.061074][ T7581] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 159.249876][ T7588] syz.4.467: attempt to access beyond end of device [ 159.249876][ T7588] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 159.295165][ T7588] MINIX-fs: unable to read superblock [ 159.547770][ T5893] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 159.700673][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.713608][ T5893] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 159.728713][ T5848] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 159.740966][ T5893] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.787221][ T5893] usb 1-1: config 1 interface 0 has no altsetting 0 [ 159.797673][ T5893] usb 1-1: config 1 interface 0 has no altsetting 1 [ 159.811015][ T5893] usb 1-1: string descriptor 0 read error: -22 [ 159.818583][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.837773][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.874711][ T7586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 159.887726][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 159.900664][ T5893] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 159.905379][ T5848] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 159.927721][ T5848] usb 5-1: config 0 has no interface number 0 [ 159.942232][ T5848] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 159.963090][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.983354][ T5848] usb 5-1: Product: syz [ 159.991317][ T5848] usb 5-1: Manufacturer: syz [ 160.001429][ T5848] usb 5-1: SerialNumber: syz [ 160.019902][ T5848] usb 5-1: config 0 descriptor?? [ 160.028486][ T5848] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 160.053278][ T7601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.471'. [ 160.067004][ T7611] FAULT_INJECTION: forcing a failure. [ 160.067004][ T7611] name failslab, interval 1, probability 0, space 0, times 0 [ 160.067071][ T7601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.471'. [ 160.088973][ T7611] CPU: 0 UID: 0 PID: 7611 Comm: syz.1.474 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 160.089003][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.089015][ T7611] Call Trace: [ 160.089024][ T7611] [ 160.089034][ T7611] dump_stack_lvl+0x189/0x250 [ 160.089067][ T7611] ? __pfx____ratelimit+0x10/0x10 [ 160.089096][ T7611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.089124][ T7611] ? __pfx__printk+0x10/0x10 [ 160.089156][ T7611] ? __pfx___might_resched+0x10/0x10 [ 160.089186][ T7611] should_fail_ex+0x414/0x560 [ 160.089220][ T7611] should_failslab+0xa8/0x100 [ 160.089251][ T7611] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 160.089278][ T7611] ? __alloc_skb+0x112/0x2d0 [ 160.089308][ T7611] __alloc_skb+0x112/0x2d0 [ 160.089334][ T7611] netlink_sendmsg+0x5c6/0xb30 [ 160.089380][ T7611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.089420][ T7611] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.089465][ T7611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.089497][ T7611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.089533][ T7611] __sock_sendmsg+0x219/0x270 [ 160.089568][ T7611] ____sys_sendmsg+0x505/0x830 [ 160.089599][ T7611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.089635][ T7611] ? import_iovec+0x74/0xa0 [ 160.089663][ T7611] ___sys_sendmsg+0x21f/0x2a0 [ 160.089691][ T7611] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.089757][ T7611] ? __fget_files+0x2a/0x420 [ 160.089791][ T7611] ? __fget_files+0x3a0/0x420 [ 160.089836][ T7611] __x64_sys_sendmsg+0x19b/0x260 [ 160.089864][ T7611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.089901][ T7611] ? __pfx_ksys_write+0x10/0x10 [ 160.089928][ T7611] ? rcu_is_watching+0x15/0xb0 [ 160.089964][ T7611] ? do_syscall_64+0xbe/0x3b0 [ 160.090002][ T7611] do_syscall_64+0xfa/0x3b0 [ 160.090034][ T7611] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.090064][ T7611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.090086][ T7611] ? clear_bhb_loop+0x60/0xb0 [ 160.090114][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.090136][ T7611] RIP: 0033:0x7fa6e318e9a9 [ 160.090156][ T7611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.090174][ T7611] RSP: 002b:00007fa6e3fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.090197][ T7611] RAX: ffffffffffffffda RBX: 00007fa6e33b5fa0 RCX: 00007fa6e318e9a9 [ 160.090214][ T7611] RDX: 0000000000044002 RSI: 0000200000000240 RDI: 0000000000000003 [ 160.090228][ T7611] RBP: 00007fa6e3fce090 R08: 0000000000000000 R09: 0000000000000000 [ 160.090242][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.090254][ T7611] R13: 0000000000000000 R14: 00007fa6e33b5fa0 R15: 00007ffd0ef62a28 [ 160.090289][ T7611] [ 160.381293][ T5848] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 160.402554][ T7603] netlink: 60 bytes leftover after parsing attributes in process `syz.2.471'. [ 160.417413][ T5848] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 160.564824][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 47 [ 160.773371][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 160.777924][ T5900] usb 5-1: USB disconnect, device number 4 [ 160.827940][ T5900] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 160.877288][ T5900] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 160.911377][ T5900] quatech2 5-1:0.51: device disconnected [ 161.058170][ T5893] usb 1-1: USB disconnect, device number 18 [ 161.376023][ T7643] can0: slcan on ttyS3. [ 161.604009][ T7641] can0 (unregistered): slcan off ttyS3. [ 162.059507][ T981] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 162.244980][ T981] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.264925][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.275975][ T981] usb 1-1: Product: syz [ 162.281326][ T981] usb 1-1: Manufacturer: syz [ 162.300232][ T981] usb 1-1: SerialNumber: syz [ 162.350079][ T981] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.447445][ T5848] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.487410][ T5893] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 162.652099][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.670716][ T5893] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 162.705338][ T5893] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.745971][ T5893] usb 2-1: config 1 interface 0 has no altsetting 0 [ 162.768407][ T5893] usb 2-1: config 1 interface 0 has no altsetting 1 [ 162.783225][ T5893] usb 2-1: string descriptor 0 read error: -22 [ 162.795235][ T5893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.826592][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.855742][ T7670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.900209][ T5893] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 162.964038][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.982327][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.007370][ T5900] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.179963][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 163.203743][ T5900] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 163.228656][ T5900] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 163.256538][ T5900] usb 5-1: config 0 has no interface number 0 [ 163.271378][ T5900] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.315339][ T5900] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 163.335739][ T5900] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 163.371042][ T5900] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 163.388488][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 163.405678][ T5900] usb 5-1: Product: syz [ 163.425687][ T5900] usb 5-1: config 0 descriptor?? [ 163.444599][ T7689] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 163.509173][ T5848] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 163.518575][ T5848] ath9k_htc: Failed to initialize the device [ 163.570731][ T5848] usb 1-1: ath9k_htc: USB layer deinitialized [ 163.944079][ T24] usb 2-1: USB disconnect, device number 21 [ 164.034815][ T5900] usb 5-1: USB disconnect, device number 5 [ 164.473046][ T7733] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 164.713025][ T7741] FAULT_INJECTION: forcing a failure. [ 164.713025][ T7741] name failslab, interval 1, probability 0, space 0, times 0 [ 164.749303][ T7741] CPU: 0 UID: 0 PID: 7741 Comm: syz.4.500 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 164.749336][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.749349][ T7741] Call Trace: [ 164.749357][ T7741] [ 164.749366][ T7741] dump_stack_lvl+0x189/0x250 [ 164.749401][ T7741] ? __pfx____ratelimit+0x10/0x10 [ 164.749431][ T7741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.749460][ T7741] ? __pfx__printk+0x10/0x10 [ 164.749496][ T7741] ? ref_tracker_alloc+0x318/0x460 [ 164.749528][ T7741] should_fail_ex+0x414/0x560 [ 164.749559][ T7741] should_failslab+0xa8/0x100 [ 164.749586][ T7741] kmem_cache_alloc_noprof+0x73/0x3c0 [ 164.749607][ T7741] ? skb_clone+0x212/0x3a0 [ 164.749636][ T7741] skb_clone+0x212/0x3a0 [ 164.749665][ T7741] __netlink_deliver_tap+0x404/0x850 [ 164.749709][ T7741] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.749741][ T7741] netlink_deliver_tap+0x19c/0x1b0 [ 164.749773][ T7741] netlink_unicast+0x730/0x8e0 [ 164.749815][ T7741] netlink_sendmsg+0x805/0xb30 [ 164.749856][ T7741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.749891][ T7741] ? aa_sock_msg_perm+0xf1/0x1d0 [ 164.749925][ T7741] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.749955][ T7741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.749987][ T7741] __sock_sendmsg+0x219/0x270 [ 164.750018][ T7741] ____sys_sendmsg+0x505/0x830 [ 164.750055][ T7741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.750089][ T7741] ? import_iovec+0x74/0xa0 [ 164.750115][ T7741] ___sys_sendmsg+0x21f/0x2a0 [ 164.750141][ T7741] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.750204][ T7741] ? __fget_files+0x2a/0x420 [ 164.750234][ T7741] ? __fget_files+0x3a0/0x420 [ 164.750276][ T7741] __x64_sys_sendmsg+0x19b/0x260 [ 164.750302][ T7741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.750336][ T7741] ? __pfx_ksys_write+0x10/0x10 [ 164.750362][ T7741] ? rcu_is_watching+0x15/0xb0 [ 164.750395][ T7741] ? do_syscall_64+0xbe/0x3b0 [ 164.750430][ T7741] do_syscall_64+0xfa/0x3b0 [ 164.750460][ T7741] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.750488][ T7741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.750509][ T7741] ? clear_bhb_loop+0x60/0xb0 [ 164.750534][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.750554][ T7741] RIP: 0033:0x7f6cacd8e9a9 [ 164.750572][ T7741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.750590][ T7741] RSP: 002b:00007f6cadce3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.750612][ T7741] RAX: ffffffffffffffda RBX: 00007f6cacfb5fa0 RCX: 00007f6cacd8e9a9 [ 164.750628][ T7741] RDX: 0000000000044002 RSI: 0000200000000240 RDI: 0000000000000003 [ 164.750642][ T7741] RBP: 00007f6cadce3090 R08: 0000000000000000 R09: 0000000000000000 [ 164.750655][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.750667][ T7741] R13: 0000000000000000 R14: 00007f6cacfb5fa0 R15: 00007ffdf5da8c08 [ 164.750699][ T7741] [ 165.074154][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'. [ 165.121726][ T24] usb 1-1: USB disconnect, device number 19 [ 165.271720][ T7755] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 165.297027][ T5913] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 165.457067][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 165.464548][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 165.483532][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.503713][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.538545][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 165.558483][ T5913] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 165.592701][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.636285][ T5913] usb 2-1: config 0 descriptor?? [ 165.655824][ T7739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.666106][ T7762] XFS (rnullb0): Invalid superblock magic number [ 165.687787][ T24] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 