last executing test programs: 3m14.495200801s ago: executing program 3 (id=312): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvfrom$inet(r2, 0x0, 0x30, 0x40000020, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005b0000/0x1000)=nil, 0x1000, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7ff, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) write(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d002106000000000000000007d5"], 0x34}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x40) munmap(&(0x7f0000524000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x22052, r0, 0x2000) 3m14.443588023s ago: executing program 3 (id=314): r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_linger(r0, 0x1, 0x49, &(0x7f0000000000)={0x0, 0x4}, 0x8) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x8000, 0xa, 0x6, 0x8, 0x93}, &(0x7f0000000180)=0x98) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000440)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "f89e"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="00040300000020"], 0x0, 0x0}) listen(r2, 0x2) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 3m14.353899901s ago: executing program 3 (id=315): creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 3m14.245743232s ago: executing program 3 (id=319): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) fadvise64(r0, 0x7, 0x1ff, 0x1) socket$phonet(0x23, 0x2, 0x1) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000280)={0x80000001, 0x6, 0x0, [{0x20000a, 0x1ff, 0x3, 0x1, 0x1, 0x0, 0x7, '\x00', 0x8}, {0x8001, 0x9, 0x8, 0x8, 0x4, 0x81, 0x2, '\x00', 0xffffffff}, {0xe9c, 0x7, 0x7ff800000000000, 0x7, 0x8, 0x8, 0x4, '\x00', 0x2}, {0x8000000000000001, 0x3ff, 0x3b04a97e, 0x1, 0x0, 0x4, 0x4, '\x00', 0x3}, {0x0, 0x200, 0x2, 0x6, 0x0, 0x2, 0xb4, '\x00', 0x1}, {0x47e, 0x4, 0x4, 0x9, 0x5, 0x0, 0x7, '\x00', 0x200}]}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) syz_usb_connect(0x1, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da2"], 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r1) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 3m12.975772783s ago: executing program 3 (id=333): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m12.767140976s ago: executing program 3 (id=334): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r1, &(0x7f0000000280), 0xff9d) sendfile(r0, r1, &(0x7f0000000100), 0x2) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x12, 0x80010, r2, 0x5ce0c000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000180)="ba76978ecfa933acc8778bdf189fed3390af1cfd6f139447044ec6092ee6b4977e72fb4171de133055915591e5b18ce11a7c342c701ecbba9959d73205753fe77903761119c1e6629c479382da47125de83cf99642f91604ea5b21fff9c1c57612a50d4e54c8e5453205f5057a169bae22ea6ec91c9a8cb5bbae39c8c0bcb8753c1852141e20697911b56d51513d733beab0f859736ee40e83c34ca0392a2ef6", 0xa0}, {&(0x7f00000002c0)="35b7c2ada9e71e24377cf414ea732fcf03f3d87dac511ae2e28d8f3af3aa755ee2b335f76726b25c6f08a7069ec2e021ab691b0c0c08a050efbcf53e4749efd36aebd5dde6f91d59e10eb81232aff52abf8b1501c4ad86e9917be07d5316efb76913610ebc4521a8eaa98a3c", 0x6c}, {&(0x7f0000000040)="88375eaeadd8551fb7524822c4ff20b52e7b2e4176026666105a1c41bad561b1f3c4e34269cd9e17f058692188cce475aecc3c0cc64c65c47e1fd028ddabcdea", 0x40}, {&(0x7f0000000340)="ad5f65b748bc18af94e9152d2b4bb4c8cc5643d98bfe7bcfed1d13743c375e170ccfb969666c16f13d40d14cf12235839908648f36407ec03a00b7555adb078d62c249ca416f955a717bf9eef75d8c3be88dbc1bb7966516d0b846a5b813a8152e36ff6079f283807c3fa47caca273baa74825641e7853d90ec7a1c6f6309242eb93d67c737948fccf5c9f7b6f0a474c2166a2fef99bc8b001e686010d30388cfe5e505fa1335b72d81910d05396ec3e48edba52c2bbd987891b4b55", 0xbc}, {&(0x7f0000000400)="f2c683013331df492c5f8741778b682bae337456f7c63dddb34013f5daa6048e140721f975", 0x25}], 0x5, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x49}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x3c}}, 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)={'a', ' *:* ', 'r\x00'}, 0x8) 3m12.660729498s ago: executing program 32 (id=334): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r1, &(0x7f0000000280), 0xff9d) sendfile(r0, r1, &(0x7f0000000100), 0x2) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x12, 0x80010, r2, 0x5ce0c000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000180)="ba76978ecfa933acc8778bdf189fed3390af1cfd6f139447044ec6092ee6b4977e72fb4171de133055915591e5b18ce11a7c342c701ecbba9959d73205753fe77903761119c1e6629c479382da47125de83cf99642f91604ea5b21fff9c1c57612a50d4e54c8e5453205f5057a169bae22ea6ec91c9a8cb5bbae39c8c0bcb8753c1852141e20697911b56d51513d733beab0f859736ee40e83c34ca0392a2ef6", 0xa0}, {&(0x7f00000002c0)="35b7c2ada9e71e24377cf414ea732fcf03f3d87dac511ae2e28d8f3af3aa755ee2b335f76726b25c6f08a7069ec2e021ab691b0c0c08a050efbcf53e4749efd36aebd5dde6f91d59e10eb81232aff52abf8b1501c4ad86e9917be07d5316efb76913610ebc4521a8eaa98a3c", 0x6c}, {&(0x7f0000000040)="88375eaeadd8551fb7524822c4ff20b52e7b2e4176026666105a1c41bad561b1f3c4e34269cd9e17f058692188cce475aecc3c0cc64c65c47e1fd028ddabcdea", 0x40}, {&(0x7f0000000340)="ad5f65b748bc18af94e9152d2b4bb4c8cc5643d98bfe7bcfed1d13743c375e170ccfb969666c16f13d40d14cf12235839908648f36407ec03a00b7555adb078d62c249ca416f955a717bf9eef75d8c3be88dbc1bb7966516d0b846a5b813a8152e36ff6079f283807c3fa47caca273baa74825641e7853d90ec7a1c6f6309242eb93d67c737948fccf5c9f7b6f0a474c2166a2fef99bc8b001e686010d30388cfe5e505fa1335b72d81910d05396ec3e48edba52c2bbd987891b4b55", 0xbc}, {&(0x7f0000000400)="f2c683013331df492c5f8741778b682bae337456f7c63dddb34013f5daa6048e140721f975", 0x25}], 0x5, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x49}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x3c}}, 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)={'a', ' *:* ', 'r\x00'}, 0x8) 4.795897074s ago: executing program 2 (id=1502): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf251c000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="bc8c4f542a6b7f1404b570eb92d0cae6be85088db7d94b7b219abb2b8e0009f29eb3209d6a88bc0a26422b824418cc2eac6a6ebacb19e3f3dd20d2"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x8080) timer_create(0x5, &(0x7f0000000000)={0x0, 0x2f, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000040)) r3 = add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="d3bcd7265bbf2b235d88b673ee49e5fb5c2f1b3f87561c577ba05c14718ef734bfdf546514590e1ab2ccb2b369899e312be8341ddee57d40449bfbf8057efb60dcc2979babfdb958115059659950f97ebe85d4e166be3fd5a47d7641a096eb142ae6172c77a5386e2864f880d03f96d16c2b5ce2888d6e5d2a3d8bf56349c4e3135db4e1eec6932f29f937471d988793c47d290731baf5b0b9975e25d0f6e8d0d03c41", 0xa3, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="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", 0xfa, 0xfffffffffffffff8) r5 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="88cb3e", 0x3, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='logon\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000480)={r3, r4, r5}, &(0x7f00000003c0)=""/24, 0x14, &(0x7f0000000440)={&(0x7f0000000400)={'sha224-ce\x00'}}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x1, 0x228800) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r7, 0x89f0, 0x0) sendfile(r6, r6, 0x0, 0x7fffefff) sendfile(r0, r0, 0x0, 0x7ffff000) 4.625413821s ago: executing program 2 (id=1504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x4, 0x0, 0x5, 0x70, 0x1, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1}) (async, rerun: 32) sendfile(r0, r0, 0x0, 0x7ffff000) (rerun: 32) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0455eeb4fc08ff"], 0x7) (rerun: 32) 4.494204141s ago: executing program 2 (id=1507): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x14, 0xfffffffc, 0x1}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4009, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0xfffffffffffffe5b) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x74) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0501c00008005400000060ec97"], 0xfdef) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x2000c18, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000500)={0x0, 0x23, 0x9, {0x9, 0xc, "08d214e9ca97d8"}}, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x22052, r3, 0xad711000) 3.171634173s ago: executing program 0 (id=1522): gettid() r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) r2 = syz_open_procfs(0x0, &(0x7f0000002100)='attr/keycreate\x00') preadv2(r2, &(0x7f0000002780)=[{&(0x7f0000002680)=""/247, 0xf7}], 0x1, 0x1cf3d4a8, 0x4, 0x2) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) r3 = syz_clone(0x10080100, &(0x7f00000000c0)="cd5c66c9e754a5b18cce87ccee636229518513158ec6ee55237e968cd84d06af971cf804a19b267429c088ac554d3b6ee0d1eaad757f06d1690916e8c2825b79b0bb7778394ae3f3b3be3419a4a468ee99e2a4ec11cd5a3e0ab492e9cb", 0x5d, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000380)="c1795a172fddc661bbcfccadcb8b6fbecdeda375e83669d185785ddcaff1fef7ab8ba26f91e0ec558f824d8ff18cb2e5466dc7b736bbea6ff7d45d2696a9dca722e9497a51d20e658ad994a3ea422afd926ff2cee1f181794e05a2530f7facaf449372487f71cc5b0873152a31c9177f6d424341ddc9d53daa2093ac147af53565069b2f4e6cf8dc290b398531a826c4") tkill(r3, 0x8) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003ea969420ca16021558510102030109021b0001050d9001090434000159492e260905030200047f42ff109e7845fa410ab4923aad5d59da116a1e"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xb, &(0x7f0000000200)=@string={0xb, 0x3, "0d10a40ce7068fb38a"}}, {0x0, 0x0}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x441}}]}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 2.715838133s ago: executing program 2 (id=1527): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}}, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f00080000000000000013"], 0x24}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)="a967842cb7c91fa98e975ba0d2bb2d4a6a4f6e1b9c07375917a271b2e46aa88106eddf8eb31590f1557db169167899957c73ec26a735475bfdee636f4be3d1dee7a78a02cf2a757dd6fb29b3a7bea0efe4ac314b4ab7e509958577a1d1d7d778ba2f8bfc7a8560a6201f41fbedaab39dd2f94e8b9cf032ad6121392b1676836ad8f79f27c399f99a585bab74ee", 0x8d}, {&(0x7f0000000280)="6f5ffa62221426d52df6d1a2d7855a2de910cb46517ffdc7dfe70d778b5ff4c71cd8766c4ae3ff2882685650353d4c989596fb995fed02be1d8cd4c1b8b5419576f5f41a7cc699dea37871307d28962cf0a28f5ef6c5413f09dff7a510aa27ec5f86201d00371a62ed5f3ed5c3b1fe52bf6d2d5865f9c942855f407ef2a06f7ca6bf52fb7f6b8b01c7268754fbcab6a5b81f1f96ab1adf5791658d52204c526f57130995ebf58ca978ead846ed60d5e15b545cb1ae9ad9e04f67be0ddd0e4d43c595df3789e8230ca80954e83d54d86ebb891c9f7f2e4255688b", 0xda}], 0x2, 0x4) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 2.549586643s ago: executing program 1 (id=1529): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000000c0)) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x0, 0x31, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x20, 0x8, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x8}}) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x0, 0xe, 0x3, "904bf8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x145481) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0xe, 0x0, &(0x7f0000000680)) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="34c756994e83eb", 0x7}], 0x1, 0xfffffffe, 0x4, 0x1) 2.467954572s ago: executing program 4 (id=1532): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1c, 0x202812, r0, 0x7e002000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x4c80, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 2.416168278s ago: executing program 4 (id=1533): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x8, 0xb, 0x7fff, 0x6, 0x12, "1369010fe499cb2ca472d820d473dd6003a9e3"}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f00001f4000/0x2000)=nil, 0x2000, 0x200000f, 0x810, r0, 0xffffe000) fcntl$addseals(r0, 0x409, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x1d, 0x16, 0x400084, &(0x7f0000000ec0)}) 2.307740403s ago: executing program 4 (id=1534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c000000020101030000000000000000000000442600068034000380060002004e220000060072004e240000060002004e220000060001004e210000060001"], 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001e80), 0x0, 0x0) ioctl$FBIOBLANK(r2, 0x460f, 0x0) sync_file_range(r1, 0x4, 0xfc5, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="09ff00000001"}) creat(&(0x7f0000001380)='./file0\x00', 0x29) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4040c0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'bond_slave_1\x00'}) 2.307370289s ago: executing program 4 (id=1535): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0xffff, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0x2, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x12, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x1, 0x5, 0x3, 0x9, 0x1, 0x2, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x8, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x20057, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x327, 0x2000a620, 0x2, 0x81, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c19, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 2.206511666s ago: executing program 4 (id=1536): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) 1.899407232s ago: executing program 2 (id=1537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000fd4500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119edabebbb1, 0x20011, r0, 0xd56d9000) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0xe6f48000, 0x4000, 0xeeee0000, 0x4000], 0x7, 0x0, 0x6}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000000080)={0x0, 0x5}) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000100)={&(0x7f00000000c0)=""/57, 0x39}) 1.743587593s ago: executing program 2 (id=1538): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x6e100, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000000000000f3000040"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001180)={0x0, 0x0, "c7da2286f38ff32f35636ef7eb57d7e9865573d62fc3b552dc82e07c5909d8ef31e20e72c787f80138c690ade67f0e977614be2aca8a022ab696a34d4d7cf462924590dc92f414e063a87b54f0e3ae9909cbb75d16f402395ce3703cc6a3d5eb33c1a7a03b521f290b1734e1b679c0402f2a4391772bdb47aff87a02815b84373865d1583d96842f77d902684d330794594c783cba7685f185d34727798c0bd18a78f3d57b2d7c88febc1a3f643ee4447b72a3a5c963d7a1d92076e0627b9f02c3808f4e7e77e92aa2b28ec0823eb3915174f96463d47a6b94201c466018b12f937b850a6f19f0746c767dc1004201692df1324c52dce926ce5c56d73afe0a35", "80902c85029fd68600ec6b17164ec55d29052946d2eb3aa76b865a9e32b8dba97dc9a87cf2f79c9ad11bbbc554f73bde2d15d98e98a0ebc3faa6337443074df41d8d5f848f1389842111855655668ccd653c987e8a9716ada4cc03fae071aadb53a1eb25077a55ca0e50aa67888e49b194a10b74d7a7dd5e488619a8af030b3b901e0136f63156d4738e5db46bd0aa58e70135ed14d8b429aca44d03761d2459f2fc0551fdc31c414937eb1946f34110a144b06efd8799fcc889a00520ce7891bdd48b29b4e50d7df7ba89f0a8f12000b3ec504c7c88dd7047a887ea00218413a6fcfecfce88ac02d90d7d46429c963cbeb206b6e277cd58fd183f4c598bbe16a1fc875d9496411a7677a32ec7f2128aab867bbff4b7af520aef4e759ab32b66fb17dbd337cf2264c19f71eac98f206adfb799f3d273cfaf13048490c937ac11de33f5ae40a42e864910fe470472219e2c7c2468acb73db14e9098231e2f8912c0f430c8b3ed060d99fca4ec8035e4810a17563d01895bd224182999996a9cbc791c9a0cad9e388b45c894b01fc3c236051a202bec8dd5a421f083c046b06187eadb161551bd5308198f53e60d41d4816fe7ff3eaee0345808ed0dd74d089ae14cf364d97a14bb7bb24149e1344b120908e9afd2d9ad5f10fe533fc0280dc2793d49707fc4558a46be7bb01c434c9ac1cd1c82ef55a2d0d47c66184fd0bb906bb8eb2f8fb49f920dbc3bfd84c7cc2e63df05d42836b40c217cf117a5f247826009236fa562a7466fd548a2e0c70fad90c9d091466757ec68c4da51a17d45152bdaf8a80d6048f191af5506edbeba69f864ba1c1b7c9cfa05c0481b3427cfeba12f58022607833e3e9db9a7ae72e38db318e93a02b3ed947193f39bd7a45cdf624bb39348359e242deee0de7d91d449cad253aa32ac98613332783cd8b86db8dfc3649fb03e7611f6b5a747d826d37dc6c48359a0ad676af8d51d8a3357b71d28235b0c06b804ab42a9b255966597ba2e8257683c8157730301cbeaf9e44086a327091fa5042f81d39f5b07aa91d365a97b73378557787f37ea0b7e263a67a58dbdd26e7fb371e3190c68805f4211cb31b0685a2c164e9b5b965d401d523f5dec386b2e890e443204db06e1bf961248354d596fec2d3f178d185d32a2014b22548cc8a05fce145ac5754220933e1482d3dee1af8a852da1eea9eea25f797cd00bf5eb18b1b2beb6707d6376e22639599628ab18f7deb6d5492eec2e42629e4988caf3bd72d2d551561105dd6566c5c7be19e4a665bc054e37317371a7b53de627fdc701ebd6db1eab4430bf404ad90ce55ce8cd4b687c275f864dca6508afe63dbbf44b0c8eb37404f479090b693c39283f79980e8f14d6cf5bd24cee010153334b1d6416dabae2b8cb967c0abca7768bbe48340b32d9d3a3c4221b4e5bf25b508591888842aa8098c73ef28b680ee91574bc111c60e7caeb071a3fcd68ddf317251442d441d1c94d9ce03e7568654965d5e73d07366e5530571bc70acc598b867ebed83342b885d508c97976ef9b0cf0700eb7f5019ee8d62c8e92f14fce7f3abf0d706429183a5e2aa6726a2ba8e0b010ca134e66bedf33629409682aa89a62ba98517a9e2426ab92d0ccf6510f2e13585b3a24c9be3e163162a75baa7bf1a1b7c1f106aead96fd8d37602f611f364ae21ae37e88d1e1dff35f65e710357b3b3e5f0fd4cfa7bbc4192efc3d489562fe27f6f7fefa232508f79051ae67489e84dbd3c2ceadb341c4b03950dec34acc2687f64f10ae3cee1531076f347775873af05df9738244d0894b0bfa4221d8b91fd3de3235f0ada256b651714a4385360c7180c2ca200b2a739e5cb0a464220c766f8d51c42bb4d5cb1987d923b6ef08716ff48d4237b841f48c5ec558dd320206f9b6432facc1ef70e187efb3de9529cac3df8e6b67e5b8f53faceed5031aff30a3193987b2c573d0bb6bc4c5a98995191b3f53229398c2bb3a44549f7a72dde7bb29847eb9b5b23e08c473ce427463bbdbf8bb08392484b35952f6e56f2c4fcf82674c77344f9b40eb2f97daac322a2c35facb953c3e415f4269428c2169cca3e65656ee8ba5f0e9b048705edb921d2df2e468c9d44c79360dd5f5b8742f07b86882387ed3fbeb733721e1061ca972c9ed88e125eccde73246f148b90d835ae322bda961f0a9a457d6157003f2081674141feac1e965b197d0bf5ddb877dae76860a8f52def7db8646eb4bb1a6b8555793d3a32b7e0e6da062959196ca2c7bc6b9a400c01b0b5c0617a8ad204b39828798823f86da2d5ab7aed31358c2c7ab9d87d4fbee5231d1c00f7e7956b2f6322444e5ee7a597c1210b0fae12c2af3ef6a0059478a90e9c81ad6014e20f906f95ca5935dc7373f8bba07813b626a4e65d4c993eebda721fbb042eb4345b4ef670fdcf3cb768f6eadc6e75e99c3828de23bf6494931541b72a4f34cd16c34bbcc863c37d0f412b25083ba7d3ec26e09a576882c0932881262ab98b5319f3366d0be7a5a89e62c6af878aa9851422553f454e3d10669f7cdacdb92abd859ef89bf984332927909ac6dbd85d353b99854063d6a0c1ee5e40e6ea927216ec4232501894948d83d0620bc8cbf97c90efb72dedd4de2e452686c239ea8d1ca080b51676b24b2188204ec95a71112eacef904585666cbb82f337d831008201e56def8d41c1e4a9f1cfa7da5701dbf22de78bf6ca1b296aa192f2e482c978a1e971b33655e5f8e9b7f43d2de55789b5a2c52fc0df312e8c3098927af6c42f73519f7931928b358fe55a360163a5c30c0475fb41f0a28157b7d3b033f6931ab24434c17a6fe7b4a6bddc917d6ade847ec4cdf12a287b0c1b68aaac4f058482d4b8037d2c4816f443542560cc6bcfd8e9aa0cb83355325c6d2bd36c8aae4a84273fd744f7f2a4faf6743a8392def44d437fac3bb2da6ef99201e1ef9951e06f6312e4bb682f922d3d5f2315d447b7f1cd9e3f32ade6a0c82c6ac38f193f3ada19de5b86e3ccc652f08d01f509f6a90f18bd88c66358929ce14082ca9436bbd8215ddd70f796d75