last executing test programs: 9.132684236s ago: executing program 2 (id=174): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, 0x80, 0x0}, 0x200ce0c0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.092782359s ago: executing program 2 (id=191): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x44001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 5.245314408s ago: executing program 2 (id=192): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000040)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0x8000, 0xcb2, 0x4, 0xb1e9}, 0x3d, [0xfff, 0xb, 0x76, 0x80c, 0x2, 0xbbf2, 0x66, 0x6, 0x7fff, 0x8001, 0x1, 0x7fe08, 0x7, 0x4, 0x3, 0x9, 0x30a, 0x0, 0x4, 0x7, 0x690, 0x83c, 0xfffffffa, 0xe2, 0xf6c, 0x8, 0x161, 0xfffeffff, 0x6, 0x10000, 0x9, 0x9, 0xe13, 0x5, 0x1, 0x6, 0x3, 0x200, 0x5, 0xff, 0x5, 0x5, 0x7, 0x0, 0x800, 0xf, 0x4, 0x3, 0xf, 0x7, 0x7f, 0x8, 0xfff, 0x5, 0x4, 0x9, 0xe3, 0x2, 0x5, 0xfffffb3f, 0x0, 0x6, 0x7ff, 0x1], [0x1, 0xfffffc00, 0x4, 0x400, 0xe, 0x6, 0x8, 0x6, 0x1, 0x81, 0x9, 0xfffffffe, 0x7, 0x8, 0xa, 0x101, 0x70, 0xffff, 0xffff, 0x3, 0x0, 0x8, 0x2, 0x5, 0x4, 0x8, 0x10001, 0x8001, 0x2, 0x400, 0xfffffc00, 0x7, 0x5, 0x7, 0x8, 0x1, 0x0, 0x7, 0xe, 0x75e, 0x4, 0x9, 0x9a8, 0x10, 0xbf8, 0x84, 0xfffffc00, 0x7ff, 0xb, 0x2, 0x0, 0x1, 0x1000, 0x6, 0x6ccf4fc6, 0x0, 0x70, 0xffffff80, 0x5, 0x2fa20546, 0xe, 0x6, 0x8694, 0x4], [0x1, 0x8, 0x8, 0x8, 0x10000, 0x8, 0x4, 0xf8d, 0x401, 0x5, 0x8000, 0x7, 0x7, 0xc, 0xfffffff8, 0x1, 0x3, 0x105, 0x40, 0x4c04, 0x1, 0x40, 0x1, 0x8001, 0x3, 0xc212, 0x6, 0x8, 0xffffffff, 0x1, 0xc5, 0x2, 0x8, 0xe17d, 0x93a2, 0xfe, 0x9, 0x0, 0x0, 0x1, 0x3, 0x6, 0x3, 0xf, 0x2, 0x9, 0x5b1fbd6e, 0x7, 0xffffff81, 0x2, 0x2, 0x1, 0x4, 0x3, 0x74d, 0x6, 0x5, 0x6, 0x1, 0x0, 0x100, 0x9, 0x0, 0x7f], [0x8, 0xffff, 0x3, 0x2, 0x8, 0x3, 0x0, 0x400, 0xfffffff7, 0x3, 0xe, 0xb2, 0x80000000, 0x3, 0x800, 0xc6b, 0x8, 0x4, 0x3, 0x4, 0xfffffffd, 0x8, 0x7, 0x8c, 0x3c, 0x12000, 0x3d, 0x9, 0x6, 0x8, 0x3fb, 0x1, 0x0, 0x80, 0x69361293, 0x6, 0x401, 0x2, 0x992, 0x7fff, 0xfffffffe, 0x4, 0x4, 0x6, 0x400, 0x1, 0xc, 0xffff4e34, 0x53d, 0x6, 0x8, 0xffff8001, 0x8001, 0x5c, 0x10000, 0xb468, 0x6, 0xffff, 0x8, 0x8001, 0x2, 0x0, 0x9]}, 0x45c) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f0000000000)={0x1, 0x100, 0x35}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="ca17a5f575e84b830564049add5abe55e57a862521beec05ca6732b857d7dea115ab3730560fd76540839ea4a28b1d14e5656be60d3e72e3c92327f2f7571382bf84ea507c0ed6fed6166f954006c303262aa256775c39e8500dd7f00312a64667cf1d22c10e81f4d6e1d653370cb40409d04a71dc4f374ad3ef6bdbb3fa235adf0010b8fe60bd96db2257c9b56b5c77b0e38896642cf321d793c45a3324a745019aa3b404fad74d465adda812873fe67b2945be49b32d11148e3676364867a6fc9c9d662e970d18f808ec2c3710798d5410b9c3959e6053bc1263d0b976bf45e1188ce6bc7e", 0xe6, 0x4000, &(0x7f0000000580)={0x11, 0xf7, 0x0, 0x1, 0x4, 0x6, @random="bfeadf9f9b46"}, 0x14) 5.055606495s ago: executing program 1 (id=193): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0x4028af11, &(0x7f0000000c00)={{0x0, 0x80, 0x9, 0x9, 0x9, 0x3, 0x9, 0x2ac, 0x1, 0x2, 0x101, 0x6, 0x4aa, 0x2, 0x9}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io(r3, &(0x7f0000000580)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 4.70092954s ago: executing program 0 (id=197): r0 = syz_clone3(&(0x7f0000000240)={0x60000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3c}, &(0x7f00000000c0)=""/251, 0xfb, &(0x7f00000001c0)=""/29, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000100)='comm\x00') rt_tgsigqueueinfo(r0, r1, 0x3b, &(0x7f00000002c0)={0x32, 0x9, 0x80}) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000340)={0x8, 0xa}) 4.664141775s ago: executing program 0 (id=198): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f000000ae00), 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d25, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f0000000040)={0x40, 0x2, 0x4, {0x4, 0x1, '\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000002180)={0x84, &(0x7f0000000940)={0x40, 0x11, 0x8, "52eaa9eba68c3d90"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRESDEC=r5], 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 3.15269404s ago: executing program 0 (id=200): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x44001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 2.730696803s ago: executing program 1 (id=201): ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0xb, 0x141341) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x80000, 0xac}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x2, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r2 = fcntl$getown(r0, 0x9) prlimit64(r2, 0xe, &(0x7f0000000140)={0x40000000088, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_get$pid(0x3, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x20002800) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80601, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0x17) 2.62515504s ago: executing program 1 (id=202): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x1, 0xa1eb}, &(0x7f0000000040)=0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 2.432870448s ago: executing program 1 (id=203): syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x18000, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 2.283079693s ago: executing program 0 (id=204): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c6256}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 \x00'}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0xfff}}, './file0\x00'}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000000)=ANY=[], 0x40) r6 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r6) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="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", 0x241}], 0x1}}], 0x1, 0x80) r8 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="d47a76646e6f3d", @ANYRESHEX=r8, @ANYBLOB=',\x00']) r9 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x8801b, 0x0) getpeername(r9, &(0x7f0000000040)=@rc, &(0x7f00000000c0)=0x80) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x0, 0x3, 0x4, {0x4, 0x8, "3c1a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.156210102s ago: executing program 2 (id=205): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000001080)=0xfffffffffffffffd, 0x100000001) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r4}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x3, 0x0, 0xd, 0x3e, 0x8f, 0x4, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0xfffffff9, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x8, 0x0, 0xe, 0x312, 0x78, 0x9, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x4, 0x6, 0x7, 0xff, 0x20005, 0x5, 0x5f31, 0x4, 0x1000, 0x2, 0x2, 0xa, 0x4, 0x9, 0xb, 0x800, 0x6, 0x9, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0xffffffff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x2, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x4c2b, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xb, 0x4, 0x6d01, 0x5, 0x5f, 0x800003, 0x200, 0x80, 0xf, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x9, 0x6, 0xac8, 0xbf, 0x2, 0x200, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x3, 0x9, 0x1c, 0x120000, 0x3, 0x7, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x7, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x2, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendfile(r6, r0, 0x0, 0x1ff) read$alg(r4, &(0x7f00000001c0)=""/155, 0x9b) 2.000906014s ago: executing program 2 (id=206): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x382, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xa627, 0x0, 0x100000000000000, 0xc8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x40, 0x0, 0x2}) r2 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xf) fchdir(r3) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) getdents64(r4, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000001180)={'erspan0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r6, &(0x7f0000000080)='ns/time_for_children\x00') 1.860392666s ago: executing program 3 (id=207): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a070000003b9b701f400004000000001200000000", 0x1c) 1.761958947s ago: executing program 2 (id=208): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004"], 0x64}}, 0x10000) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb, 0x37, 0x4, 0x10, 0x1bcf, 0xb40, 0xa0f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfc, 0x10, 0x0, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) read$midi(r2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000d004"]) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x7}, 0x1c) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f00000000c0)) sendto$inet6(r1, 0x0, 0x0, 0x200c8804, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000440)="817bb97cdac2f8f819447aa4a50c293af36b43ca32641b77530000008052221c709e64406077e047accef57318edba88cfedd8b3da43d76b7d06e6ee3c6d39d0e832e9adb0", 0x45}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) fcntl$lock(r9, 0x5, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x1}) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x80000000, 