last executing test programs: 52.025598585s ago: executing program 0 (id=1165): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)) 51.88158149s ago: executing program 0 (id=1168): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@discard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$eJzs3E9sVNUeAODfnba0/Hv08Xi8B6IW0dhIbKGgsDAxGE1caGLERF02bSFIoYaWRAjqkBhcGhL3xqVbF27VDTGsTNzi0sSQEMMGMCGOuTP3dqbDzJRppx1Lvy+Z9px7595zzj333Dn3nLkTwLo1lP5JKuEbEbEtIgr1bxiq/Lt7+9LEvduXJqJYKh3/IylvdieNZ7LdxOYsMlyIKHyWVFfUmL1w8fT49PTUuSw+Onfmw9HZCxefPzWQLTl69PChg0deHHuh/UI1SC8t153dn8zs2fX6+1ffnOjNl+ep1ZajU4ZiqFFWyp7pdGJdtrUmnPR2MSO0JT3/0+rqK7f/bdETrSqvuIo5A1ZaqVQq9TdfXSzVu/zAEmDNioFu5wDojvyDPr3/zV+NOgIbVqb70XW3jlVugNJy381eEU+WF+bjIH1197edNBQR7xX//Cp9RbNxiJ4VShwAWJd+OJb3BOv6f4OVmZH756+9nP7/VzaHMhgR/46I7RHxn4jYERH/jYidEfG/iPh/3f7TrkupRfpDdfH59OcnoQo3O1TUhtL+30vZ3Fa1/7cgA4M9WWxrRN5hnjqQHZPh6Os/cWp66mCLNH589Zcvmq2r7f+lrzT9vC+Y5eNmb90A3eT43PiSC1zn1uWI3b315U96I5L5mYAkInZFxO429jtYEz713Dd75iN9C9+3ePnLSg3n0Towz1T6OuLZSO7fvX2pGAvqv5pismB+8sz4yamTU2fH5ucnRwdieurAaHoWHGiYxvWfr7zVLP1Fy//db/WbvHbk++MduylI639Tzfkf+fxttfyDSUQyP187234aV379vOnc6lLP/w3JO+Vwfl/60fjc3LmDERuSNx5cPlbdNo+n/6NYKf/wvsbtf3u2TXokHouI9CR+PCKeiModYpr3vRHxVETsa1H+n155+oO2y19oscMOSss/WXf9q9T8gvqvztc3CyTZ3GCDVT2n99641+Ti8XD1f7gcGs6WNL7+JQsuEc1ymn/apUv+WvbRAwAAgLWhEBFbasaStkShMDJSGQPaEZsK0zOzc/tPzJw/O5muixiMvkI+0lUZD+5L8vHPwZr4WF38UDZu/GXPxnJ8ZGJmerKrJQc2l9t8UhiJeLenpv2nfve9E3j0eV4L1q9W7T/txO+8uoqZAVbVw3/+X/t4RTMCrLqa9t/sCf/iEr73BawB7v+BqsV/6Mc1A9a+krYM61pb7X+/HwGER0lvvD0fXqXnDoF/iKX2/z/tcD6AVbXoc/3LCpT6G68aiAffHAOtd9gTS8vGxgZpdSWQ9qy6kvrGpWyV/5pC0/dEob0d9kdn6vTEMo9G8dzsyZ0dP/lL2XflO12D3zZvp9f7W9TO8gNduRwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03N8BAAD//6Yc4S8=") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffa]}, 0x8, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 51.143974255s ago: executing program 0 (id=1173): read$FUSE(0xffffffffffffffff, 0x0, 0x0) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000022c0)) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002380), &(0x7f00000023c0)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002400)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002440)) syz_emit_vhci(0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000046c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "dd6148", 0xa2503cb131bdfb06}}}, 0xd) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) execve(0x0, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x101000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000091) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x54) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 50.972293261s ago: executing program 0 (id=1175): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x5, 0xfffffffff9110f4f, 0xe, 0x285, 0xf7c, 0x6, 0x0, 0x0, 0x40, 0x5}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 49.909870618s ago: executing program 0 (id=1181): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 49.700655975s ago: executing program 0 (id=1182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x6000, 0x1a000}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x0, &(0x7f0000000180)=[0x6bd1a311, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x400005, 0x4, 0x401, 0x466c, 0x89004, 0x2, 0x4e, 0x400009, 0x2, 0x49, 0x100000000003, 0x5, 0x400000000002, 0x7fffffff, 0x8, 0x7, 0xc1, 0x8, 0xfffffffffffff000, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0xff, 0x0, 0x4, 0x4, 0x2, 0x3, 0x4000009, 0x8892, 0x1, 0x6, 0x46, 0x2001, 0xfffffffffffffff8, 0xa3de, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0xfffffffffffff068, 0x4, 0xe6, 0x200000000000101, 0x2, 0xd, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x3, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x5e7, 0xcdc, 0x100004000000007, 0x2, 0x3, 0x2, 0x10000, 0x9, 0x6, 0x4, 0x1, 