last executing test programs: 5.383823698s ago: executing program 2 (id=234): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905", @ANYRES16], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x3, 0x74, 0x48, 0x40, 0x1604, 0x8005, 0xa1c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0x6, 0xb0, 0xa, [{{0x9, 0x4, 0x78, 0x5, 0x0, 0x5a, 0x40, 0x33, 0x7}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_usb_connect$uac1(0x4, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x1, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x4}, [@feature_unit={0x13, 0x24, 0x6, 0x3, 0x6, 0x6, [0x3, 0x8, 0x5, 0x9, 0x4, 0x7], 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x1, 0x4, [0x1, 0x2, 0x4, 0x5], 0x9}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x4, 0xb, "73da15b28b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x7, 0x1, {0x7, 0x25, 0x1, 0x1, 0xf, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x35, 0x0, 0x8, {0x7, 0x25, 0x1, 0x0, 0x3, 0xd6}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x3, 0x2, 0xff, 0x8, 0x1}, 0x103, &(0x7f0000000200)={0x5, 0xf, 0x103, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8000, 0xf07, 0xc3, [0xf, 0xc000, 0x0]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x9, 0x0, 0x6, [0x50]}, @generic={0xb5, 0x10, 0x3, "b8d8ef8ac28139a8ce0f67220be51a1fa2fb5b413e891efeda9246571c6f969d32b0a607a48d5dc80e82a876b5a668b416e9a2fd708b88cf4d21a940345d312593d4a830d2c6ac0b810edfca34b044cab80bad58536d4c0c266973ba4ca1b5bc6fc94bd5abf0389c568fd034fd4aa9937fac0725757431e39c9aeaec25cc938fbb33dc37d5a5f6f4f8ed964f0dd76eb82c49df612e835119a278143975e3282ea9dd4da273fbb98b8923a950e63cd87516e9"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "394ef5d4a850c081fb205c39bd7d3921"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x6, 0x4}]}, 0x4, [{0x6d, &(0x7f00000003c0)=@string={0x6d, 0x3, "d2fce8facc22b8c48f9946e60cc42e4778b810a01c55f3233ee2dbefd8e5633090847a974bc5968bb49fe7362ab43fac056fcc10717610b51c1db7ce1ec9959cb291b740923d6888bf1d2b4430e6cd4a9be7a96862b5d784e008534b140c5ffb436aaf736c9b9c24d4973c"}}, {0x20, &(0x7f00000000c0)=@string={0x20, 0x3, "273adda4968d90feafe44177fa3e40ddf7eeb84fffa0ee99fbddc6889248"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x30, 0x81, {0x81, 0xd, "4cfbcf31d6afda99cc0f82ab7c5dad8e9a87fb4fe055372ad451339ff293b143fe1f2e35a75ea86c354274a24feb6c09676cd6105cd7ed4236bc8c54845fe1afb13c2b2a0011599d33da1a565d62f99d1c64becd7365d36baad557008023c9a7300d5c2b0dc0da3a833051b9a9f25e226e8336e0da8685b3f57605d01c9abe"}}, &(0x7f00000005c0)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "1f736eb6f9f86b9716bbe320c0f93935a866baba3b66614f10cf5278b5effe3addcdbd12418e11451a818db9513e38913caf67a506cbe0ec94"}}}, &(0x7f0000000880)={0x44, &(0x7f0000000680)={0x20, 0xf, 0x15, "03bf30bab15b1d99384f65c4fca27120d755cc54d7"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000740)={0x20, 0x81, 0x1, "84"}, &(0x7f0000000780)={0x20, 0x82, 0x3, "9ae6a8"}, &(0x7f00000007c0)={0x20, 0x83, 0x2, "e0ff"}, &(0x7f0000000800)={0x20, 0x84, 0x2, "98be"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "561982"}}) 5.200866849s ago: executing program 3 (id=236): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) memfd_create(&(0x7f0000000e80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99|\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\xa8\f\x00\x00\x00\x00\x00\x00\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\a.\x83\xe0\xc9)yf\xce\xf4\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xf8G\x0f\x11E\xd7\xb6\x1fE\xb9\x00wgw\x13\xfe|\x0eF1K[f\xfc\xd9\xd8\xdd\xb2%\"q\xb7\xc3\xe9\x81\xc8\xa2\xef\xcf\x91g\x83\xef\xe0\x8e*c\x16Bf\xdf\xa4F\xd2\x83\x12|5\x01\x1c\x01\xf5\x19\x93\xbcb\f\xb0\xa6\xe9\xc8=\x9f\xc4\xf48\a\xde\xff$@\xae8^*`\xa9\x00\xe2\x00k\xa4\xf0b\xe7\b\x91`\xf0\xff\xd8\x93\xc9\x1en\xb9\x1d\v\x1dOu\x82\xc1\xb4\xad!\xda\xb8\x8czd4T)@\xee5\xe7\"\x1e\x15\x15%\x9c\x99Z\xde\x99Jd\xe8L\x00\xb3\x97~\xa6\xc6\x9ee\xf4\x96\v\xd4\x8a[?\xa3\xf3\x84T\x83\xf8\x97\x8b\xe9f\xaf\xcf)f\x1b\x03\xad\xc7\xcd\xd06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x005\xee\xc0\xc1\xd5\x8a\xb12\x0f\xcf\xfav\xe8\xc0\x14C$\x97B\xf9\x00\x86\xf5\\\xfa+f\x90*\x04\xdaB\x82I\xb9\xf3\xf2\xa0\x80\xbaD\x9b\xba\xaa\f\xcf\xf3\xebu_\xef\x17NKR\xd9\xc3\xd0\x1a\x8d\x162=0I\xc0\x00\v\xaeu\xcf\x19\xceEC! \x89*\xd1\xb9\xb1,*\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x98\x17\xaa\xfaf*\xab\xce\xa2+\xb0\x82n\xfeB\xd2{\x94(\x10y\x9fZ\xdc\xc3\xfc^/k\x06\xb3[\xa1\x8a\x89k\x90\xea\xb3\xd5\x04\x1dm\t\xe4\x06]\x9f\xa4\xf0B\xda2\vz\xaeV\xc8\xdaj\xe1\xea\xb9(\x12\xbb\xa0\a\x9a\x99\"\x18\xf6*\x1cH\xcc\xf9\x84\x15\xd6\xe2Q\xdd\xb0', 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.146212796s ago: executing program 1 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003e000701feffffff00000000017c0000040042800c000180060006008002000011000280070014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x1, 0xf, 0x6}}, 0x18) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x4}) sendfile(r1, r1, 0x0, 0x7ffff000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x14) 3.234282959s ago: executing program 1 (id=245): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0xfffffffffffffffd, 0x8, 0x8, &(0x7f00000000c0)=""/53}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f00000001c0)={0x30, r2, 0x0, 0x0, 0x3, 0x2, 0x5f8, &(0x7f0000000140)=""/116}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x400002, 0x0) (async, rerun: 64) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) (rerun: 64) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000280)={0x8, r4}) (async) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) fadvise64(r5, 0x0, 0x0, 0x4) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) (async) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000003c0)={0x1, 0x9}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000400)={0xc, r6}) (async) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000440)=""/57, 0x39}, {&(0x7f0000000480)=""/74, 0x4a}, {&(0x7f0000000500)=""/6, 0x6}, {&(0x7f0000000540)=""/176, 0xb0}], 0x4, 0xd6d0, 0x2) (async) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000640)={0xa, 0x0, 0x7ff, @mcast1, 0x4, 0x4}, 0x20) (async) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f00000006c0)={0x30, r7, 0x0, 0x0, 0x4b, 0x9, 0x7fffffff, &(0x7f0000000680)=""/30}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r9, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="854bc40e3c05"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="39a9815ffdb4"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040040}, 0x48000) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4202000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r11, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) (async) ioctl$I2C_TENBIT(r1, 0x704, 0x1) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000ac0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000bc0)={'erspan0\x00', 0x0, 0x7, 0x20, 0x4, 0x4, {{0x33, 0x4, 0x0, 0xa, 0xcc, 0x64, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, {[@noop, @rr={0x7, 0xb, 0xa7, [@multicast1, @multicast1]}, @cipso={0x86, 0x2f, 0x2, [{0x1, 0xb, "9073d305e0c46f5ac6"}, {0x5, 0x6, "26608bfc"}, {0x5, 0x9, "634d186a994cc8"}, {0x0, 0xf, "72be6e827326f738b63fc6d4a9"}]}, @cipso={0x86, 0x38, 0x0, [{0x1, 0x7, "3073ede7de"}, {0x5, 0x10, "2f001965040a70e14332ab14fada"}, {0x6, 0x10, "d6c9dc7bd4d62ef3ca999f7280eb"}, {0x2, 0x7, "1bce6ab120"}, {0x0, 0x4, "bd0b"}]}, @rr={0x7, 0x27, 0xd5, [@broadcast, @multicast1, @loopback, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, @dev={0xac, 0x14, 0x14, 0x44}, @loopback]}, @ssrr={0x89, 0x13, 0xa, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @rr={0x7, 0x7, 0xe2, [@empty]}]}}}}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r10, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6cf2a416}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7a}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xeb96}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) 3.111619474s ago: executing program 1 (id=246): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r2, 0x11, 0x68, 0x0, &(0x7f0000000080)) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) 3.078446223s ago: executing program 1 (id=247): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xa6b}, &(0x7f00000000c0)=0x8) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='afs\x00', 0x84, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000d00)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000d40)={0x18, r3, 0x3}) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x0, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x7, 0x81, 0x5, '\x00', 0x1, 0x7fff}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xffffffffffffff98, r7, 0x800, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 2.859791997s ago: executing program 1 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000140)={0x0, 0x1, {0x0, 0x0, 0xc, 0x1, 0x3, 0x0, 0x3, 0x0, 0xffffffffffffffff}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) close(0x3) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000140)={0x0, 0x1, {0x0, 0x0, 0xc, 0x1, 0x3, 0x0, 0x3, 0x0, 0xffffffffffffffff}}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) close(0x3) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r2, r2, 0x0, 0x7ffff000) (async) 2.655666029s ago: executing program 1 (id=249): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xd1, 0x6c, 0x14, 0x10, 0x543, 0x1527, 0xc80f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1a0}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001540)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000019c0)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x40ad6ed0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x9) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e00000027f00000101000000020000007f"], 0x18) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000340)="390000001300034702bb65e1c3e4ffff03000000eda2c3f1493ec83900190004000400060007fdfde4ffff0800040000008c00000000be31", 0x38}], 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) ptrace$setregs(0xf, 0x0, 0x1, &(0x7f0000000440)="c609126854b9f53854e9cd2152688f4439101664ff8c339ba38d6dd1d55aa74cf4aad07a35ccddd918734dcf466e57ea771020a56094c19d5deb940b65769fa056693a0c4c6703cd362a246ddca54d94d4214d8095b22f30aa2bce96fc879e8a01c9459fabc3e759f1941d71ae9e037e6206fd9becb4d3f3c47b88b6538608d59cbc23ad06223427d60da4f74c43d6617bc11772f767a0ead708799b401d5a3cd3ecb0d7cb212aeba32a25eb027d2594f5d8ba8fb837852f40b3676cc06a8992b8b9e60547698869cb4053ad8fae77eac3ebd44624817b51e8") keyctl$read(0x3f, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4) syz_open_dev$video(&(0x7f0000000080), 0x200, 0x100) 2.078709833s ago: executing program 3 (id=253): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ocfs2_dlmfs\x00', 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.955987026s ago: executing program 3 (id=254): prctl$PR_SCHED_CORE(0x3f, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) 1.883966899s ago: executing program 0 (id=255): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffe91}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 1.882637677s ago: executing program 2 (id=256): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r1, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) sendmmsg$inet(r0, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x900, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000340)=0x4, 0x12) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000001c0)={r5, 0x8000}, &(0x7f0000000200)=0x8) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000380)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, r8, r9, r10, r11, r12], 