518ca195e51453d065fba5d48c6f5a26ad9c7e13d603ec5b6871c997ce16ff7556c228289ccfaac12820e8c497f91e02604eb78b9fd8f5fd26bca665d584a675516f9d36e3de5e405550f7e1a230a0fdaf465187742126b8d687733d92d964f01790d4f94e13ef6312d84e373c82a758c2d4fcc69231adae3768e553d96f481b0d88eeca357ff8da8390b5cf9ca78e145e01dd6451bd08a741d44f8f33921247f03d622ce48e91434206f58b578a767399e1bb5e1add203b16416cb58f4269dec08e33d06e7c509c44b9a037f12c0a252c055e059409dd30b0bc0d49c4e958c59569f216316a3d8cfee3c239acc3209e6c98ff9ecb2b3115694b7a614cff78bcbc471db59a66c83e103bad32dd4de479933671b0038e3c743f2a1fcbd516b9a3feeaa39ecf62c38324766d3c76ab64e259a82a954c3b787c8b312c3a2b021ed11be353a32047ea08e8f4b5aabe2bea722e81a21bbaf4e77e5eab2ef0b6be4eea9dcb41cf2de53ee5dbb5ff32aa348bfa9a30bf03427aaa7a81a9f4829c9ae235f34217cea5e7aa490963bbe161cc8131df1711157aa1c1f00f9d8849e8c55ae613b3a43e7b8b1a3968883303af3dbb28c26e78656b4dbf3c6785530d315606c0df77aad335c8c6682763217e5817f22a944b39f8c1c6c47de7c5f172fc729c4e5b6f5b6bcb50066ccb5188907f180f1f98539fbac1161380fffc5812b8d612cf05af4038cbbb70064c630e358ef2ef12ddda65174ab86cbf703e8763b4d770b74f8667cff57f0e584e221e49a940223b69ab239531c30f64200a2edb78421193ea2ac87b34b6cb6a0763be936fb52cece6230ffce68c046d1dc5cbc5242ba03bffd017882f0dc54c7a037fba5f11e5fc861bdf17d21940a656a54cce49a9a9e2bcc3595cd3ec3bd39b6a6d8b7cbb9d4284abcdb7a79ae4d005afc990650742d3a07d4ef5f4d8e21640077e2b7988c30a2d653b195fa144f0c0dbc5c6dc132ed2b89768c6785bb1d114b6bc8f90d8aec895db3e3c04e277fdd10cb7fbeda133ffb383156e78baa1480e9d958d198a86fa4f38d3ac28d4f747401ae1bb23915f005cfa7f834953595586f587b09d2f4aacb0c10e5b16ecf68748b9199d77f8d0afa010abd3949b54b17811767890befd9cbcad8bfcd8d3b0be145b6ce2330206b8a45cc154006f500e47e343db9e98e07d2ceac994a766cc34b581c50a93e871e83304d8a963afcb15a8cbf7a91208a5347270801a176b81057799cf55d018b4e3e72ab9af79959d651cc4e1c279ae8c028be759a6984b69c705c8a5988d9a8db825d74eedfe92a2ccc5bb5a88bc50797055439808eadb5740c26ef735e9c87360d66e3468fe9d8720a6c00e6ffa680ec803789baa4022d5337b0938592a720ea20aadaae324af2b80618ded18c76fd21217c5988f1039aab1e596e67d5374719aadf4764e38430d60cf741e90f8deb9226ed45febd1088fc1dbd903b806a3f029235b944323dc551deb6a3772b56a2365fbd9086d9a59183c77698373ea2c0d580b1719574cde3f7b0f9decebfb42219e0b4417836b13ef500aa0f5fcb1b168e62c6d22944f176c1998c3b754fd82fa4ec3981b2362d06e3b54302eab8182bff4bbda3f769925c4d02795e37896f3541e8e0abfea7289fabd704b9f59058b41762c53628e5d64b5702bc35b154dba8673dc35d3357a03ffc09291817eb35d8b78406cccc815b028d14442295746cfc4fa7bb68506823e43dec5f28e5719a34bca8c5cd46e977cf6719de994b414c7b4924dd864527e097f31302b1e531f0a43739065bb8d67f250eab864c15f06167f9effe90dd5f07d34ce3b943afaa326b072b9d79bd74782daa47898699391b46b8505619899269ada262aa2652513e869d7e8104881273ba227d90cf79dfd71265d90dfc4422b44257f96f0580f7c5a437d998bc860d6c56976459150922cfc5d18a73bc83881459eb5d2b1602f4cce329b5f6f6cb0bfb781e74ccaa8bf697e1f7ba246d617494ae4d92b9378167b9dabf87b505ebf59c29742a1b4263df2e5086e61f5e70af429986af1f0ceeefdbfa3ba77b5df37e54518a78b893b93865991fee8c187e33397b59f6a1398fa70fab2ab243465ff9c1fa460a2a6b50805a5a6d6b2e5036dba0044fb394382214fa180da6a9cc662e420d544ed8ab3daa3987a98b6286da568bf331359af99ab287a76550c33510b73779dda8e4a043563b2efb4ea5481dcfa1db556adb0f19305a0577633b045bc48521b3cb417ba2d95e5fa809c81a059bad1ec87bdc08a4b126f0bd451072efd8539a4f4f4b48150ee367c"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000002180)={r5, 0x5}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008961b0400000000000001090224000100000000090400050103000000092100000001221a34eb8f2b5c688f050009"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffffffffffb, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$SIOCSIFHWADDR(r8, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101b, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.654102194s ago: executing program 4 (id=1539): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(r0, &(0x7f00000002c0), 0x0, 0x14, 0xff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) unshare(0x2040400) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000280)={{&(0x7f000035c000/0x1000)=nil, 0x1000}, 0x3}) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f00000001c0)={0x1, 0x4, 0x5, 0x50, 0x80000000}) ptrace(0x10, r1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r6, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="12000000", @ANYRES32, @ANYBLOB="0a001b", @ANYRES64], 0x2c}], 0x45}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, @any, 0x9}, 0xa) 1.303666784s ago: executing program 1 (id=1540): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) pread64(r0, &(0x7f00000000c0)=""/9, 0x9, 0x4) 1.21591979s ago: executing program 1 (id=1541): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x161342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.16928818s ago: executing program 1 (id=1542): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_connect(0x6, 0x24, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x6f, 0xb6, 0x84, 0x40, 0x1de1, 0xc102, 0x7d08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0xda, 0x91}}]}}]}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 550.882097ms ago: executing program 1 (id=1543): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8001, 0x7, 0xff, 0x6}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e20, 0x86, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9fd7}}, 0x81, 0x9, 0x0, 0x6, 0x10001}, &(0x7f0000000200)=0x98) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2900, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000002c0)={0x100, 0x10, '\x00', 0x0, &(0x7f0000000280)=[0x0, 0x0]}) r3 = syz_io_uring_setup(0x595e, &(0x7f0000000300)={0x0, 0x5729, 0x1002, 0x3, 0xad}, &(0x7f0000000380), &(0x7f00000003c0)) r4 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x8, 0x40000) poll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x410}, {r3, 0xa032}, {}, {r4, 0x100}, {r1, 0x1418}], 0x5, 0x5) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000580)={&(0x7f0000000480), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x6, 0x0, 0x80000000, {}, {}, {0x0, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x1a, 0x1, 0x0, 0x0, "5c8920ab34da3db58d8df206308bdd7615bfde0a953b549372c87b7bd402c2d28637a079f171a8b3e4f2d11ee7a4d993968d73e9e158b7e062f7a24e5adf5ca8"}}, 0x80}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) getsockopt$sock_int(r5, 0x1, 0x22, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000640)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r7, 0xc08c5336, &(0x7f00000006c0)={0xea3, 0x8, 0x0, 'queue0\x00', 0x7}) syz_clone(0x200400, &(0x7f0000000780)="1094943aa25daf4eac02156936d487af80afb0d4995b4d5fa7c674599aae90a264ffce40b1883bdca385759d57e9b05fc20bc732339f0a554f832160a9c0e75a9607799e08e1bebf2611631fa40852d69c140d46e59fa1f4da3cde899cf4408771fe1f", 0x63, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="68089fe5a3d0f8fea79a07c650d42815781061d36a6b6384c22812f927e5876380cbafc350223e3e6f5ec48a24f21100b9ee29f0f981337e19181d9945be95a6ea2e7d11a5f3cb4acc7cfeb6de578d97fd0d36ee35a41dffcc76017b8106132d8d083ab59c3abe02affba76b48e22ad572c7d7a14a9940cb481f923edf9603a746a80266") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980)=0x4) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c80)={0x0, &(0x7f00000009c0)=[@uexit={0x0, 0x18, 0xa}, @cpuid={0x14, 0x18, {0x2, 0x8}}, @code={0xa, 0x60, {"f240d9fb0fc72a67450f01cb0f0179f566ba610066b8080066efb90b060000b885000000ba000000000f302ef26647d9fe66baf80cb850f60c8def66bafc0cb000ee0f01c566ba210066b8f50066ef"}}, @wr_crn={0x46, 0x20, {0x3, 0x2c3b}}, @wr_crn={0x46, 0x20, {0x0, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0x259}}, @code={0xa, 0x72, {"66b861008ed0670f38cd2eb9800000c00f3235008000000f30f24f0f2cea2640a6c401815c8cab7de0000066baf80cb8da74508def66bafc0c66b8003066ef48b8ea000000000000000f23c80f21f835040090000f23f8420f07f2440f707f7888"}}, @cpuid={0x14, 0x18, {0x0, 0x7ff}}, @wrmsr={0x1e, 0x20, {0x3f7, 0xffff}}, @rdmsr={0x32, 0x18, {0x313}}, @rdmsr={0x32, 0x18, {0x375}}, @rdmsr={0x32, 0x18, {0x82b}}, @wrmsr={0x1e, 0x20, {0x6b1, 0xffffffffffffff89}}, @uexit={0x0, 0x18, 0x41b}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @uexit={0x0, 0x18, 0x7fffffff}, @wr_crn={0x46, 0x20, {0x2, 0x1}}, @rdmsr={0x32, 0x18, {0x295}}, @cpuid={0x14, 0x18, {0x0, 0x145}}, @wr_crn={0x46, 0x20, {0x3, 0xb9}}], 0x2ba}) read(r8, &(0x7f0000000cc0)=""/32, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1, {0x73}}, './file0\x00'}) ioctl$I2C_TENBIT(r9, 0x704, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r9, 0x110, 0x5, &(0x7f0000000d40)=[0x3], 0x2) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000d80), 0x600000, 0x0) ioctl$SNAPSHOT_S2RAM(r10, 0x330b) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000e40)=0x0) mount$9p_fd(0x0, &(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00), 0x4028, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0xfff}}], [{@fowner_eq={'fowner', 0x3d, r11}}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff7}}, {@appraise_type}, {@uid_lt={'uid<', 0xee00}}, {@appraise}, {@euid_gt}]}}) 435.740863ms ago: executing program 1 (id=1544): r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x8000) sendfile(r5, r0, 0x0, 0x7fffefff) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x40946400, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 139.638489ms ago: executing program 0 (id=1545): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x4112, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r3 = fsopen(&(0x7f0000000080)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r5) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040010) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) 86.3998ms ago: executing program 0 (id=1546): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x57789000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x7ffff}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x38}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.801627ms ago: executing program 0 (id=1547): ioprio_set$pid(0x1, 0x0, 0x2007) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7fffefff) 6.742164ms ago: executing program 0 (id=1548): syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xc1, 0x66, 0xa0, 0x10, 0x483, 0x1234, 0xff76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xe4, 0xa8}}]}}]}}, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = msgget(0x1, 0x64d) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) (async) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="f5"], 0x8, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfd, 0x1f}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x3b, 0x0, "9ded9d61b06dc81d103e0f6900b695edeff80e01663328c082467cf0b42433fa4d47dd6a7ee2e05eba7dfa68546306f79be4052eb940143e88471c090e7c9ac0a4089613564c75d3a57acf6eb249f175"}, 0xd8) (async) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) fcntl$setstatus(r2, 0x4, 0x40800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='xfrm0\x00', 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) (async, rerun: 32) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRESDEC, @ANYRESDEC=r2, @ANYRESOCT=r3, @ANYRESDEC=r1, @ANYRESHEX, @ANYRES8=r0, @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(r4, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x24, 0x0, 0x0, 0x20}}, 0x50) (async) write$FUSE_LSEEK(r3, &(0x7f00000000c0)={0x18, 0x0, r6, {0x2239}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 0s ago: executing program 0 (id=1549): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r1, &(0x7f0000000000)='\"', 0xfdef) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005a00010d00000000000000000400008008000280"], 0x1c}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth1_virt_wifi\x00', @random="02e20400e000"}) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000100)=0x10000, 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): zero, skipping [ 247.987796][ T5945] usb 1-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 247.999381][ T5945] usb 1-1: config 7 interface 32 altsetting 3 endpoint 0x5 has invalid maxpacket 487, setting to 64 [ 248.010686][ T5945] usb 1-1: config 7 interface 32 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 248.020223][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.021588][ T5945] usb 1-1: config 7 interface 34 altsetting 28 endpoint 0x2 has invalid maxpacket 2048, setting to 64 [ 248.040933][ T5945] usb 1-1: config 7 interface 34 altsetting 28 has a duplicate endpoint with address 0xD, skipping [ 248.051824][ T981] usb 3-1: device descriptor read/64, error -71 [ 248.053241][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.058258][ T5945] usb 1-1: config 7 interface 34 altsetting 28 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 248.079911][ T5945] usb 1-1: config 7 interface 34 altsetting 28 has a duplicate endpoint with address 0x1, skipping [ 248.091251][ T5945] usb 1-1: config 7 interface 34 altsetting 28 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 248.102802][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 248.113662][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 248.117196][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.124616][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 248.135459][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.144995][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has a duplicate endpoint with address 0x82, skipping [ 248.163047][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 248.174343][ T981] usb usb3-port1: attempt power cycle [ 248.180504][ T5945] usb 1-1: config 7 interface 172 altsetting 6 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 248.192552][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has a duplicate endpoint with address 0x82, skipping [ 248.204156][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 248.216871][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 248.228341][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 248.239916][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 248.252012][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 248.263498][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 248.278281][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 248.289058][ T5945] usb 1-1: config 7 interface 172 altsetting 6 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 248.305129][ T5945] usb 1-1: config 7 interface 32 has no altsetting 0 [ 248.311923][ T5945] usb 1-1: config 7 interface 34 has no altsetting 0 [ 248.319339][ T5945] usb 1-1: config 7 interface 172 has no altsetting 0 [ 248.328125][ T5945] usb 1-1: Dual-Role OTG device on HNP port [ 248.334265][ T5945] usb 1-1: New USB device found, idVendor=1410, idProduct=b001, bcdDevice=83.85 [ 248.343381][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.351402][ T5945] usb 1-1: Product: ꢼ୿ウ嬁⧳盩ቅ譀䢯婾븺㛟緹䵧踑ὭᏏ왏⃅჈軅㿔랅咂엙恬ڽཚ⭰䖻壉䉰賟㾳 [ 248.364928][ T5945] usb 1-1: Manufacturer: 㠊 [ 248.369733][ T5945] usb 1-1: SerialNumber: ф [ 248.376405][ T9044] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 248.526262][ T981] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 248.546809][ T981] usb 3-1: device descriptor read/8, error -71 [ 248.651132][ T9079] /dev/rnullb0: Can't open blockdev [ 248.797061][ T981] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 248.826848][ T981] usb 3-1: device descriptor read/8, error -71 [ 248.938156][ T981] usb usb3-port1: unable to enumerate USB device [ 248.998992][ T5945] qmi_wwan 1-1:7.32: probe with driver qmi_wwan failed with error -22 [ 249.100454][ T9087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.110029][ T9087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.411667][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.420658][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.589874][ T9093] syzkaller1: entered promiscuous mode [ 249.595456][ T9093] syzkaller1: entered allmulticast mode [ 249.602794][ T9093] netlink: 'syz.1.882': attribute type 13 has an invalid length. [ 249.976172][ T5945] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 250.137423][ T5945] usb 2-1: too many configurations: 221, using maximum allowed: 8 [ 250.148367][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 250.155989][ T5945] usb 2-1: can't read configurations, error -61 [ 250.279670][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.291293][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.306107][ T5945] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 250.391362][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.400195][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.476702][ T5945] usb 2-1: too many configurations: 221, using maximum allowed: 8 [ 250.487450][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 250.495125][ T5945] usb 2-1: can't read configurations, error -61 [ 250.501816][ T5945] usb usb2-port1: attempt power cycle [ 250.636163][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 250.787477][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.799751][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 250.809164][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.817229][ T9] usb 3-1: Product: syz [ 250.821471][ T9] usb 3-1: Manufacturer: syz [ 250.826119][ T9] usb 3-1: SerialNumber: syz [ 250.832188][ T9] usb 3-1: config 0 descriptor?? [ 250.843332][ T9] yurex 3-1:0.0: Could not find endpoints [ 250.857319][ T5945] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 250.888580][ T5945] usb 2-1: too many configurations: 221, using maximum allowed: 8 [ 250.899464][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 250.907512][ T5945] usb 2-1: can't read configurations, error -61 [ 251.031674][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.040745][ T5945] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 251.046626][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.068654][ T9] usb 3-1: USB disconnect, device number 42 [ 251.077491][ T5945] usb 2-1: too many configurations: 221, using maximum allowed: 8 [ 251.094662][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 251.104674][ T9126] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 251.112569][ T5945] usb 2-1: can't read configurations, error -61 [ 251.124310][ T5945] usb usb2-port1: unable to enumerate USB device [ 251.657732][ T9144] /dev/rnullb0: Can't open blockdev [ 251.901057][ T9161] /dev/rnullb0: Can't open blockdev [ 251.931304][ T9163] /dev/rnullb0: Can't open blockdev [ 251.936958][ T9164] /dev/rnullb0: Can't open blockdev [ 251.942642][ T9164] cgroup: Bad value for 'name' [ 251.942642][ T9163] cgroup: Bad value for 'name' [ 251.974315][ T9166] overlayfs: conflicting options: userxattr,redirect_dir=on [ 252.448457][ T5945] usb 1-1: USB disconnect, device number 55 [ 252.697331][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.802911][ T9173] netlink: 14 bytes leftover after parsing attributes in process `syz.1.905'. [ 252.821802][ T9173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.837280][ T5945] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 252.848876][ T9173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.862507][ T9173] bond0 (unregistering): Released all slaves [ 252.924541][ T9173] binder: 9172:9173 ioctl c0306201 200000000640 returned -22 [ 252.966434][ T5945] usb 1-1: device descriptor read/64, error -71 [ 253.216146][ T5945] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 253.356239][ T5945] usb 1-1: device descriptor read/64, error -71 [ 253.476848][ T5945] usb usb1-port1: attempt power cycle [ 253.795279][ T9197] tipc: Enabled bearer , priority 10 [ 253.826144][ T5945] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 253.862576][ T9204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.875979][ T5945] usb 1-1: device descriptor read/8, error -71 [ 254.118247][ T5945] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 254.147052][ T5945] usb 1-1: device descriptor read/8, error -71 [ 254.181526][ T9214] /dev/rnullb0: Can't open blockdev [ 254.215561][ T9216] syz0: rxe_newlink: already configured on wlan1 [ 254.225613][ T9216] /dev/rnullb0: Can't open blockdev [ 254.256918][ T5945] usb usb1-port1: unable to enumerate USB device [ 254.264823][ T9219] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 254.276561][ T9219] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 254.421191][ T9223] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 254.644712][ T9241] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 254.842396][ T9253] /dev/rnullb0: Can't open blockdev [ 255.060397][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 255.076148][ T5945] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 255.227433][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.230878][ T9274] /dev/rnullb0: Can't open blockdev [ 255.246397][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.257447][ T5945] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.268501][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.281040][ T5945] usb 2-1: config 0 descriptor?? [ 255.441008][ T9286] syzkaller1: left promiscuous mode [ 255.614596][ T9291] tipc: New replicast peer: 255.255.255.255 [ 255.623185][ T9291] tipc: Enabled bearer , priority 10 [ 255.632174][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'. [ 255.652396][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 255.671621][ T9291] tipc: Disabling bearer [ 255.692674][ T5945] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 255.711609][ T5945] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input24 [ 255.739820][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.749784][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.758300][ T49] sl0: compressed packet ignored [ 255.768149][ T9297] /dev/rnullb0: Can't open blockdev [ 255.866728][ T5945] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 255.915697][ T9303] /dev/rnullb0: Can't open blockdev [ 255.915916][ T5873] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 255.968855][ T9301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.997914][ T5906] usb 2-1: USB disconnect, device number 45 [ 256.058896][ T9304] fido_id[9304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 256.060950][ T9301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.800708][ T9314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.951'. [ 256.818788][ T9314] /dev/rnullb0: Can't open blockdev [ 256.846331][ T981] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 257.048789][ T981] usb 2-1: too many configurations: 74, using maximum allowed: 8 [ 257.084008][ T981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 257.102095][ T981] usb 2-1: can't read configurations, error -61 [ 257.256201][ T981] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 257.431392][ T981] usb 2-1: too many configurations: 74, using maximum allowed: 8 [ 257.449812][ T981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 257.466118][ T981] usb 2-1: can't read configurations, error -61 [ 257.466443][ T981] usb usb2-port1: attempt power cycle [ 257.816132][ T981] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 257.847268][ T981] usb 2-1: too many configurations: 74, using maximum allowed: 8 [ 257.859082][ T981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 257.867311][ T981] usb 2-1: can't read configurations, error -61 [ 258.006838][ T981] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 258.037241][ T981] usb 2-1: too many configurations: 74, using maximum allowed: 8 [ 258.048984][ T981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 258.057812][ T981] usb 2-1: can't read configurations, error -61 [ 258.072153][ T981] usb usb2-port1: unable to enumerate USB device [ 258.183107][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.236769][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.556109][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 258.726102][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 258.732533][ T9] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 258.741416][ T9] usb 1-1: config 0 has no interface number 0 [ 258.747794][ T9] usb 1-1: config 0 interface 111 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 258.759859][ T9] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 258.769018][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.777369][ T9] usb 1-1: Product: syz [ 258.781611][ T9] usb 1-1: Manufacturer: syz [ 258.786259][ T9] usb 1-1: SerialNumber: syz [ 258.796502][ T9] usb 1-1: config 0 descriptor?? [ 258.916368][ T9] ushc 1-1:0.111: probe with driver ushc failed with error -110 [ 258.981125][ T9352] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.995860][ T9352] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.005044][ T9348] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 259.005856][ T9352] Mount JFS Failure: -5 [ 259.012277][ T9348] /dev/rnullb0: Can't open blockdev [ 259.024643][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.033333][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.054359][ T9] usb 1-1: USB disconnect, device number 60 [ 259.121190][ T9359] /dev/rnullb0: Can't open blockdev [ 259.279951][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.290055][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.546126][ T9] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 259.697455][ T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 259.716454][ T9] usb 1-1: config 0 has no interface number 0 [ 259.722585][ T9] usb 1-1: config 0 interface 41 has no altsetting 0 [ 259.747789][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 259.758803][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.776172][ T9] usb 1-1: Product: syz [ 259.786093][ T9] usb 1-1: Manufacturer: syz [ 259.791062][ T9] usb 1-1: SerialNumber: syz [ 259.802095][ T9] usb 1-1: config 0 descriptor?? [ 260.050388][ T30] audit: type=1326 audit(5269841529.303:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.1.973" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f563258ebe9 code=0x0 [ 260.086274][ T3206] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 260.192416][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.202227][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.214161][ T9362] /dev/rnullb0: Can't open blockdev [ 260.220311][ T9] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 260.230477][ T9] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 260.241209][ T9] usb 1-1: USB disconnect, device number 61 [ 260.250293][ T3206] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 260.260616][ T3206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.269691][ T3206] usb 3-1: Product: syz [ 260.273861][ T3206] usb 3-1: Manufacturer: syz [ 260.279652][ T3206] usb 3-1: SerialNumber: syz [ 260.751560][ T9394] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 260.821754][ T9400] /dev/rnullb0: Can't open blockdev [ 260.866602][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 260.884370][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 261.067970][ T9412] program syz.4.984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.416685][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.425175][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.425982][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.434644][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.520426][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.530250][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.681822][ T3206] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 261.694738][ T3206] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 261.704903][ T3206] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 261.715876][ T3206] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 261.729933][ T3206] usb 3-1: USB disconnect, device number 43 [ 261.936114][ T5945] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 262.096444][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 262.104113][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.114645][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.127321][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.138209][ T5945] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 262.148518][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.163222][ T5945] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.173002][ T5945] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.183354][ T5945] usb 1-1: Manufacturer: syz [ 262.195288][ T5945] usb 1-1: config 0 descriptor?? [ 262.500567][ T9442] /dev/rnullb0: Can't open blockdev [ 262.706539][ T9444] nbd0: detected capacity change from 0 to 127 [ 262.801278][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.806109][ T3206] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 262.817033][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.828898][ T9452] /dev/rnullb0: Can't open blockdev [ 262.966204][ T3206] usb 3-1: Using ep0 maxpacket: 16 [ 262.973267][ T3206] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.987583][ T3206] usb 3-1: config 8 has an invalid interface number: 172 but max is 0 [ 262.995789][ T3206] usb 3-1: config 8 has no interface number 0 [ 263.020645][ T3206] usb 3-1: config 8 interface 172 has no altsetting 0 [ 263.035322][ T3206] usb 3-1: New USB device found, idVendor=0499, idProduct=1020, bcdDevice=d0.bf [ 263.047745][ T3206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.055759][ T3206] usb 3-1: Product: syz [ 263.060034][ T3206] usb 3-1: Manufacturer: syz [ 263.060927][ T5945] rc_core: IR keymap rc-hauppauge not found [ 263.064629][ T3206] usb 3-1: SerialNumber: syz [ 263.078636][ T5945] Registered IR keymap rc-empty [ 263.084191][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.098488][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 263.108159][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.109195][ T9459] /dev/rnullb0: Can't open blockdev [ 263.123797][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 263.139862][ T5945] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 263.158092][ T5945] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input26 [ 263.175059][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.196249][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.216616][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.236525][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.266182][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.286601][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.299279][ T3206] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.299435][ T5869] block nbd0: Receive control failed (result -104) [ 263.312955][ T5873] block nbd0: Receive control failed (result -32) [ 263.312993][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.331809][ T9470] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 263.340956][ T3206] snd-usb-audio 3-1:8.172: probe with driver snd-usb-audio failed with error -2 [ 263.345736][ T9470] Error validating options; rc = [-22] [ 263.357867][ T9472] /dev/rnullb0: Can't open blockdev [ 263.361079][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.372981][ T3206] usb 3-1: USB disconnect, device number 44 [ 263.391046][ T9171] udevd[9171]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.172/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.407604][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.433320][ T5945] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.460294][ T5945] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 263.468461][ T5945] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 263.858708][ T9481] /dev/rnullb0: Can't open blockdev [ 264.030787][ T9492] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 264.286132][ T5945] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 264.447563][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.459662][ T5945] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=b1.f8 [ 264.469111][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.477961][ T5945] usb 3-1: Product: syz [ 264.482215][ T5945] usb 3-1: Manufacturer: syz [ 264.487409][ T5945] usb 3-1: SerialNumber: syz [ 264.493569][ T5945] usb 3-1: config 0 descriptor?? [ 264.579315][ T9494] trusted_key: encrypted_key: hex blob is missing [ 264.618783][ T9496] 9pnet: p9_errstr2errno: server reported unknown error [ 264.703696][ T9492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.713123][ T9492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.723856][ T5945] usb 3-1: Cannot retrieve CPort count: -71 [ 264.731757][ T5906] usb 1-1: USB disconnect, device number 62 [ 264.746612][ T5945] usb 3-1: Cannot retrieve CPort count: -71 [ 264.753842][ T5945] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 264.794851][ T5945] usb 3-1: USB disconnect, device number 45 [ 264.838765][ T9501] /dev/rnullb0: Can't open blockdev [ 265.451540][ T9520] netlink: 'syz.1.1019': attribute type 29 has an invalid length. [ 265.459770][ T9521] netlink: 'syz.1.1019': attribute type 29 has an invalid length. [ 265.468760][ T9521] /dev/rnullb0: Can't open blockdev [ 265.469542][ T9520] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1019'. [ 265.483297][ T9520] unsupported nla_type 58 [ 265.808994][ T9453] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 266.119133][ T9453] usb 2-1: config 0 has no interfaces? [ 266.143297][ T9453] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 266.202295][ T9453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.257167][ T9453] usb 2-1: config 0 descriptor?? [ 266.462744][ T9597] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 266.541881][ T5906] usb 2-1: USB disconnect, device number 50 [ 266.606907][ T3206] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 266.724468][ T9615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.735001][ T9615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.751012][ T9615] syzkaller1: entered promiscuous mode [ 266.756964][ T9615] syzkaller1: entered allmulticast mode [ 266.766172][ T3206] usb 1-1: Using ep0 maxpacket: 32 [ 266.773675][ T3206] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 266.783145][ T3206] usb 1-1: config 0 has no interface number 0 [ 266.791379][ T3206] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 266.800786][ T3206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.808856][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 266.816818][ T3206] usb 1-1: Product: syz [ 266.821605][ T3206] usb 1-1: Manufacturer: syz [ 266.826950][ T3206] usb 1-1: SerialNumber: syz [ 266.843929][ T3206] usb 1-1: config 0 descriptor?? [ 266.966087][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 266.972492][ T9] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 266.981143][ T9] usb 3-1: config 0 has no interface number 0 [ 266.989602][ T9] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=68.96 [ 266.998785][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.006834][ T9] usb 3-1: Product: syz [ 267.011005][ T9] usb 3-1: Manufacturer: syz [ 267.015614][ T9] usb 3-1: SerialNumber: syz [ 267.028298][ T9] usb 3-1: config 0 descriptor?? [ 267.037806][ T9] powermate 3-1:0.108: probe with driver powermate failed with error -5 [ 267.248932][ T9] usb 3-1: USB disconnect, device number 46 [ 267.783330][ T9622] /dev/rnullb0: Can't open blockdev [ 268.606105][ T6206] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 268.756194][ T6206] usb 3-1: device descriptor read/64, error -71 [ 268.997337][ T6206] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 269.112707][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.124475][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.146332][ T6206] usb 3-1: device descriptor read/64, error -71 [ 269.266386][ T6206] usb usb3-port1: attempt power cycle [ 269.307310][ T3206] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.327121][ T3206] usb 1-1: USB disconnect, device number 63 [ 269.350084][ T5906] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 269.366360][ T9657] udevd[9657]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.536129][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 269.543479][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 269.554354][ T5906] usb 2-1: config 82 has an invalid interface number: 96 but max is 0 [ 269.565356][ T5906] usb 2-1: config 82 has no interface number 0 [ 269.572910][ T5906] usb 2-1: config 82 interface 96 altsetting 225 has an endpoint descriptor with address 0x11, changing to 0x1 [ 269.585157][ T5906] usb 2-1: config 82 interface 96 altsetting 225 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.597544][ T5906] usb 2-1: config 82 interface 96 has no altsetting 0 [ 269.607839][ T5906] usb 2-1: string descriptor 0 read error: -22 [ 269.614093][ T5906] usb 2-1: New USB device found, idVendor=16ab, idProduct=7802, bcdDevice=ce.24 [ 269.616105][ T6206] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 269.624759][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.649274][ T5906] usb 2-1: Could not find all expected endpoints [ 269.667898][ T6206] usb 3-1: device descriptor read/8, error -71 [ 269.910705][ T9453] usb 2-1: USB disconnect, device number 51 [ 269.937426][ T6206] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 269.988919][ T6206] usb 3-1: device descriptor read/8, error -71 [ 270.107916][ T6206] usb usb3-port1: unable to enumerate USB device [ 271.256604][ T9453] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 271.311042][ T9668] /dev/sg0: Can't lookup blockdev [ 271.436421][ T9453] usb 1-1: Using ep0 maxpacket: 8 [ 271.444641][ T9453] usb 1-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 271.444665][ T9453] usb 1-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 271.444701][ T9453] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 271.444722][ T9453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.505091][ T5869] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 271.626241][ T6206] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 271.731070][ T9453] usb 1-1: string descriptor 0 read error: -71 [ 271.750728][ T9453] usb 1-1: Found UVC 0.00 device (2833:0201) [ 271.769687][ T9453] usb 1-1: No valid video chain found. [ 271.806280][ T9453] usb 1-1: USB disconnect, device number 64 [ 271.838152][ T6206] usb 2-1: Using ep0 maxpacket: 16 [ 271.861201][ T6206] usb 2-1: config 0 has no interfaces? [ 271.875322][ T6206] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 271.896707][ T6206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.913529][ T6206] usb 2-1: Product: syz [ 271.926066][ T6206] usb 2-1: Manufacturer: syz [ 271.937394][ T6206] usb 2-1: SerialNumber: syz [ 271.953483][ T6206] usb 2-1: config 0 descriptor?? [ 272.011999][ T9691] syzkaller1: left allmulticast mode [ 273.354298][ T9713] ./cgroup: Can't lookup blockdev [ 273.393527][ T9715] /dev/rnullb0: Can't open blockdev [ 273.437559][ T9719] /dev/rnullb0: Can't open blockdev [ 273.443339][ T9718] /dev/rnullb0: Can't open blockdev [ 273.516285][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 273.621642][ T9731] /dev/rnullb0: Can't open blockdev [ 273.662886][ T9733] /dev/rnullb0: Can't open blockdev [ 273.677773][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 273.704637][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.718060][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 273.731613][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 273.742992][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 273.753002][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 273.763026][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.777222][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 273.788211][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 273.796904][ T10] usb 1-1: Manufacturer: syz [ 273.806876][ T10] usb 1-1: config 0 descriptor?? [ 273.881121][ T9742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.891186][ T9742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.092637][ T9755] dns_resolver: Unsupported server list version (0) [ 274.107195][ T9755] /dev/rnullb0: Can't open blockdev [ 274.376491][ T10] usb 2-1: USB disconnect, device number 52 [ 274.470163][ T9764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.659789][ T9787] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 274.682566][ T9787] /dev/rnullb0: Can't open blockdev [ 274.772584][ T9792] team0: No ports can be present during mode change [ 274.779261][ T9794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.779500][ T9794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.867845][ T9792] /dev/rnullb0: Can't open blockdev [ 275.236107][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 276.148058][ T9453] usb 1-1: USB disconnect, device number 65 [ 276.206767][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20450 ms [ 276.214823][ C1] sl0: transmit timed out, driver error? [ 277.316169][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 283.724383][ T64] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 292.836391][ T126] block nbd0: Connection timed out, retrying (0/2 alive) [ 292.843862][ T126] block nbd0: Connection timed out, retrying (0/2 alive) [ 292.854112][ T126] block nbd0: Connection timed out, retrying (0/2 alive) [ 292.861348][ T11] block nbd0: Dead connection, failed to find a fallback [ 292.868623][ T126] block nbd0: Connection timed out, retrying (0/2 alive) [ 292.875726][ T11] block nbd0: shutting down sockets [ 292.881205][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.890363][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 292.898513][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.908062][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 292.915895][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.925323][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 292.933227][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.942816][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 292.950847][ T9131] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.960067][ T9131] Buffer I/O error on dev nbd0, logical block 0, async page read [ 292.968115][ T9131] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.977221][ T9131] Buffer I/O error on dev nbd0, logical block 1, async page read [ 292.985077][ T9131] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.994190][ T9131] Buffer I/O error on dev nbd0, logical block 2, async page read [ 293.002128][ T9131] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.011230][ T9131] Buffer I/O error on dev nbd0, logical block 3, async page read [ 293.019189][ T9131] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.028490][ T9131] Buffer I/O error on dev nbd0, logical block 0, async page read [ 293.036460][ T9131] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.046092][ T9131] Buffer I/O error on dev nbd0, logical block 1, async page read [ 293.055375][ T9131] ldm_validate_partition_table(): Disk read failed. [ 293.063331][ T9131] Dev nbd0: unable to read RDB block 0 [ 293.069890][ T9131] nbd0: unable to read partition table [ 293.080124][ T9131] ldm_validate_partition_table(): Disk read failed. [ 293.087874][ T9131] Dev nbd0: unable to read RDB block 0 [ 293.094362][ T9131] nbd0: unable to read partition table [ 298.757087][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 305.599582][ T9814] sd 0:0:1:0: PR command failed: 1026 [ 305.605125][ T9814] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 305.612017][ T9814] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 305.615453][ T9828] /dev/rnullb0: Can't open blockdev [ 305.888294][ T9837] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 305.914629][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.926496][ T9837] CIFS mount error: No usable UNC path provided in device string! [ 305.926496][ T9837] [ 305.932685][ T9842] CIFS: iocharset name too long [ 305.963836][ T9837] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 306.329619][ T9867] sctp: [Deprecated]: syz.2.1112 (pid 9867) Use of int in max_burst socket option. [ 306.329619][ T9867] Use struct sctp_assoc_value instead [ 306.378617][ T9872] /dev/rnullb0: Can't open blockdev [ 306.456168][ T6206] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 306.609076][ T6206] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 306.618266][ T6206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.626332][ T6206] usb 2-1: Product: syz [ 306.630499][ T6206] usb 2-1: Manufacturer: syz [ 306.635081][ T6206] usb 2-1: SerialNumber: syz [ 306.641532][ T6206] usb 2-1: config 0 descriptor?? [ 306.647869][ T6206] hso 2-1:0.0: Not our interface [ 306.652994][ T6206] usb-storage 2-1:0.0: USB Mass Storage device detected [ 306.736150][ T5906] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 306.886097][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 306.897005][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.907967][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.921082][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.940193][ T5906] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 306.949796][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.961305][ T5906] usb 1-1: config 0 descriptor?? [ 307.373958][ T5906] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000B/input/input28 [ 307.391425][ T5906] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 307.507551][ T9916] /dev/rnullb0: Can't open blockdev [ 307.562066][ T9920] 9p: Bad value for 'rfdno' [ 307.568319][ T9920] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 307.575248][ T9920] /dev/rnullb0: Can't open blockdev [ 307.609437][ T9923] syzkaller1: entered promiscuous mode [ 307.614976][ T9923] syzkaller1: entered allmulticast mode [ 307.703744][ T9928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.713009][ T9928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.723850][ T9928] /dev/rnullb0: Can't open blockdev [ 307.959950][ T5869] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 308.125244][ T9959] input: syz0 as /devices/virtual/input/input30 [ 308.253253][ T30] audit: type=1804 audit(5269841577.503:7): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1143" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 308.274344][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.716316][ T5906] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 308.832672][ T9996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.844062][ T9996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.871989][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 308.885626][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 308.896790][ T5906] usb 3-1: can't read configurations, error -71 [ 309.275661][ T3206] usb 2-1: USB disconnect, device number 53 [ 309.343150][T10025] /dev/rnullb0: Can't lookup blockdev [ 309.471992][ T6206] usb 1-1: USB disconnect, device number 66 [ 309.601047][ T30] audit: type=1804 audit(5269841578.853:8): pid=10045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1155" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 309.763651][T10057] /dev/rnullb0: Can't lookup blockdev [ 309.786372][ T30] audit: type=1804 audit(5269841579.033:9): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1156" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 310.009470][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.038836][T10078] /dev/rnullb0: Can't lookup blockdev [ 310.049993][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.087277][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 310.171644][T10085] /dev/nullb0: Can't open blockdev [ 310.376123][ T5906] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 310.383778][ T3206] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 310.479536][T10094] syzkaller1: left promiscuous mode [ 310.484768][T10094] syzkaller1: left allmulticast mode [ 310.536316][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 310.542640][ T3206] usb 1-1: Using ep0 maxpacket: 8 [ 310.549243][ T5906] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 310.558514][ T5906] usb 2-1: config 0 has no interface number 0 [ 310.566403][ T5906] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 310.575640][ T3206] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 310.584772][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.592940][ T3206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.601017][ T5906] usb 2-1: Product: syz [ 310.605224][ T5906] usb 2-1: Manufacturer: syz [ 310.609983][ T3206] usb 1-1: Product: syz [ 310.614203][ T3206] usb 1-1: Manufacturer: syz [ 310.618872][ T5906] usb 2-1: SerialNumber: syz [ 310.622641][T10104] /dev/rnullb0: Can't lookup blockdev [ 310.624765][ T3206] usb 1-1: SerialNumber: syz [ 310.635467][ T3206] usb 1-1: config 0 descriptor?? [ 310.641225][ T5906] usb 2-1: config 0 descriptor?? [ 310.648862][ T5906] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 310.663347][ T5906] pctv452e: pctv452e_power_ctrl: 1 [ 310.663347][ T5906] [ 310.670784][ T5906] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 310.670784][ T5906] [ 310.689029][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 310.695952][T10109] Invalid/unusable pipe [ 310.703471][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 310.725191][ T5906] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 310.742622][ T5906] usb 2-1: media controller created [ 310.752447][ T5906] dvb-usb: bulk message failed: -22 (8/0) [ 310.760008][ T5906] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 310.769815][ T5906] dvb-usb: MAC address reading failed. [ 310.788177][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.824214][ T5906] DVB: Unable to find symbol stb0899_attach() [ 310.830412][ T5906] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 310.851484][T10120] MTD: Couldn't look up '/dev/rnullb0': -15 [ 310.879877][ T43] usb 1-1: USB disconnect, device number 67 [ 310.906092][ T5906] rc_core: IR keymap rc-tt-1500 not found [ 310.924234][ T5906] Registered IR keymap rc-empty [ 310.930194][ T5906] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1 [ 310.967350][ T5906] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1/input31 [ 310.991831][ T6206] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 311.001717][ T5906] dvb-usb: schedule remote query interval to 100 msecs. [ 311.031288][ T5906] pctv452e: pctv452e_power_ctrl: 0 [ 311.031288][ T5906] [ 311.041187][T10124] /dev/rnullb0: Can't lookup blockdev [ 311.048880][ T5906] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 311.068005][T10124] /dev/rnullb0: Can't lookup blockdev [ 311.082610][ T5906] usb 2-1: USB disconnect, device number 54 [ 311.188332][ T6206] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 311.195636][ T5906] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 311.197560][ T6206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 311.215372][ T6206] usb 3-1: SerialNumber: syz [ 311.236580][ T6206] usb 3-1: config 0 descriptor?? [ 311.358987][T10137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.367790][T10137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.575987][T10153] /dev/rnullb0: Can't lookup blockdev [ 311.647742][ T6206] hackrf 3-1:0.0: Board ID: 00 [ 311.648648][T10159] input: syz1 as /devices/virtual/input/input32 [ 311.652581][ T6206] hackrf 3-1:0.0: Firmware version: [ 311.678207][ T6206] hackrf 3-1:0.0: Registered as swradio24 [ 311.685531][ T6206] videodev: could not get a free minor [ 311.698827][ T6206] hackrf 3-1:0.0: Failed to register as video device (-23) [ 311.710483][ T6206] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 311.722284][ T6206] usb 3-1: USB disconnect, device number 53 [ 311.990117][ T30] audit: type=1804 audit(5269841581.243:10): pid=10191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1190" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 312.011859][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.043106][ T30] audit: type=1400 audit(5269841581.293:11): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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audit: type=1804 audit(5269841581.303:12): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1191" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 312.198452][T10198] program syz.2.1193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.199841][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.216879][ T6206] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 312.220790][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.266245][ T5906] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 312.376093][ T6206] usb 2-1: Using ep0 maxpacket: 16 [ 312.383003][ T6206] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 312.394855][ T6206] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.402682][T10201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1194'. [ 312.405058][ T6206] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.420388][ T5906] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 312.430762][ T6206] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.444781][ T6206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.451708][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.453384][ T6206] usb 2-1: Product: ᠁ [ 312.465763][ T6206] usb 2-1: Manufacturer: 룕ꢢ˰ᘗᩅۡկ솇봝勏楢윬寒할⑓皪ᷮᬵ僘ޓ邌鼲徯羊Ᏹ᳆Ʃ嵡색ġ䐛刽䆞컟䩓筕늍ᜐꥐఏ菳峥䗉ኼ虳싞푵偂惶僁홧๓灥婆ꅬ之唻䈺☓ﳧ曟癥ᾤ퍻⹱虜谬㧦젹텷 [ 312.469412][ T5906] usb 1-1: Product: syz [ 312.494519][ T6206] usb 2-1: SerialNumber: 䞕猳ᆬ휚㫒눐ģ枈ஙᲯꅶ愬Ż㾥ା㳧ᷠ㼗ჟꖑ滝Ԛ볙㧾Ⓞ䫕챴刖乁鑸肯Ƛ翷됐ץ雛堛醥鍮㲖儉촠啤ᐴ欷ᓅ扌渎㦐 [ 312.495979][ T5906] usb 1-1: Manufacturer: syz [ 312.522459][ T5906] usb 1-1: SerialNumber: syz [ 312.540357][ T5906] usb 1-1: config 0 descriptor?? [ 312.548559][ T5906] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 312.603261][T10208] /dev/rnullb0: Can't lookup blockdev [ 312.762836][ T6206] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 312.776818][ T6206] cdc_ncm 2-1:1.0: bind() failure [ 312.829936][ T5869] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 312.830914][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 312.845933][T10217] erspan0: default FDB implementation only supports local addresses [ 312.972560][ T43] usb 2-1: USB disconnect, device number 55 [ 312.977513][ T5906] usb 1-1: USB disconnect, device number 68 [ 313.028020][T10233] /dev/rnullb0: Can't lookup blockdev [ 313.065737][ T30] audit: type=1804 audit(5269841582.313:13): pid=10235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1206" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 313.095001][T10238] /dev/rnullb0: Can't lookup blockdev [ 313.311565][ T30] audit: type=1804 audit(5269841582.563:14): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1208" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 313.450838][ T30] audit: type=1804 audit(5269841582.703:15): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1210" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 313.503958][T10251] netlink: 'syz.0.1211': attribute type 63 has an invalid length. [ 313.512702][T10251] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1211'. [ 313.618166][T10258] 8021q: VLANs not supported on syzkaller1 [ 313.630502][T10258] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1214'. [ 313.641733][T10258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.700425][T10263] program syz.2.1215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.710944][T10263] /dev/rnullb0: Can't lookup blockdev [ 313.846141][ T6206] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 313.986107][ T6206] usb 1-1: device descriptor read/64, error -71 [ 314.104370][T10272] /dev/rnullb0: Can't lookup blockdev [ 314.226118][ T3206] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 314.233956][ T6206] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 314.386100][ T3206] usb 3-1: Using ep0 maxpacket: 16 [ 314.386105][ T6206] usb 1-1: device descriptor read/64, error -71 [ 314.386188][ T9453] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 314.457916][ T3206] usb 3-1: unable to get BOS descriptor or descriptor too short [ 314.469142][ T3206] usb 3-1: no configurations [ 314.473767][ T3206] usb 3-1: can't read configurations, error -22 [ 314.506317][ T6206] usb usb1-port1: attempt power cycle [ 314.569066][ T9453] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.579668][ T9453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 314.589869][ T9453] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.602989][ T9453] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 314.612074][ T9453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.621346][ T9453] usb 2-1: config 0 descriptor?? [ 314.629489][ T9453] em28xx 2-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 314.638290][ T9453] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 314.649305][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.866389][ T6206] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 314.897061][ T9453] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 314.903250][ T6206] usb 1-1: device descriptor read/8, error -71 [ 314.978761][ T9453] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 314.987384][ T9453] em28xx 2-1:0.0: board has no eeprom [ 315.002508][T10277] MTD: Couldn't look up '/dev/rnullb0': -15 [ 315.056165][ T9453] em28xx 2-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 315.065765][ T9453] em28xx 2-1:0.0: dvb set to bulk mode. [ 315.072639][ T981] em28xx 2-1:0.0: Binding DVB extension [ 315.084235][ T9453] usb 2-1: USB disconnect, device number 56 [ 315.100957][ T9453] em28xx 2-1:0.0: Disconnecting em28xx [ 315.119691][T10284] /dev/rnullb0: Can't lookup blockdev [ 315.146149][ T6206] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 315.172612][ T6206] usb 1-1: device descriptor read/8, error -71 [ 315.175667][T10288] /dev/rnullb0: Can't lookup blockdev [ 315.286773][ T6206] usb usb1-port1: unable to enumerate USB device [ 315.311188][ T981] DVB: Unable to find symbol drxk_attach() [ 315.317284][ T981] em28xx 2-1:0.0: Registering input extension [ 315.323536][ T9453] em28xx 2-1:0.0: Closing input extension [ 315.334137][ T9453] em28xx 2-1:0.0: Freeing device [ 315.391044][T10297] /dev/rnullb0: Can't lookup blockdev [ 315.391693][T10298] /dev/rnullb0: Can't lookup blockdev [ 315.450928][T10302] /dev/rnullb0: Can't lookup blockdev [ 315.483513][ T30] audit: type=1804 audit(5269841584.733:16): pid=10304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1233" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 315.526318][ T3206] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 315.676097][ T3206] usb 3-1: Using ep0 maxpacket: 16 [ 315.683213][ T3206] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 315.693908][ T3206] usb 3-1: config 0 has no interface number 0 [ 315.702303][ T3206] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 315.711505][ T3206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.719906][ T3206] usb 3-1: Product: syz [ 315.724096][ T3206] usb 3-1: Manufacturer: syz [ 315.729086][ T3206] usb 3-1: SerialNumber: syz [ 315.734955][ T3206] usb 3-1: config 0 descriptor?? [ 315.742321][ T3206] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 315.786176][ T5906] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 315.944124][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 315.953523][ T5906] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 315.961304][ T5906] usb 2-1: can't read configurations, error -71 [ 316.202685][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.211372][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.355239][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 316.365558][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 316.375638][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 316.385568][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 316.396161][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 316.406460][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 316.416355][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 316.426361][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 316.436208][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 316.446133][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 316.456215][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 316.469592][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 316.479643][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 316.491076][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 316.502747][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 316.513279][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 316.525481][ T3206] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 316.536807][ T3206] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 316.550657][ T3206] usb 3-1: USB disconnect, device number 55 [ 316.648694][T10333] random: crng reseeded on system resumption [ 316.689252][T10333] kvm: pic: non byte write [ 316.789898][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.798807][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.800346][T10341] MTD: Couldn't look up '/dev/rnullb0': -15 [ 316.917537][ T5873] Bluetooth: hci4: unexpected event 0x04 length: 4 < 10 [ 316.924638][T10349] Bluetooth: hci4: Frame reassembly failed (-84) [ 316.931423][ T5873] Bluetooth: hci4: unexpected event 0x04 length: 4 < 10 [ 316.933327][T10349] Bluetooth: hci4: Frame reassembly failed (-84) [ 316.938685][ T5873] Bluetooth: hci4: unexpected event 0x04 length: 4 < 10 [ 316.945930][T10349] Bluetooth: hci4: Frame reassembly failed (-84) [ 316.953027][ T5873] Bluetooth: hci4: unexpected event 0x04 length: 4 < 10 [ 316.959744][T10347] Bluetooth: hci4: Frame reassembly failed (-84) [ 317.050341][T10354] /dev/rnullb0: Can't lookup blockdev [ 317.078835][T10356] /dev/rnullb0: Can't lookup blockdev [ 317.147386][T10360] MTD: Couldn't look up './file0': -15 [ 317.158331][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.164675][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.173053][ T9565] sl0: compressed packet ignored [ 317.194517][T10362] input: syz1 as /devices/virtual/input/input36 [ 317.202906][T10362] MTD: Couldn't look up '/dev/rnullb0': -15 [ 317.210960][T10362] 9p: Unknown parameter 'rootcontext' [ 317.220093][T10362] tls_set_device_offload: netdev not found [ 317.292948][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.302675][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.313790][T10367] /dev/rnullb0: Can't lookup blockdev [ 317.535928][T10378] netlink: 'syz.0.1252': attribute type 4 has an invalid length. [ 317.656232][ T5906] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 317.817151][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 317.825129][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 317.834805][ T5906] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 317.844325][ T5906] usb 2-1: config 11 has no interface number 0 [ 317.851652][ T5906] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.857035][T10387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.864861][ T5906] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 317.873894][T10387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.880546][ T5906] usb 2-1: config 11 interface 244 has no altsetting 0 [ 317.897476][ T5906] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 317.907461][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.915464][ T5906] usb 2-1: Product: syz [ 317.922735][ T5906] usb 2-1: Manufacturer: syz [ 317.927817][ T5906] usb 2-1: SerialNumber: syz [ 317.992486][T10396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.003129][T10396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.016432][ T3206] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 318.017961][T10396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.033953][T10396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.143679][T10376] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1251'. [ 318.154459][T10376] omfs: Invalid superblock (0) [ 318.165903][T10376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.174572][T10376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.184233][ T3206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 318.195733][ T3206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25864, setting to 1024 [ 318.215672][ T3206] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 318.226308][ T5906] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 318.235263][ T3206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.243585][ T5906] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 318.254119][ T3206] usb 1-1: config 0 descriptor?? [ 318.263009][T10384] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 318.304170][T10396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.313821][ T5906] peak_usb 2-1:11.244: probe with driver peak_usb failed with error -71 [ 318.314772][T10396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.330001][ T5906] usb 2-1: USB disconnect, device number 59 [ 318.340563][T10396] MTD: Couldn't look up '/dev/rnullb0': -15 [ 318.475600][ T3206] usbhid 1-1:0.0: can't add hid device: -71 [ 318.481912][ T3206] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 318.491307][ T3206] usb 1-1: USB disconnect, device number 73 [ 318.740925][T10399] raw_sendmsg: syz.1.1260 forgot to set AF_INET. Fix it! [ 318.916217][ T5873] Bluetooth: hci4: command 0x1003 tx timeout [ 318.922660][ T5869] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 318.930150][ T981] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 318.977039][T10405] /dev/rnullb0: Can't lookup blockdev [ 318.994571][T10406] /dev/rnullb0: Can't lookup blockdev [ 319.077436][T10414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.104374][T10414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.106250][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 319.127871][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.149417][ T981] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 319.160649][ T30] audit: type=1804 audit(5269841588.413:17): pid=10414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1266" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 319.164961][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.208586][ T981] usb 1-1: config 0 descriptor?? [ 319.214673][T10384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.486301][ T6206] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 319.632028][ T981] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 319.676709][ T6206] usb 3-1: Using ep0 maxpacket: 32 [ 319.686255][ T6206] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 319.699604][ T6206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.712129][ T6206] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 319.741214][ T6206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.759789][ T6206] usb 3-1: Product: syz [ 319.766284][ T6206] usb 3-1: Manufacturer: syz [ 319.775718][ T30] audit: type=1804 audit(5269841589.023:18): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1269" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 319.775906][ T6206] usb 3-1: SerialNumber: syz [ 319.808353][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 319.808728][ T6206] usb 3-1: config 0 descriptor?? [ 319.817948][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 319.825754][ T6206] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 319.836274][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 319.854349][ T5906] usb 1-1: USB disconnect, device number 74 [ 319.863251][ T6206] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 319.887329][ T6206] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 319.916251][ T6206] keyspan 3-1:0.0: unsupported endpoint type 0 [ 319.922532][ T6206] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 319.934549][ T6206] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 319.945840][ T6206] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 319.955332][ T6206] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 319.965843][ T6206] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 320.095475][T10427] overlay: ./file0 is not a directory [ 320.239311][T10433] XFS (nullb0): Invalid superblock magic number [ 320.283051][ T30] audit: type=1804 audit(5269841589.533:19): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1275" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 320.599358][T10453] /dev/rnullb0: Can't lookup blockdev [ 320.647905][T10456] blk_print_req_error: 138 callbacks suppressed [ 320.647924][T10456] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.663570][T10456] buffer_io_error: 138 callbacks suppressed [ 320.663585][T10456] Buffer I/O error on dev nbd0, logical block 0, async page read [ 320.681724][T10456] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.692707][T10456] Buffer I/O error on dev nbd0, logical block 1, async page read [ 320.703228][T10456] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.713733][T10456] Buffer I/O error on dev nbd0, logical block 2, async page read [ 320.723021][T10456] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.732420][T10456] Buffer I/O error on dev nbd0, logical block 3, async page read [ 320.742384][T10456] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.751763][T10456] Buffer I/O error on dev nbd0, logical block 0, async page read [ 320.762318][T10456] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.762674][T10457] /dev/rnullb0: Can't lookup blockdev [ 320.772350][T10456] Buffer I/O error on dev nbd0, logical block 1, async page read [ 320.786326][T10456] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.797663][T10456] Buffer I/O error on dev nbd0, logical block 2, async page read [ 320.805994][T10456] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.820212][T10456] Buffer I/O error on dev nbd0, logical block 3, async page read [ 320.828434][T10456] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.839070][T10456] Buffer I/O error on dev nbd0, logical block 0, async page read [ 320.847774][T10456] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.858603][T10456] Buffer I/O error on dev nbd0, logical block 1, async page read [ 320.869639][T10456] ldm_validate_partition_table(): Disk read failed. [ 320.879094][T10456] Dev nbd0: unable to read RDB block 0 [ 320.885923][T10456] nbd0: unable to read partition table [ 320.971362][T10461] /dev/rnullb0: Can't lookup blockdev [ 320.994934][ T5857] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 321.007275][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 321.007300][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.007311][ T5857] Call Trace: [ 321.007317][ T5857] [ 321.007324][ T5857] dump_stack_lvl+0x189/0x250 [ 321.007353][ T5857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.007378][ T5857] ? __pfx__printk+0x10/0x10 [ 321.007400][ T5857] ? rcu_is_watching+0x15/0xb0 [ 321.007419][ T5857] dump_header+0xd3/0x480 [ 321.007435][ T5857] oom_kill_process+0x387/0x920 [ 321.007454][ T5857] out_of_memory+0xf09/0x12a0 [ 321.007473][ T5857] ? rcu_is_watching+0x15/0xb0 [ 321.007490][ T5857] ? __pfx_out_of_memory+0x10/0x10 [ 321.007504][ T5857] ? percpu_ref_put+0x19/0x180 [ 321.007519][ T5857] ? lock_release+0x4b/0x3e0 [ 321.007537][ T5857] mem_cgroup_out_of_memory+0x145/0x240 [ 321.007554][ T5857] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 321.007574][ T5857] ? _raw_spin_unlock+0x28/0x50 [ 321.007591][ T5857] ? memcg1_oom_prepare+0x37f/0x450 [ 321.007611][ T5857] try_charge_memcg+0xdff/0x1290 [ 321.007631][ T5857] ? rcu_is_watching+0x15/0xb0 [ 321.007650][ T5857] ? __pfx_try_charge_memcg+0x10/0x10 [ 321.007669][ T5857] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 321.007685][ T5857] ? xa_load+0x60/0x210 [ 321.007704][ T5857] ? rcu_is_watching+0x15/0xb0 [ 321.007721][ T5857] ? rcu_is_watching+0x15/0xb0 [ 321.007737][ T5857] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 321.007759][ T5857] charge_memcg+0x9f/0x180 [ 321.007779][ T5857] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 321.007799][ T5857] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 321.007821][ T5857] __read_swap_cache_async+0x28c/0x510 [ 321.007845][ T5857] swap_cluster_readahead+0x305/0x5f0 [ 321.007866][ T5857] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 321.007887][ T5857] ? rcu_is_watching+0x15/0xb0 [ 321.007903][ T5857] ? filemap_get_entry+0xad/0x2f0 [ 321.007921][ T5857] ? get_vma_policy+0x27c/0x3c0 [ 321.007944][ T5857] swapin_readahead+0x17d/0xb50 [ 321.007962][ T5857] ? __pfx_filemap_get_entry+0x10/0x10 [ 321.007979][ T5857] ? get_swap_device_info+0x1c/0x2b0 [ 321.007996][ T5857] ? rcu_is_watching+0x15/0xb0 [ 321.008020][ T5857] ? __pfx_swapin_readahead+0x10/0x10 [ 321.008039][ T5857] ? __filemap_get_folio+0x9a6/0xaf0 [ 321.008060][ T5857] ? swap_cache_get_folio+0xae/0x3b0 [ 321.008079][ T5857] do_swap_page+0x525/0x5ac0 [ 321.008105][ T5857] ? ___pte_offset_map+0x29/0x250 [ 321.008126][ T5857] ? lock_acquire+0x5f/0x360 [ 321.008141][ T5857] ? do_swap_page+0x184/0x5ac0 [ 321.008160][ T5857] ? __pfx_do_swap_page+0x10/0x10 [ 321.008180][ T5857] ? __pfx_default_wake_function+0x10/0x10 [ 321.008196][ T5857] ? ___pte_offset_map+0x45/0x250 [ 321.008214][ T5857] ? ___pte_offset_map+0x1cf/0x250 [ 321.008241][ T5857] ? pte_offset_map_rw_nolock+0xea/0x160 [ 321.008263][ T5857] __handle_mm_fault+0xe55/0x5400 [ 321.008290][ T5857] ? __pfx___handle_mm_fault+0x10/0x10 [ 321.008311][ T5857] ? rcu_is_watching+0x15/0xb0 [ 321.008331][ T5857] ? lock_vma_under_rcu+0x3cb/0x450 [ 321.008347][ T5857] ? rcu_is_watching+0x15/0xb0 [ 321.008364][ T5857] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 321.008382][ T5857] handle_mm_fault+0x40a/0x8e0 [ 321.008406][ T5857] do_user_addr_fault+0xa81/0x1390 [ 321.008426][ T5857] ? rcu_is_watching+0x15/0xb0 [ 321.008443][ T5857] ? trace_page_fault_user+0x84/0x1e0 [ 321.008460][ T5857] exc_page_fault+0x82/0x100 [ 321.008480][ T5857] asm_exc_page_fault+0x26/0x30 [ 321.008495][ T5857] RIP: 0033:0x7f563258eb8a [ 321.008511][ T5857] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 9b 63 ff ff 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 32 00 00 90 [ 321.008526][ T5857] RSP: 002b:00007ffd37648e00 EFLAGS: 00010202 [ 321.008542][ T5857] RAX: 0000000000000000 RBX: 000000000000033f RCX: 0000000000000000 [ 321.008551][ T5857] RDX: 60599b3cd19fbf00 RSI: 0000000000000000 RDI: 000055555d9ce808 [ 321.008561][ T5857] RBP: 00007ffd37648e6c R08: 0000000000000000 R09: 0000000000000000 [ 321.008570][ T5857] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 321.008580][ T5857] R13: 00000000000927c0 R14: 000000000004dd1f R15: 00007ffd37648ec0 [ 321.008597][ T5857] [ 321.009093][ T5857] memory: usage 307200kB, limit 307200kB, failcnt 8240 [ 321.427864][ T5857] memory+swap: usage 307852kB, limit 9007199254740988kB, failcnt 0 [ 321.429904][ T3206] usb 3-1: USB disconnect, device number 56 [ 321.435823][ T5857] kmem: usage 2536kB, limit 9007199254740988kB, failcnt 0 [ 321.435839][ T5857] Memory cgroup stats for /syz1 [ 321.453722][ T3206] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 321.469848][ T5857] : [ 321.469993][ T5857] cache 311971840 [ 321.489839][ T3206] keyspan 3-1:0.0: device disconnected [ 321.511082][ T5857] rss 0 [ 321.513885][ T5857] rss_huge 0 [ 321.517582][ T5857] shmem 311971840 [ 321.531055][ T5857] mapped_file 0 [ 321.534661][ T5857] dirty 0 [ 321.539218][ T5857] writeback 0 [ 321.542529][ T5857] workingset_refault_anon 18 [ 321.549381][ T5857] workingset_refault_file 512 [ 321.554066][ T5857] swap 667648 [ 321.558243][ T5857] swapcached 4096 [ 321.567347][ T5857] pgpgin 273852 [ 321.570837][ T5857] pgpgout 199219 [ 321.584682][ T5857] pgfault 138114 [ 321.612491][ T5857] pgmajfault 515 [ 321.621387][ T5857] inactive_anon 0 [ 321.625710][ T5857] active_anon 293699584 [ 321.628496][ T30] audit: type=1804 audit(5269841590.873:20): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1286" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 321.632127][ T5857] inactive_file 0 [ 321.658332][ T5857] active_file 0 [ 321.665386][ T5857] unevictable 18276352 [ 321.670067][ T5857] hierarchical_memory_limit 314572800 [ 321.677503][ T5857] hierarchical_memsw_limit 9223372036854771712 [ 321.683756][ T5857] total_cache 311971840 [ 321.704583][ T5857] total_rss 0 [ 321.708080][ T5857] total_rss_huge 0 [ 321.711824][ T5857] total_shmem 311971840 [ 321.716730][ T5857] total_mapped_file 0 [ 321.722508][T10476] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1286'. [ 321.737588][T10476] fuse: Unknown parameter '' [ 321.747027][ T5857] total_dirty 0 [ 321.750538][ T5857] total_writeback 0 [ 321.754511][ T5857] total_workingset_refault_anon 18 [ 321.760952][ T5857] total_workingset_refault_file 512 [ 321.767547][ T5857] total_swap 667648 [ 321.774117][ T5857] total_swapcached 4096 [ 321.778572][ T5857] total_pgpgin 273852 [ 321.782569][ T5857] total_pgpgout 199219 [ 321.790752][ T5857] total_pgfault 138114 [ 321.794845][ T5857] total_pgmajfault 515 [ 321.800612][ T5857] total_inactive_anon 0 [ 321.804790][ T5857] total_active_anon 293699584 [ 321.809804][ T5857] total_inactive_file 0 [ 321.814109][ T5857] total_active_file 0 [ 321.820781][ T5857] total_unevictable 18276352 [ 321.825719][ T5857] anon_cost 0 [ 321.831328][ T5857] file_cost 0 [ 321.834689][ T5857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1260,pid=10398,uid=0 [ 321.850567][ T5857] Memory cgroup out of memory: Killed process 10398 (syz.1.1260) total-vm:102024kB, anon-rss:1148kB, file-rss:23336kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 322.273532][T10495] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1292'. [ 322.356293][ T6206] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 322.506456][ T6206] usb 3-1: Using ep0 maxpacket: 32 [ 322.519169][ T6206] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 322.531483][ T6206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.541097][ T6206] usb 3-1: Product: syz [ 322.549693][ T6206] usb 3-1: Manufacturer: syz [ 322.550676][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.569796][ T6206] usb 3-1: SerialNumber: syz [ 322.576338][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.580831][ T6206] usb 3-1: config 0 descriptor?? [ 322.590745][T10499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.601202][ T6206] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 322.606453][T10499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.620670][ T30] audit: type=1804 audit(5269841591.873:21): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1293" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 322.641880][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.270169][ T30] audit: type=1800 audit(5269841592.523:22): pid=10520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1301" name="rnullb0" dev="devtmpfs" ino=3201 res=0 errno=0 [ 323.291220][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.392939][T10527] /dev/rnullb0: Can't lookup blockdev [ 323.429864][T10531] /dev/rnullb0: Can't lookup blockdev [ 323.438366][T10531] /dev/rnullb0: Can't lookup blockdev [ 323.525351][T10537] ./file0: Can't lookup blockdev [ 323.619660][ T6206] gspca_stk1135: reg_w 0x7 err -71 [ 323.630624][ T6206] gspca_stk1135: serial bus timeout: status=0x00 [ 323.639838][ T6206] gspca_stk1135: Sensor write failed [ 323.645415][ T6206] gspca_stk1135: serial bus timeout: status=0x00 [ 323.653908][ T6206] gspca_stk1135: Sensor write failed [ 323.655243][T10546] ldm_validate_partition_table(): Disk read failed. [ 323.661746][ T6206] gspca_stk1135: serial bus timeout: status=0x00 [ 323.673777][ T6206] gspca_stk1135: Sensor read failed [ 323.680759][ T6206] gspca_stk1135: serial bus timeout: status=0x00 [ 323.687466][ T6206] gspca_stk1135: Sensor read failed [ 323.692724][ T6206] gspca_stk1135: Detected sensor type unknown (0x0) [ 323.700868][T10546] Dev nbd0: unable to read RDB block 0 [ 323.709037][T10546] nbd0: unable to read partition table [ 323.714699][ T6206] gspca_stk1135: serial bus timeout: status=0x00 [ 323.722739][T10547] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 323.731878][ T6206] gspca_stk1135: Sensor read failed [ 323.737601][ T6206] gspca_stk1135: serial bus timeout: status=0x00 [ 323.744289][T10547] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1310'. [ 323.745021][ T30] audit: type=1804 audit(5269841592.933:23): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1308" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 323.753917][ T6206] gspca_stk1135: Sensor read failed [ 323.775225][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.798357][ T6206] gspca_stk1135: serial bus timeout: status=0x00 [ 323.804768][ T6206] gspca_stk1135: Sensor write failed [ 323.811212][ T6206] gspca_stk1135: serial bus timeout: status=0x00 [ 323.819278][ T6206] gspca_stk1135: Sensor write failed [ 323.824627][ T6206] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 323.842707][ T6206] usb 3-1: USB disconnect, device number 57 [ 323.904982][ T30] audit: type=1804 audit(5269841593.153:24): pid=10550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1311" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 323.926234][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.296073][ T6206] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 324.379228][T10566] binder: 10565:10566 ioctl 227e 200000000100 returned -22 [ 324.380858][T10567] binder: 10565:10567 ioctl c0306201 200000000280 returned -14 [ 324.416288][ T5945] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 324.446501][ T6206] usb 1-1: Using ep0 maxpacket: 16 [ 324.453122][ T6206] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.466240][ T6206] usb 1-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 324.475373][ T6206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.486723][ T6206] usb 1-1: config 0 descriptor?? [ 324.587944][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.599071][ T5945] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 324.608449][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.617639][ T5945] usb 3-1: config 0 descriptor?? [ 324.652674][T10578] netlink: 'syz.4.1319': attribute type 40 has an invalid length. [ 324.826561][ T5945] usbhid 3-1:0.0: can't add hid device: -71 [ 324.833054][ T5945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 324.860326][ T5945] usb 3-1: USB disconnect, device number 58 [ 325.113222][ T5906] usb 1-1: USB disconnect, device number 75 [ 325.286170][ T5945] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 325.456336][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 325.465369][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.489442][T10591] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 325.496155][ T5945] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 325.516083][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.526805][ T5945] usb 3-1: config 0 descriptor?? [ 325.533796][ T5945] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 325.556993][ T5945] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 325.585413][T10593] MTD: Couldn't look up '/dev/rnullb0': -15 [ 325.896113][ T5945] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 325.936209][ T6206] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 325.994846][ T981] usb 3-1: USB disconnect, device number 59 [ 326.004093][ T981] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 326.056215][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 326.066605][ T5945] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 326.074980][ T5945] usb 2-1: config 0 has no interface number 0 [ 326.082980][ T5945] usb 2-1: config 0 interface 12 has no altsetting 0 [ 326.092405][ T5945] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 326.104595][ T6206] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 326.116095][ T5945] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 326.125468][ T6206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 326.138739][ T5945] usb 2-1: Product: syz [ 326.142962][ T5945] usb 2-1: Manufacturer: syz [ 326.148148][ T6206] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 326.161380][ T5945] usb 2-1: SerialNumber: syz [ 326.168178][ T5945] usb 2-1: config 0 descriptor?? [ 326.173365][ T6206] usb 1-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 326.186412][ T6206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.203767][ T6206] usb 1-1: config 0 descriptor?? [ 326.210576][T10600] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 327.430726][T10609] /dev/rnullb0: Can't lookup blockdev [ 327.528524][T10611] Bluetooth: MGMT ver 1.23 [ 327.533729][T10611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1330'. [ 327.630581][T10621] /dev/rnullb0: Can't lookup blockdev [ 327.672442][ T5945] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 327.686307][ T5945] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 327.692017][T10627] /dev/rnullb0: Can't lookup blockdev [ 327.693842][ T5945] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 327.708151][ T5945] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 327.732345][ T5945] usb 2-1: USB disconnect, device number 60 [ 327.862675][ T30] audit: type=1804 audit(5269841597.113:25): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1337" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 328.300801][T10650] Can't find a SQUASHFS superblock on nullb0 [ 328.337717][ T30] audit: type=1804 audit(5269841597.593:26): pid=10652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1342" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 328.646171][ T3206] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 328.667579][T10678] /dev/sg0: Can't lookup blockdev [ 328.695120][T10680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.704683][T10680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.715979][T10680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.725584][T10680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.745905][T10680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.754692][T10680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.799554][ T3206] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 328.808770][ T3206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.816828][ T3206] usb 2-1: Product: syz [ 328.820994][ T3206] usb 2-1: Manufacturer: syz [ 328.825610][ T3206] usb 2-1: SerialNumber: syz [ 328.831911][ T3206] usb 2-1: config 0 descriptor?? [ 328.846197][ T5906] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 328.860256][ T6206] usbhid 1-1:0.0: can't add hid device: -71 [ 328.867634][ T6206] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 328.881721][ T6206] usb 1-1: USB disconnect, device number 76 [ 329.006110][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 329.013058][ T5906] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 329.021683][ T5906] usb 3-1: config 162 has no interface number 0 [ 329.028580][ T5906] usb 3-1: config 162 interface 97 has no altsetting 0 [ 329.038397][ T5906] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 329.047635][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.055644][ T5906] usb 3-1: Product: syz [ 329.060075][ T3206] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.068614][ T5906] usb 3-1: Manufacturer: syz [ 329.073281][ T5906] usb 3-1: SerialNumber: syz [ 329.377939][ T5906] metro_usb 3-1:162.97: Metrologic USB to Serial converter detected [ 329.395434][ T5906] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 329.413351][ T5906] usb 3-1: USB disconnect, device number 60 [ 329.425287][ T5906] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 329.437086][ T5906] metro_usb 3-1:162.97: device disconnected [ 329.447018][T10689] input: syz1 as /devices/virtual/input/input37 [ 329.856938][ T5906] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 329.909026][T10699] /dev/rnullb0: Can't lookup blockdev [ 329.940052][T10701] /dev/rnullb0: Can't lookup blockdev [ 330.007620][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.019178][ T5906] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 330.029258][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.029823][ T30] audit: type=1804 audit(5269841599.283:27): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1360" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 330.057600][ T5906] usb 1-1: config 0 descriptor?? [ 330.273617][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 330.281227][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 330.291907][ T5906] usb 1-1: USB disconnect, device number 77 [ 330.373415][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.383242][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.393407][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'. [ 330.403536][T10712] veth1_macvtap: left promiscuous mode [ 330.475979][ T3206] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 330.499484][ T3206] usb 2-1: USB disconnect, device number 61 [ 330.522169][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.528642][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.534514][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.541185][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.547136][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.552746][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.558667][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.564313][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.570038][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.575769][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.581534][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.588484][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.594272][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.601301][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.607520][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.613307][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.619150][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.625172][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.631114][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.637086][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.642741][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.648521][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.654196][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.659908][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.665575][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.672052][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.678732][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.684364][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.690408][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.696084][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.701660][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.707345][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.712963][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.718647][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.724391][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.730639][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.736585][ T5906] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 330.739524][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.750723][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.756521][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.762259][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.768203][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.774041][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.780085][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.785711][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.791507][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.797235][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.802854][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.808684][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.814510][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.820271][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.826802][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.833069][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.839513][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.845190][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.850990][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.857427][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.863219][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.869448][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.875545][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.881665][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.886414][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 330.887514][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.899656][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.904291][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.905402][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.917778][ T5906] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 330.922643][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.931455][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.939339][T10718] /dev/rnullb0: Can't lookup blockdev [ 330.947547][ T5906] usb 1-1: config 0 descriptor?? [ 330.957251][ T5906] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 330.968231][ T5906] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 331.095942][ T30] audit: type=1804 audit(5269841600.343:28): pid=10739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1370" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 331.136736][ T3206] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 331.165776][ T5906] usb 1-1: USB disconnect, device number 78 [ 331.181539][ T5906] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 331.181775][T10745] /dev/rnullb0: Can't lookup blockdev [ 331.296223][ T3206] usb 3-1: Using ep0 maxpacket: 16 [ 331.304675][ T3206] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 331.313811][ T3206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.322256][ T3206] usb 3-1: Product: syz [ 331.326644][ T3206] usb 3-1: Manufacturer: syz [ 331.331252][ T3206] usb 3-1: SerialNumber: syz [ 331.337702][ T3206] usb 3-1: config 0 descriptor?? [ 331.345351][ T3206] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 331.354624][ T3206] usb 3-1: Detected FT232H [ 331.546700][ T3206] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 331.958983][ T3206] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 332.077488][ T6206] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 332.143678][T10767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.153542][T10767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.166188][ T5945] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 332.230737][ T3206] usb 3-1: USB disconnect, device number 61 [ 332.236134][ T6206] usb 1-1: Using ep0 maxpacket: 16 [ 332.244993][ T3206] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 332.246751][ T6206] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.257290][ T3206] ftdi_sio 3-1:0.0: device disconnected [ 332.268417][ T6206] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 332.281357][ T6206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 332.291473][ T6206] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 332.301686][ T6206] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.314668][ T5945] usb 2-1: device descriptor read/64, error -71 [ 332.322451][ T6206] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 332.332177][ T6206] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 332.340258][ T6206] usb 1-1: Manufacturer: syz [ 332.346170][ T6206] usb 1-1: config 0 descriptor?? [ 332.352386][T10752] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 332.556432][ T5945] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 332.707194][ T5945] usb 2-1: device descriptor read/64, error -71 [ 332.775388][T10777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.784486][T10777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.800125][T10777] netlink: 'syz.4.1383': attribute type 10 has an invalid length. [ 332.804449][ T30] audit: type=1804 audit(5269841602.053:29): pid=10777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1383" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 332.808977][T10777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1383'. [ 332.841084][ T5945] usb usb2-port1: attempt power cycle [ 332.848005][T10777] batadv0: entered allmulticast mode [ 332.848862][T10780] sctp: [Deprecated]: syz.2.1384 (pid 10780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.848862][T10780] Use struct sctp_sack_info instead [ 332.855107][T10777] bridge0: port 3(batadv0) entered blocking state [ 332.878384][ T30] audit: type=1804 audit(5269841602.103:30): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1384" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 332.879720][T10777] bridge0: port 3(batadv0) entered disabled state [ 332.908404][T10777] batadv0: entered promiscuous mode [ 332.915142][T10777] bridge0: port 3(batadv0) entered blocking state [ 332.921689][T10777] bridge0: port 3(batadv0) entered forwarding state [ 333.216136][ T5945] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 333.236825][ T5945] usb 2-1: device descriptor read/8, error -71 [ 333.336364][ T9551] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 333.345645][ T9551] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 333.496189][ T5945] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 333.517237][ T5945] usb 2-1: device descriptor read/8, error -71 [ 333.626708][ T5945] usb usb2-port1: unable to enumerate USB device [ 333.706087][ T3206] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 333.726324][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 333.860404][ T3206] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 333.869581][ T3206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.879477][ T3206] usb 3-1: Product: syz [ 333.883672][ T3206] usb 3-1: Manufacturer: syz [ 333.889030][ T3206] usb 3-1: SerialNumber: syz [ 333.898205][ T3206] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 333.926513][ T5906] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 334.635950][T10799] /dev/rnullb0: Can't lookup blockdev [ 334.739463][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.769919][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.930971][T10801] trusted_key: syz.2.1391 sent an empty control message without MSG_MORE. [ 334.952082][ T6206] rc_core: IR keymap rc-hauppauge not found [ 334.966798][ T3206] usb 3-1: USB disconnect, device number 62 [ 334.977909][ T6206] Registered IR keymap rc-empty [ 334.998212][ T5906] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 335.005328][ T5906] ath9k_htc: Failed to initialize the device [ 335.008641][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.020963][ T3206] usb 3-1: ath9k_htc: USB layer deinitialized [ 335.048943][ T30] audit: type=1804 audit(5269841604.303:31): pid=10816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1395" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 335.081643][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.130454][ T6206] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 335.150727][ T6206] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input38 [ 335.180180][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.209091][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.249534][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.278399][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.299132][T10833] /dev/rnullb0: Can't lookup blockdev [ 335.307834][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.356936][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.369565][T10836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 335.386152][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.395028][T10836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 335.406292][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.415751][T10836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 335.436370][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.445790][ T30] audit: type=1804 audit(5269841604.693:32): pid=10836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1401" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 335.480457][ T6206] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 335.507259][ T6206] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 335.516638][ T6206] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 335.544819][ T6206] usb 1-1: USB disconnect, device number 79 [ 335.562588][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 335.585026][T10850] /dev/rnullb0: Can't lookup blockdev [ 335.643121][ T30] audit: type=1804 audit(5269841604.893:33): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1406" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 335.644239][T10852] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1406'. [ 335.730145][T10857] /dev/rnullb0: Can't lookup blockdev [ 335.826211][ T5906] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 335.903857][T10862] comedi comedi0: Cannot bond this driver to itself! [ 335.976137][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 335.984639][T10845] /dev/rnullb0: Can't lookup blockdev [ 335.992288][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 336.000118][ T5906] usb 2-1: no configurations [ 336.004793][ T5906] usb 2-1: can't read configurations, error -22 [ 336.075114][T10866] /dev/rnullb0: Can't lookup blockdev [ 336.104111][T10869] /dev/rnullb0: Can't lookup blockdev [ 336.104111][T10868] /dev/rnullb0: Can't lookup blockdev [ 336.270042][T10886] /dev/rnullb0: Can't lookup blockdev [ 336.532587][T10903] rdma_rxe: rxe_newlink: failed to add wlan1 [ 336.542823][T10903] /dev/rnullb0: Can't lookup blockdev [ 336.605647][T10908] binder: 10907:10908 ioctl c0306201 200000000080 returned -14 [ 336.614523][ T30] audit: type=1326 audit(5269841605.873:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24e2d8ebe9 code=0x7fc00000 [ 336.670467][T10910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.679789][T10910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.784514][T10912] MTD: Couldn't look up '/dev/rnullb0': -15 [ 336.790612][T10912] /dev/rnullb0: Can't lookup blockdev [ 336.879057][T10914] lo speed is unknown, defaulting to 1000 [ 336.885271][T10914] lo speed is unknown, defaulting to 1000 [ 336.891699][T10914] lo speed is unknown, defaulting to 1000 [ 336.898872][T10914] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 336.911931][T10914] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 336.928469][T10914] lo speed is unknown, defaulting to 1000 [ 336.934912][T10914] lo speed is unknown, defaulting to 1000 [ 336.941821][T10914] lo speed is unknown, defaulting to 1000 [ 336.948286][T10914] lo speed is unknown, defaulting to 1000 [ 337.075690][ T30] audit: type=1804 audit(5269841606.323:35): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1431" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 337.130539][T10924] /dev/rnullb0: Can't lookup blockdev [ 337.137258][T10924] /dev/rnullb0: Can't lookup blockdev [ 337.191856][T10930] ./cgroup: Can't lookup blockdev [ 337.233122][ T30] audit: type=1804 audit(5269841606.483:36): pid=10937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1436" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 337.280691][T10939] MTD: Couldn't look up '/dev/rnullb0': -15 [ 337.286827][T10939] /dev/rnullb0: Can't lookup blockdev [ 337.363889][T10949] kAFS: unparsable volume name [ 337.372669][T10950] binder: 10947:10950 ioctl c0306201 200000000480 returned -14 [ 337.476260][ T6206] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 337.540437][T10959] MTD: Couldn't look up '/dev/rnullb0': -15 [ 337.637294][ T6206] usb 2-1: Using ep0 maxpacket: 32 [ 337.645843][ T6206] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 337.654766][ T6206] usb 2-1: config 0 has no interface number 0 [ 337.661795][ T6206] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 337.673021][ T6206] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.684904][ T6206] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.696463][ T6206] usb 2-1: config 0 interface 196 has no altsetting 0 [ 337.707014][ T6206] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 337.717013][ T6206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.725184][ T6206] usb 2-1: Product: syz [ 337.729734][ T6206] usb 2-1: Manufacturer: syz [ 337.734507][ T6206] usb 2-1: SerialNumber: syz [ 337.742328][ T6206] usb 2-1: config 0 descriptor?? [ 337.748681][T10937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 337.761691][ T30] audit: type=1804 audit(5269841607.013:37): pid=10975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1450" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 337.765261][T10973] blk_print_req_error: 118 callbacks suppressed [ 337.765284][T10973] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.801795][T10973] buffer_io_error: 118 callbacks suppressed [ 337.801812][T10973] Buffer I/O error on dev nbd0, logical block 0, async page read [ 337.815807][T10973] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.824919][T10973] Buffer I/O error on dev nbd0, logical block 1, async page read [ 337.833229][T10973] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.842519][T10973] Buffer I/O error on dev nbd0, logical block 2, async page read [ 337.852085][T10973] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.862032][T10973] Buffer I/O error on dev nbd0, logical block 3, async page read [ 337.870359][T10973] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.879840][T10973] Buffer I/O error on dev nbd0, logical block 0, async page read [ 337.888091][T10973] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.897813][T10973] Buffer I/O error on dev nbd0, logical block 1, async page read [ 337.906971][T10973] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.916224][T10973] Buffer I/O error on dev nbd0, logical block 2, async page read [ 337.924091][T10973] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.933250][T10973] Buffer I/O error on dev nbd0, logical block 3, async page read [ 337.941287][T10973] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.950497][T10973] Buffer I/O error on dev nbd0, logical block 0, async page read [ 337.959650][T10973] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.968776][T10973] Buffer I/O error on dev nbd0, logical block 1, async page read [ 337.979061][T10973] ldm_validate_partition_table(): Disk read failed. [ 337.987173][T10973] Dev nbd0: unable to read RDB block 0 [ 337.994252][ T6206] ipheth 2-1:0.196: Unable to find endpoints [ 338.004004][T10973] nbd0: unable to read partition table [ 338.012512][ T6206] usb 2-1: USB disconnect, device number 68 [ 338.036368][ T981] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 338.161911][T10981] /dev/rnullb0: Can't lookup blockdev [ 338.190725][T10985] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 338.204831][T10985] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 338.204947][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.224849][T10986] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 338.224858][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.244452][ T981] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 338.248174][T10986] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 338.254145][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.276090][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 21110 ms [ 338.284213][ C1] sl0: transmit timed out, driver error? [ 338.307143][ T981] usb 3-1: config 0 descriptor?? [ 338.328703][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.338895][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.709384][ T30] audit: type=1804 audit(5269841607.963:38): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1461" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 338.809638][ T981] usbhid 3-1:0.0: can't add hid device: -71 [ 338.820699][ T981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 338.837171][ T981] usb 3-1: USB disconnect, device number 63 [ 338.976540][ T5906] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 338.998316][ T43] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 339.009712][T11037] /dev/rnullb0: Can't lookup blockdev [ 339.136218][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 339.148457][ T5906] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 339.159041][T11050] /dev/rnullb0: Can't lookup blockdev [ 339.166147][ T5906] usb 2-1: config 0 has no interface number 0 [ 339.169605][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.182485][ T5906] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 339.193431][ T43] usb 1-1: config 0 has no interface number 0 [ 339.202533][ T5906] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 339.203551][ T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.225280][ T5906] usb 2-1: config 0 interface 41 has no altsetting 0 [ 339.240252][ T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.254291][ T43] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 339.263956][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.278785][ T5906] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 339.282584][ T43] usb 1-1: config 0 descriptor?? [ 339.300353][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.319948][ T5906] usb 2-1: Product: syz [ 339.329531][ T5906] usb 2-1: Manufacturer: syz [ 339.339655][ T5906] usb 2-1: SerialNumber: syz [ 339.353838][ T5906] usb 2-1: config 0 descriptor?? [ 339.366607][T11015] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 339.374002][T11015] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 339.418926][T11061] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 339.425557][T11061] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 339.434809][T11061] vhci_hcd vhci_hcd.0: Device attached [ 339.442839][T11062] vhci_hcd: connection closed [ 339.443247][ T36] vhci_hcd: stop threads [ 339.453936][ T36] vhci_hcd: release socket [ 339.458633][ T36] vhci_hcd: disconnect device [ 339.481519][T11066] /dev/rnullb0: Can't lookup blockdev [ 339.585308][T11015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.594035][T11015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.603117][T11015] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 339.610628][T11015] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 339.706527][ T43] prodikeys 0003:041E:2801.000E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 339.718723][ T43] hid_prodikeys: hid-prodikeys: failed to find output report [ 339.718723][ T43] [ 339.914232][ T43] usb 1-1: USB disconnect, device number 80 [ 339.970008][ T30] audit: type=1804 audit(5269841609.223:39): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1480" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 340.220649][ T5906] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 340.358984][T11080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1483'. [ 340.368727][T11080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1483'. [ 340.379385][T11080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1483'. [ 340.388620][T11080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1483'. [ 340.646005][T11100] /dev/rnullb0: Can't lookup blockdev [ 340.652525][T11101] /dev/rnullb0: Can't lookup blockdev [ 340.976161][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 341.025259][T11110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1492'. [ 341.034614][T11110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1492'. [ 341.047395][T11110] team_slave_0: entered promiscuous mode [ 341.053082][T11110] team_slave_1: entered promiscuous mode [ 341.059865][T11109] team_slave_0: left promiscuous mode [ 341.065319][T11109] team_slave_1: left promiscuous mode [ 341.137481][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 341.145677][ T9] usb 1-1: config 0 has no interface number 0 [ 341.151991][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.168369][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.181196][ T9] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.202332][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 