0x1, 0x41565559, 0x0, 0x0, [{0x0, 0x200000}, {0xd0ed, 0x8000000}, {}, {}, {0x0, 0x4}, {}, {}, {0x2}], 0x2, 0x0, 0x0, 0x0, 0x4}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0xec, 0x9, 0x9, 0x3d}]}) 1.671369109s ago: executing program 3 (id=209): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) unlink(&(0x7f0000000080)='./cgroup\x00') 1.601993416s ago: executing program 3 (id=210): set_mempolicy(0x4, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) mount(&(0x7f0000000140)=@rnullb, &(0x7f0000000000)='./cgroup/file0\x00', &(0x7f0000000100)='anon_inodefs\x00', 0x20000c4, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x2, 0x7}}, 0x30) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000001600)={0x2, @win={{}, 0x0, 0x0, 0x0, 0xff, 0x0}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 1.492325944s ago: executing program 3 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010041040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.352645271s ago: executing program 3 (id=212): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x44001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 1.025225625s ago: executing program 1 (id=213): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0xffff, 0x401, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="b2505b0be348", 0x6}], 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',cache=f']) splice(r2, 0x0, r4, 0x0, 0x19404, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x4, 0x4) 421.293566ms ago: executing program 3 (id=214): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_ep_read(r0, 0xc, 0x6c, &(0x7f0000000040)=""/108) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x1, 0x100, 0x35}) 184.676082ms ago: executing program 0 (id=215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0xfd}}, 0x14) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x88800) r2 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) symlinkat(&(0x7f0000002580)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x680a02, 0x52abe154ad664f17) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0), 0x100021, &(0x7f0000000440)=ANY=[@ANYRES8=r6, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYRES8=r4]) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x110) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x7}, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x3, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4ea0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40000002}, 0x1c) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r10, 0x0, 0x2e, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x202000000, 0x394a0227cfd479aa) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r5, r12) fanotify_init(0x10, 0x800) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r13, &(0x7f0000002440)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000002480)=ANY=[@ANYRES64=r6], 0x38}, 0x1, 0x0, 0x0, 0x404c014}, 0x40c0000) read$FUSE(r3, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000024c0)=@nbd={'/dev/nbd', 0x0}, r14, &(0x7f0000000340)={0x1ff, 0x5}) 77.418271ms ago: executing program 1 (id=216): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x20, 0x4, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x24044890) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x31) (async) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000500)="8ed4fc9d7b8f48ab3980145642b69894d436a8ddc1f22964a8dce7274723abad21b3180ee2bf8679c8ed5c0acd037b29669855a7c0161dccd3b42f508a5db3f52f22fe81db937d4bb18d6e310dd844984f40b80783eff748f1553c97c036be35aff93577b6ccaa15d107d95e4078226e9e5a4eb37583337f99f3ec9ce783e3817f68b116d3e73f34678ef5bc09e9734a66da87af13668f32aa03f933ed1a6a6fb14f0b9358bdce5551f7209437939c646648fcf8951d65e824a903585469f1ae6aab395081ca50877741830b725615e222aa", 0xd2}, {&(0x7f0000000600)="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", 0xfb}, {&(0x7f0000000700)="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", 0xfb}, {&(0x7f0000000340)="8b007c0a0d3a4d3692b16f6ce286e86f1b72ce64802742b5876e48c6898109f1a6c706360d6b33d33bdc8f0ad73da3c0baf2832daf1df3e9324ff6182addd00071200fec7f649fe36169713eb4a86514111a31f2960c6981bdeee8b0800df046df3e0e8ff895ff241e10", 0x6a}, {&(0x7f0000000800)="d9a4e59c64691fb5534bc83c3b7ff409693ebdee95b90c8640cea7dd9e1cbca959a9edfed72c95eace3bd1c065832149cc8b2eb95b0857302d0641eb25403937d9f05a74589816bfaa46e02599a6077f260f4d91e15dc9f05a580c578b1179e1d49f0d0546200520a496cfec0f0b0c89ea9be0a1df4c13361c948ce50b5c00e38cef44af24f46bfea1fa01b98e1fe3a346717826cc0de9a715fe7de1410b848cfd86fd96ddcf13f6831344d6cff1d59660034a9eba51fa685e900019d9a1020f22c65ac74f263add534a", 0xca}], 0x5) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000300)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xa5, 0x0, 0x6}]}, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) (async, rerun: 64) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000080)=0x6) (rerun: 64) 0s ago: executing program 0 (id=217): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x40}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x3504, 0x1, 0x3, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1}]}]}, 0x23c}}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 329.599793][ T5862] cgroup: Unknown subsys name 'net' [ 329.756771][ T5862] cgroup: Unknown subsys name 'cpuset' [ 329.765735][ T5862] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 331.486482][ T5862] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 334.158517][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.181595][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.189332][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.190072][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.197660][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.204347][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.211999][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.219293][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.225815][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.232429][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.239629][ T5885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.254367][ T5885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.262934][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.263064][ T5885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.277863][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.277956][ T5885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.293908][ T5885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.301745][ T5885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.324256][ T5885] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.340999][ T5885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.782539][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 334.968250][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 335.057530][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 335.094819][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.102689][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.111845][ T5873] bridge_slave_0: entered allmulticast mode [ 335.119182][ T5873] bridge_slave_0: entered promiscuous mode [ 335.156757][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.164405][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.171566][ T5873] bridge_slave_1: entered allmulticast mode [ 335.179081][ T5873] bridge_slave_1: entered promiscuous mode [ 335.227727][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 335.294257][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.352792][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.424045][ T5873] team0: Port device team_slave_0 added [ 335.430118][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.438289][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.445552][ T5877] bridge_slave_0: entered allmulticast mode [ 335.452628][ T5877] bridge_slave_0: entered promiscuous mode [ 335.467420][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.474903][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.482143][ T5871] bridge_slave_0: entered allmulticast mode [ 335.489662][ T5871] bridge_slave_0: entered promiscuous mode [ 335.500242][ T5873] team0: Port device team_slave_1 added [ 335.522005][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.529282][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.536604][ T5877] bridge_slave_1: entered allmulticast mode [ 335.544554][ T5877] bridge_slave_1: entered promiscuous mode [ 335.557172][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.565171][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.572394][ T5871] bridge_slave_1: entered allmulticast mode [ 335.580501][ T5871] bridge_slave_1: entered promiscuous mode [ 335.656035][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.663368][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.690001][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.714849][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.722106][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.729969][ T5880] bridge_slave_0: entered allmulticast mode [ 335.737398][ T5880] bridge_slave_0: entered promiscuous mode [ 335.746601][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.753831][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.761149][ T5880] bridge_slave_1: entered allmulticast mode [ 335.768953][ T5880] bridge_slave_1: entered promiscuous mode [ 335.790851][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.797990][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.824774][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.848238][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.861816][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.890101][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.917612][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.944322][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.972429][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.056061][ T5877] team0: Port device team_slave_0 added [ 336.065541][ T5871] team0: Port device team_slave_0 added [ 336.087465][ T5880] team0: Port device team_slave_0 added [ 336.097998][ T5880] team0: Port device team_slave_1 added [ 336.106336][ T5877] team0: Port device team_slave_1 added [ 336.114799][ T5871] team0: Port device team_slave_1 added [ 336.127227][ T5873] hsr_slave_0: entered promiscuous mode [ 336.134372][ T5873] hsr_slave_1: entered promiscuous mode [ 336.199578][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.206684][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.233067][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.289868][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.297515][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.304350][ T5883] Bluetooth: hci1: command tx timeout [ 336.324671][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.341042][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.348084][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.374116][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.384801][ T5883] Bluetooth: hci2: command tx timeout [ 336.384836][ T5885] Bluetooth: hci0: command tx timeout [ 336.395813][ T5883] Bluetooth: hci3: command tx timeout [ 336.398355][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.408374][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.434759][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.446942][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.454214][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.480501][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.517306][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.524382][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.551547][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.704908][ T5880] hsr_slave_0: entered promiscuous mode [ 336.711481][ T5880] hsr_slave_1: entered promiscuous mode [ 336.719878][ T5880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.728062][ T5880] Cannot create hsr debugfs directory [ 336.753817][ T5871] hsr_slave_0: entered promiscuous mode [ 336.760268][ T5871] hsr_slave_1: entered promiscuous mode [ 336.767215][ T5871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.774932][ T5871] Cannot create hsr debugfs directory [ 336.845752][ T5877] hsr_slave_0: entered promiscuous mode [ 336.852237][ T5877] hsr_slave_1: entered promiscuous mode [ 336.859315][ T5877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.867287][ T5877] Cannot create hsr debugfs directory [ 337.214522][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.248730][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.289141][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.317191][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.390731][ T5880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 337.406646][ T5880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.427372][ T5880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.461697][ T5880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.521938][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.558463][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.569797][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.592403][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.662426][ T5877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.674551][ T5877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.697390][ T5877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 337.725064][ T5877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 337.799575][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.856410][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.896572][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.904116][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.920152][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.927447][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.992201][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.075030][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.097776][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.109081][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.129695][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.136844][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.157598][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.164894][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.248526][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.269886][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.305693][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.312973][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.348111][ T4915] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.355743][ T4915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.374280][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.381438][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.395115][ T5883] Bluetooth: hci1: command tx timeout [ 338.447204][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.454431][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.463341][ T5883] Bluetooth: hci3: command tx timeout [ 338.464321][ T5885] Bluetooth: hci2: command tx timeout [ 338.468769][ T5883] Bluetooth: hci0: command tx timeout [ 338.576750][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.742201][ T5873] veth0_vlan: entered promiscuous mode [ 338.766107][ T5873] veth1_vlan: entered promiscuous mode [ 338.881285][ T5873] veth0_macvtap: entered promiscuous mode [ 338.920609][ T5873] veth1_macvtap: entered promiscuous mode [ 338.998971][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.039152][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.088289][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.105822][ T5893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.120932][ T5893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.157632][ T1158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.168161][ T1158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.224464][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.303976][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.328403][ T5951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.337031][ T5951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.406771][ T5880] veth0_vlan: entered promiscuous mode [ 339.416206][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.430085][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.449426][ T5880] veth1_vlan: entered promiscuous mode [ 339.507897][ T5877] veth0_vlan: entered promiscuous mode [ 339.544262][ T5871] veth0_vlan: entered promiscuous mode [ 339.548181][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 339.563626][ T5871] veth1_vlan: entered promiscuous mode [ 339.589935][ T5877] veth1_vlan: entered promiscuous mode [ 339.605602][ T5880] veth0_macvtap: entered promiscuous mode [ 339.628380][ T5880] veth1_macvtap: entered promiscuous mode [ 339.728161][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.749779][ T5960] ======================================================= [ 339.749779][ T5960] WARNING: The mand mount option has been deprecated and [ 339.749779][ T5960] and is ignored by this kernel. Remove the mand [ 339.749779][ T5960] option from the mount to silence this warning. [ 339.749779][ T5960] ======================================================= [ 339.763951][ T5877] veth0_macvtap: entered promiscuous mode [ 339.799747][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.830170][ T5877] veth1_macvtap: entered promiscuous mode [ 339.851576][ T5891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.867744][ T5871] veth0_macvtap: entered promiscuous mode [ 339.897726][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 339.910413][ T5891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.946287][ T5871] veth1_macvtap: entered promiscuous mode [ 339.959354][ T5962] netlink: 763 bytes leftover after parsing attributes in process `syz.3.5'. [ 339.969125][ T5891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.978634][ T5891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.988506][ T5962] Device name cannot be null; rc = [-22] [ 340.000214][ T5962] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 340.008906][ T5962] UDF-fs: Scanning with blocksize 4096 failed [ 340.031056][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.067787][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.094079][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.120749][ T4915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.136119][ T4915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.171091][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.192270][ T4915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.229013][ T4915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.251367][ T4915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.262071][ T4915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.264772][ T5965] ./cgroup: Can't lookup blockdev [ 340.316875][ T4915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.330638][ T4915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.400098][ T5891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.415638][ T5891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.475277][ T5883] Bluetooth: hci1: command tx timeout [ 340.510265][ T4915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.519562][ T4915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.543403][ T5883] Bluetooth: hci0: command tx timeout [ 340.544457][ T5885] Bluetooth: hci2: command tx timeout [ 340.548900][ T5883] Bluetooth: hci3: command tx timeout [ 340.592134][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 340.642778][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 340.660295][ T4915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.683035][ T4915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.683610][ T5971] hfs: can't find a HFS filesystem on dev rnullb0 [ 340.868365][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.906376][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.950487][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.982927][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.013659][ T5978] program syz.3.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.056876][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.070116][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.089299][ T5978] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 341.559879][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 341.743277][ T925] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 341.785983][ T6001] binder: BINDER_SET_CONTEXT_MGR already set [ 341.843125][ T6001] binder: 5999:6001 ioctl 4018620d 2000000000c0 returned -16 [ 341.896157][ T925] usb 1-1: device descriptor read/64, error -71 [ 341.929370][ T6006] netlink: 124 bytes leftover after parsing attributes in process `syz.2.13'. [ 341.966068][ T6006] FAT-fs (rnullb0): bogus number of reserved sectors [ 341.977010][ T6006] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 342.138882][ T6011] capability: warning: `syz.1.15' uses 32-bit capabilities (legacy support in use) [ 342.163144][ T925] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 342.305868][ T925] usb 1-1: device descriptor read/64, error -71 [ 342.335292][ T6017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.360630][ T6017] mmap: syz.2.19 (6017) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 342.439799][ T925] usb usb1-port1: attempt power cycle [ 342.543699][ T5883] Bluetooth: hci1: command tx timeout [ 342.623522][ T5883] Bluetooth: hci3: command tx timeout [ 342.623827][ T5885] Bluetooth: hci2: command tx timeout [ 342.628973][ T5883] Bluetooth: hci0: command tx timeout [ 342.663146][ T6028] input: syz0 as /devices/virtual/input/input7 [ 342.816446][ T925] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 342.855772][ T925] usb 1-1: device descriptor read/8, error -71 [ 343.105213][ T5813] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 343.113017][ T925] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 343.147796][ T925] usb 1-1: device descriptor read/8, error -71 [ 343.246323][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 343.263345][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 343.273708][ T925] usb usb1-port1: unable to enumerate USB device [ 343.288418][ T5813] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 343.313461][ T5813] usb 4-1: config 0 has no interface number 0 [ 343.319683][ T5813] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.347197][ T5813] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 343.361637][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.370320][ T5813] usb 4-1: Product: syz [ 343.374575][ T5813] usb 4-1: Manufacturer: syz [ 343.379198][ T5813] usb 4-1: SerialNumber: syz [ 343.394485][ T5813] usb 4-1: config 0 descriptor?? [ 343.414045][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 343.416618][ T5813] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 343.426098][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 343.444485][ T5813] em28xx 4-1:0.132: Video interface 132 found: isoc [ 343.451520][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.476318][ T9] usb 3-1: config 0 descriptor?? [ 343.766623][ T6042] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 343.775511][ T6042] UDF-fs: Scanning with blocksize 4096 failed [ 344.023588][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 344.036502][ T6049] NILFS (rnullb0): couldn't find nilfs on the device [ 344.127132][ T5813] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 344.214489][ T5813] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 344.250765][ T5813] em28xx 4-1:0.132: board has no eeprom [ 344.326032][ T5813] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 344.343293][ T5813] em28xx 4-1:0.132: analog set to isoc mode. [ 344.354651][ T43] em28xx 4-1:0.132: Registering V4L2 extension [ 344.379397][ T5813] usb 4-1: USB disconnect, device number 2 [ 344.394812][ T5813] em28xx 4-1:0.132: Disconnecting em28xx [ 344.717950][ T6038] Bluetooth: MGMT ver 1.23 [ 344.745216][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 344.778377][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 344.843833][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 344.847471][ T6079] Malformed UNC in devname [ 344.847471][ T6079] [ 344.876236][ T9] usb 3-1: USB disconnect, device number 2 [ 344.926872][ T6079] CIFS: VFS: Malformed UNC in devname [ 344.940172][ T43] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 344.968428][ T43] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 345.002975][ T43] em28xx 4-1:0.132: No AC97 audio processor [ 345.094065][ T43] usb 4-1: Decoder not found [ 345.098727][ T43] em28xx 4-1:0.132: failed to create media graph [ 345.107010][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.37'. [ 345.112974][ T43] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 345.136284][ T43] em28xx 4-1:0.132: Remote control support is not available for this card. [ 345.160950][ T5813] em28xx 4-1:0.132: Closing input extension [ 345.163535][ T6084] XFS (rnullb0): Invalid superblock magic number [ 345.191336][ T5813] em28xx 4-1:0.132: Freeing device [ 345.763107][ T5926] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 345.935304][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 345.948520][ T5926] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 345.975537][ T5926] usb 1-1: config 0 has no interface number 0 [ 345.982770][ T5926] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 346.002489][ T6112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 346.033173][ T5926] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 346.071660][ T5926] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 346.111314][ T5926] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 346.132768][ T5926] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 346.145570][ T5926] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 346.157509][ T5926] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 346.177503][ T5926] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 346.186694][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.195744][ T5926] usb 1-1: Product: syz [ 346.200074][ T5926] usb 1-1: Manufacturer: syz [ 346.204764][ T5926] usb 1-1: SerialNumber: syz [ 346.224342][ T5926] usb 1-1: config 0 descriptor?? [ 346.230871][ T6100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 346.459375][ T5926] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 346.602441][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49'. [ 346.615766][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49'. [ 346.659367][ T5926] etas_es58x 1-1:0.219: could not parse product info: '424242424242' [ 347.043078][ T925] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 347.083120][ T5813] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 347.207249][ T925] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.242316][ T925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 347.256696][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 347.272458][ T5813] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 347.287264][ T925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 347.303548][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.323204][ T5813] usb 4-1: Product: syz [ 347.327650][ T5813] usb 4-1: Manufacturer: syz [ 347.332280][ T5813] usb 4-1: SerialNumber: syz [ 347.337386][ T925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.372995][ T925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.382122][ T925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.393526][ T5813] usb 4-1: config 0 descriptor?? [ 347.403962][ T5813] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 347.416777][ T925] usb 2-1: config 0 descriptor?? [ 347.422326][ T5813] dvb-usb: bulk message failed: -22 (2/0) [ 347.441685][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 347.464019][ T5813] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 347.493011][ T5813] usb 4-1: media controller created [ 347.556533][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.645138][ T5813] dvb-usb: bulk message failed: -22 (1/0) [ 347.651024][ T5813] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 347.679219][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 347.727007][ T5813] dvb-usb: schedule remote query interval to 50 msecs. [ 347.738894][ T5813] dvb-usb: bulk message failed: -22 (2/0) [ 347.762071][ T5813] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 347.770095][ C0] etas_es58x 1-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 347.789196][ C0] etas_es58x 1-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 347.794742][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 347.798628][ C0] etas_es58x 1-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 347.807906][ T5813] usb 4-1: USB disconnect, device number 3 [ 347.814024][ C0] etas_es58x 1-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 347.819795][ T43] dvb-usb: error while querying for an remote control event. [ 347.850009][ T925] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 347.883875][ C0] etas_es58x 1-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 347.893731][ T5498] etas_es58x 1-1:0.219 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 347.903060][ T5498] etas_es58x 1-1:0.219 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 347.944644][ T925] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 348.135077][ T5813] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 348.261344][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.298674][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.308440][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.322185][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.364323][ T9] usb 2-1: USB disconnect, device number 2 [ 348.575651][ T5984] usb 1-1: USB disconnect, device number 6 [ 348.592158][ T5984] etas_es58x 1-1:0.219: Disconnecting syz syz [ 348.793130][ T5813] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 348.912202][ T6175] Zero length message leads to an empty skb [ 348.953347][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 348.992136][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 349.004762][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 349.032952][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 349.057412][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 349.095890][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 349.120431][ T5813] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 349.140457][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.176387][ T5813] usb 3-1: Product: syz [ 349.190298][ T5813] usb 3-1: Manufacturer: syz [ 349.207080][ T5813] usb 3-1: SerialNumber: syz [ 349.212997][ T5984] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 349.244909][ T5813] usb 3-1: config 0 descriptor?? [ 349.402954][ T5984] usb 4-1: Using ep0 maxpacket: 32 [ 349.411521][ T5984] usb 4-1: config 1 interface 0 altsetting 222 bulk endpoint 0x1 has invalid maxpacket 1024 [ 349.431510][ T5984] usb 4-1: config 1 interface 0 altsetting 222 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.483287][ T5984] usb 4-1: config 1 interface 0 has no altsetting 0 [ 349.519422][ T5984] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 349.536240][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.569172][ T5984] usb 4-1: Product: 侐谉⨃ꄔ㯙퀲洙᜺귺 [ 349.627051][ T5984] usb 4-1: Manufacturer: 䚦君䕳ꃎ웄ϳ펇ꍱ琔⭻흹倃ᝀ衇Ꙡ鿊徰䮋싍況䬺ꬆ穪踩진٩鎁繢菉뾦邚꺥쿂䵜엮ȿ滥᷂齡됁뒍萦鱱ﰫ῜໅簣·棝臃ꣶ㿻呂㥚닓븫槼틫ꀀ࢝脞콥ḽ⮀ڢffi먁辢欺英侦ᆝ鮪兣봪⼸べ፟鈺 [ 349.670775][ T5984] usb 4-1: SerialNumber: 3 [ 349.700138][ T6177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.704894][ T5813] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 349.735026][ T5813] input input9: Device does not respond to id packet M [ 349.772155][ T5813] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 349.791457][ T5813] input input9: Device does not respond to id packet P [ 349.814822][ T5813] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 349.831319][ T5813] input input9: Device does not respond to id packet B [ 349.841888][ T5813] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 349.863619][ T5813] input input9: Device does not respond to id packet N [ 349.880013][ T5813] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 349.898606][ T5813] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 349.917994][ T5813] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 349.928188][ T5813] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 349.992673][ T5813] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 350.056245][ T5813] usb 3-1: USB disconnect, device number 3 [ 350.114348][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 350.129338][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 350.367972][ T6177] could not allocate digest TFM handle md4 [ 350.405349][ T5813] usb 4-1: USB disconnect, device number 4 [ 350.441695][ T6214] XFS (rnullb0): Invalid superblock magic number [ 351.203350][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.77'. [ 351.253645][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.77'. [ 351.290748][ T6250] tipc: Started in network mode [ 351.312055][ T6250] tipc: Node identity ff120000000000000000000000000001, cluster identity 4711 [ 351.344966][ T6250] tipc: Enabling of bearer rejected, failed to enable media [ 351.458049][ T6250] omfs: Invalid superblock (0) [ 351.783080][ T5984] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 351.949199][ T5984] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 351.978074][ T5984] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 351.996536][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.021060][ T5984] usb 3-1: Product: syz [ 352.037802][ T5984] usb 3-1: Manufacturer: syz [ 352.047749][ T5984] usb 3-1: SerialNumber: syz [ 352.065710][ T5984] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 352.101698][ T6273] /dev/rnullb0: Can't open blockdev [ 352.292988][ T6275] tipc: Can't bind to reserved service type 0 [ 352.612694][ T6287] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 352.621878][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.87'. [ 352.651574][ T6287] lo: entered promiscuous mode [ 352.669147][ T6287] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.694722][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.87'. [ 352.881644][ T6295] exFAT-fs (rnullb0): invalid boot record signature [ 352.892238][ T6295] exFAT-fs (rnullb0): failed to read boot sector [ 352.902373][ T6295] exFAT-fs (rnullb0): failed to recognize exfat type [ 353.096671][ T5984] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 353.120822][ T6301] tipc: Enabling of bearer rejected, failed to enable media [ 353.134822][ T6297] /dev/rnullb0: Can't open blockdev [ 353.137100][ T5984] usb 3-1: USB disconnect, device number 4 [ 353.249347][ T6306] /dev/rnullb0: Can't open blockdev [ 353.333132][ T925] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 353.515367][ T925] usb 4-1: Using ep0 maxpacket: 16 [ 353.533776][ T925] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 353.552621][ T925] usb 4-1: config 0 has no interface number 0 [ 353.563075][ T925] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 353.596311][ T925] usb 4-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 353.616314][ T925] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 353.646674][ T925] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 353.676011][ T6317] syz.1.97: attempt to access beyond end of device [ 353.676011][ T6317] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 353.706596][ T925] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 353.729931][ T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.747578][ T925] usb 4-1: Product: syz [ 353.751873][ T925] usb 4-1: Manufacturer: syz [ 353.761278][ T925] usb 4-1: SerialNumber: syz [ 353.763860][ T6320] syz.1.97: attempt