0x8}) r13 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x6c2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r13, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r13, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r13, 0xc00464b4, &(0x7f00000000c0)={r14}) r15 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r15, 0x5708e000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x5, &(0x7f0000000080)=[{0x3, 0x2, 0x9, 0xfff}, {0x3, 0x60, 0x1e}, {0x2, 0x0, 0x81, 0x4}, {0x8, 0xcb, 0xc6, 0x3ff}, {0x401, 0x1, 0xc, 0xffffffaa}]}) 1.79744096s ago: executing program 3 (id=257): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000400), 0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000400), 0x8) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async) 1.737660896s ago: executing program 0 (id=258): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (rerun: 64) connect$bt_rfcomm(r0, &(0x7f0000000180)={0x1f, @none, 0x15}, 0xa) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf6486000) (async, rerun: 32) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) (rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000500)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.599924656s ago: executing program 3 (id=259): timer_create(0x2, 0x0, &(0x7f0000000080)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/softlockup_count', 0x3498c2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0x5460, 0x1000000000000) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 1.501577147s ago: executing program 0 (id=260): creat(&(0x7f0000001380)='./file0\x00', 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'vxcan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x2a, 0x1, 0x3, 0x800, 0x9, 0x5, 0x3, 0x75, 0x9, 0x5, 0x86, 0x9, 0x9, 0x43, 0xf, 0x1, [0xa, 0x10001]}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 1.489561317s ago: executing program 3 (id=261): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) memfd_create(&(0x7f0000000e80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99|\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\xa8\f\x00\x00\x00\x00\x00\x00\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\a.\x83\xe0\xc9)yf\xce\xf4\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xf8G\x0f\x11E\xd7\xb6\x1fE\xb9\x00wgw\x13\xfe|\x0eF1K[f\xfc\xd9\xd8\xdd\xb2%\"q\xb7\xc3\xe9\x81\xc8\xa2\xef\xcf\x91g\x83\xef\xe0\x8e*c\x16Bf\xdf\xa4F\xd2\x83\x12|5\x01\x1c\x01\xf5\x19\x93\xbcb\f\xb0\xa6\xe9\xc8=\x9f\xc4\xf48\a\xde\xff$@\xae8^*`\xa9\x00\xe2\x00k\xa4\xf0b\xe7\b\x91`\xf0\xff\xd8\x93\xc9\x1en\xb9\x1d\v\x1dOu\x82\xc1\xb4\xad!\xda\xb8\x8czd4T)@\xee5\xe7\"\x1e\x15\x15%\x9c\x99Z\xde\x99Jd\xe8L\x00\xb3\x97~\xa6\xc6\x9ee\xf4\x96\v\xd4\x8a[?\xa3\xf3\x84T\x83\xf8\x97\x8b\xe9f\xaf\xcf)f\x1b\x03\xad\xc7\xcd\xd06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x005\xee\xc0\xc1\xd5\x8a\xb12\x0f\xcf\xfav\xe8\xc0\x14C$\x97B\xf9\x00\x86\xf5\\\xfa+f\x90*\x04\xdaB\x82I\xb9\xf3\xf2\xa0\x80\xbaD\x9b\xba\xaa\f\xcf\xf3\xebu_\xef\x17NKR\xd9\xc3\xd0\x1a\x8d\x162=0I\xc0\x00\v\xaeu\xcf\x19\xceEC! \x89*\xd1\xb9\xb1,*\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x98\x17\xaa\xfaf*\xab\xce\xa2+\xb0\x82n\xfeB\xd2{\x94(\x10y\x9fZ\xdc\xc3\xfc^/k\x06\xb3[\xa1\x8a\x89k\x90\xea\xb3\xd5\x04\x1dm\t\xe4\x06]\x9f\xa4\xf0B\xda2\vz\xaeV\xc8\xdaj\xe1\xea\xb9(\x12\xbb\xa0\a\x9a\x99\"\x18\xf6*\x1cH\xcc\xf9\x84\x15\xd6\xe2Q\xdd\xb0', 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.335942925s ago: executing program 0 (id=262): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) 1.291565698s ago: executing program 0 (id=263): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000001c0)=""/173, &(0x7f0000000280)=0xad) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d30"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000400)={0x0, r4, 0x800, 0x8001, 0x46, 0x1, 0x80000000, 0x7ff, 0x7660f05e}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x149300, 0x0) read(r6, &(0x7f0000000140)=""/50, 0x32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x406, r7) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x1b) landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) ptrace(0x4207, r3) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r9, &(0x7f0000000400)=ANY=[], 0x1a3) r10 = socket$inet6(0xa, 0x5, 0xff) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000fee000)=0x3fa, 0x4) listen(r10, 0x50) write$binfmt_misc(r9, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) creat(&(0x7f0000001380)='./file0\x00', 0x143) 1.156807854s ago: executing program 2 (id=264): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = eventfd2(0x80004001, 0x80001) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r4, 0x2, 0x2, r4}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0xf, 0x4, 0x3, 0x41, 0x3, 0x58, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 899.87475ms ago: executing program 0 (id=265): syz_io_uring_setup(0x2421, 0x0, &(0x7f0000000100), &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x96, 0x1, 0x8}]}}}], 0x18}}], 0x2, 0x401ebd6) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) 753.361146ms ago: executing program 2 (id=266): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) socket$kcm(0x29, 0x7, 0x0) 418.634072ms ago: executing program 2 (id=267): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x28902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93774000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r1, 0x2000, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x5, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) 0s ago: executing program 2 (id=268): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) (async, rerun: 32) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 84.043217][ T5836] cgroup: Unknown subsys name 'net' [ 84.190924][ T5836] cgroup: Unknown subsys name 'cpuset' [ 84.200057][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.983917][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.501524][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.528724][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.538165][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.558309][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.568156][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.575953][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.584789][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.634488][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.647571][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.660561][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.680571][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.693483][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.703205][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.713595][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.722251][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.729802][ T5167] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.739321][ T5167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.747112][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.767498][ T5167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.775728][ T5167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.188447][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.304507][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 89.492714][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.500396][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.508244][ T5846] bridge_slave_0: entered allmulticast mode [ 89.516668][ T5846] bridge_slave_0: entered promiscuous mode [ 89.530150][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 89.555990][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.563369][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.570648][ T5846] bridge_slave_1: entered allmulticast mode [ 89.578687][ T5846] bridge_slave_1: entered promiscuous mode [ 89.623696][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.631743][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.639853][ T5849] bridge_slave_0: entered allmulticast mode [ 89.647314][ T5849] bridge_slave_0: entered promiscuous mode [ 89.671635][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.702948][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.710420][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.717699][ T5849] bridge_slave_1: entered allmulticast mode [ 89.724783][ T5849] bridge_slave_1: entered promiscuous mode [ 89.749262][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.833186][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.869954][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.895006][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 89.909237][ T5846] team0: Port device team_slave_0 added [ 89.943771][ T5849] team0: Port device team_slave_0 added [ 89.951604][ T5846] team0: Port device team_slave_1 added [ 89.981807][ T5849] team0: Port device team_slave_1 added [ 90.072498][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.080724][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.088124][ T5855] bridge_slave_0: entered allmulticast mode [ 90.095251][ T5855] bridge_slave_0: entered promiscuous mode [ 90.110080][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.117150][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.143109][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.155618][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.162918][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.189363][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.206220][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.214186][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.221533][ T5855] bridge_slave_1: entered allmulticast mode [ 90.230291][ T5855] bridge_slave_1: entered promiscuous mode [ 90.242968][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.250392][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.277019][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.288835][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.295801][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.322134][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.449732][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.478712][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.485866][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.493939][ T5857] bridge_slave_0: entered allmulticast mode [ 90.501413][ T5857] bridge_slave_0: entered promiscuous mode [ 90.515034][ T5846] hsr_slave_0: entered promiscuous mode [ 90.521651][ T5846] hsr_slave_1: entered promiscuous mode [ 90.531109][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.568191][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.575429][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.583829][ T5857] bridge_slave_1: entered allmulticast mode [ 90.591405][ T5857] bridge_slave_1: entered promiscuous mode [ 90.620317][ T5849] hsr_slave_0: entered promiscuous mode [ 90.627761][ T5851] Bluetooth: hci0: command tx timeout [ 90.630554][ T5849] hsr_slave_1: entered promiscuous mode [ 90.640041][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 90.645862][ T5849] Cannot create hsr debugfs directory [ 90.683063][ T5855] team0: Port device team_slave_0 added [ 90.693340][ T5855] team0: Port device team_slave_1 added [ 90.707431][ T5851] Bluetooth: hci1: command tx timeout [ 90.753109][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.788813][ T5851] Bluetooth: hci2: command tx timeout [ 90.808174][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.825530][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.833084][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.860398][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.871655][ T5851] Bluetooth: hci3: command tx timeout [ 90.873876][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.884177][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.910199][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.009196][ T5857] team0: Port device team_slave_0 added [ 91.052266][ T5857] team0: Port device team_slave_1 added [ 91.132092][ T5855] hsr_slave_0: entered promiscuous mode [ 91.139761][ T5855] hsr_slave_1: entered promiscuous mode [ 91.145833][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 91.151648][ T5855] Cannot create hsr debugfs directory [ 91.182326][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.189650][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.215941][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.268190][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.275189][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.301350][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.474104][ T5857] hsr_slave_0: entered promiscuous mode [ 91.480898][ T5857] hsr_slave_1: entered promiscuous mode [ 91.487289][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 91.493139][ T5857] Cannot create hsr debugfs directory [ 91.624983][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.636827][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.650620][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.677451][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.815473][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.829070][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.841909][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.871705][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.939985][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.962852][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.994148][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.004946][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.079195][ T43] cfg80211: failed to load regulatory.db [ 92.118116][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.136578][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.152025][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.174302][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.268861][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.363255][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.376595][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.414065][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.421395][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.455628][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.462841][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.492418][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.520969][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.559554][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.566717][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.590578][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.601537][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.643417][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.650589][ T4530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.704295][ T4530] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.711510][ T4530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.720144][ T5851] Bluetooth: hci0: command tx timeout [ 92.732765][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.740022][ T4530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.766061][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.788959][ T5851] Bluetooth: hci1: command tx timeout [ 92.811764][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.819083][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.832208][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.839369][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.867697][ T5851] Bluetooth: hci2: command tx timeout [ 92.949576][ T5851] Bluetooth: hci3: command tx timeout [ 93.106797][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.325990][ T5849] veth0_vlan: entered promiscuous mode [ 93.389015][ T5849] veth1_vlan: entered promiscuous mode [ 93.501768][ T5849] veth0_macvtap: entered promiscuous mode [ 93.544339][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.571252][ T5849] veth1_macvtap: entered promiscuous mode [ 93.649032][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.670739][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.686279][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.713316][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.729113][ T1168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.741330][ T1168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.761823][ T1168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.771135][ T1168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.834749][ T5855] veth0_vlan: entered promiscuous mode [ 93.873702][ T5855] veth1_vlan: entered promiscuous mode [ 93.949848][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.971368][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.995641][ T5857] veth0_vlan: entered promiscuous mode [ 94.033918][ T5846] veth0_vlan: entered promiscuous mode [ 94.044817][ T5857] veth1_vlan: entered promiscuous mode [ 94.053118][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.065254][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.076714][ T5855] veth0_macvtap: entered promiscuous mode [ 94.111149][ T5846] veth1_vlan: entered promiscuous mode [ 94.131708][ T5855] veth1_macvtap: entered promiscuous mode [ 94.188032][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.203865][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.218055][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.242583][ T1168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.274232][ T5857] veth0_macvtap: entered promiscuous mode [ 94.293412][ T1168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.313640][ T5846] veth0_macvtap: entered promiscuous mode [ 94.324352][ T1168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.337126][ T1168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.354960][ T5857] veth1_macvtap: entered promiscuous mode [ 94.359718][ T5937] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 94.370068][ T5937] UDF-fs: Scanning with blocksize 4096 failed [ 94.382954][ T5846] veth1_macvtap: entered promiscuous mode [ 94.432679][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.523144][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.574342][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.585481][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.594555][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.620168][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.634596][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.659889][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.673790][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.690014][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.725419][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.736328][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.751481][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.792929][ T5851] Bluetooth: hci0: command tx timeout [ 94.806694][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.831868][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.846545][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.867749][ T5851] Bluetooth: hci1: command tx timeout [ 94.901301][ T5943] vxfs: WRONG superblock magic 00000000 at 1 [ 94.907941][ T5943] vxfs: WRONG superblock magic 00000000 at 8 [ 94.929519][ T5943] vxfs: can't find superblock. [ 94.947205][ T5851] Bluetooth: hci2: command tx timeout [ 94.985093][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.021913][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.027574][ T5851] Bluetooth: hci3: command tx timeout [ 95.075745][ T5945] process 'syz.0.8' launched '/dev/fd/3' with NULL argv: empty string added [ 95.124881][ T5947] vxfs: WRONG superblock magic 00000000 at 1 [ 95.135931][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.156182][ T5947] vxfs: WRONG superblock magic 00000000 at 8 [ 95.164814][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.176162][ T5947] vxfs: can't find superblock. [ 95.279312][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.304259][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.396743][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.418672][ T5899] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 95.437894][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.533995][ T5956] tipc: Started in network mode [ 95.546661][ T5956] tipc: Node identity d6f457dad06f, cluster identity 4711 [ 95.557619][ T5956] tipc: Enabled bearer , priority 10 [ 95.569733][ T5958] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 95.616084][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 95.650060][ T5959] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 95.653621][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.657117][ T5959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.672703][ T5959] vhci_hcd vhci_hcd.0: Device attached [ 95.694040][ T5899] usb 4-1: Product: syz [ 95.707725][ T5899] usb 4-1: Manufacturer: syz [ 95.712442][ T5899] usb 4-1: SerialNumber: syz [ 95.734815][ T5899] usb 4-1: config 0 descriptor?? [ 95.760062][ T5956] tipc: Resetting bearer [ 95.844509][ T5960] vhci_hcd: connection closed [ 95.845833][ T1007] vhci_hcd: stop threads [ 95.866350][ T1007] vhci_hcd: release socket [ 95.867382][ T5954] tipc: Resetting bearer [ 95.875865][ T1007] vhci_hcd: disconnect device [ 95.917195][ T5890] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 95.924740][ T5890] usb 35-1: enqueue for inactive port 0 [ 95.952380][ T5969] ======================================================= [ 95.952380][ T5969] WARNING: The mand mount option has been deprecated and [ 95.952380][ T5969] and is ignored by this kernel. Remove the mand [ 95.952380][ T5969] option from the mount to silence this warning. [ 95.952380][ T5969] ======================================================= [ 95.993397][ T5899] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 95.994452][ T5969] /dev/rnullb0: Can't open blockdev [ 96.012544][ T5890] vhci_hcd: vhci_device speed not set [ 96.027576][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.171040][ T5972] binder_alloc: 5971: binder_alloc_buf, no vma [ 96.178331][ T5972] /dev/sg0: Can't lookup blockdev [ 96.188299][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 96.199102][ T5972] 9pnet_fd: Insufficient options for proto=fd [ 96.200228][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 96.214842][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 96.226780][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 96.236236][ T9] usb 1-1: config 1 has no interface number 0 [ 96.260316][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.275850][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 96.292358][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 96.302422][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.366765][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 96.559410][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 96.582131][ T5913] tipc: Node number set to 110843866 [ 96.868163][ T5851] Bluetooth: hci0: command tx timeout [ 96.947503][ T5851] Bluetooth: hci1: command tx timeout [ 96.999052][ T5898] usb 1-1: USB disconnect, device number 2 [ 97.015993][ T5898] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 97.024166][ T5899] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 97.032318][ T5851] Bluetooth: hci2: command tx timeout [ 97.108310][ T5851] Bluetooth: hci3: command tx timeout [ 97.595657][ T5987] (syz.0.15,5987,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 97.609400][ T5987] (syz.0.15,5987,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 98.087809][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.119347][ T5954] tipc: Disabling bearer [ 98.247710][ T5899] usb 4-1: USB disconnect, device number 2 [ 98.269829][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.314076][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.343077][ T9] usb 1-1: Product: syz [ 98.355923][ T9] usb 1-1: Manufacturer: syz [ 98.362229][ T9] usb 1-1: SerialNumber: syz [ 98.383769][ T6002] /dev/rnullb0: Can't open blockdev [ 98.405015][ T6002] /dev/rnullb0: Can't open blockdev [ 98.406356][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 98.421490][ T6002] /dev/rnullb0: Can't open blockdev [ 98.436348][ T6002] /dev/rnullb0: Can't open blockdev [ 98.451611][ T6002] /dev/rnullb0: Can't open blockdev [ 98.463801][ T5934] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 98.464912][ T6002] /dev/rnullb0: Can't open blockdev [ 98.505617][ T6002] /dev/rnullb0: Can't open blockdev [ 98.522189][ T6002] /dev/rnullb0: Can't open blockdev [ 98.543355][ T6002] /dev/rnullb0: Can't open blockdev [ 98.551872][ T6002] /dev/rnullb0: Can't open blockdev [ 98.560353][ T6002] /dev/rnullb0: Can't open blockdev [ 98.566686][ T6002] /dev/rnullb0: Can't open blockdev [ 98.573439][ T6002] /dev/rnullb0: Can't open blockdev [ 98.579878][ T6002] /dev/rnullb0: Can't open blockdev [ 98.602935][ T6002] omfs: Invalid superblock (0) [ 98.610107][ T6002] omfs: Invalid superblock (0) [ 98.616627][ T6002] omfs: Invalid superblock (0) [ 98.623690][ T6002] omfs: Invalid superblock (0) [ 98.631898][ T6002] omfs: Invalid superblock (0) [ 98.642911][ T6002] omfs: Invalid superblock (0) [ 98.652847][ T6002] omfs: Invalid superblock (0) [ 98.669346][ T6002] omfs: Invalid superblock (0) [ 98.678165][ T6002] omfs: Invalid superblock (0) [ 98.701801][ T6002] omfs: Invalid superblock (0) [ 98.709746][ T6002] omfs: Invalid superblock (0) [ 98.715985][ T6002] omfs: Invalid superblock (0) [ 98.722724][ T6002] omfs: Invalid superblock (0) [ 98.731942][ T6002] omfs: Invalid superblock (0) [ 98.738292][ T6002] omfs: Invalid superblock (0) [ 98.744584][ T6002] omfs: Invalid superblock (0) [ 98.751594][ T6002] omfs: Invalid superblock (0) [ 98.759222][ T6002] omfs: Invalid superblock (0) [ 98.765438][ T6002] omfs: Invalid superblock (0) [ 98.928741][ T5898] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.089070][ T5890] usb 1-1: USB disconnect, device number 3 [ 99.127051][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 99.141870][ T5898] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 99.173824][ T5898] usb 3-1: config 0 has no interface number 0 [ 99.194743][ T5898] usb 3-1: config 0 interface 89 has no altsetting 0 [ 99.217413][ T5898] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 99.228412][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.236461][ T5898] usb 3-1: Product: syz [ 99.241184][ T5898] usb 3-1: Manufacturer: syz [ 99.245828][ T5898] usb 3-1: SerialNumber: syz [ 99.265729][ T6014] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 99.304447][ T5898] usb 3-1: config 0 descriptor?? [ 99.332572][ T5898] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 99.351531][ T5898] em28xx 3-1:0.89: Video interface 89 found: bulk [ 99.537477][ T5899] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.556748][ T6019] Zero length message leads to an empty skb [ 99.587390][ T5934] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 99.594849][ T5934] ath9k_htc: Failed to initialize the device [ 99.619687][ T5890] usb 1-1: ath9k_htc: USB layer deinitialized [ 99.697727][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 99.709336][ T5899] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 99.729695][ T5899] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 99.734863][ T6024] /dev/rnullb0: Can't open blockdev [ 99.759611][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 99.785552][ T5899] usb 2-1: config 1 has no interface number 0 [ 99.807720][ T5899] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.853986][ T5899] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 99.886983][ T5899] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 99.897993][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.923504][ T5899] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 99.976379][ T5898] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 100.125622][ T5899] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 100.137165][ T5890] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.319372][ T5890] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 100.330786][ T6034] netlink: 100 bytes leftover after parsing attributes in process `syz.0.31'. [ 100.331879][ T5890] usb 4-1: config 0 has no interface number 0 [ 100.359428][ T5890] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 100.359460][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.359480][ T5890] usb 4-1: Product: syz [ 100.359496][ T5890] usb 4-1: Manufacturer: syz [ 100.359513][ T5890] usb 4-1: SerialNumber: syz [ 100.368122][ T5890] usb 4-1: config 0 descriptor?? [ 100.422210][ T5898] em28xx 3-1:0.89: AC97 command still being executed: not handled properly! [ 100.580051][ T5890] usb 2-1: USB disconnect, device number 2 [ 100.594276][ T5890] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 100.662806][ T5934] usb 4-1: USB disconnect, device number 3 [ 100.672540][ T6005] /dev/rnullb0: Can't open blockdev [ 100.694381][ T6031] /dev/rnullb0: Can't open blockdev [ 101.047096][ T5934] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.208222][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 101.262079][ T5934] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 101.297109][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.322478][ T5934] usb 4-1: Product: syz [ 101.329252][ T5934] usb 4-1: Manufacturer: syz [ 101.369454][ T5934] usb 4-1: SerialNumber: syz [ 101.369638][ T5898] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 101.384552][ T5898] em28xx 3-1:0.89: board has no eeprom [ 101.418701][ T5934] usb 4-1: config 0 descriptor?? [ 101.480941][ T5934] gspca_main: se401-2.14.0 probing 047d:5003 [ 101.517997][ T5898] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 101.525305][ T5898] em28xx 3-1:0.89: analog set to bulk mode. [ 101.541428][ T5841] em28xx 3-1:0.89: Registering V4L2 extension [ 101.573658][ T5898] usb 3-1: USB disconnect, device number 2 [ 101.605561][ T5898] em28xx 3-1:0.89: Disconnecting em28xx [ 101.607095][ T6047] mmap: syz.1.35 (6047) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.774201][ T5841] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 101.806967][ T5841] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 101.814061][ T5841] em28xx 3-1:0.89: No AC97 audio processor [ 101.841320][ T5841] usb 3-1: Decoder not found [ 101.845997][ T5841] em28xx 3-1:0.89: failed to create media graph [ 101.876962][ T30] audit: type=1326 audit(1754047768.357:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115378eb69 code=0x7ff00000 [ 101.903983][ T5841] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 101.904341][ T30] audit: type=1326 audit(1754047768.357:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f115378eb69 code=0x7ff00000 [ 101.919051][ T5841] em28xx 3-1:0.89: Registering snapshot button... [ 101.948736][ T5841] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input5 [ 101.965576][ T5841] em28xx 3-1:0.89: Remote control support is not available for this card. [ 101.977625][ T30] audit: type=1326 audit(1754047768.357:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115378eb69 code=0x7ff00000 [ 101.983525][ T5898] em28xx 3-1:0.89: Closing input extension [ 102.001207][ T30] audit: type=1326 audit(1754047768.357:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115378eb69 code=0x7ff00000 [ 102.044283][ T5898] em28xx 3-1:0.89: Deregistering snapshot button [ 102.116635][ T5898] em28xx 3-1:0.89: Freeing device [ 102.195501][ T30] audit: type=1326 audit(1754047768.357:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115378eb69 code=0x7ff00000 [ 102.224873][ T30] audit: type=1326 audit(1754047768.357:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115378eb69 code=0x7ff00000 [ 102.282307][ T30] audit: type=1326 audit(1754047768.357:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115378eb69 code=0x7ff00000 [ 102.346002][ T30] audit: type=1326 audit(1754047768.357:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115378eb69 code=0x7ff00000 [ 102.406574][ T30] audit: type=1326 audit(1754047768.357:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115378eb69 code=0x7ff00000 [ 102.462186][ T5934] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 102.468551][ T30] audit: type=1326 audit(1754047768.357:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115378eb69 code=0x7ff00000 [ 102.484868][ T5934] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 102.511367][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.516788][ T5934] usb 4-1: USB disconnect, device number 4 [ 102.690350][ T5898] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 102.704069][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.730489][ T5898] usb 3-1: config 0 descriptor?? [ 102.755880][ T5898] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 102.971114][ T6073] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 103.063007][ T1168] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 103.066336][ T6079] /dev/rnullb0: Can't open blockdev [ 103.237786][ T5934] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.327361][ T5841] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.362263][ T5898] usb 3-1: USB disconnect, device number 3 [ 103.408204][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 103.416535][ T5934] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 103.425306][ T5934] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 103.434182][ T5934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 103.444274][ T5934] usb 2-1: config 1 has no interface number 0 [ 103.450545][ T5934] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.461706][ T5934] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 103.474759][ T5934] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 103.483860][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.500773][ T5934] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 103.506341][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.521734][ T5841] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.531318][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.545283][ T5841] usb 1-1: config 0 descriptor?? [ 103.702790][ T5934] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 104.121959][ T5934] usb 2-1: USB disconnect, device number 3 [ 104.138782][ T5934] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 104.215453][ T6090] /dev/rnullb0: Can't open blockdev [ 104.817185][ T5934] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.960127][ T5934] usb 3-1: device descriptor read/64, error -71 [ 104.991391][ T6104] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.217022][ T5934] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.357660][ T5934] usb 3-1: device descriptor read/64, error -71 [ 105.421497][ T6109] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.50'. [ 