341.211550][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.223731][ T9] usb 1-1: config 0 descriptor?? [ 341.231806][T11123] MTD: Couldn't look up '/dev/rnullb0': -15 [ 341.269418][T11126] /dev/rnullb0: Can't lookup blockdev [ 341.354583][T11137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.369683][T11137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.373699][T11138] wlan1 speed is unknown, defaulting to 1000 [ 341.383310][T11137] /dev/rnullb0: Can't lookup blockdev [ 341.504983][T11138] lo speed is unknown, defaulting to 1000 [ 341.528542][ T5906] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 341.544089][ T5906] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 341.566903][ T5906] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 341.570870][T11139] /dev/rnullb0: Can't lookup blockdev [ 341.583252][ T5906] usb 2-1: USB disconnect, device number 69 [ 341.653355][ T9] usbhid 1-1:0.1: can't add hid device: -71 [ 341.660288][ T9] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 341.670612][ T9] usb 1-1: USB disconnect, device number 81 [ 341.865399][ T30] audit: type=1804 audit(5269841611.113:40): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1502" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 341.924654][T11145] could not allocate digest TFM handle sha224-ce [ 342.116650][T11166] /dev/rnullb0: Can't lookup blockdev [ 342.334834][T11188] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 342.374265][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.396528][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.466135][ T9] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 342.476213][ T43] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 342.631126][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 342.638911][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.640570][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.656867][ T9] usb 1-1: Product: syz [ 342.661043][ T9] usb 1-1: Manufacturer: syz [ 342.665634][ T9] usb 1-1: SerialNumber: syz [ 342.666408][ T43] usb 3-1: config 0 has no interface number 0 [ 342.677706][ T9] usb 1-1: config 0 descriptor?? [ 342.686183][ T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.699386][ T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.713535][ T43] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 342.725945][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.736782][ T43] usb 3-1: config 0 descriptor?? [ 342.884618][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 342.894915][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 343.140683][T11222] binder: 11221:11222 ioctl aece 0 returned -22 [ 343.154412][ T43] prodikeys 0003:041E:2801.000F: reserved main item tag 0xd [ 343.163872][ T43] prodikeys 0003:041E:2801.000F: item fetching failed at offset 6/7 [ 343.173435][ T43] prodikeys 0003:041E:2801.000F: hid parse failed [ 343.180231][ T43] prodikeys 0003:041E:2801.000F: probe with driver prodikeys failed with error -22 [ 343.187916][T11224] netlink: 15678 bytes leftover after parsing attributes in process `syz.4.1517'. [ 343.252086][ T5906] usb 1-1: USB disconnect, device number 82 [ 343.351329][T11233] loop7: detected capacity change from 0 to 7 [ 343.358955][T11233] Dev loop7: unable to read RDB block 7 [ 343.364453][ T9] usb 3-1: USB disconnect, device number 64 [ 343.364550][T11233] loop7: AHDI p1 p2 [ 343.375254][T11233] loop7: partition table partially beyond EOD, truncated [ 343.385218][T11233] loop7: p1 start 1702000233 is beyond EOD, truncated [ 343.584354][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.593082][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.786223][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 343.946113][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 343.952868][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 343.962067][ T9] usb 1-1: config 5 has an invalid interface number: 52 but max is 0 [ 343.972451][ T9] usb 1-1: config 5 has no interface number 0 [ 343.974992][T11258] /dev/rnullb0: Can't lookup blockdev [ 343.979830][T11259] /dev/rnullb0: Can't lookup blockdev [ 343.990155][ T9] usb 1-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 344.003900][ T9] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 344.013298][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.021963][ T9] usb 1-1: Product: с [ 344.027006][ T9] usb 1-1: SerialNumber: syz [ 344.033700][T11248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 344.195997][ T30] audit: type=1804 audit(5269841613.443:41): pid=11270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1532" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 344.244165][T11248] /dev/rnullb0: Can't lookup blockdev [ 344.254671][ T30] audit: type=1804 audit(5269841613.503:42): pid=11272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1533" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3201 res=1 errno=0 [ 344.275897][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.318299][T11274] /dev/rnullb0: Can't lookup blockdev [ 344.327971][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 344.334054][ T5945] syz0: Port: 1 Link DOWN [ 344.353021][ T43] wlan1 speed is unknown, defaulting to 1000 [ 344.362697][ T981] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 344.425688][T11276] /dev/rnullb0: Can't lookup blockdev [ 344.459399][T11280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.468192][T11280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.517652][ T981] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 344.527687][ T981] usb 2-1: config 0 interface 0 has no altsetting 0 [ 344.536354][ T981] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 344.545473][ T981] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 344.554222][ T981] usb 2-1: Product: syz [ 344.558439][ T981] usb 2-1: Manufacturer: syz [ 344.563122][ T981] usb 2-1: SerialNumber: syz [ 344.569408][ T981] usb 2-1: config 0 descriptor?? [ 344.577923][ T981] usb 2-1: selecting invalid altsetting 0 [ 344.771318][T11282] netlink: 'syz.2.1537': attribute type 4 has an invalid length. [ 344.780864][T11264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.791441][T11264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.806895][ T981] usb 2-1: USB disconnect, device number 70 [ 345.028024][T11288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.036716][T11288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.045351][T11288] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1539'. [ 345.054783][T11288] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1539'. [ 345.126193][ T5915] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 345.276153][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 345.282961][ T5915] usb 3-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 345.293959][ T5915] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.307119][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 345.313771][ T5915] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 345.322957][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.332953][ T5915] usb 3-1: config 0 descriptor?? [ 345.349245][ T5915] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 345.366816][T11292] /dev/rnullb0: Can't lookup blockdev [ 345.506563][T11297] MTD: Couldn't look up '/dev/rnullb0': -15 [ 345.573871][ T64] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.113087][T11300] Unsupported ieee802154 address type: 0 [ 346.514487][ T9] aircable 1-1:5.52: aircable converter detected [ 346.525106][ T9] usb 1-1: aircable converter now attached to ttyUSB0 [ 346.537162][ T9] usb 1-1: USB disconnect, device number 83 [ 346.545204][ T9] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 346.554046][ T9] aircable 1-1:5.52: device disconnected [ 346.677424][ C1] ------------[ cut here ]------------ [ 346.683061][ C1] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#1: kworker/1:2/981 [ 346.693711][ C1] Modules linked in: [ 346.697636][ C1] CPU: 1 UID: 0 PID: 981 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 346.706954][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.717037][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 346.723130][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 346.727267][T11322] /dev/rnullb0: Can't lookup blockdev [ 346.728825][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 346.728846][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 346.759907][ C1] RAX: ffffffff8a51b3b7 RBX: ffff888027dc0780 RCX: ffff888026273c00 [ 346.767927][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.775911][ C1] RBP: ffffc90000a08568 R08: ffff88802528b683 R09: 1ffff11004a516d0 [ 346.783939][ C1] R10: dffffc0000000000 R11: ffffed1004a516d1 R12: ffff8880302c2101 [ 346.791943][ C1] R13: dffffc0000000001 R14: 1ffff11004fb80fb R15: 0000000000000000 [ 346.799967][ C1] FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 346.799990][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.800004][ C1] CR2: 000020000000f000 CR3: 0000000022bc4000 CR4: 00000000003526f0 [ 346.800022][ C1] Call Trace: [ 346.800030][ C1] [ 346.800042][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 346.800074][ C1] ? unwind_next_frame+0xa5/0x2390 [ 346.840238][ C1] ? rcu_is_watching+0x15/0xb0 [ 346.845015][ C1] ? unwind_next_frame+0xa5/0x2390 [ 346.850172][ C1] nft_reject_inet_eval+0x441/0x690 [ 346.855428][ C1] nft_do_chain+0x40c/0x1920 [ 346.860069][ C1] ? rcu_is_watching+0x15/0xb0 [ 346.864865][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 346.869931][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 346.874800][ C1] ? rcu_is_watching+0x15/0xb0 [ 346.879620][ C1] nft_do_chain_inet+0x25d/0x340 [ 346.884564][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 346.890072][ C1] ? NF_HOOK+0x9a/0x3a0 [ 346.894238][ C1] ? rcu_is_watching+0x15/0xb0 [ 346.899059][ C1] ? lock_acquire+0x5f/0x360 [ 346.903660][ C1] ? ip_sabotage_in+0x57/0x270 [ 346.904302][T11324] kvm: pic: non byte write [ 346.908477][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 346.908502][ C1] nf_hook_slow+0xc5/0x220 [ 346.908528][ C1] NF_HOOK+0x206/0x3a0 [ 346.908547][ C1] ? skb_orphan+0xaf/0xd0 [ 346.908566][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 346.908593][ C1] ? NF_HOOK+0x9a/0x3a0 [ 346.908612][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 346.908633][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 346.908655][ C1] __netif_receive_skb+0xd3/0x380 [ 346.908676][ C1] ? process_backlog+0x2d5/0x14f0 [ 346.908699][ C1] process_backlog+0x60e/0x14f0 [ 346.908727][ C1] ? __pfx_process_backlog+0x10/0x10 [ 346.908749][ C1] ? net_rx_action+0x51b/0xe30 [ 346.908772][ C1] ? rcu_is_watching+0x15/0xb0 [ 346.908795][ C1] __napi_poll+0xc4/0x360 [ 346.984660][ C1] net_rx_action+0x707/0xe30 [ 346.989319][ C1] ? rcu_is_watching+0x15/0xb0 [ 346.994096][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 346.999331][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 347.005580][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 347.011065][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 347.016384][ C1] handle_softirqs+0x283/0x870 [ 347.021165][ C1] ? do_softirq+0xec/0x180 [ 347.025601][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 347.030932][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 347.036862][ C1] do_softirq+0xec/0x180 [ 347.041124][ C1] [ 347.044066][ C1] [ 347.047033][ C1] ? __pfx_do_softirq+0x10/0x10 [ 347.051901][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.056709][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 347.062018][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 347.067760][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 347.072826][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 347.078565][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 347.083684][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.088470][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 347.094249][ C1] process_scheduled_works+0xae1/0x17b0 [ 347.099838][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 347.105830][ C1] worker_thread+0x8a0/0xda0 [ 347.110444][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.116799][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 347.122705][ C1] ? __kthread_parkme+0x7b/0x200 [ 347.127683][ C1] kthread+0x711/0x8a0 [ 347.131766][ C1] ? __pfx_worker_thread+0x10/0x10 [ 347.136892][ C1] ? __pfx_kthread+0x10/0x10 [ 347.141492][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.146298][ C1] ? __pfx_kthread+0x10/0x10 [ 347.150898][ C1] ret_from_fork+0x47c/0x820 [ 347.155475][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 347.160618][ C1] ? __switch_to_asm+0x39/0x70 [ 347.165391][ C1] ? __switch_to_asm+0x33/0x70 [ 347.170198][ C1] ? __pfx_kthread+0x10/0x10 [ 347.174803][ C1] ret_from_fork_asm+0x1a/0x30 [ 347.179594][ C1] [ 347.182633][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 347.189905][ C1] CPU: 1 UID: 0 PID: 981 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 347.199167][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.209209][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 347.215357][ C1] Call Trace: [ 347.218623][ C1] [ 347.221451][ C1] dump_stack_lvl+0x99/0x250 [ 347.226037][ C1] ? __asan_memcpy+0x40/0x70 [ 347.230629][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.235814][ C1] ? __pfx__printk+0x10/0x10 [ 347.240395][ C1] vpanic+0x281/0x750 [ 347.244379][ C1] ? __pfx_vpanic+0x10/0x10 [ 347.248878][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 347.254148][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 347.259336][ C1] panic+0xb9/0xc0 [ 347.263043][ C1] ? __pfx_panic+0x10/0x10 [ 347.267448][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 347.272373][ C1] __warn+0x334/0x4c0 [ 347.276339][ C1] ? nf_send_unreach6+0x828/0xa20 [ 347.281440][ C1] ? nf_send_unreach6+0x828/0xa20 [ 347.286462][ C1] report_bug+0x2be/0x4f0 [ 347.290778][ C1] ? nf_send_unreach6+0x828/0xa20 [ 347.295879][ C1] ? nf_send_unreach6+0x828/0xa20 [ 347.300890][ C1] ? nf_send_unreach6+0x82a/0xa20 [ 347.305898][ C1] handle_bug+0x84/0x160 [ 347.310126][ C1] exc_invalid_op+0x1a/0x50 [ 347.314623][ C1] asm_exc_invalid_op+0x1a/0x20 [ 347.319471][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 347.325096][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 347.344780][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 347.350841][ C1] RAX: ffffffff8a51b3b7 RBX: ffff888027dc0780 RCX: ffff888026273c00 [ 347.358800][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.366759][ C1] RBP: ffffc90000a08568 R08: ffff88802528b683 R09: 1ffff11004a516d0 [ 347.374716][ C1] R10: dffffc0000000000 R11: ffffed1004a516d1 R12: ffff8880302c2101 [ 347.382680][ C1] R13: dffffc0000000001 R14: 1ffff11004fb80fb R15: 0000000000000000 [ 347.390728][ C1] ? nf_send_unreach6+0x827/0xa20 [ 347.395749][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 347.401112][ C1] ? unwind_next_frame+0xa5/0x2390 [ 347.406212][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.410971][ C1] ? unwind_next_frame+0xa5/0x2390 [ 347.416094][ C1] nft_reject_inet_eval+0x441/0x690 [ 347.421327][ C1] nft_do_chain+0x40c/0x1920 [ 347.425922][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.430682][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 347.435692][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 347.440550][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.445323][ C1] nft_do_chain_inet+0x25d/0x340 [ 347.450253][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 347.455706][ C1] ? NF_HOOK+0x9a/0x3a0 [ 347.459856][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.464608][ C1] ? lock_acquire+0x5f/0x360 [ 347.469195][ C1] ? ip_sabotage_in+0x57/0x270 [ 347.474044][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 347.479496][ C1] nf_hook_slow+0xc5/0x220 [ 347.483906][ C1] NF_HOOK+0x206/0x3a0 [ 347.487960][ C1] ? skb_orphan+0xaf/0xd0 [ 347.492276][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 347.497455][ C1] ? NF_HOOK+0x9a/0x3a0 [ 347.501599][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 347.506176][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 347.511364][ C1] __netif_receive_skb+0xd3/0x380 [ 347.516374][ C1] ? process_backlog+0x2d5/0x14f0 [ 347.521385][ C1] process_backlog+0x60e/0x14f0 [ 347.526235][ C1] ? __pfx_process_backlog+0x10/0x10 [ 347.531510][ C1] ? net_rx_action+0x51b/0xe30 [ 347.536303][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.541061][ C1] __napi_poll+0xc4/0x360 [ 347.545384][ C1] net_rx_action+0x707/0xe30 [ 347.549965][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.554716][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 347.559811][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 347.566043][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 347.571328][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 347.576600][ C1] handle_softirqs+0x283/0x870 [ 347.581351][ C1] ? do_softirq+0xec/0x180 [ 347.585759][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 347.591028][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 347.596909][ C1] do_softirq+0xec/0x180 [ 347.601137][ C1] [ 347.604051][ C1] [ 347.606963][ C1] ? __pfx_do_softirq+0x10/0x10 [ 347.611799][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.616555][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 347.621741][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 347.627450][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 347.632469][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 347.638192][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 347.643312][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.648069][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 347.653785][ C1] process_scheduled_works+0xae1/0x17b0 [ 347.659331][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 347.665304][ C1] worker_thread+0x8a0/0xda0 [ 347.669882][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.676200][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 347.682083][ C1] ? __kthread_parkme+0x7b/0x200 [ 347.687012][ C1] kthread+0x711/0x8a0 [ 347.691070][ C1] ? __pfx_worker_thread+0x10/0x10 [ 347.696165][ C1] ? __pfx_kthread+0x10/0x10 [ 347.700743][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.705497][ C1] ? __pfx_kthread+0x10/0x10 [ 347.710073][ C1] ret_from_fork+0x47c/0x820 [ 347.714652][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 347.719770][ C1] ? __switch_to_asm+0x39/0x70 [ 347.724566][ C1] ? __switch_to_asm+0x33/0x70 [ 347.729331][ C1] ? __pfx_kthread+0x10/0x10 [ 347.734011][ C1] ret_from_fork_asm+0x1a/0x30 [ 347.738769][ C1] [ 347.742151][ C1] Kernel Offset: disabled [ 347.746453][ C1] Rebooting in 86400 seconds..