165.849626][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.860284][ T24] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 165.874402][ T24] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.889771][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.897983][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.905024][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.912292][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.919563][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.926568][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.933639][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.940698][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.947859][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.954908][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.962035][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.969783][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.976877][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.983825][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.991824][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 165.998903][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.005921][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.013061][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.020120][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.027163][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.034116][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.041144][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.048297][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.055211][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.062195][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.072065][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.079059][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.086104][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.094203][ T5853] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 166.101125][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 166.107887][ T24] usb 5-1: config 1 interface 0 has no altsetting 1 [ 166.118246][ T24] usb 5-1: string descriptor 0 read error: -22 [ 166.125247][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.138563][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.151128][ T7752] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.179677][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 166.269472][ T7773] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.505'. [ 166.348835][ T5848] usb 2-1: USB disconnect, device number 22 [ 166.365689][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 166.494358][ T7782] NILFS (rnullb0): couldn't find nilfs on the device [ 166.715020][ T7790] netlink: 'syz.0.509': attribute type 4 has an invalid length. [ 166.857211][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 167.010833][ T7800] FAULT_INJECTION: forcing a failure. [ 167.010833][ T7800] name failslab, interval 1, probability 0, space 0, times 0 [ 167.029772][ T7800] CPU: 0 UID: 0 PID: 7800 Comm: syz.1.511 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 167.029803][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.029816][ T7800] Call Trace: [ 167.029824][ T7800] [ 167.029833][ T7800] dump_stack_lvl+0x189/0x250 [ 167.029867][ T7800] ? __pfx____ratelimit+0x10/0x10 [ 167.029899][ T7800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.029929][ T7800] ? __pfx__printk+0x10/0x10 [ 167.029961][ T7800] ? __pfx___might_resched+0x10/0x10 [ 167.029987][ T7800] ? fs_reclaim_acquire+0x7d/0x100 [ 167.030019][ T7800] should_fail_ex+0x414/0x560 [ 167.030051][ T7800] should_failslab+0xa8/0x100 [ 167.030078][ T7800] __kmalloc_noprof+0xcb/0x4f0 [ 167.030099][ T7800] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 167.030123][ T7800] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 167.030156][ T7800] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 167.030190][ T7800] genl_family_rcv_msg_doit+0xb8/0x300 [ 167.030223][ T7800] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 167.030251][ T7800] ? rcu_is_watching+0x15/0xb0 [ 167.030281][ T7800] ? apparmor_capable+0x137/0x1b0 [ 167.030308][ T7800] ? bpf_lsm_capable+0x9/0x20 [ 167.030330][ T7800] ? security_capable+0x7e/0x2e0 [ 167.030365][ T7800] genl_rcv_msg+0x60e/0x790 [ 167.030394][ T7800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.030415][ T7800] ? ref_tracker_free+0x63a/0x7d0 [ 167.030441][ T7800] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 167.030464][ T7800] ? __pfx_nl80211_wiphy_netns+0x10/0x10 [ 167.030491][ T7800] ? __pfx_nl80211_post_doit+0x10/0x10 [ 167.030516][ T7800] ? __pfx_ref_tracker_free+0x10/0x10 [ 167.030565][ T7800] netlink_rcv_skb+0x205/0x470 [ 167.030599][ T7800] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.030624][ T7800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.030673][ T7800] ? down_read+0x1ad/0x2e0 [ 167.030696][ T7800] genl_rcv+0x28/0x40 [ 167.030717][ T7800] netlink_unicast+0x759/0x8e0 [ 167.030758][ T7800] netlink_sendmsg+0x805/0xb30 [ 167.030800][ T7800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.030835][ T7800] ? aa_sock_msg_perm+0xf1/0x1d0 [ 167.030867][ T7800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.030896][ T7800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.030928][ T7800] __sock_sendmsg+0x219/0x270 [ 167.030961][ T7800] ____sys_sendmsg+0x505/0x830 [ 167.030991][ T7800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.031024][ T7800] ? import_iovec+0x74/0xa0 [ 167.031050][ T7800] ___sys_sendmsg+0x21f/0x2a0 [ 167.031073][ T7800] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.031134][ T7800] ? __fget_files+0x2a/0x420 [ 167.031163][ T7800] ? __fget_files+0x3a0/0x420 [ 167.031204][ T7800] __x64_sys_sendmsg+0x19b/0x260 [ 167.031231][ T7800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.031266][ T7800] ? __pfx_ksys_write+0x10/0x10 [ 167.031289][ T7800] ? rcu_is_watching+0x15/0xb0 [ 167.031321][ T7800] ? do_syscall_64+0xbe/0x3b0 [ 167.031356][ T7800] do_syscall_64+0xfa/0x3b0 [ 167.031385][ T7800] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.031413][ T7800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.031434][ T7800] ? clear_bhb_loop+0x60/0xb0 [ 167.031459][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.031480][ T7800] RIP: 0033:0x7fa6e318e9a9 [ 167.031498][ T7800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.031516][ T7800] RSP: 002b:00007fa6e3fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.031614][ T7800] RAX: ffffffffffffffda RBX: 00007fa6e33b5fa0 RCX: 00007fa6e318e9a9 [ 167.031638][ T7800] RDX: 0000000000044002 RSI: 0000200000000240 RDI: 0000000000000003 [ 167.031651][ T7800] RBP: 00007fa6e3fce090 R08: 0000000000000000 R09: 0000000000000000 [ 167.031663][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.031674][ T7800] R13: 0000000000000000 R14: 00007fa6e33b5fa0 R15: 00007ffd0ef62a28 [ 167.031707][ T7800] [ 167.040149][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 167.056866][ T5893] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 167.081929][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.290839][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 167.445880][ T5930] usb 5-1: USB disconnect, device number 6 [ 167.465143][ T5893] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 167.536742][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.549983][ T24] usb 3-1: Product: syz [ 167.569676][ T5893] usb 1-1: Product: syz [ 167.571176][ T24] usb 3-1: Manufacturer: syz [ 167.573894][ T5893] usb 1-1: Manufacturer: syz [ 167.573913][ T5893] usb 1-1: SerialNumber: syz [ 167.607650][ T5893] usb 1-1: config 0 descriptor?? [ 167.619408][ T24] usb 3-1: SerialNumber: syz [ 167.625331][ T5893] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 167.660082][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 167.680074][ T981] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 167.818053][ T5893] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 167.847455][ T5893] visor 1-1:0.0: probe with driver visor failed with error -5 [ 167.939323][ T24] usb 3-1: USB disconnect, device number 19 [ 168.022072][ T7795] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 168.037611][ T7795] VFS: Can't find a romfs filesystem on dev rnullb0. [ 168.037611][ T7795] [ 168.050470][ T5930] usb 1-1: USB disconnect, device number 20 [ 168.246828][ T5893] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 168.402726][ T5893] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 168.436810][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.468590][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.480025][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 168.508084][ T5893] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 168.526654][ T5893] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 168.535076][ T5893] usb 5-1: Manufacturer: syz [ 168.564095][ T5893] usb 5-1: config 0 descriptor?? [ 168.714231][ T981] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 168.738031][ T981] ath9k_htc: Failed to initialize the device [ 168.772089][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 168.996347][ T5893] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 169.037158][ T5893] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 169.198816][ T5893] usb 5-1: USB disconnect, device number 7 [ 169.238649][ T24] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 169.413266][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.432273][ T24] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 169.446588][ T24] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.460639][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 169.467670][ T24] usb 3-1: config 1 interface 0 has no altsetting 1 [ 169.479374][ T24] usb 3-1: string descriptor 0 read error: -22 [ 169.485698][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.494933][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.510376][ T7851] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.524312][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 169.586637][ T5848] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 169.746543][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 169.764699][ T5848] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 169.786290][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.803783][ T5848] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 169.816671][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.827312][ T7870] hpfs: Bad magic ... probably not HPFS [ 169.846228][ T5848] usb 2-1: config 0 descriptor?? [ 170.434096][ T5900] usb 3-1: USB disconnect, device number 20 [ 170.572609][ T7886] trusted_key: encrypted_key: insufficient parameters specified [ 170.669114][ T7886] could not allocate digest TFM handle blake2s-128-arm [ 170.703541][ T7894] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 170.711056][ T7894] VFS: Can't find a romfs filesystem on dev rnullb0. [ 170.711056][ T7894] [ 171.816346][ T5893] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 171.982325][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.992762][ T5893] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 172.004202][ T5893] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.017944][ T5893] usb 5-1: config 1 interface 0 has no altsetting 0 [ 172.024588][ T5893] usb 5-1: config 1 interface 0 has no altsetting 1 [ 172.040010][ T5893] usb 5-1: string descriptor 0 read error: -22 [ 172.048773][ T5893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.059436][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.078908][ T7914] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 172.092694][ T5893] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 172.106412][ T5900] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 172.158852][ T7922] binder: 7920:7922 ioctl c018620b 0 returned -14 [ 172.266159][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 172.273539][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.282311][ T7926] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 172.285516][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.297113][ T7926] UDF-fs: Scanning with blocksize 