105.469031][ T5934] usb usb3-port1: attempt power cycle [ 105.574151][ T6113] XFS (rnullb0): Invalid superblock magic number [ 105.624402][ T6120] /dev/rnullb0: Can't open blockdev [ 105.793698][ T6125] netlink: 128 bytes leftover after parsing attributes in process `syz.1.53'. [ 105.803624][ T6125] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 105.817092][ T5934] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.851530][ T5934] usb 3-1: device descriptor read/8, error -71 [ 106.077659][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.097617][ T5934] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.118613][ T5934] usb 3-1: device descriptor read/8, error -71 [ 106.132818][ T5841] usbhid 1-1:0.0: can't add hid device: -71 [ 106.151802][ T5841] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.171235][ T5841] usb 1-1: USB disconnect, device number 4 [ 106.214499][ T6129] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 106.237684][ T5934] usb usb3-port1: unable to enumerate USB device [ 106.261924][ T24] usb 2-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 106.272458][ T5898] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.282698][ T24] usb 2-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.296200][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.303475][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 106.313078][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.324760][ T24] usb 2-1: config 0 descriptor?? [ 106.336444][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 106.427028][ T5898] usb 4-1: device descriptor read/64, error -71 [ 106.537030][ T5841] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.667195][ T5898] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.687525][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 106.695259][ T5841] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 106.703999][ T5841] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 106.712751][ T5841] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 106.721769][ T5841] usb 1-1: config 1 has no interface number 0 [ 106.727957][ T5841] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.739134][ T5841] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 106.752443][ T5841] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 106.761587][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.781964][ T5841] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 106.807265][ T5898] usb 4-1: device descriptor read/64, error -71 [ 106.917349][ T5898] usb usb4-port1: attempt power cycle [ 106.977975][ T5841] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 107.257058][ T5898] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 107.277723][ T5898] usb 4-1: device descriptor read/8, error -71 [ 107.395378][ T2146] usb 1-1: USB disconnect, device number 5 [ 107.422713][ T2146] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 107.517164][ T5898] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.534606][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 107.537628][ T5898] usb 4-1: device descriptor read/8, error -71 [ 107.659752][ T5898] usb usb4-port1: unable to enumerate USB device [ 107.797176][ T5841] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 107.957558][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 107.965033][ T5841] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 107.974014][ T5841] usb 3-1: config 0 has no interface number 0 [ 107.980743][ T5841] usb 3-1: config 0 interface 89 has no altsetting 0 [ 107.991145][ T5841] usb 3-1: New USB device found, idVendor=7374, idProduct=10af, bcdDevice=38.4e [ 108.000601][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.009639][ T5841] usb 3-1: Product: syz [ 108.014020][ T5841] usb 3-1: Manufacturer: syz [ 108.022328][ T5841] usb 3-1: SerialNumber: syz [ 108.033007][ T5841] usb 3-1: config 0 descriptor?? [ 108.187174][ T5898] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.245226][ T5841] usb 3-1: USB disconnect, device number 8 [ 108.338476][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 108.345922][ T5898] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 108.354337][ T5898] usb 1-1: config 0 has no interface number 0 [ 108.363320][ T5898] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 108.372697][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.381461][ T5898] usb 1-1: Product: syz [ 108.385645][ T5898] usb 1-1: Manufacturer: syz [ 108.390538][ T5898] usb 1-1: SerialNumber: syz [ 108.402380][ T5898] usb 1-1: config 0 descriptor?? [ 108.410478][ T5898] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 108.628582][ T5898] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 108.641990][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 108.671923][ T5898] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 108.705642][ T5898] usb 1-1: USB disconnect, device number 6 [ 108.748325][ T5898] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 108.797740][ T5898] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.811674][ T5898] quatech2 1-1:0.51: device disconnected [ 108.909889][ T5934] usb 2-1: USB disconnect, device number 4 [ 108.972143][ T6144] tipc: Enabling of bearer rejected, failed to enable media [ 109.321179][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 109.321199][ T30] audit: type=1326 audit(1754047775.807:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.0.65" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd296b8eb69 code=0x0 [ 109.417042][ T5898] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 109.486983][ T5934] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.600008][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.606997][ T2146] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 109.610442][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.628258][ T5898] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.637534][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.640177][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.645553][ T5898] usb 4-1: SerialNumber: syz [ 109.664816][ T5934] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.674077][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.685751][ T5934] usb 2-1: config 0 descriptor?? [ 109.773028][ T2146] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00bb, bcdDevice=2d.ea [ 109.782380][ T2146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.790562][ T2146] usb 3-1: Product: syz [ 109.794795][ T2146] usb 3-1: Manufacturer: syz [ 109.799655][ T2146] usb 3-1: SerialNumber: syz [ 109.808357][ T2146] usb 3-1: config 0 descriptor?? [ 110.497088][ T2146] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.660246][ T2146] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.672116][ T2146] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 110.684128][ T2146] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 110.694862][ T2146] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.712628][ T2146] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.723323][ T2146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.735262][ T2146] usb 1-1: Product: syz [ 110.742010][ T2146] usb 1-1: Manufacturer: syz [ 110.747076][ T2146] usb 1-1: SerialNumber: syz [ 111.387845][ T2146] usb 1-1: 0:2 : does not exist [ 111.488734][ T2146] usb 1-1: USB disconnect, device number 7 [ 111.575897][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.297312][ T5934] usbhid 2-1:0.0: can't add hid device: -71 [ 112.303401][ T5934] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 112.361855][ T5934] usb 2-1: USB disconnect, device number 5 [ 112.445553][ T5913] usb 3-1: USB disconnect, device number 9 [ 112.597863][ T6185] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.668835][ T6184] syzkaller1: entered promiscuous mode [ 112.674641][ T6184] syzkaller1: entered allmulticast mode [ 112.700729][ T6185] /dev/rnullb0: Can't open blockdev [ 112.752225][ T5898] usb 4-1: 0:2 : does not exist [ 112.807317][ T5898] usb 4-1: USB disconnect, device number 9 [ 112.897871][ T6190] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.961381][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.378017][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.424977][ T6195] fuse: Bad value for 'fd' [ 113.817397][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 113.826353][ T5898] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.836920][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.851233][ T5898] usb 2-1: config 0 descriptor?? [ 113.967149][ T5913] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 114.062772][ T5898] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 114.075603][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.087937][ T5898] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 114.095315][ T5898] usb 2-1: media controller created [ 114.118723][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.119558][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.145340][ T2146] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 114.155001][ T5913] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.167563][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.180121][ T5913] usb 4-1: config 0 descriptor?? [ 114.264758][ T6193] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 114.323925][ T2146] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 114.333176][ T2146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.341389][ T2146] usb 1-1: Product: syz [ 114.345927][ T2146] usb 1-1: Manufacturer: syz [ 114.350811][ T2146] usb 1-1: SerialNumber: syz [ 114.360499][ T2146] usb 1-1: config 0 descriptor?? [ 114.577735][ T2146] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 114.852961][ T6208] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 114.966639][ T6210] Can't find a SQUASHFS superblock on rnullb0 [ 115.032355][ T6212] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 115.041871][ T6212] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 115.052601][ T6212] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 115.060853][ T6212] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 115.098063][ T5898] stb0899_attach: Driver disabled by Kconfig [ 115.124866][ T5898] az6027: no front-end attached [ 115.124866][ T5898] [ 115.144566][ T5898] az6027: usb out operation failed. (-71) [ 115.150761][ T5898] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 115.162949][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 115.198957][ T5898] dvb-usb: schedule remote query interval to 400 msecs. [ 115.206387][ T5898] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 115.226249][ T5898] usb 2-1: USB disconnect, device number 6 [ 115.325614][ T5898] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 115.947268][ T5934] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.117024][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 116.130158][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 116.147625][ T5934] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 116.166776][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.175292][ T5934] usb 2-1: Product: syz [ 116.186361][ T5934] usb 2-1: Manufacturer: syz [ 116.191201][ T5934] usb 2-1: SerialNumber: syz [ 116.203109][ T5934] usb 2-1: config 0 descriptor?? [ 116.236715][ T5934] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 116.256479][ T5934] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 116.291220][ T5934] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 116.435438][ T2146] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 116.484996][ T2146] usb 1-1: USB