to access beyond end of device [ 353.763860][ T6320] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 353.782004][ T925] usb 4-1: config 0 descriptor?? [ 353.807395][ T6324] /dev/rnullb0: Can't open blockdev [ 353.827959][ T6299] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.840379][ T6299] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.953240][ T5984] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 354.138876][ T5984] usb 1-1: config 6 has an invalid interface number: 227 but max is 0 [ 354.157855][ T5984] usb 1-1: config 6 has an invalid descriptor of length 45, skipping remainder of the config [ 354.175012][ T5984] usb 1-1: config 6 has no interface number 0 [ 354.181270][ T5984] usb 1-1: config 6 interface 227 altsetting 2 endpoint 0x6 has invalid maxpacket 21057, setting to 1024 [ 354.201714][ T5984] usb 1-1: config 6 interface 227 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 1024 [ 354.212533][ T5984] usb 1-1: config 6 interface 227 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.232134][ T5984] usb 1-1: config 6 interface 227 has no altsetting 0 [ 354.245765][ T5984] usb 1-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice=58.f8 [ 354.255080][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.266978][ T5984] usb 1-1: Product: syz [ 354.271281][ T5984] usb 1-1: Manufacturer: syz [ 354.276416][ T5984] usb 1-1: SerialNumber: syz [ 354.303561][ T6319] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 354.549865][ T5984] usb 1-1: USB disconnect, device number 7 [ 355.155540][ T6345] /dev/rnullb0: Can't open blockdev [ 355.543212][ T5813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 355.708379][ T5813] usb 3-1: config 8 has an invalid interface number: 11 but max is 0 [ 355.726306][ T5813] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 355.768852][ T5813] usb 3-1: config 8 has an invalid descriptor of length 151, skipping remainder of the config [ 355.804209][ T5813] usb 3-1: config 8 has no interface number 0 [ 355.828451][ T5813] usb 3-1: config 8 interface 11 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.860561][ T5813] usb 3-1: config 8 interface 11 has no altsetting 0 [ 355.880838][ T5813] usb 3-1: New USB device found, idVendor=1199, idProduct=0026, bcdDevice=92.3b [ 355.890744][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.907146][ T5813] usb 3-1: Product: syz [ 355.911735][ T5813] usb 3-1: Manufacturer: 艻⽝棪䂅驽┽⑱鵺腍毭捠䏞ᕰ벼ᗋ댃Ҍ甦鎃〸撦큖殍⢴纞鮏[㙈Ꙏ洂 [ 355.942977][ T5813] usb 3-1: SerialNumber: syz [ 356.083278][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'. [ 356.092273][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'. [ 356.153541][ T925] usb 4-1: USB disconnect, device number 5 [ 356.713257][ T925] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 356.923000][ T925] usb 4-1: Using ep0 maxpacket: 32 [ 356.936583][ T925] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 356.954368][ T5813] sierra 3-1:8.11: Sierra USB modem converter detected [ 356.963341][ T925] usb 4-1: config 0 has no interface number 0 [ 356.969504][ T925] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.014638][ T5813] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 357.028032][ T925] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 357.048255][ T5813] usb 3-1: USB disconnect, device number 5 [ 357.057059][ T6363] Can't find a SQUASHFS superblock on rnullb0 [ 357.078894][ T925] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 357.092022][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 357.111792][ T925] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 357.122467][ T5813] sierra 3-1:8.11: device disconnected [ 357.147460][ T925] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 357.183045][ T925] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 357.220835][ T925] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.256595][ T925] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 357.269642][ T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.303104][ T925] usb 4-1: Product: syz [ 357.313045][ T925] usb 4-1: Manufacturer: syz [ 357.323698][ T925] usb 4-1: SerialNumber: syz [ 357.350974][ T925] usb 4-1: config 0 descriptor?? [ 357.372976][ T6356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 357.533084][ T6010] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 357.589253][ T925] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 357.620424][ T6375] /dev/rnullb0: Can't open blockdev [ 357.682995][ T6010] usb 1-1: Using ep0 maxpacket: 8 [ 357.690776][ T6010] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 357.702420][ T6010] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.725748][ T6010] usb 1-1: config 0 has no interface number 0 [ 357.747266][ T6010] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 357.764312][ T6010] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.779479][ T6010] usb 1-1: config 0 interface 52 has no altsetting 0 [ 357.789330][ T925] etas_es58x 4-1:0.219: could not parse product info: '424242424242' [ 357.801989][ T6010] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 357.819611][ T6010] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 357.840194][ T6010] usb 1-1: Manufacturer: syz [ 357.852779][ T6010] usb 1-1: config 0 descriptor?? [ 358.004870][ T6385] /dev/rnullb0: Can't open blockdev [ 358.274029][ T6367] /dev/rnullb0: Can't open blockdev [ 358.295113][ T6010] usb 1-1: USB disconnect, device number 8 [ 358.737001][ T6413] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 358.769735][ T6412] overlayfs: failed lookup in lower (newroot/26, name='bus', err=-40): overlapping layers [ 358.931761][ C0] etas_es58x 4-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 358.941220][ C0] etas_es58x 4-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 358.950633][ C0] etas_es58x 4-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 358.963296][ T5498] etas_es58x 4-1:0.219 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 358.963379][ C0] etas_es58x 4-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 358.972505][ T6419] /dev/rnullb0: Can't open blockdev [ 358.981882][ C0] etas_es58x 4-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 359.011747][ T5498] etas_es58x 4-1:0.219 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 359.138413][ T6422] gfs2: not a GFS2 filesystem [ 359.238992][ T6424] trusted_key: syz.0.127 sent an empty control message without MSG_MORE. [ 359.420708][ T5926] usb 4-1: USB disconnect, device number 6 [ 359.455270][ T5926] etas_es58x 4-1:0.219: Disconnecting syz syz [ 359.502410][ T6429] hpfs: Bad magic ... probably not HPFS [ 359.551246][ T6429] hpfs: Bad magic ... probably not HPFS [ 359.620912][ T6436] /dev/rnullb0: Can't open blockdev [ 360.044229][ T5926] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 360.214123][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 360.225845][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.258119][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 360.292367][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 360.323070][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 360.343439][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 360.371652][ T5926] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 360.386190][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 360.405054][ T5926] usb 4-1: Product: syz [ 360.423145][ T5926] usb 4-1: Manufacturer: syz [ 360.438333][ T5926] usb 4-1: SerialNumber: syz [ 360.463191][ T5926] usb 4-1: config 0 descriptor?? [ 360.490199][ T6468] Can't find a SQUASHFS superblock on rnullb0 [ 360.684816][ T5926] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 360.706264][ T5926] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 360.885826][ T5926] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 360.899774][ T5926] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 360.917373][ T5926] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 361.091425][ T5926] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 361.313659][ T6010] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 361.334326][ T6490] program syz.2.