4096 failed [ 172.324979][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.361790][ T5900] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.381325][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.442001][ T5848] usbhid 2-1:0.0: can't add hid device: -71 [ 172.456485][ T5848] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 172.470519][ T5900] usb 3-1: config 0 descriptor?? [ 172.474051][ T5848] usb 2-1: USB disconnect, device number 23 [ 172.635692][ T7935] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 172.956683][ T5848] usb 5-1: USB disconnect, device number 8 [ 173.178366][ T5900] usbhid 3-1:0.0: can't add hid device: -71 [ 173.184735][ T5900] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 173.200960][ T5900] usb 3-1: USB disconnect, device number 21 [ 174.585950][ T5848] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 174.635916][ T5930] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 174.687076][ T5900] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 174.729232][ T5848] usb 5-1: device descriptor read/64, error -71 [ 174.797749][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 174.804773][ T5930] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 174.816795][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.823573][ T5930] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 174.837022][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.848598][ T5930] usb 1-1: config 0 descriptor?? [ 174.857791][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 174.879766][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.902484][ T5900] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 174.927413][ T5900] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 174.939985][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.948119][ T5900] usb 3-1: Product: syz [ 174.952453][ T5900] usb 3-1: Manufacturer: syz [ 174.960135][ T5900] usb 3-1: SerialNumber: syz [ 174.965885][ T5848] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 175.116210][ T5848] usb 5-1: device descriptor read/64, error -71 [ 175.180286][ T7965] autofs4:pid:7965:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 175.195764][ T7965] autofs4:pid:7965:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 175.216348][ T5900] kobil_sct 3-1:3.0: required endpoints missing [ 175.234378][ T5900] usb 3-1: USB disconnect, device number 22 [ 175.236642][ T5848] usb usb5-port1: attempt power cycle [ 175.595898][ T5848] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 175.626683][ T5848] usb 5-1: device descriptor read/8, error -71 [ 175.835716][ T5900] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 175.906486][ T5848] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 175.949557][ T5848] usb 5-1: device descriptor read/8, error -71 [ 175.989255][ T5900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 175.998864][ T5900] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 176.024844][ T5900] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.055736][ T5900] usb 2-1: config 1 interface 0 has no altsetting 0 [ 176.063909][ T5900] usb 2-1: config 1 interface 0 has no altsetting 1 [ 176.078055][ T5848] usb usb5-port1: unable to enumerate USB device [ 176.083425][ T5900] usb 2-1: string descriptor 0 read error: -22 [ 176.092857][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.105267][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.123777][ T7990] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 176.152754][ T5900] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 176.440139][ T981] usb 2-1: USB disconnect, device number 24 [ 176.638897][ T5848] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 176.806675][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 176.815293][ T5848] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 176.824560][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.832746][ T5848] usb 3-1: Product: syz [ 176.837110][ T5848] usb 3-1: Manufacturer: syz [ 176.841779][ T5848] usb 3-1: SerialNumber: syz [ 176.850260][ T5848] usb 3-1: config 0 descriptor?? [ 176.860082][ T5848] gspca_main: sq930x-2.14.0 probing 2770:930c [ 177.063843][ T8005] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 177.071349][ T8005] VFS: Can't find a romfs filesystem on dev rnullb0. [ 177.071349][ T8005] [ 177.448815][ T8010] netlink: 56 bytes leftover after parsing attributes in process `syz.4.561'. [ 177.508997][ T5930] usbhid 1-1:0.0: can't add hid device: -71 [ 177.526410][ T5930] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 177.555004][ T5930] usb 1-1: USB disconnect, device number 21 [ 177.673415][ T8003] FAT-fs (rnullb0): bogus number of reserved sectors [ 177.691071][ T8003] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 177.719702][ T5848] gspca_sq930x: ucbus_write failed -71 [ 177.846669][ T8033] FAULT_INJECTION: forcing a failure. [ 177.846669][ T8033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.860415][ T8033] CPU: 1 UID: 0 PID: 8033 Comm: syz.1.566 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 177.860445][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.860458][ T8033] Call Trace: [ 177.860466][ T8033] [ 177.860475][ T8033] dump_stack_lvl+0x189/0x250 [ 177.860508][ T8033] ? __pfx____ratelimit+0x10/0x10 [ 177.860539][ T8033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.860568][ T8033] ? __pfx__printk+0x10/0x10 [ 177.860597][ T8033] ? __might_fault+0xb0/0x130 [ 177.860631][ T8033] should_fail_ex+0x414/0x560 [ 177.860661][ T8033] _copy_from_iter+0x1db/0x16f0 [ 177.860684][ T8033] ? __lock_acquire+0xab9/0xd20 [ 177.860723][ T8033] ? __pfx__copy_from_iter+0x10/0x10 [ 177.860771][ T8033] tun_get_user+0x219/0x3e20 [ 177.860812][ T8033] ? aa_file_perm+0x13e/0x11b0 [ 177.860834][ T8033] ? aa_file_perm+0x3ed/0x11b0 [ 177.860853][ T8033] ? __pfx_tun_get_user+0x10/0x10 [ 177.860874][ T8033] ? _parse_integer_limit+0x1ae/0x1f0 [ 177.860913][ T8033] ? __lock_acquire+0xab9/0xd20 [ 177.860942][ T8033] ? ref_tracker_alloc+0x318/0x460 [ 177.860969][ T8033] ? __lock_acquire+0xab9/0xd20 [ 177.860993][ T8033] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 177.861027][ T8033] ? tun_get+0x1c/0x2f0 [ 177.861053][ T8033] ? tun_get+0x1c/0x2f0 [ 177.861074][ T8033] ? tun_get+0x1c/0x2f0 [ 177.861099][ T8033] tun_chr_write_iter+0x113/0x200 [ 177.861123][ T8033] vfs_write+0x54b/0xa90 [ 177.861155][ T8033] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 177.861176][ T8033] ? __pfx_vfs_write+0x10/0x10 [ 177.861209][ T8033] ? __fget_files+0x2a/0x420 [ 177.861248][ T8033] ksys_write+0x145/0x250 [ 177.861278][ T8033] ? __pfx_ksys_write+0x10/0x10 [ 177.861299][ T8033] ? rcu_is_watching+0x15/0xb0 [ 177.861332][ T8033] ? do_syscall_64+0xbe/0x3b0 [ 177.861366][ T8033] do_syscall_64+0xfa/0x3b0 [ 177.861393][ T8033] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.861417][ T8033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.861434][ T8033] ? clear_bhb_loop+0x60/0xb0 [ 177.861455][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.861485][ T8033] RIP: 0033:0x7fa6e318e9a9 [ 177.861503][ T8033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.861519][ T8033] RSP: 002b:00007fa6e3fce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.861538][ T8033] RAX: ffffffffffffffda RBX: 00007fa6e33b5fa0 RCX: 00007fa6e318e9a9 [ 177.861550][ T8033] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003 [ 177.861561][ T8033] RBP: 00007fa6e3fce090 R08: 0000000000000000 R09: 0000000000000000 [ 177.861572][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.861583][ T8033] R13: 0000000000000000 R14: 00007fa6e33b5fa0 R15: 00007ffd0ef62a28 [ 177.861613][ T8033] [ 178.141389][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.169924][ T5848] gspca_sq930x: Sensor ov9630 not yet treated [ 178.176873][ T5848] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 178.197279][ T5848] usb 3-1: USB disconnect, device number 23 [ 178.357748][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 178.478871][ T8046] vxfs: WRONG superblock magic 00000000 at 1 [ 178.487157][ T8046] vxfs: WRONG superblock magic 00000000 at 8 [ 178.493205][ T8046] vxfs: can't find superblock. [ 178.615546][ T5848] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 178.735653][ T5930] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 178.789381][ T5848] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.799016][ T5848] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 178.813064][ T5848] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.832980][ T5848] usb 5-1: config 1 interface 0 has no altsetting 0 [ 178.841012][ T5848] usb 5-1: config 1 interface 0 has no altsetting 1 [ 178.862584][ T5848] usb 5-1: string descriptor 0 read error: -22 [ 178.877981][ T5848] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.885378][ T5893] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 178.887463][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.915359][ T5930] usb 2-1: Invalid ep0 maxpacket: 32 [ 178.924851][ T8038] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.938620][ T5848] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 179.035384][ T5893] usb 3-1: device descriptor read/64, error -71 [ 179.055386][ T5930] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 179.208349][ T5930] usb 2-1: Invalid ep0 maxpacket: 32 [ 179.224350][ T5930] usb usb2-port1: attempt power cycle [ 179.276608][ T5893] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 179.302030][ T5848] usb 5-1: USB disconnect, device number 13 [ 179.425426][ T5893] usb 3-1: device descriptor read/64, error -71 [ 179.535773][ T5893] usb usb3-port1: attempt power cycle [ 179.565289][ T5930] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 179.586172][ T5930] usb 2-1: Invalid ep0 maxpacket: 32 [ 179.605273][ T5913] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 179.715430][ T5930] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 179.736031][ T5930] usb 2-1: Invalid ep0 maxpacket: 32 [ 179.741691][ T5930] usb usb2-port1: unable to enumerate USB device [ 179.775292][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 179.784245][ T5913] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 179.795438][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 179.802178][ T5913] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 179.813286][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.828091][ T5913] usb 1-1: config 0 descriptor?? [ 179.895400][ T5893] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 179.936508][ T5893] usb 3-1: device descriptor read/8, error -71 [ 180.175392][ T5893] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 180.196159][ T5893] usb 3-1: device descriptor read/8, error -71 [ 180.297794][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 180.320394][ T5893] usb usb3-port1: unable to enumerate USB device [ 180.458860][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.468233][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.479493][ T24] usb 5-1: config 0 descriptor?? [ 180.491739][ T24] cp210x 5-1:0.0: cp210x converter detected [ 180.890456][ T24] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 180.909100][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 181.103472][ T8054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.112463][ T8054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.307354][ T5930] usb 5-1: USB disconnect, device number 14 [ 181.321241][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 181.340055][ T5930] cp210x 5-1:0.0: device disconnected [ 181.543794][ T8059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.559171][ T8059] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 181.871974][ T8070] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 182.335087][ T5893] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 182.365096][ T5930] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 182.457026][ T5913] usbhid 1-1:0.0: can't add hid device: -71 [ 182.466936][ T5913] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 182.484367][ T5913] usb 1-1: USB disconnect, device number 22 [ 182.501011][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.514777][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 