disconnect, device number 8 [ 116.513518][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.526325][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.713069][ T6225] netlink: 'syz.2.88': attribute type 16 has an invalid length. [ 116.722833][ T6225] netlink: 48 bytes leftover after parsing attributes in process `syz.2.88'. [ 116.765681][ T5913] usbhid 4-1:0.0: can't add hid device: -71 [ 116.775957][ T5913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 116.802136][ T5913] usb 4-1: USB disconnect, device number 10 [ 116.849712][ T6228] /dev/rnullb0: Can't open blockdev [ 116.893489][ T6229] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 116.965080][ T6232] syz.3.91: attempt to access beyond end of device [ 116.965080][ T6232] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 116.980101][ T6232] hpfs: hpfs_map_sector(): read error [ 117.031135][ T6236] program syz.0.92 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.032343][ T6235] program syz.0.92 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.051074][ T6236] /dev/rnullb0: Can't open blockdev [ 117.147961][ T5899] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.327876][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 117.342284][ T5899] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 117.351012][ T5899] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 117.363103][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 117.372191][ T5899] usb 3-1: config 1 has no interface number 0 [ 117.378837][ T5899] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.390946][ T5899] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 117.404042][ T5899] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 117.413209][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.447652][ T5899] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 117.517008][ T5898] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 117.657456][ T5899] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 117.676113][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 117.710936][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 117.730734][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.761646][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.775833][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.804382][ T5898] usbtmc 1-1:16.0: bulk endpoints not found [ 118.079195][ T5899] usb 3-1: USB disconnect, device number 10 [ 118.096440][ T5899] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 118.281601][ T6255] qnx4: no qnx4 filesystem (no root dir). [ 118.468870][ T5167] Bluetooth: hci3: command 0x0405 tx timeout [ 118.680170][ T6266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.779660][ T5899] usb 2-1: USB disconnect, device number 7 [ 118.970465][ T6275] warning: `syz.3.103' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.985009][ T6275] NILFS (nbd3): device size too small [ 119.116808][ T6279] exFAT-fs (rnullb0): invalid boot record signature [ 119.125556][ T6279] exFAT-fs (rnullb0): failed to read boot sector [ 119.133154][ T6279] exFAT-fs (rnullb0): failed to recognize exfat type [ 119.134293][ T6280] /dev/rnullb0: Can't open blockdev [ 119.287181][ T5899] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 119.400724][ T6289] NILFS (rnullb0): couldn't find nilfs on the device [ 119.454590][ T5899] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 119.481091][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.492318][ T5899] usb 2-1: Product: syz [ 119.496664][ T5899] usb 2-1: Manufacturer: syz [ 119.502088][ T5899] usb 2-1: SerialNumber: syz [ 119.511226][ T5899] usb 2-1: config 0 descriptor?? [ 119.631179][ T6297] FAT-fs (rnullb0): bogus number of reserved sectors [ 119.638234][ T6297] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 119.726976][ T5899] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 119.970178][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 120.207678][ T6307] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.343130][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.353207][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.380439][ T5934] usb 1-1: USB disconnect, device number 9 [ 120.665105][ T30] audit: type=1326 audit(1754047787.147:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.2.117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc98dd8eb69 code=0x0 [ 120.675710][ T6316] syz.0.116 uses obsolete (PF_INET,SOCK_PACKET) [ 120.702823][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 121.102828][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 121.143619][ T6330] netlink: 14 bytes leftover after parsing attributes in process `syz.0.121'. [ 121.358716][ T6273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.102'. [ 121.980163][ T6346] /dev/rnullb0: Can't open blockdev [ 122.310231][ T6358] /dev/rnullb0: Can't open blockdev [ 122.436155][ T6361] /dev/rnullb0: Can't open blockdev [ 122.548572][ T5899] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 122.569304][ T5934] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 122.696962][ T5898] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.757367][ T5934] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 122.779881][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.801197][ T5934] usb 3-1: Product: syz [ 122.805438][ T5934] usb 3-1: Manufacturer: syz [ 122.820364][ T5934] usb 3-1: SerialNumber: syz [ 122.845268][ T5934] usb 3-1: config 0 descriptor?? [ 122.867106][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 122.879152][ T5898] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 122.907887][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.926734][ T5898] usb 1-1: config 0 descriptor?? [ 123.074097][ T5934] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.077227][ T5899] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 123.093103][ T6375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.154709][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.175782][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.247153][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 123.259332][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 123.270509][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.291595][ T5899] usb 4-1: Product: syz [ 123.295873][ T5899] usb 4-1: Manufacturer: syz [ 123.311945][ T5899] usb 4-1: SerialNumber: syz [ 123.330522][ T5899] usb 4-1: config 0 descriptor?? [ 123.549027][ T5899] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.599366][ T5898] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 123.615814][ T5898] asix 1-1:0.0: probe with driver asix failed with error -61 [ 124.328795][ T5934] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 124.356630][ T5934] usb 3-1: USB disconnect, device number 11 [ 124.782342][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.797646][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.976293][ T5899] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.988026][ T5899] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 124.992613][ T5913] usb 2-1: USB disconnect, device number 8 [ 124.995924][ T5899] usb 4-1: media controller created [ 125.066635][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.127643][ T5899] dvb_usb_rtl28xxu 4-1:0.0: unknown tuner MAX3543 [ 125.210586][ T6371] ./cgroup: Can't lookup blockdev [ 125.220014][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.251533][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.367408][ T5899] usb 4-1: USB disconnect, device number 11 [ 125.474771][ T6407] netlink: 104 bytes leftover after parsing attributes in process `syz.3.142'. [ 125.668580][ T5913] usb 1-1: USB disconnect, device number 10 [ 126.257390][ T5913] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 126.457150][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 126.483521][ T5913] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 126.494730][ T5913] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 126.516779][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 126.537557][ T5913] usb 1-1: config 1 has no interface number 0 [ 126.543776][ T5913] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.557330][ T6424] /dev/rnullb0: Can't open blockdev [ 126.586321][ T5913] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 126.652430][ T5913] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 126.683062][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.752878][ T5913] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 126.930799][ T5913] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 126.959239][ T5890] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.150749][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.182545][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.209832][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.239585][ T5890] usb 2-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.00 [ 127.277139][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.301498][ T5890] usb 2-1: config 0 descriptor?? [ 127.351305][ T5913] usb 1-1: USB disconnect, device number 11 [ 127.369517][ T5913] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 127.773117][ T5890] ntrig 0003:1B96:0007.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0007] on usb-dummy_hcd.1-1/input0 [ 127.857735][ T6450] netlink: 68 bytes leftover after parsing attributes in process `syz.3.152'. [ 127.876614][ T6450] netlink: 'syz.3.152': attribute type 29 has an invalid length. [ 127.893057][ T6450] netlink: 'syz.3.152': attribute type 29 has an invalid length. [ 127.953930][ T6450] /dev/rnullb0: Can't open blockdev [ 127.960539][ T5890] ntrig 0003:1B96:0007.0001: Firmware version: 6.8.20.13.5 (226d b591) [ 128.135692][ T6457] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 128.168972][ T6457] /dev/rnullb0: Can't open blockdev [ 128.202818][ T6459] /dev/rnullb0: Can't open blockdev [ 128.227673][ T5898] usb 2-1: USB disconnect, device number 9 [ 128.287002][ T5899] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 128.443047][ T6468] /dev/rnullb0: Can't open blockdev [ 128.454667][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.471108][ T5899] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.480814][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.495744][ T5899] usb 1-1: config 0 descriptor?? [ 128.617078][ T5913] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 128.790551][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.809326][ T5913] usb 3-1: not running at top speed; connect to a high speed hub [ 128.828146][ T5913] usb 3-1: config 9 has an invalid interface number: 68 but max is 0 [ 128.844620][ T5913] usb 3-1: config 9 has no interface number 0 [ 128.864077][ T5913] usb 3-1: config 9 interface 68 has no altsetting 0 [ 128.880439][ T5913] usb 3-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=43.82 [ 128.909058][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.938546][ T5913] usb 3-1: Product: syz [ 128.942885][ T5913] usb 3-1: Manufacturer: syz [ 128.961372][ T5913] usb 3-1: SerialNumber: syz [ 129.085043][ T6488] overlay: ./file0 is not a directory [ 129.094048][ T6488] netlink: 'syz.1.164': attribute type 27 has an invalid length. [ 129.102977][ T6488] netlink: 164 bytes leftover after parsing attributes in process `syz.1.164'. [ 130.092252][ T6507] /dev/rnullb0: Can't open blockdev [ 130.123666][ T6510] /dev/rnullb0: Can't open blockdev [ 130.213927][ T5913] usb 3-1: bad CDC descriptors [ 130.223420][ T5913] usb 3-1: USB disconnect, device number 12 [ 130.676995][ T5841] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 130.737070][ T2146] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 130.847325][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.864424][ T6521] Mount JFS Failure: -22 [ 130.887091][ T5841] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 130.896966][ T2146] usb 2-1: Using ep0 maxpacket: 32 [ 130.905152][ T5841] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.905202][ T5841] usb 4-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 130.926215][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.951688][ T2146] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 130.967037][ T2146] usb 2-1: config 0 has no interface number 0 [ 130.974999][ T5841] usb 4-1: config 0 descriptor?? [ 130.981285][ T2146] usb 2-1: config 0 interface 29 has no altsetting 0 [ 131.000328][ T2146] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 131.010068][ T2146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.025302][ T2146] usb 2-1: Product: syz [ 131.046702][ T2146] usb 2-1: Manufacturer: syz [ 131.051810][ T2146] usb 2-1: SerialNumber: syz [ 131.070280][ T2146] usb 2-1: config 0 descriptor?? [ 131.077070][ T5899] usbhid 1-1:0.0: can't add hid device: -71 [ 131.083216][ T5899] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.136822][ T5899] usb 1-1: USB disconnect, device number 12 [ 131.194334][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.232327][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.253560][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.270346][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.288998][ T2146] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 131.323602][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.344564][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.385328][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.436469][ T6534] syz.0.178: attempt to access beyond end of device [ 131.436469][ T6534] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 131.463568][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.482522][ T6534] SQUASHFS error: Failed to read block 0x0: -5 [ 131.488066][ T2146] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 131.490645][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.508066][ T6534] unable to read squashfs_super_block [ 131.513358][ T2146] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 131.524937][ T2146] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 131.541301][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.588110][ T2146] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -8 [ 131.596737][ T5841] usb 4-1: string descriptor 0 read error: -71 [ 131.616267][ T5841] usb 4-1: USB disconnect, device number 12 [ 131.695862][ T2146] usb 2-1: USB disconnect, device number 10 [ 131.977070][ T5890] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 132.142196][ T5890] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.155185][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.193322][ T5890] usb 1-1: Product: syz [ 132.197683][ T5890] usb 1-1: Manufacturer: syz [ 132.202317][ T5890] usb 1-1: SerialNumber: syz [ 132.220482][ T5890] usb 1-1: config 0 descriptor?? [ 132.444576][ T5890] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.816967][ T5899] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 133.049141][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.055807][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.122074][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 133.186390][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 133.199105][ T5899] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 133.210551][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.234253][ T5899] usb 2-1: config 0 descriptor?? [ 133.459696][ T5890] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 133.480455][ T5899] uclogic 0003:5543:0781.0002: item fetching failed at offset 1/5 [ 133.517968][ T5899] uclogic 0003:5543:0781.0002: parse failed [ 133.524059][ T5899] uclogic 0003:5543:0781.0002: probe with driver uclogic failed with error -22 [ 133.542346][ T5899] usb 2-1: USB disconnect, device number 11 [ 133.553083][ T6558] capability: warning: `syz.1.185' uses 32-bit capabilities (legacy support in use) [ 133.627092][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.779452][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.806642][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.825537][ T5851] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 133.842796][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.862289][ T24] usb 4-1: config 0 descriptor?? [ 134.189382][ T6574] netlink: zone id is out of range [ 134.194782][ T6574] netlink: zone id is out of range [ 134.200516][ T6574] netlink: zone id is out of range [ 134.205754][ T6574] netlink: zone id is out of range [ 134.212960][ T6574] netlink: zone id is out of range [ 134.219577][ T6574] netlink: zone id is out of range [ 134.224786][ T6574] netlink: zone id is out of range [ 134.249927][ T6575] /dev/rnullb0: Can't open blockdev [ 134.282149][ T6574] netlink: set zone limit has 4 unknown bytes [ 134.480221][ T6580] /dev/rnullb0: Can't open blockdev [ 134.784083][ T6588] /dev/rnullb0: Can't open blockdev [ 134.805603][ T5899] usb 1-1: USB disconnect, device number 13 [ 135.647188][ T5899] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.813998][ T5899] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 135.823777][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.832625][ T5899] usb 2-1: Product: syz [ 135.837302][ T5899] usb 2-1: Manufacturer: syz [ 135.841988][ T5899] usb 2-1: SerialNumber: syz [ 135.850314][ T5899] usb 2-1: config 0 descriptor?? [ 135.858915][ T5899] hub 2-1:0.0: bad descriptor, ignoring hub [ 135.864975][ T5899] hub 2-1:0.0: probe with driver hub failed with error -5 [ 135.876551][ T5899] usbsevseg 2-1:0.0: USB 7 Segment device now attached [ 136.060091][ T6607] netlink: 'syz.1.201': attribute type 29 has an invalid length. [ 136.071788][ T6608] netlink: 'syz.1.201': attribute type 29 has an invalid length. [ 136.095075][ T6607] netlink: 'syz.1.201': attribute type 29 has an invalid length. [ 136.143491][ T6607] netlink: 48 bytes leftover after parsing attributes in process `syz.1.201'. [ 136.347086][ T5890] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 136.424606][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 136.438298][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 136.475996][ T24] usb 4-1: USB disconnect, device number 13 [ 136.500712][ T5899] usb 2-1: USB disconnect, device number 12 [ 136.517803][ T5899] usbsevseg 2-1:0.0: USB 7 Segment now disconnected [ 136.523608][ T5890] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.545909][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.556483][ T5890] usb 3-1: Product: syz [ 136.565474][ T5890] usb 3-1: Manufacturer: syz [ 136.571102][ T5890] usb 3-1: SerialNumber: syz [ 136.615850][ T5890] usb 3-1: config 0 descriptor?? [ 136.836957][ T5899] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 136.846362][ T5890] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.007084][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 137.021733][ T5899] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 137.044968][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.062503][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.079731][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.096918][ T5899] usb 1-1: Product: syz [ 137.104752][ T5899] usb 1-1: Manufacturer: syz [ 137.129994][ T5899] usb 1-1: SerialNumber: syz [ 137.363803][ T6644] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 137.371820][ T6644] /dev/rnullb0: Can't open blockdev [ 137.455259][ T5899] usb 1-1: 0:2 : does not exist [ 137.478928][ T5899] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 137.514821][ T5899] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 137.536033][ T5899] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 137.558678][ T5899] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 137.626096][ T5899] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 137.645695][ T5899] usb 1-1: USB disconnect, device number 14 [ 137.740985][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.908319][ T6649] netlink: 56 bytes leftover after parsing attributes in process `syz.3.214'. [ 138.328762][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 138.522295][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.547154][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 138.569826][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.579532][ T5890] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 138.598704][ T5890] usb 3-1: USB disconnect, device number 13 [ 138.606577][ T24] usb 4-1: config 0 descriptor?? [ 139.010342][ T5934] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 139.161088][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.173690][ T5934] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 139.184583][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.196588][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 60749, setting to 8 [ 139.198032][ T6665] /dev/rnullb0: Can't open blockdev [ 139.212017][ T5934] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 139.225317][ T5934] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 139.233602][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 60749, setting to 8 [ 139.244755][ T5934] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 139.260806][ T5934] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 139.269751][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 60749, setting to 8 [ 139.283635][ T5934] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 139.298963][ T5934] usb 2-1: string descriptor 0 read error: -22 [ 139.305334][ T5934] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 139.314621][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.337052][ T5899] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 139.338838][ T5934] adutux 2-1:168.0: interrupt endpoints not found [ 139.407443][ T5890] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 139.523784][ T5899] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 139.533375][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.545546][ T5899] usb 1-1: Product: syz [ 139.551304][ T5899] usb 1-1: Manufacturer: syz [ 139.555225][ T6660] netlink: 'syz.1.217': attribute type 25 has an invalid length. [ 139.556094][ T5899] usb 1-1: SerialNumber: syz [ 139.565420][ T6660] netlink: 'syz.1.217': attribute type 7 has an invalid length. [ 139.580536][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.581215][ T5899] usb 1-1: config 0 descriptor?? [ 139.602891][ T5890] usb 3-1: not running at top speed; connect to a high speed hub [ 139.615829][ T5890] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 139.626748][ T5890] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 139.637933][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.650893][ T5890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.661787][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.670358][ T5890] usb 3-1: Product: syz [ 139.674732][ T5890] usb 3-1: Manufacturer: syz [ 139.679883][ T5890] usb 3-1: SerialNumber: syz [ 139.743238][ T5934] usb 2-1: USB disconnect, device number 14 [ 139.920916][ T5890] usb 3-1: 0:2 : does not exist [ 139.949044][ T5890] usb 3-1: USB disconnect, device number 14 [ 139.989877][ T6542] udevd[6542]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.953674][ T6683] /dev/rnullb0: Can't open blockdev [ 141.124418][ T6685] netlink: 80 bytes leftover after parsing attributes in process `syz.2.227'. [ 141.149354][ T6685] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 141.179318][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 141.185503][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 141.213652][ T24] usb 4-1: USB disconnect, device number 14 [ 141.223367][ T6685] CIFS mount error: No usable UNC path provided in device string! [ 141.223367][ T6685] [ 141.254907][ T6685] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 141.376985][ T5841] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 141.569682][ T5841] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.581414][ T5841] usb 2-1: config 0 has no interface number 0 [ 141.596793][ T5841] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.637182][ T5841] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.639864][ T6697] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 141.669233][ T5841] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.695967][ T6697] syz.2.229: attempt to access beyond end of device [ 141.695967][ T6697] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 141.697989][ T5841] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 141.741385][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.767117][ T5841] usb 2-1: config 0 descriptor?? [ 142.069821][ T5841] hid (null): report_id 35660 is invalid [ 142.113788][ T5899] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 142.153708][ T5899] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 142.188228][ T5899] usb 1-1: USB disconnect, device number 15 [ 142.270882][ T5841] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0003/input/input9 [ 142.395538][ T5841] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 142.680807][ T6722] binder: 6719:6722 ioctl 41009432 200000000440 returned -22 [ 142.707749][ T5899] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.772503][ T24] usb 2-1: USB disconnect, device number 15 [ 142.820199][ T6728] Can't find a SQUASHFS superblock on rnullb0 [ 142.842473][ T6730] Can't find a SQUASHFS superblock on rnullb0 [ 142.876930][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 142.888684][ T5841] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 142.912091][ T5899] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.925664][ T5899] usb 1-1: config 0 has no interface number 0 [ 142.939709][ T5899] usb 1-1: config 0 interface 184 has no altsetting 0 [ 142.951918][ T5899] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.963251][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.976363][ T5899] usb 1-1: Product: syz [ 142.982461][ T5899] usb 1-1: Manufacturer: syz [ 142.987155][ T2146] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 142.998417][ T5899] usb 1-1: SerialNumber: syz [ 143.010348][ T5899] usb 1-1: config 0 descriptor?? [ 143.026102][ T5899] smsc75xx v1.0.0 [ 143.057329][ T5841] usb 3-1: device descriptor read/64, error -71 [ 143.139130][ T2146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.151923][ T2146] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.161455][ T2146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.187575][ T2146] usb 4-1: config 0 descriptor?? [ 143.254852][ T5899] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 143.277519][ T5899] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 143.295211][ T5899] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 143.308720][ T5841] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 143.354521][ T5899] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 143.377284][ T5899] usb 1-1: USB disconnect, device number 16 [ 143.476989][ T5841] usb 3-1: device descriptor read/64, error -71 [ 143.495142][ T6739] netlink: 'syz.1.240': attribute type 10 has an invalid length. [ 143.505381][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.240'. [ 143.525888][ T6739] team0: entered promiscuous mode [ 143.531510][ T6739] team_slave_0: entered promiscuous mode [ 143.538863][ T6739] team_slave_1: entered promiscuous mode [ 143.545002][ T6739] team0: entered allmulticast mode [ 143.553197][ T6739] team_slave_0: entered allmulticast mode [ 143.559172][ T6739] team_slave_1: entered allmulticast mode [ 143.566192][ T6739] bridge0: port 3(team0) entered blocking state [ 143.573122][ T6739] bridge0: port 3(team0) entered disabled state [ 143.597669][ T5841] usb usb3-port1: attempt power cycle [ 143.795500][ T6748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.947607][ T5841] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 143.997723][ T5841] usb 3-1: device descriptor read/8, error -71 [ 144.237068][ T5841] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 144.270475][ T5841] usb 3-1: device descriptor read/8, error -71 [ 144.392663][ T5841] usb usb3-port1: unable to enumerate USB device [ 144.528216][ T6754] /dev/rnullb0: Can't open blockdev [ 144.865950][ T6762] kAFS: unparsable volume name [ 145.487017][ T5899] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 145.521542][ T6777] hpfs: Bad magic ... probably not HPFS [ 145.656957][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 145.665318][ T5899] usb 2-1: config 0 has no interfaces? [ 145.678637][ T5899] usb 2-1: New USB device found, idVendor=0543, idProduct=1527, bcdDevice=c8.0f [ 145.697046][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.719539][ T5899] usb 2-1: Product: syz [ 145.723783][ T5899] usb 2-1: Manufacturer: syz [ 145.738687][ T5899] usb 2-1: SerialNumber: syz [ 145.754064][ T5899] usb 2-1: config 0 descriptor?? [ 145.818180][ T2146] usbhid 4-1:0.0: can't add hid device: -71 [ 145.841811][ T2146] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 145.864495][ T2146] usb 4-1: USB disconnect, device number 15 [ 146.055445][ T6788] vxfs: WRONG superblock magic 00000000 at 1 [ 146.074480][ T6788] vxfs: WRONG superblock magic 00000000 at 8 [ 146.083261][ T6788] vxfs: can't find superblock. [ 146.173221][ T6792] /dev/rnullb0: Can't open blockdev [ 146.194449][ T6792] /dev/rnullb0: Can't open blockdev [ 146.331320][ T6802] netlink: 'syz.1.249': attribute type 4 has an invalid length. [ 146.344174][ T6803] /dev/rnullb0: Can't open blockdev [ 146.347587][ T6802] /dev/rnullb0: Can't open blockdev [ 146.491040][ T6808] /dev/rnullb0: Can't open blockdev [ 146.717106][ T5890] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 146.902315][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.928801][ T5890] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.951934][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.981478][ T5890] usb 4-1: config 0 descriptor?? [ 147.276969][ T5934] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 147.447175][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 147.462093][ T5934] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 147.474209][ T5934] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 147.496481][ T5934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 147.528343][ T5934] usb 1-1: config 1 has no interface number 0 [ 147.547764][ T5934] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.567226][ T5934] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 147.582284][ T5934] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 147.592058][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.622362][ T5934] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 147.824352][ T5934] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 147.912495][ T6831] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN PTI [ 147.920338][ T6832] hpfs: Bad magic ... probably not HPFS [ 147.924442][ T6831] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 147.924462][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.2.268 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 147.949519][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.959598][ T6831] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 147.964748][ T6831] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 34 31 b1 f9 49 8b 1f 31 ff 48 89 [ 147.984367][ T6831] RSP: 0018:ffffc90003327c00 EFLAGS: 00010206 [ 147.990443][ T6831] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 147.998417][ T6831] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 148.006397][ T6831] RBP: ffffc90003327d60 R08: ffff88807757001f R09: 1ffff1100eeae003 [ 148.014371][ T6831] R10: dffffc0000000000 R11: ffffffff88721fc0 R12: 0000000000000001 [ 148.022347][ T6831] R13: ffffc90003327e00 R14: dffffc0000000000 R15: 0000000000000108 [ 148.030320][ T6831] FS: 00007fc98ec806c0(0000) GS:ffff88812580a000(0000) knlGS:0000000000000000 [ 148.039360][ T6831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.046378][ T6831] CR2: 00007fc98ec7ff98 CR3: 000000007791a000 CR4: 00000000003526f0 [ 148.054353][ T6831] Call Trace: [ 148.057639][ T6831] [ 148.060580][ T6831] ? __pfx_bcsp_recv+0x10/0x10 [ 148.065353][ T6831] ? rcu_read_lock_any_held+0xb3/0x120 [ 148.070819][ T6831] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 148.076714][ T6831] ? tty_audit_push+0x7c/0x250 [ 148.081577][ T6831] hci_uart_tty_receive+0x191/0x220 [ 148.086781][ T6831] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 148.092536][ T6831] tiocsti+0x23c/0x2c0 [ 148.096638][ T6831] ? __pfx_tiocsti+0x10/0x10 [ 148.101326][ T6831] ? __fget_files+0x2a/0x420 [ 148.105918][ T6831] ? __fget_files+0x3a0/0x420 [ 148.110598][ T6831] ? __fget_files+0x2a/0x420 [ 148.115201][ T6831] tty_ioctl+0x626/0xde0 [ 148.119455][ T6831] ? __pfx_tty_ioctl+0x10/0x10 [ 148.124223][ T6831] __se_sys_ioctl+0xfc/0x170 [ 148.128826][ T6831] do_syscall_64+0xfa/0x3b0 [ 148.133330][ T6831] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.138538][ T6831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.144786][ T6831] ? clear_bhb_loop+0x60/0xb0 [ 148.149575][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.155554][ T6831] RIP: 0033:0x7fc98dd8eb69 [ 148.159986][ T6831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.179611][ T6831] RSP: 002b:00007fc98ec80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.188050][ T6831] RAX: ffffffffffffffda RBX: 00007fc98dfb6080 RCX: 00007fc98dd8eb69 [ 148.196038][ T6831] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000004 [ 148.204015][ T6831] RBP: 00007fc98de11df1 R08: 0000000000000000 R09: 0000000000000000 [ 148.211990][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.219973][ T6831] R13: 0000000000000001 R14: 00007fc98dfb6080 R15: 00007ffd947a95e8 [ 148.227974][ T6831] [ 148.231005][ T6831] Modules linked in: [ 148.235722][ T6831] ---[ end trace 0000000000000000 ]--- [ 148.255701][ T6831] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 148.258905][ T5899] usb 2-1: USB disconnect, device number 16 [ 148.268856][ T6831] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 34 31 b1 f9 49 8b 1f 31 ff 48 89 [ 148.288513][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.295761][ T6831] RSP: 0018:ffffc90003327c00 EFLAGS: 00010206 [ 148.304521][ T6831] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 148.313086][ T6831] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 148.322351][ T6831] RBP: ffffc90003327d60 R08: ffff88807757001f R09: 1ffff1100eeae003 [ 148.330704][ T6831] R10: dffffc0000000000 R11: ffffffff88721fc0 R12: 0000000000000001 [ 148.339442][ T6831] R13: ffffc90003327e00 R14: dffffc0000000000 R15: 0000000000000108 [ 148.348038][ T6831] FS: 00007fc98ec806c0(0000) GS:ffff88812590a000(0000) knlGS:0000000000000000 [ 148.358823][ T6831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.366333][ T6831] CR2: 00007fc98ec5ef98 CR3: 000000007791a000 CR4: 00000000003526f0 [ 148.374539][ T6831] Kernel panic - not syncing: Fatal exception [ 148.380921][ T6831] Kernel Offset: disabled [ 148.385366][ T6831] Rebooting in 86400 seconds..