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.336532][ T6492] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 361.474834][ T6010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.493006][ T6010] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 361.502085][ T6010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.523994][ T6010] usb 2-1: config 0 descriptor?? [ 361.626354][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.147'. [ 362.023011][ T5984] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 362.138666][ T6010] usb 2-1: USB disconnect, device number 3 [ 362.188185][ T5984] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 362.198105][ T5984] usb 3-1: config 0 has no interface number 0 [ 362.215934][ T5984] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=fa.63 [ 362.227482][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.236189][ T5984] usb 3-1: Product: syz [ 362.240580][ T5984] usb 3-1: Manufacturer: syz [ 362.251555][ T5984] usb 3-1: SerialNumber: syz [ 362.261234][ T5984] usb 3-1: config 0 descriptor?? [ 362.277958][ T5984] hub 3-1:0.253: bad descriptor, ignoring hub [ 362.285075][ T5984] hub 3-1:0.253: probe with driver hub failed with error -5 [ 362.293903][ T5984] ums-datafab 3-1:0.253: USB Mass Storage device detected [ 362.363884][ T5984] ums-sddr55 3-1:0.253: USB Mass Storage device detected [ 362.407113][ T5926] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 362.433250][ T5926] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 362.507888][ T5984] usb 3-1: USB disconnect, device number 6 [ 363.165268][ T5813] usb 4-1: USB disconnect, device number 7 [ 363.350901][ T6526] /dev/rnullb0: Can't open blockdev [ 363.401809][ T6530] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 363.408557][ T6530] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 363.433251][ T6530] vhci_hcd vhci_hcd.0: Device attached [ 363.485465][ T6010] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 363.525457][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.158'. [ 363.673003][ T5984] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 363.697717][ T6010] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 363.736180][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.746615][ T6010] usb 3-1: Product: syz [ 363.750859][ T6010] usb 3-1: Manufacturer: syz [ 363.764760][ T6010] usb 3-1: SerialNumber: syz [ 363.776767][ T6010] usb 3-1: config 0 descriptor?? [ 363.786228][ T6010] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 363.873231][ T5926] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 363.916220][ T6531] vhci_hcd: connection reset by peer [ 363.923750][ T5891] vhci_hcd: stop threads [ 363.928833][ T5891] vhci_hcd: release socket [ 363.936549][ T5891] vhci_hcd: disconnect device [ 364.003145][ T5926] usb 4-1: device descriptor read/64, error -71 [ 364.076771][ T9] usb 3-1: USB disconnect, device number 7 [ 364.253632][ T5926] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 364.393054][ T5926] usb 4-1: device descriptor read/64, error -71 [ 364.503430][ T5926] usb usb4-port1: attempt power cycle [ 364.792441][ T6543] /dev/rnullb0: Can't open blockdev [ 364.863098][ T5926] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 364.904236][ T5926] usb 4-1: device descriptor read/8, error -71 [ 365.141965][ T6552] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 365.149851][ T6552] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 365.153024][ T5926] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 365.185320][ T5926] usb 4-1: device descriptor read/8, error -71 [ 365.305567][ T5926] usb usb4-port1: unable to enumerate USB device [ 365.669855][ T6556] exFAT-fs (rnullb0): invalid boot record signature [ 365.676695][ T6556] exFAT-fs (rnullb0): failed to read boot sector [ 365.683637][ T6556] exFAT-fs (rnullb0): failed to recognize exfat type [ 365.816415][ T6559] fuseblk: Unknown parameter 'fd%0x0000000000000006' [ 365.824119][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.167'. [ 365.837039][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.167'. [ 365.994416][ T6568] Malformed UNC in devname [ 365.994416][ T6568] [ 366.001248][ T6568] CIFS: VFS: Malformed UNC in devname [ 366.030400][ T6567] syz.2.169: attempt to access beyond end of device [ 366.030400][ T6567] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 366.049061][ T6567] XFS (loop2): SB validate failed with error -5. [ 366.637184][ T6591] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 366.648724][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 366.692972][ T5926] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 366.866539][ T5926] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 366.897830][ T5926] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 366.911062][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.923020][ T5919] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 366.938898][ T5926] usb 3-1: Product: syz [ 366.943300][ T5926] usb 3-1: Manufacturer: syz [ 366.947937][ T5926] usb 3-1: SerialNumber: syz [ 366.989338][ T5926] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 367.088229][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 367.112991][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 367.134397][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 367.159584][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.201515][ T5919] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.222171][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.254872][ T5919] usb 4-1: config 0 descriptor?? [ 367.616759][ T6587] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 367.638463][ T5926] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 367.683371][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 367.691019][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 367.722744][ T5919] usb 4-1: USB disconnect, device number 12 [ 368.289712][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.184'. [ 368.299374][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.184'. [ 368.312135][ T6624] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 368.322468][ T6624] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 368.683034][ T5813] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 368.768064][ T6635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.188'. [ 368.779201][ T5984] vhci_hcd: vhci_device speed not set [ 368.813225][ T6635] 9pnet: Could not find request transport: nd [ 368.830171][ T6635] XFS (rnullb0): Invalid superblock magic number [ 368.859559][ T5813] usb 4-1: Invalid ep0 maxpacket: 32 [ 368.993051][ T5813] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 369.173003][ T5813] usb 4-1: Invalid ep0 maxpacket: 32 [ 369.178661][ T5813] usb usb4-port1: attempt power cycle [ 369.323232][ T5919] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 369.456848][ T6010] usb 3-1: USB disconnect, device number 8 [ 369.496121][ T5919] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.531093][ T5919] usb 1-1: config 1 interface 0 has no altsetting 0 [ 369.542733][ T5919] usb 1-1: New USB device found, idVendor=047d, idProduct=2041, bcdDevice= 0.40 [ 369.543253][ T5813] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 369.553537][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.567834][ T5919] usb 1-1: Product: syz [ 369.572039][ T5919] usb 1-1: Manufacturer: syz [ 369.577977][ T5919] usb 1-1: SerialNumber: syz [ 369.604924][ T5813] usb 4-1: Invalid ep0 maxpacket: 32 [ 369.744273][ T5813] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 369.794648][ T5813] usb 4-1: Invalid ep0 maxpacket: 32 [ 369.813351][ T5813] usb usb4-port1: unable to enumerate USB device [ 370.005221][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.016863][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.031315][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.041960][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.069602][ T5919] usbhid 1-1:1.0: can't add hid device: -71 [ 370.076724][ T5919] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 370.095292][ T5919] usb 1-1: USB disconnect, device number 9 [ 370.613037][ T5813] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 370.649424][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 370.660900][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 370.763218][ T5813] usb 3-1: device descriptor read/64, error -71 [ 370.793136][ T5984] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 370.944088][ T5984] usb 2-1: Using ep0 maxpacket: 16 [ 370.951491][ T5984] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.960100][ T5984] usb 2-1: config 0 has no interface number 0 [ 370.966291][ T5984] usb 2-1: too many endpoints for config 0 interface 1 altsetting 102: 102, using maximum allowed: 30 [ 370.978098][ T5984] usb 2-1: config 0 interface 1 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 370.991417][ T5984] usb 2-1: config 0 interface 1 has no altsetting 0 [ 371.000442][ T5984] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 371.009718][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.017760][ T5984] usb 2-1: Product: syz [ 371.022025][ T5984] usb 2-1: Manufacturer: syz [ 371.022980][ T5813] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 371.026761][ T5984] usb 2-1: SerialNumber: syz [ 371.042065][ T5984] usb 2-1: config 0 descriptor?? [ 371.163171][ T925] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 371.175201][ T5813] usb 3-1: device descriptor read/64, error -71 [ 371.252231][ T5984] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 371.294742][ T5813] usb usb3-port1: attempt power cycle [ 371.335461][ T925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.352642][ T925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.362510][ T925] usb 1-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 371.371948][ T925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.383811][ T925] usb 1-1: config 0 