182.532984][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.554668][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.563971][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 182.569200][ T5930] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 182.596322][ T5893] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.609634][ T5930] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.616495][ T5893] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.627516][ T5930] usb 3-1: config 1 interface 0 has no altsetting 0 [ 182.643720][ T5893] usb 5-1: Manufacturer: syz [ 182.656581][ T5930] usb 3-1: config 1 interface 0 has no altsetting 1 [ 182.662048][ T5893] usb 5-1: config 0 descriptor?? [ 182.668786][ T5930] usb 3-1: string descriptor 0 read error: -22 [ 182.683308][ T5930] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.718178][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.744657][ T8073] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 182.773956][ T5930] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 182.900909][ T8074] veth0_vlan: entered allmulticast mode [ 183.052237][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.061718][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.142540][ T5900] usb 3-1: USB disconnect, device number 28 [ 183.317633][ T5893] rc_core: IR keymap rc-hauppauge not found [ 183.323695][ T5893] Registered IR keymap rc-empty [ 183.345187][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.368779][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.399785][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 183.416237][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 183.436111][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.462444][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.484904][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.519917][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.555751][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.576476][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.618867][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.644982][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.699938][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.725173][ T5893] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.749384][ T5893] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 183.767005][ T5893] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 183.847821][ T5893] usb 5-1: USB disconnect, device number 15 [ 184.353926][ T8133] syz.1.601: attempt to access beyond end of device [ 184.353926][ T8133] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 184.371488][ T8134] syz.1.601: attempt to access beyond end of device [ 184.371488][ T8134] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 184.727566][ T5893] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 184.835125][ T5848] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 184.897304][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.906618][ T5893] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 184.917501][ T5893] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.930458][ T5893] usb 2-1: config 1 interface 0 has no altsetting 0 [ 184.938544][ T5893] usb 2-1: config 1 interface 0 has no altsetting 1 [ 184.949834][ T5893] usb 2-1: string descriptor 0 read error: -22 [ 184.956855][ T5893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.966082][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.979274][ T8144] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.990913][ T5893] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 185.010610][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 185.017797][ T5848] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 185.027798][ T5848] usb 3-1: config 0 has no interface number 0 [ 185.035683][ T5848] usb 3-1: config 0 interface 125 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.048156][ T5848] usb 3-1: config 0 interface 125 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.059359][ T5848] usb 3-1: config 0 interface 125 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 185.073086][ T5848] usb 3-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=2e.0f [ 185.082269][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.090364][ T5848] usb 3-1: Product: syz [ 185.094631][ T5848] usb 3-1: Manufacturer: syz [ 185.099256][ T5848] usb 3-1: SerialNumber: syz [ 185.106883][ T5848] usb 3-1: config 0 descriptor?? [ 185.112828][ T8148] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 185.126128][ T5848] usb 3-1: Found UVC 0.00 device syz (3277:009e) [ 185.132538][ T5848] usb 3-1: No valid video chain found. [ 185.270535][ T5848] usb 2-1: USB disconnect, device number 29 [ 185.866171][ T8154] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.607'. [ 186.188923][ T8159] netlink: 'syz.2.609': attribute type 10 has an invalid length. [ 186.200823][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.211018][ T8159] bridge_slave_1: left allmulticast mode [ 186.217943][ T8159] bridge_slave_1: left promiscuous mode [ 186.223852][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.239306][ T8159] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 186.359688][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.370908][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.695160][ T8154] orangefs_mount: mount request failed with -4 [ 186.831988][ T8179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.842606][ T8179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.901263][ T8183] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 186.911989][ T8183] VFS: Can't find a romfs filesystem on dev rnullb0. [ 186.911989][ T8183] [ 187.021455][ T8185] binder: 8184:8185 unknown command 0 [ 187.027956][ T8185] binder: 8184:8185 ioctl c0306201 2000000003c0 returned -22 [ 187.034409][ T5930] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 187.181449][ T8187] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.199228][ T5930] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.207888][ T8187] FAT-fs (rnullb0): bogus number of reserved sectors [ 187.218138][ T8187] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 187.218660][ T5930] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 187.244619][ T5930] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.253978][ T8187] netlink: zone id is out of range [ 187.263501][ T5930] usb 1-1: config 1 interface 0 has no altsetting 0 [ 187.270529][ T5930] usb 1-1: config 1 interface 0 has no altsetting 1 [ 187.287020][ T5930] usb 1-1: string descriptor 0 read error: -22 [ 187.304037][ T5930] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.319128][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.331374][ T8174] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.365688][ T5930] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 187.824270][ T5930] usb 1-1: USB disconnect, device number 23 [ 188.134354][ T5848] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 188.135682][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.174749][ T8210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.184358][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.205127][ T8210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.316806][ T5848] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 188.341579][ T5848] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 188.371437][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.382769][ T5848] usb 5-1: Product: syz [ 188.388115][ T5848] usb 5-1: Manufacturer: syz [ 188.412769][ T5848] usb 5-1: SerialNumber: syz [ 188.697586][ T8212] netlink: 256 bytes leftover after parsing attributes in process `syz.1.626'. [ 188.860801][ T8216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.901697][ T8216] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 188.912666][ T8216] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 189.822642][ T8242] netlink: 'syz.1.633': attribute type 10 has an invalid length. [ 189.869421][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.904923][ T8242] bridge_slave_1: left allmulticast mode [ 189.937740][ T8242] bridge_slave_1: left promiscuous mode [ 189.963297][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.066873][ T8242] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 190.129229][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.139506][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.347594][ T981] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 190.517728][ T981] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.540635][ T981] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 190.560941][ T981] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.595866][ T981] usb 1-1: config 1 interface 0 has no altsetting 0 [ 190.616261][ T981] usb 1-1: config 1 interface 0 has no altsetting 1 [ 190.640778][ T981] usb 1-1: string descriptor 0 read error: -22 [ 190.650574][ T981] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.679255][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.713357][ T8247] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 190.736532][ T981] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 191.002207][ T5848] usb 5-1: selecting invalid altsetting 1 [ 191.011187][ T5848] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 191.011330][ T5848] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 191.064901][ T5848] usb 5-1: USB disconnect, device number 16 [ 191.132647][ T8273] syz.4.643: attempt to access beyond end of device [ 191.132647][ T8273] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 191.146859][ T8273] vxfs: unable to read disk superblock at 1 [ 191.153499][ T8273] syz.4.643: attempt to access beyond end of device [ 191.153499][ T8273] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 191.171174][ T8273] vxfs: unable to read disk superblock at 8 [ 191.172026][ T8274] netlink: 68 bytes leftover after parsing attributes in process `syz.1.642'. [ 191.180157][ T8273] vxfs: can't find superblock. [ 191.217723][ T981] usb 1-1: USB disconnect, device number 24 [ 191.229614][ T8274] hpfs: Bad magic ... probably not HPFS [ 191.343993][ T8280] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 191.352021][ T8280] UDF-fs: Scanning with blocksize 4096 failed [ 191.447898][ T8283] netlink: 830 bytes leftover after parsing attributes in process `syz.4.645'. [ 191.515377][ T8292] batadv_slave_1: entered promiscuous mode [ 191.522838][ T8292] netlink: 'syz.1.647': attribute type 10 has an invalid length. [ 191.537825][ T8292] macvlan0: entered allmulticast mode [ 191.551771][ T8292] veth1_vlan: entered allmulticast mode [ 191.562621][ T8292] team0: Port device macvlan0 added [ 191.572224][ T8292] qnx4: no qnx4 filesystem (no root dir). [ 191.579577][ T8291] batadv_slave_1: left promiscuous mode [ 191.922775][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.931839][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.942638][ T8305] hpfs: Bad magic ... probably not HPFS [ 192.044804][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 192.125888][ T5893] IPVS: starting estimator thread 0... [ 192.155511][ T981] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 192.203975][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 192.216541][ T10] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 192.226400][ T8309] IPVS: using max 30 ests per chain, 72000 per kthread [ 192.239370][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.254729][ T10] usb 2-1: config 0 descriptor?? [ 192.263590][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 192.294504][ T981] usb 1-1: device descriptor read/64, error -71 [ 192.387494][ T8311] Can't find a SQUASHFS superblock on rnullb0 [ 192.468106][ T8315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.533889][ T981] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 192.673859][ T981] usb 1-1: device descriptor read/64, error -71 [ 192.691111][ T10] gspca_vc032x: reg_w err -71 [ 192.696700][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.702277][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.709195][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.716650][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.721986][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.727493][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.732938][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.738805][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.744315][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.749632][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.754992][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.760317][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.765778][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.771359][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.776753][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.782125][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.787464][ T981] usb usb1-port1: attempt power cycle [ 192.797743][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.803158][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 192.808641][ T10] gspca_vc032x: Unknown sensor... [ 192.813820][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 192.828517][ T10] usb 2-1: USB disconnect, device number 30 [ 193.123922][ T981] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 193.154760][ T981] usb 1-1: device descriptor read/8, error -71 [ 193.289930][ T8326] Can't find a SQUASHFS superblock on rnullb0 [ 193.393654][ T981] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 193.415592][ T981] usb 1-1: device descriptor read/8, error -71 [ 193.503672][ T5848] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 193.544098][ T981] usb usb1-port1: unable to enumerate USB device [ 193.600141][ T8335] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.622063][ T8335] overlayfs: failed lookup in lower (/, name='file1', err=-66): unsupported object type [ 193.629364][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.642128][ T8335] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 193.657628][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.672040][ T8335] pim6reg: entered allmulticast mode [ 193.673708][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 193.685983][ T8335] pim6reg: left allmulticast mode [ 193.686096][ T5848] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 193.705675][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0 [ 193.712374][ T5848] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 193.725422][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.754166][ T5848] usb 2-1: config 0 descriptor?? [ 194.399089][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 194.410417][ T8346] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 194.418193][ T8346] UDF-fs: Scanning with blocksize 4096 failed [ 194.469860][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.476625][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.709762][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.723279][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.734596][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.743822][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.985403][ T8358] netlink: 76 bytes leftover after parsing attributes in process `syz.0.672'. [ 195.702236][ T8382] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 195.710434][ T8382] netlink: 208 bytes leftover after parsing attributes in process `syz.2.679'. [ 195.722364][ T8382] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 195.731437][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.679'. [ 195.744048][ T8382] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 195.944868][ T8384] fuse: Unknown parameter 'fhÔÿ à' [ 196.136668][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.145807][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.366702][ T5848] usbhid 2-1:0.0: can't add hid device: -71 [ 196.393333][ T5848] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 196.497970][ T5848] usb 2-1: USB disconnect, device number 31 [ 197.172867][ T8412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.185450][ T8409] gfs2: not a GFS2 filesystem [ 197.456567][ T8420] sctp: failed to load transform for md5: -2 [ 197.694421][ T8429] syz.4.695: attempt to access beyond end of device [ 197.694421][ T8429] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 197.721844][ T8431] FAT-fs (rnullb0): bogus number of reserved sectors [ 197.734669][ T8429] syz.4.695: attempt to access beyond end of device [ 197.734669][ T8429] loop4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 197.751421][ T8431] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 197.752912][ T8429] Mount JFS Failure: -5 [ 197.763426][ T8429] jfs_mount failed w/return code = -5 [ 197.896943][ T8440] virtio-fs: tag not found [ 198.029118][ T8443] /dev/rnullb0: Can't open blockdev [ 198.352990][ T24] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 198.508298][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 198.528643][ T24] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 198.553793][ T24] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.581748][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 198.593125][ T24] usb 1-1: config 1 interface 0 has no altsetting 1 [ 198.604021][ T24] usb 1-1: string descriptor 0 read error: -22 [ 198.614915][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.662968][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.698202][ T8444] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.716269][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 198.878598][ T8454] /dev/rnullb0: Can't open blockdev [ 199.163188][ T5900] usb 1-1: USB disconnect, device number 29 [ 199.207451][ T8458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.382471][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.391613][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.569175][ T8480] /dev/rnullb0: Can't open blockdev [ 199.575529][ T8478] ufs: You didn't specify the type of your ufs filesystem [ 199.575529][ T8478] [ 199.575529][ T8478] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 199.575529][ T8478] [ 199.575529][ T8478] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 199.606610][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.667806][ T8478] ufs: ufstype=old is supported read-only [ 199.733639][ T8478] syz.4.712: attempt to access beyond end of device [ 199.733639][ T8478] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 200.371472][ T8506] dns_resolver: Unsupported server list version (101) [ 200.654754][ T8514] /dev/rnullb0: Can't open blockdev [ 201.097447][ T8526] mkiss: ax0: crc mode is auto. [ 201.212863][ T10] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 201.289551][ T8534] netlink: 'syz.1.730': attribute type 10 has an invalid length. [ 201.329551][ T8534] netlink: 2 bytes leftover after parsing attributes in process `syz.1.730'. [ 201.365854][ T8534] bond0: entered promiscuous mode [ 201.370958][ T8534] bond_slave_0: entered promiscuous mode [ 201.393621][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 201.417952][ T8534] bond_slave_1: entered promiscuous mode [ 201.425482][ T8534] bridge_slave_1: entered promiscuous mode [ 201.432216][ T8534] bridge0: port 2(bond0) entered blocking state [ 201.438994][ T10] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 201.449677][ T10] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.472930][ T8534] bridge0: port 2(bond0) entered disabled state [ 201.489573][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 201.496658][ T8534] bond0: entered allmulticast mode [ 201.498838][ T8540] hfs: can't find a HFS filesystem on dev rnullb0 [ 201.506551][ T10] usb 5-1: config 1 interface 0 has no altsetting 1 [ 201.529621][ T8534] bond_slave_0: entered allmulticast mode [ 201.530097][ T8543] hfs: can't find a HFS filesystem on dev rnullb0 [ 201.545555][ T10] usb 5-1: string descriptor 0 read error: -22 [ 201.562224][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.571641][ T8534] bond_slave_1: entered allmulticast mode [ 201.582836][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.592774][ T8534] bridge_slave_1: entered allmulticast mode [ 201.615914][ T8521] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.630659][ T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 201.647663][ T8534] bridge0: port 2(bond0) entered blocking state [ 201.654138][ T8534] bridge0: port 2(bond0) entered forwarding state [ 201.803703][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.831537][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.041381][ T10] usb 5-1: USB disconnect, device number 17 [ 202.207682][ T8556] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 202.410169][ T8559] gfs2: not a GFS2 filesystem [ 202.721031][ T8570] /dev/sg0: Can't lookup blockdev [ 202.729099][ T8570] /dev/sg0: Can't lookup blockdev [ 202.744750][ T8573] hpfs: Bad magic ... probably not HPFS [ 202.869283][ T8579] binder: 8578:8579 ioctl 4008ae6a 200000000980 returned -22 [ 202.907614][ T8582] ./cgroup: Can't lookup blockdev [ 202.947287][ T8579] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 203.050988][ T8592] NILFS (rnullb0): couldn't find nilfs on the device [ 203.094186][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.750'. [ 203.192605][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 203.352429][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 203.359792][ T24] usb 2-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 203.369972][ T24] usb 2-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 203.379822][ T24] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 203.388969][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.522475][ T981] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 203.608708][ T24] usb 2-1: string descriptor 0 read error: -71 [ 203.623113][ T24] usb 2-1: Found UVC 0.00 device (2833:0201) [ 203.630343][ T24] usb 2-1: No valid video chain found. [ 203.640934][ T24] usb 2-1: USB disconnect, device number 32 [ 203.685212][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.695565][ T981] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 203.708569][ T981] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.722121][ T981] usb 5-1: config 1 interface 0 has no altsetting 0 [ 203.729107][ T981] usb 5-1: config 1 interface 0 has no altsetting 1 [ 203.740113][ T981] usb 5-1: string descriptor 0 read error: -22 [ 203.746794][ T981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.756315][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.769585][ T8598] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 203.782657][ T981] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 204.048763][ T24] usb 5-1: USB disconnect, device number 18 [ 204.411629][ T8613] NILFS (rnullb0): couldn't find nilfs on the device [ 204.578996][ T8621] Can't find a SQUASHFS superblock on rnullb0 [ 204.598956][ T8623] Can't find a SQUASHFS superblock on rnullb0 [ 204.726940][ T8625] netlink: 188 bytes leftover after parsing attributes in process `syz.2.762'. [ 204.954016][ T8636] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 204.960789][ T8636] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.980116][ T8636] vhci_hcd vhci_hcd.0: Device attached [ 204.994064][ T8637] vhci_hcd: connection closed [ 204.996494][ T59] vhci_hcd: stop threads [ 205.008495][ T59] vhci_hcd: release socket [ 205.014274][ T59] vhci_hcd: disconnect device [ 205.193450][ T8644] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 205.623681][ T981] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 205.800726][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.820561][ T981] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 205.842241][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 205.851022][ T981] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.864960][ T981] usb 2-1: config 1 interface 0 has no altsetting 0 [ 205.876531][ T981] usb 2-1: config 1 interface 0 has no altsetting 1 [ 205.881837][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.895540][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.904990][ T981] usb 2-1: string descriptor 0 read error: -22 [ 205.911438][ T981] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.922989][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.947752][ T8650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.968774][ T981] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 206.027012][ T8682] openvswitch: netlink: Flow key attr not present in new flow. [ 206.036745][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 206.049326][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.059820][ T24] usb 5-1: config 7 has an invalid interface number: 169 but max is 0 [ 206.073133][ T24] usb 5-1: config 7 has no interface number 0 [ 206.081840][ T24] usb 5-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=79.99 [ 206.094341][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.102710][ T24] usb 5-1: Product: syz [ 206.107011][ T24] usb 5-1: Manufacturer: syz [ 206.111642][ T24] usb 5-1: SerialNumber: syz [ 206.270126][ T10] usb 2-1: USB disconnect, device number 33 [ 206.358820][ T24] usb 5-1: USB disconnect, device number 19 [ 206.418085][ T8688] omfs: Invalid superblock (0) [ 206.777954][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.789026][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.801828][ T8691] hfs: can't find a HFS filesystem on dev rnullb0 [ 206.977913][ T8701] /dev/rnullb0: Can't open blockdev [ 207.123815][ T8708] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 207.336683][ T8713] FAULT_INJECTION: forcing a failure. [ 207.336683][ T8713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.382360][ T8713] CPU: 1 UID: 0 PID: 8713 Comm: syz.4.791 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 207.382392][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.382406][ T8713] Call Trace: [ 207.382422][ T8713] [ 207.382431][ T8713] dump_stack_lvl+0x189/0x250 [ 207.382478][ T8713] ? __pfx____ratelimit+0x10/0x10 [ 207.382509][ T8713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.382537][ T8713] ? __pfx__printk+0x10/0x10 [ 207.382566][ T8713] ? __might_fault+0xb0/0x130 [ 207.382601][ T8713] should_fail_ex+0x414/0x560 [ 207.382633][ T8713] _copy_from_iter+0x1db/0x16f0 [ 207.382666][ T8713] ? __pfx__copy_from_iter+0x10/0x10 [ 207.382697][ T8713] ? sock_alloc_send_pskb+0x875/0x990 [ 207.382728][ T8713] ? __pfx__copy_from_iter+0x10/0x10 [ 207.382762][ T8713] ? page_copy_sane+0x16a/0x280 [ 207.382783][ T8713] copy_page_from_iter+0xdd/0x170 [ 207.382807][ T8713] skb_copy_datagram_from_iter+0x306/0x720 [ 207.382847][ T8713] tun_get_user+0x1691/0x3e20 [ 207.382887][ T8713] ? aa_file_perm+0x13e/0x11b0 [ 207.382908][ T8713] ? aa_file_perm+0x3ed/0x11b0 [ 207.382927][ T8713] ? __pfx_tun_get_user+0x10/0x10 [ 207.382948][ T8713] ? _parse_integer_limit+0x1ae/0x1f0 [ 207.382987][ T8713] ? __lock_acquire+0xab9/0xd20 [ 207.383018][ T8713] ? ref_tracker_alloc+0x318/0x460 [ 207.383044][ T8713] ? __lock_acquire+0xab9/0xd20 [ 207.383069][ T8713] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 207.383103][ T8713] ? tun_get+0x1c/0x2f0 [ 207.383130][ T8713] ? tun_get+0x1c/0x2f0 [ 207.383151][ T8713] ? tun_get+0x1c/0x2f0 [ 207.383176][ T8713] tun_chr_write_iter+0x113/0x200 [ 207.383202][ T8713] vfs_write+0x54b/0xa90 [ 207.383234][ T8713] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 207.383257][ T8713] ? __pfx_vfs_write+0x10/0x10 [ 207.383295][ T8713] ? __fget_files+0x2a/0x420 [ 207.383335][ T8713] ksys_write+0x145/0x250 [ 207.383365][ T8713] ? __pfx_ksys_write+0x10/0x10 [ 207.383389][ T8713] ? rcu_is_watching+0x15/0xb0 [ 207.383429][ T8713] ? do_syscall_64+0xbe/0x3b0 [ 207.383464][ T8713] do_syscall_64+0xfa/0x3b0 [ 207.383494][ T8713] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.383523][ T8713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.383543][ T8713] ? clear_bhb_loop+0x60/0xb0 [ 207.383568][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.383588][ T8713] RIP: 0033:0x7f6cacd8e9a9 [ 207.383614][ T8713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.383632][ T8713] RSP: 002b:00007f6cadce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.383661][ T8713] RAX: ffffffffffffffda RBX: 00007f6cacfb5fa0 RCX: 00007f6cacd8e9a9 [ 207.383677][ T8713] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003 [ 207.383690][ T8713] RBP: 00007f6cadce3090 R08: 0000000000000000 R09: 0000000000000000 [ 207.383703][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.383715][ T8713] R13: 0000000000000000 R14: 00007f6cacfb5fa0 R15: 00007ffdf5da8c08 [ 207.383747][ T8713] [ 207.690449][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.810574][ T8717] af_packet: tpacket_rcv: packet too big, clamped from 4300 to 4294967272. macoff=96 [ 207.834885][ T10] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 208.004597][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.014194][ T10] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 208.032306][ T10] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.099379][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 208.116932][ T10] usb 1-1: config 1 interface 0 has no altsetting 1 [ 208.160685][ T10] usb 1-1: string descriptor 0 read error: -22 [ 208.181935][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.204319][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.235866][ T8714] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.258833][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 208.277030][ T8729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.796'. [ 208.599693][ T8733] netlink: 192 bytes leftover after parsing attributes in process `syz.2.797'. [ 208.645553][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.654642][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.682624][ T981] usb 1-1: USB disconnect, device number 30 [ 208.737087][ T8735] netlink: 256 bytes leftover after parsing attributes in process `syz.1.798'. [ 208.999638][ T8742] XFS (rnullb0): Invalid superblock magic number [ 209.271521][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.305868][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.484677][ T8756] FAULT_INJECTION: forcing a failure. [ 209.484677][ T8756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.515576][ T8756] CPU: 1 UID: 0 PID: 8756 Comm: syz.4.804 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 209.515608][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.515621][ T8756] Call Trace: [ 209.515629][ T8756] [ 209.515637][ T8756] dump_stack_lvl+0x189/0x250 [ 209.515670][ T8756] ? __pfx____ratelimit+0x10/0x10 [ 209.515700][ T8756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.515729][ T8756] ? __pfx__printk+0x10/0x10 [ 209.515758][ T8756] ? __might_fault+0xb0/0x130 [ 209.515791][ T8756] should_fail_ex+0x414/0x560 [ 209.515822][ T8756] _copy_from_iter+0x1db/0x16f0 [ 209.515857][ T8756] ? __pfx__copy_from_iter+0x10/0x10 [ 209.515886][ T8756] ? sock_alloc_send_pskb+0x875/0x990 [ 209.515922][ T8756] ? __pfx__copy_from_iter+0x10/0x10 [ 209.515957][ T8756] ? page_copy_sane+0x16a/0x280 [ 209.515979][ T8756] copy_page_from_iter+0xdd/0x170 [ 209.516004][ T8756] skb_copy_datagram_from_iter+0x306/0x720 [ 209.516044][ T8756] tun_get_user+0x1691/0x3e20 [ 209.516084][ T8756] ? aa_file_perm+0x13e/0x11b0 [ 209.516104][ T8756] ? aa_file_perm+0x3ed/0x11b0 [ 209.516124][ T8756] ? __pfx_tun_get_user+0x10/0x10 [ 209.516144][ T8756] ? _parse_integer_limit+0x1ae/0x1f0 [ 209.516183][ T8756] ? __lock_acquire+0xab9/0xd20 [ 209.516212][ T8756] ? ref_tracker_alloc+0x318/0x460 [ 209.516238][ T8756] ? __lock_acquire+0xab9/0xd20 [ 209.516272][ T8756] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 209.516306][ T8756] ? tun_get+0x1c/0x2f0 [ 209.516333][ T8756] ? tun_get+0x1c/0x2f0 [ 209.516353][ T8756] ? tun_get+0x1c/0x2f0 [ 209.516379][ T8756] tun_chr_write_iter+0x113/0x200 [ 209.516405][ T8756] vfs_write+0x54b/0xa90 [ 209.516437][ T8756] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 209.516459][ T8756] ? __pfx_vfs_write+0x10/0x10 [ 209.516497][ T8756] ? __fget_files+0x2a/0x420 [ 209.516537][ T8756] ksys_write+0x145/0x250 [ 209.516566][ T8756] ? __pfx_ksys_write+0x10/0x10 [ 209.516590][ T8756] ? rcu_is_watching+0x15/0xb0 [ 209.516621][ T8756] ? do_syscall_64+0xbe/0x3b0 [ 209.516656][ T8756] do_syscall_64+0xfa/0x3b0 [ 209.516689][ T8756] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.516718][ T8756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.516739][ T8756] ? clear_bhb_loop+0x60/0xb0 [ 209.516764][ T8756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.516783][ T8756] RIP: 0033:0x7f6cacd8e9a9 [ 209.516802][ T8756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.516820][ T8756] RSP: 002b:00007f6cadce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.516842][ T8756] RAX: ffffffffffffffda RBX: 00007f6cacfb5fa0 RCX: 00007f6cacd8e9a9 [ 209.516856][ T8756] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003 [ 209.516869][ T8756] RBP: 00007f6cadce3090 R08: 0000000000000000 R09: 0000000000000000 [ 209.516881][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.516892][ T8756] R13: 0000000000000000 R14: 00007f6cacfb5fa0 R15: 00007ffdf5da8c08 [ 209.516923][ T8756] [ 209.817470][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.248504][ T8762] /dev/rnullb0: Can't open blockdev [ 210.362631][ T8774] FAT-fs (rnullb0): bogus number of reserved sectors [ 210.411557][ T8774] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 210.578610][ T8787] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 210.891523][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.900264][ T8798] FAULT_INJECTION: forcing a failure. [ 210.900264][ T8798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.931546][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.0.816 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 210.931578][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.931591][ T8798] Call Trace: [ 210.931599][ T8798] [ 210.931595][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.931608][ T8798] dump_stack_lvl+0x189/0x250 [ 210.931642][ T8798] ? __pfx____ratelimit+0x10/0x10 [ 210.931670][ T8798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.931700][ T8798] ? __pfx__printk+0x10/0x10 [ 210.931734][ T8798] ? __might_fault+0xb0/0x130 [ 210.931772][ T8798] should_fail_ex+0x414/0x560 [ 210.931808][ T8798] _copy_from_iter+0x1db/0x16f0 [ 210.931845][ T8798] ? __pfx__copy_from_iter+0x10/0x10 [ 210.931879][ T8798] ? sock_alloc_send_pskb+0x875/0x990 [ 210.931915][ T8798] ? __pfx__copy_from_iter+0x10/0x10 [ 210.931953][ T8798] ? page_copy_sane+0x16a/0x280 [ 210.931977][ T8798] copy_page_from_iter+0xdd/0x170 [ 210.932005][ T8798] skb_copy_datagram_from_iter+0x306/0x720 [ 210.932047][ T8798] tun_get_user+0x1691/0x3e20 [ 210.932092][ T8798] ? aa_file_perm+0x13e/0x11b0 [ 210.932116][ T8798] ? aa_file_perm+0x3ed/0x11b0 [ 210.932137][ T8798] ? __pfx_tun_get_user+0x10/0x10 [ 210.932159][ T8798] ? _parse_integer_limit+0x1ae/0x1f0 [ 210.932202][ T8798] ? __lock_acquire+0xab9/0xd20 [ 210.932243][ T8798] ? ref_tracker_alloc+0x318/0x460 [ 210.932272][ T8798] ? __lock_acquire+0xab9/0xd20 [ 210.932300][ T8798] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 210.932337][ T8798] ? tun_get+0x1c/0x2f0 [ 210.932368][ T8798] ? tun_get+0x1c/0x2f0 [ 210.932390][ T8798] ? tun_get+0x1c/0x2f0 [ 210.932419][ T8798] tun_chr_write_iter+0x113/0x200 [ 210.932446][ T8798] vfs_write+0x54b/0xa90 [ 210.932483][ T8798] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 210.932506][ T8798] ? __pfx_vfs_write+0x10/0x10 [ 210.932549][ T8798] ? __fget_files+0x2a/0x420 [ 210.932592][ T8798] ksys_write+0x145/0x250 [ 210.932624][ T8798] ? __pfx_ksys_write+0x10/0x10 [ 210.932650][ T8798] ? rcu_is_watching+0x15/0xb0 [ 210.932686][ T8798] ? do_syscall_64+0xbe/0x3b0 [ 210.932724][ T8798] do_syscall_64+0xfa/0x3b0 [ 210.932755][ T8798] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.932787][ T8798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.932809][ T8798] ? clear_bhb_loop+0x60/0xb0 [ 210.932837][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.932858][ T8798] RIP: 0033:0x7f4443f8e9a9 [ 210.932880][ T8798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.932900][ T8798] RSP: 002b:00007f4444dfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.932924][ T8798] RAX: ffffffffffffffda RBX: 00007f44441b5fa0 RCX: 00007f4443f8e9a9 [ 210.932940][ T8798] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003 [ 210.932956][ T8798] RBP: 00007f4444dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 210.932969][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.932982][ T8798] R13: 0000000000000000 R14: 00007f44441b5fa0 R15: 00007ffdf0d0b598 [ 210.933016][ T8798] [ 211.237373][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.609648][ T8808] netlink: 96 bytes leftover after parsing attributes in process `syz.4.820'. [ 211.846535][ T8815] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 211.854588][ T8815] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 212.141345][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 212.288948][ T8829] FAULT_INJECTION: forcing a failure. [ 212.288948][ T8829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.309754][ T8829] CPU: 1 UID: 0 PID: 8829 Comm: syz.4.826 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 212.309784][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.309798][ T8829] Call Trace: [ 212.309806][ T8829] [ 212.309815][ T8829] dump_stack_lvl+0x189/0x250 [ 212.309850][ T8829] ? __pfx____ratelimit+0x10/0x10 [ 212.309881][ T8829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.309910][ T8829] ? __pfx__printk+0x10/0x10 [ 212.309940][ T8829] ? __might_fault+0xb0/0x130 [ 212.309974][ T8829] should_fail_ex+0x414/0x560 [ 212.310006][ T8829] _copy_from_iter+0x1db/0x16f0 [ 212.310040][ T8829] ? __pfx__copy_from_iter+0x10/0x10 [ 212.310070][ T8829] ? sock_alloc_send_pskb+0x875/0x990 [ 212.310109][ T8829] ? __pfx__copy_from_iter+0x10/0x10 [ 212.310145][ T8829] ? page_copy_sane+0x16a/0x280 [ 212.310167][ T8829] copy_page_from_iter+0xdd/0x170 [ 212.310192][ T8829] skb_copy_datagram_from_iter+0x306/0x720 [ 212.310232][ T8829] tun_get_user+0x1691/0x3e20 [ 212.310274][ T8829] ? aa_file_perm+0x13e/0x11b0 [ 212.310295][ T8829] ? aa_file_perm+0x3ed/0x11b0 [ 212.310314][ T8829] ? __pfx_tun_get_user+0x10/0x10 [ 212.310336][ T8829] ? _parse_integer_limit+0x1ae/0x1f0 [ 212.310374][ T8829] ? __lock_acquire+0xab9/0xd20 [ 212.310405][ T8829] ? ref_tracker_alloc+0x318/0x460 [ 212.310431][ T8829] ? __lock_acquire+0xab9/0xd20 [ 212.310456][ T8829] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 212.310490][ T8829] ? tun_get+0x1c/0x2f0 [ 212.310518][ T8829] ? tun_get+0x1c/0x2f0 [ 212.310538][ T8829] ? tun_get+0x1c/0x2f0 [ 212.310564][ T8829] tun_chr_write_iter+0x113/0x200 [ 212.310589][ T8829] vfs_write+0x54b/0xa90 [ 212.310622][ T8829] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 212.310645][ T8829] ? __pfx_vfs_write+0x10/0x10 [ 212.310680][ T8829] ? __fget_files+0x2a/0x420 [ 212.310719][ T8829] ksys_write+0x145/0x250 [ 212.310747][ T8829] ? __pfx_ksys_write+0x10/0x10 [ 212.310771][ T8829] ? rcu_is_watching+0x15/0xb0 [ 212.310803][ T8829] ? do_syscall_64+0xbe/0x3b0 [ 212.310838][ T8829] do_syscall_64+0xfa/0x3b0 [ 212.310868][ T8829] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.310897][ T8829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.310917][ T8829] ? clear_bhb_loop+0x60/0xb0 [ 212.310942][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.310963][ T8829] RIP: 0033:0x7f6cacd8e9a9 [ 212.310981][ T8829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.310999][ T8829] RSP: 002b:00007f6cadce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.311021][ T8829] RAX: ffffffffffffffda RBX: 00007f6cacfb5fa0 RCX: 00007f6cacd8e9a9 [ 212.311036][ T8829] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003 [ 212.311050][ T8829] RBP: 00007f6cadce3090 R08: 0000000000000000 R09: 0000000000000000 [ 212.311062][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.311074][ T8829] R13: 0000000000000000 R14: 00007f6cacfb5fa0 R15: 00007ffdf5da8c08 [ 212.311115][ T8829] [ 212.577720][ T5913] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 212.581121][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.622140][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.651241][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 212.658609][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.667746][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 212.677210][ T24] usb 1-1: config 1 has no interface number 1 [ 212.684562][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 212.697694][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 177, changing to 7 [ 212.711981][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.721283][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.729453][ T24] usb 1-1: Product: syz [ 212.733961][ T24] usb 1-1: Manufacturer: syz [ 212.738722][ T24] usb 1-1: SerialNumber: syz [ 212.741372][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 212.769349][ T5913] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 212.786605][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.797287][ T5913] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 212.831449][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.853336][ T5913] usb 2-1: config 0 descriptor?? [ 212.971261][ T8818] Mount JFS Failure: -22 [ 213.027525][ T24] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 213.038779][ T8825] orangefs_mount: mount request failed with -4 [ 213.051353][ T24] usb 1-1: found format II with max.bitrate = 6, frame size=8 [ 213.059321][ T24] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 213.088390][ T24] usb 1-1: found format II with max.bitrate = 6, frame size=8 [ 213.197393][ T24] usb 1-1: USB disconnect, device number 31 [ 213.289325][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.330052][ T8833] exFAT-fs (rnullb0): invalid boot record signature [ 213.383023][ T8833] exFAT-fs (rnullb0): failed to read boot sector [ 213.397256][ T8833] exFAT-fs (rnullb0): failed to recognize exfat type [ 213.597152][ T8837] Mount JFS Failure: -22 [ 213.868066][ T8851] FAULT_INJECTION: forcing a failure. [ 213.868066][ T8851] name failslab, interval 1, probability 0, space 0, times 0 [ 213.881239][ T8851] CPU: 0 UID: 0 PID: 8851 Comm: syz.4.835 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 213.881269][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.881282][ T8851] Call Trace: [ 213.881291][ T8851] [ 213.881299][ T8851] dump_stack_lvl+0x189/0x250 [ 213.881334][ T8851] ? __pfx____ratelimit+0x10/0x10 [ 213.881365][ T8851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.881394][ T8851] ? __pfx__printk+0x10/0x10 [ 213.881428][ T8851] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 213.881463][ T8851] should_fail_ex+0x414/0x560 [ 213.881496][ T8851] should_failslab+0xa8/0x100 [ 213.881521][ T8851] ? __pfx_ip6_dst_gc+0x10/0x10 [ 213.881546][ T8851] kmem_cache_alloc_noprof+0x73/0x3c0 [ 213.881569][ T8851] ? dst_alloc+0x105/0x170 [ 213.881594][ T8851] ? __pfx_ip6_dst_gc+0x10/0x10 [ 213.881621][ T8851] dst_alloc+0x105/0x170 [ 213.881651][ T8851] ip6_pol_route+0xa21/0x1180 [ 213.881680][ T8851] ? ip6_pol_route+0x162/0x1180 [ 213.881713][ T8851] ? __pfx_ip6_pol_route+0x10/0x10 [ 213.881761][ T8851] fib6_rule_lookup+0x52f/0x6f0 [ 213.881794][ T8851] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 213.881823][ T8851] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 213.881866][ T8851] ? ip6t_do_table+0x1db/0x1560 [ 213.881906][ T8851] ip6_route_input+0x6ce/0xa50 [ 213.881944][ T8851] ? __pfx_ip6_route_input+0x10/0x10 [ 213.881986][ T8851] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 213.882030][ T8851] ? ip6_rcv_finish_core+0x222/0x420 [ 213.882057][ T8851] ip6_rcv_finish+0x141/0x2e0 [ 213.882082][ T8851] NF_HOOK+0x309/0x3a0 [ 213.882102][ T8851] ? skb_orphan+0x4c/0xd0 [ 213.882125][ T8851] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 213.882145][ T8851] ? NF_HOOK+0x9a/0x3a0 [ 213.882165][ T8851] ? __pfx_NF_HOOK+0x10/0x10 [ 213.882189][ T8851] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 213.882222][ T8851] __netif_receive_skb+0xd3/0x380 [ 213.882259][ T8851] ? netif_receive_skb+0x115/0x790 [ 213.882286][ T8851] netif_receive_skb+0x1cb/0x790 [ 213.882313][ T8851] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 213.882340][ T8851] ? __pfx_netif_receive_skb+0x10/0x10 [ 213.882368][ T8851] ? skb_partial_csum_set+0x107/0x360 [ 213.882392][ T8851] ? tun_rx_batched+0x160/0x730 [ 213.882418][ T8851] tun_rx_batched+0x1b9/0x730 [ 213.882440][ T8851] ? __lock_acquire+0xab9/0xd20 [ 213.882469][ T8851] ? __pfx_tun_rx_batched+0x10/0x10 [ 213.882496][ T8851] ? tun_get_user+0x266c/0x3e20 [ 213.882533][ T8851] tun_get_user+0x2aa2/0x3e20 [ 213.882570][ T8851] ? tun_get_user+0x266c/0x3e20 [ 213.882593][ T8851] ? aa_file_perm+0x13e/0x11b0 [ 213.882614][ T8851] ? aa_file_perm+0x3ed/0x11b0 [ 213.882633][ T8851] ? __pfx_tun_get_user+0x10/0x10 [ 213.882654][ T8851] ? _parse_integer_limit+0x1ae/0x1f0 [ 213.882695][ T8851] ? __lock_acquire+0xab9/0xd20 [ 213.882725][ T8851] ? ref_tracker_alloc+0x318/0x460 [ 213.882750][ T8851] ? __lock_acquire+0xab9/0xd20 [ 213.882775][ T8851] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 213.882811][ T8851] ? tun_get+0x1c/0x2f0 [ 213.882840][ T8851] ? tun_get+0x1c/0x2f0 [ 213.882861][ T8851] ? tun_get+0x1c/0x2f0 [ 213.882895][ T8851] tun_chr_write_iter+0x113/0x200 [ 213.882921][ T8851] vfs_write+0x54b/0xa90 [ 213.882954][ T8851] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 213.882978][ T8851] ? __pfx_vfs_write+0x10/0x10 [ 213.883016][ T8851] ? __fget_files+0x2a/0x420 [ 213.883057][ T8851] ksys_write+0x145/0x250 [ 213.883088][ T8851] ? __pfx_ksys_write+0x10/0x10 [ 213.883112][ T8851] ? rcu_is_watching+0x15/0xb0 [ 213.883145][ T8851] ? do_syscall_64+0xbe/0x3b0 [ 213.883181][ T8851] do_syscall_64+0xfa/0x3b0 [ 213.883212][ T8851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.883232][ T8851] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.883253][ T8851] ? clear_bhb_loop+0x60/0xb0 [ 213.883279][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.883299][ T8851] RIP: 0033:0x7f6cacd8e9a9 [ 213.883318][ T8851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.883335][ T8851] RSP: 002b:00007f6cadce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.883357][ T8851] RAX: ffffffffffffffda RBX: 00007f6cacfb5fa0 RCX: 00007f6cacd8e9a9 [ 213.883372][ T8851] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003 [ 213.883385][ T8851] RBP: 00007f6cadce3090 R08: 0000000000000000 R09: 0000000000000000 [ 213.883398][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.883411][ T8851] R13: 0000000000000000 R14: 00007f6cacfb5fa0 R15: 00007ffdf5da8c08 [ 213.883443][ T8851] [ 214.481294][ T5900] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 214.542165][ T8855] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 214.550489][ T8855] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 214.669762][ T5900] usb 1-1: not running at top speed; connect to a high speed hub [ 214.680635][ T5900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 214.693145][ T5900] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 214.710667][ T5900] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.720612][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.731150][ T5900] usb 1-1: Product: Ñ— [ 214.735405][ T5900] usb 1-1: Manufacturer: à ” [ 214.740157][ T5900] usb 1-1: SerialNumber: ᜎ⬔쑔ç‘⥮鑌䔊鋸㒹Ↄغ햊⿟Ĭ꥛îŒà¡¶î…‡é¾ãŠ‚ [ 214.766031][ T8846] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 214.997775][ T5900] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 215.013321][ T5900] cdc_ncm 1-1:1.0: bind() failure [ 215.044342][ T5900] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 215.060729][ T5900] cdc_ncm 1-1:1.1: bind() failure [ 215.089184][ T5900] usb 1-1: USB disconnect, device number 32 [ 215.399968][ T5913] usbhid 2-1:0.0: can't add hid device: -71 [ 215.424803][ T5913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.459564][ T5913] usb 2-1: USB disconnect, device number 34 [ 215.563070][ T8869] mmap: syz.4.843 (8869) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 215.614579][ T8867] /dev/rnullb0: Can't open blockdev [ 215.772590][ T8878] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 215.829210][ T8884] /dev/sg0: Can't lookup blockdev [ 216.508277][ T8904] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.537400][ T24] Process accounting resumed [ 216.544117][ T5893] Process accounting resumed [ 216.564936][ T8904] Process