descriptor?? [ 371.643067][ T5813] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 371.664064][ T5813] usb 3-1: device descriptor read/8, error -71 [ 371.800525][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.809640][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.818897][ T6674] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 371.828334][ T6674] UDF-fs: Scanning with blocksize 4096 failed [ 371.838939][ T925] usbhid 1-1:0.0: can't add hid device: -71 [ 371.848583][ T925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 371.868762][ T925] usb 1-1: USB disconnect, device number 10 [ 371.883170][ T5919] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 371.903187][ T5813] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 371.923903][ T5813] usb 3-1: device descriptor read/8, error -71 [ 372.033309][ T5813] usb usb3-port1: unable to enumerate USB device [ 372.049666][ T5919] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 372.058995][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.067426][ T5919] usb 4-1: Product: syz [ 372.071612][ T5919] usb 4-1: Manufacturer: syz [ 372.076508][ T5919] usb 4-1: SerialNumber: syz [ 372.086863][ T5919] usb 4-1: config 0 descriptor?? [ 372.261909][ T5984] gspca_spca1528: reg_w err -71 [ 372.271490][ T5984] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 372.290348][ T5984] usb 2-1: USB disconnect, device number 4 [ 373.140374][ T5919] usb 4-1: Firmware version (0.0) predates our first public release. [ 373.153695][ T5919] usb 4-1: Please update to version 0.2 or newer [ 373.217394][ T5919] usb 4-1: USB disconnect, device number 17 [ 373.393164][ T5813] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 373.448377][ T6696] 9pnet_fd: Insufficient options for proto=fd [ 373.566022][ T5813] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 373.578091][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.590354][ T5813] usb 2-1: config 0 has no interface number 0 [ 373.596890][ T5813] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 373.607523][ T5813] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.624182][ T5813] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 373.633524][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.643815][ T5813] usb 2-1: Product: syz [ 373.648068][ T5813] usb 2-1: Manufacturer: syz [ 373.652697][ T5813] usb 2-1: SerialNumber: syz [ 373.673683][ T5813] usb 2-1: config 0 descriptor?? [ 373.713525][ T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 373.883434][ T6710] netlink: 'syz.2.208': attribute type 4 has an invalid length. [ 373.898073][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 373.924959][ T6712] Can't find a SQUASHFS superblock on rnullb0 [ 373.926002][ T5813] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 373.949661][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 373.993832][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.002539][ T5813] usb 2-1: USB disconnect, device number 5 [ 374.019971][ T24] usb 1-1: config 0 descriptor?? [ 374.022013][ T6714] vim2m vim2m.0: vidioc_s_fmt queue busy [ 374.117004][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.211'. [ 374.126525][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.211'. [ 374.153110][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 374.309300][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 374.319313][ T9] usb 3-1: config 0 has an invalid interface number: 142 but max is 0 [ 374.327675][ T9] usb 3-1: config 0 has no interface number 0 [ 374.336894][ T9] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1 [ 374.347160][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.357152][ T9] usb 3-1: Product: syz [ 374.361361][ T9] usb 3-1: Manufacturer: syz [ 374.367403][ T9] usb 3-1: SerialNumber: syz [ 374.378144][ T9] usb 3-1: config 0 descriptor?? [ 374.494454][ T24] pyra 0003:1E7D:2C24.0003: hidraw0: USB HID v0.08 Device [HID 1e7d:2c24] on usb-dummy_hcd.0-1/input0 [ 374.667203][ T5813] usb 1-1: USB disconnect, device number 11 [ 374.709507][ T6724] 9p: Unknown Cache mode or invalid value f [ 374.739762][ T6725] warning: `syz.2.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 375.463308][ T5813] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 375.571205][ T6737] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN PTI [ 375.583144][ T6737] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 375.591695][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.1.216 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 375.603105][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.613271][ T6737] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 375.618415][ T6737] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 94 22 b8 f9 49 8b 1f 31 ff 48 89 [ 375.638217][ T6737] RSP: 0018:ffffc90018b3fc00 EFLAGS: 00010206 [ 375.644303][ T6737] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 375.652281][ T6737] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 375.660348][ T6737] RBP: ffffc90018b3fd60 R08: ffff88805a5a741f R09: 1ffff1100b4b4e83 [ 375.668323][ T6737] R10: dffffc0000000000 R11: ffffffff886bfdf0 R12: 0000000000000001 [ 375.676299][ T6737] R13: ffffc90018b3fe00 R14: dffffc0000000000 R15: 0000000000000108 [ 375.684283][ T6737] FS: 00007fd388e0b6c0(0000) GS:ffff888125ae9000(0000) knlGS:0000000000000000 [ 375.693214][ T6737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.699800][ T6737] CR2: 00007fd388dead58 CR3: 0000000030280000 CR4: 00000000003526f0 [ 375.707951][ T6737] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.715927][ T6737] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.723914][ T6737] Call Trace: [ 375.727199][ T6737] [ 375.730134][ T6737] ? __pfx_bcsp_recv+0x10/0x10 [ 375.734913][ T6737] ? rcu_read_lock_any_held+0xb3/0x120 [ 375.740387][ T6737] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 375.746356][ T6737] ? tty_audit_push+0x7c/0x250 [ 375.751152][ T6737] hci_uart_tty_receive+0x191/0x220 [ 375.756378][ T6737] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 375.762122][ T6737] tiocsti+0x23c/0x2c0 [ 375.766206][ T6737] ? __pfx_tiocsti+0x10/0x10 [ 375.770810][ T6737] ? __fget_files+0x2a/0x420 [ 375.775415][ T6737] ? __fget_files+0x3a0/0x420 [ 375.780101][ T6737] ? __fget_files+0x2a/0x420 [ 375.784736][ T6737] tty_ioctl+0x626/0xde0 [ 375.788984][ T6737] ? __pfx_tty_ioctl+0x10/0x10 [ 375.793751][ T6737] __se_sys_ioctl+0xfc/0x170 [ 375.798348][ T6737] do_syscall_64+0xfa/0x3b0 [ 375.802893][ T6737] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.808099][ T6737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.814173][ T6737] ? clear_bhb_loop+0x60/0xb0 [ 375.818851][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.824748][ T6737] RIP: 0033:0x7fd387f8e929 [ 375.829167][ T6737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.848866][ T6737] RSP: 002b:00007fd388e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.857323][ T6737] RAX: ffffffffffffffda RBX: 00007fd3881b6160 RCX: 00007fd387f8e929 [ 375.865302][ T6737] RDX: 0000200000000100 RSI: 0000000000005412 RDI: 0000000000000007 [ 375.873277][ T6737] RBP: 00007fd388010b39 R08: 0000000000000000 R09: 0000000000000000 [ 375.881425][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.889399][ T6737] R13: 0000000000000000 R14: 00007fd3881b6160 R15: 00007fff0a7113d8 [ 375.897385][ T6737] [ 375.900414][ T6737] Modules linked in: [ 375.904404][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.911460][ T6737] ---[ end trace 0000000000000000 ]--- [ 375.927422][ T6737] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 375.932693][ T6737] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 94 22 b8 f9 49 8b 1f 31 ff 48 89 [ 375.954992][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.961432][ T6737] RSP: 0018:ffffc90018b3fc00 EFLAGS: 00010206 [ 375.974662][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 375.975101][ T6737] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 375.998634][ T6737] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 376.002926][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 376.007128][ T6737] RBP: ffffc90018b3fd60 R08: ffff88805a5a741f R09: 1ffff1100b4b4e83 [ 376.026513][ T6737] R10: dffffc0000000000 R11: ffffffff886bfdf0 R12: 0000000000000001 [ 376.026542][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.034955][ T6737] R13: ffffc90018b3fe00 R14: dffffc0000000000 R15: 0000000000000108 [ 376.056900][ T6737] FS: 00007fd388e0b6c0(0000) GS:ffff8881259e9000(0000) knlGS:0000000000000000 [ 376.066466][ T6737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.068155][ T5813] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.073549][ T6737] CR2: 0000000000000000 CR3: 0000000030280000 CR4: 00000000003526f0 [ 376.090903][ T6737] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 376.100344][ T6737] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.102673][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.108955][ T6737] Kernel panic - not syncing: Fatal exception [ 376.116614][ T6737] Kernel Offset: disabled