accounting resumed [ 216.711078][ T5900] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 216.718802][ T5913] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 216.736889][ T8911] Mount JFS Failure: -22 [ 216.880775][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 216.886048][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 216.900849][ T5913] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 216.912104][ T5900] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 216.920231][ T5900] usb 2-1: config 0 has no interface number 0 [ 216.927035][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.934117][ T5913] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 216.944801][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.955467][ T5900] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 216.965100][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.976185][ T5913] usb 1-1: config 0 descriptor?? [ 216.984475][ T5900] usb 2-1: Product: syz [ 216.989007][ T5900] usb 2-1: Manufacturer: syz [ 216.994261][ T5900] usb 2-1: SerialNumber: syz [ 217.009324][ T5900] usb 2-1: config 0 descriptor?? [ 217.015437][ T8913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.029301][ T5900] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 217.036445][ T8913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.047079][ T5900] dvb-usb: bulk message failed: -22 (2/0) [ 217.064608][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.082765][ T5900] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 217.092397][ T5900] usb 2-1: media controller created [ 217.153737][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.205505][ T5900] cxusb: set interface failed [ 217.211332][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 217.279415][ T5900] DVB: Unable to find symbol lgdt330x_attach() [ 217.288703][ T5900] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 217.410732][ T5900] rc_core: IR keymap rc-dvico-portable not found [ 217.417183][ T5900] Registered IR keymap rc-empty [ 217.441018][ T5900] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 217.455264][ T5900] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15 [ 217.469893][ T5900] dvb-usb: schedule remote query interval to 100 msecs. [ 217.488134][ T5900] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 217.599122][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 217.688430][ T5847] usb 2-1: USB disconnect, device number 35 [ 217.750878][ T8924] FAULT_INJECTION: forcing a failure. [ 217.750878][ T8924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.787538][ T5847] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 217.807342][ T8924] CPU: 1 UID: 0 PID: 8924 Comm: syz.4.856 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 217.807372][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.807385][ T8924] Call Trace: [ 217.807393][ T8924] [ 217.807402][ T8924] dump_stack_lvl+0x189/0x250 [ 217.807438][ T8924] ? __pfx____ratelimit+0x10/0x10 [ 217.807469][ T8924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.807497][ T8924] ? __pfx__printk+0x10/0x10 [ 217.807540][ T8924] should_fail_ex+0x414/0x560 [ 217.807572][ T8924] _copy_to_user+0x31/0xb0 [ 217.807598][ T8924] simple_read_from_buffer+0xe1/0x170 [ 217.807644][ T8924] proc_fail_nth_read+0x1b3/0x220 [ 217.807671][ T8924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.807697][ T8924] ? rw_verify_area+0x2a6/0x4d0 [ 217.807722][ T8924] ? __lock_acquire+0xab9/0xd20 [ 217.807744][ T8924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.807768][ T8924] vfs_read+0x1fd/0x980 [ 217.807793][ T8924] ? fdget_pos+0x247/0x320 [ 217.807816][ T8924] ? __pfx___mutex_lock+0x10/0x10 [ 217.807848][ T8924] ? __pfx_vfs_read+0x10/0x10 [ 217.807876][ T8924] ? __fget_files+0x2a/0x420 [ 217.807912][ T8924] ? __fget_files+0x3a0/0x420 [ 217.807940][ T8924] ? __fget_files+0x2a/0x420 [ 217.807980][ T8924] ksys_read+0x145/0x250 [ 217.808009][ T8924] ? __pfx_ksys_read+0x10/0x10 [ 217.808033][ T8924] ? rcu_is_watching+0x15/0xb0 [ 217.808066][ T8924] ? do_syscall_64+0xbe/0x3b0 [ 217.808101][ T8924] do_syscall_64+0xfa/0x3b0 [ 217.808133][ T8924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.808153][ T8924] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.808175][ T8924] ? clear_bhb_loop+0x60/0xb0 [ 217.808208][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.808229][ T8924] RIP: 0033:0x7f6cacd8d3bc [ 217.808248][ T8924] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.808266][ T8924] RSP: 002b:00007f6cadce3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.808288][ T8924] RAX: ffffffffffffffda RBX: 00007f6cacfb5fa0 RCX: 00007f6cacd8d3bc [ 217.808303][ T8924] RDX: 000000000000000f RSI: 00007f6cadce30a0 RDI: 0000000000000005 [ 217.808316][ T8924] RBP: 00007f6cadce3090 R08: 0000000000000000 R09: 0000000000000000 [ 217.808329][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.808341][ T8924] R13: 0000000000000000 R14: 00007f6cacfb5fa0 R15: 00007ffdf5da8c08 [ 217.808373][ T8924] [ 218.054290][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.163387][ T8928] /dev/sg0: Can't lookup blockdev [ 218.453870][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 218.630898][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 218.643180][ T8936] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 218.650331][ T8936] VFS: Can't find a romfs filesystem on dev rnullb0. [ 218.650331][ T8936] [ 218.693895][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.707920][ T24] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 218.723475][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.731925][ T24] usb 5-1: Product: syz [ 218.736552][ T24] usb 5-1: Manufacturer: syz [ 218.741451][ T24] usb 5-1: SerialNumber: syz [ 218.752255][ T24] usb 5-1: config 0 descriptor?? [ 218.766558][ T24] usb 5-1: bad CDC descriptors [ 218.774840][ T24] usb 5-1: unsupported MDLM descriptors [ 218.969747][ T24] usb 5-1: USB disconnect, device number 20 [ 219.024785][ T8944] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 219.033499][ T8944] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 219.586255][ T5913] usbhid 1-1:0.0: can't add hid device: -71 [ 219.609701][ T5913] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 219.644364][ T5913] usb 1-1: USB disconnect, device number 33 [ 219.683026][ T8953] /dev/sg0: Can't lookup blockdev [ 220.163746][ T8967] CIFS: iocharset name too long [ 220.174313][ T8967] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 220.588826][ T8976] netlink: 'syz.0.874': attribute type 25 has an invalid length. [ 220.610820][ T8976] netlink: 'syz.0.874': attribute type 7 has an invalid length. [ 220.626329][ T8976] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 220.638689][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 220.644785][ C0] CPU: 0 UID: 0 PID: 8976 Comm: syz.0.874 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 220.656159][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.666225][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 220.672327][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 220.691962][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 220.698048][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff888064372c80 [ 220.706032][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880592a4000 [ 220.714014][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 220.721989][ C0] R10: dffffc0000000000 R11: ffffffff88f35200 R12: dffffc0000000000 [ 220.729969][ C0] R13: ffff888064372c38 R14: 0000000000000000 R15: ffff888064372c00 [ 220.737961][ C0] FS: 00007f4444dd96c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 [ 220.746899][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.753867][ C0] CR2: 000000110c3e7ea1 CR3: 0000000066488000 CR4: 00000000003526f0 [ 220.761941][ C0] Call Trace: [ 220.765230][ C0] [ 220.768089][ C0] ? __pfx_das16m1_ai_munge+0x10/0x10 [ 220.773480][ C0] comedi_buf_write_samples+0x369/0x5a0 [ 220.779071][ C0] das16m1_handler+0x213/0x4b0 [ 220.783851][ C0] das16m1_interrupt+0xaf/0x180 [ 220.788726][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 220.794200][ C0] __handle_irq_event_percpu+0x28c/0x980 [ 220.799853][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 220.806034][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 220.811250][ C0] handle_irq_event+0x8b/0x1e0 [ 220.816033][ C0] ? handle_edge_irq+0x25d/0x9e0 [ 220.820996][ C0] handle_edge_irq+0x267/0x9e0 [ 220.825774][ C0] __common_interrupt+0x143/0x250 [ 220.830818][ C0] common_interrupt+0xb6/0xe0 [ 220.835518][ C0] [ 220.838470][ C0] [ 220.841405][ C0] asm_common_interrupt+0x26/0x40 [ 220.846449][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 220.853071][ C0] Code: 74 05 e8 7b 98 45 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 46 0e f6 65 8b 05 4c 43 65 07 85 c0 74 40 48 c7 04 24 0e 36 [ 220.873042][ C0] RSP: 0018:ffffc90015e2f9a0 EFLAGS: 00000206 [ 220.879277][ C0] RAX: c08e1d9cb0222f00 RBX: 0000000000000a02 RCX: c08e1d9cb0222f00 [ 220.887297][ C0] RDX: 0000000000000006 RSI: ffffffff8dc6a0fe RDI: 0000000000000001 [ 220.895319][ C0] RBP: ffffc90015e2fa30 R08: ffffffff8fe3cf37 R09: 1ffffffff1fc79e6 [ 220.903417][ C0] R10: dffffc0000000000 R11: fffffbfff1fc79e7 R12: dffffc0000000000 [ 220.911437][ C0] R13: dffffc0000000000 R14: ffffffff9a2700c0 R15: 1ffff92002bc5f34 [ 220.919451][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 220.925997][ C0] serial8250_config_port+0x1451/0x5370 [ 220.931579][ C0] ? __release_region+0x2d6/0x360 [ 220.936622][ C0] ? kfree+0x18e/0x440 [ 220.940708][ C0] ? __pfx_serial8250_config_port+0x10/0x10 [ 220.946625][ C0] ? __release_region+0x2d6/0x360 [ 220.951769][ C0] ? __pfx___release_region+0x10/0x10 [ 220.957181][ C0] univ8250_config_port+0x3d4/0x9a0 [ 220.962411][ C0] ? serial8250_release_std_resource+0x135/0x2e0 [ 220.968765][ C0] uart_ioctl+0x1354/0x19f0 [ 220.973284][ C0] ? __lock_acquire+0xab9/0xd20 [ 220.978167][ C0] ? __pfx_uart_ioctl+0x10/0x10 [ 220.983328][ C0] ? __fget_files+0x2a/0x420 [ 220.987947][ C0] ? __fget_files+0x3a0/0x420 [ 220.992632][ C0] ? __fget_files+0x2a/0x420 [ 220.997249][ C0] tty_ioctl+0x926/0xde0 [ 221.001580][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 221.006357][ C0] __se_sys_ioctl+0xf9/0x170 [ 221.010957][ C0] do_syscall_64+0xfa/0x3b0 [ 221.015568][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.021669][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.027929][ C0] ? clear_bhb_loop+0x60/0xb0 [ 221.032616][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.038520][ C0] RIP: 0033:0x7f4443f8e9a9 [ 221.043031][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.062648][ C0] RSP: 002b:00007f4444dd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.071075][ C0] RAX: ffffffffffffffda RBX: 00007f44441b6080 RCX: 00007f4443f8e9a9 [ 221.079141][ C0] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 000000000000000c [ 221.087148][ C0] RBP: 00007f4444010d69 R08: 0000000000000000 R09: 0000000000000000 [ 221.095136][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.103122][ C0] R13: 0000000000000000 R14: 00007f44441b6080 R15: 00007ffdf0d0b598 [ 221.111122][ C0] [ 221.114146][ C0] Modules linked in: [ 221.118059][ C0] ---[ end trace 0000000000000000 ]--- [ 221.123528][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 221.129610][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 221.149395][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 221.155471][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff888064372c80 [ 221.163469][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880592a4000 [ 221.171458][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 221.179559][ C0] R10: dffffc0000000000 R11: ffffffff88f35200 R12: dffffc0000000000 [ 221.187564][ C0] R13: ffff888064372c38 R14: 0000000000000000 R15: ffff888064372c00 [ 221.195648][ C0] FS: 00007f4444dd96c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 [ 221.204672][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.211288][ C0] CR2: 000000110c3e7ea1 CR3: 0000000066488000 CR4: 00000000003526f0 [ 221.219289][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 221.226802][ C0] Kernel Offset: disabled [ 221.231144][ C0] Rebooting in 86400 seconds..