0x81, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x80000005, 0x8061d, 0x8, 0x7, 0xf6, 0x4, 0x5, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332d, 0x6, 0x5, 0x7, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x20000000000013, 0x40000000000005, 0x8, 0x1, 0x6, 0x200eb4, 0x3, 0x1, 0xb68e, 0xcc, 0x8, 0x1000003]}) 34.637668014s ago: executing program 32 (id=1182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x6000, 0x1a000}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x0, &(0x7f0000000180)=[0x6bd1a311, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x400005, 0x4, 0x401, 0x466c, 0x89004, 0x2, 0x4e, 0x400009, 0x2, 0x49, 0x100000000003, 0x5, 0x400000000002, 0x7fffffff, 0x8, 0x7, 0xc1, 0x8, 0xfffffffffffff000, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0xff, 0x0, 0x4, 0x4, 0x2, 0x3, 0x4000009, 0x8892, 0x1, 0x6, 0x46, 0x2001, 0xfffffffffffffff8, 0xa3de, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0xfffffffffffff068, 0x4, 0xe6, 0x200000000000101, 0x2, 0xd, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x3, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x5e7, 0xcdc, 0x100004000000007, 0x2, 0x3, 0x2, 0x10000, 0x9, 0x6, 0x4, 0x1, 0x81, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x80000005, 0x8061d, 0x8, 0x7, 0xf6, 0x4, 0x5, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332d, 0x6, 0x5, 0x7, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x20000000000013, 0x40000000000005, 0x8, 0x1, 0x6, 0x200eb4, 0x3, 0x1, 0xb68e, 0xcc, 0x8, 0x1000003]}) 11.419057516s ago: executing program 4 (id=1484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f2, 0x0, 0x1}]}) 11.234982822s ago: executing program 4 (id=1485): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0xee3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xffbffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1003, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x9, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.02777581s ago: executing program 4 (id=1488): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 6.338382421s ago: executing program 3 (id=1535): syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x59, 0xa}, {0x401, 0x2, 0x5, 0x1ff, 0xc24}}}}, 0x17) 6.183890537s ago: executing program 3 (id=1537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="2703", 0x2}], 0x1}, 0x4041) 5.822278469s ago: executing program 3 (id=1540): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x9000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 5.640304965s ago: executing program 3 (id=1542): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x5, @f_listen={0xe, 0x2, 0x4, 0x82, 0x9, 0x2, 0x8, {}, 0x3, 0xa, 0x7, 0x5, 0x4, "03a4ec9e"}}, 0x14) 4.958734199s ago: executing program 1 (id=1545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003a80)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 4.91503244s ago: executing program 1 (id=1546): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f23, 0x5, 0x2, 0x4000401, 0x1, 0x40000cc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x8, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x401, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x32, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x3, 0x8000000, 0x2ec0]}) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0) 4.831726023s ago: executing program 1 (id=1548): sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 2.577622341s ago: executing program 1 (id=1552): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.509657304s ago: executing program 3 (id=1554): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.508863094s ago: executing program 2 (id=1555): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x9000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2.366818978s ago: executing program 1 (id=1557): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\r', 0x1}], 0x1}, 0x4) 2.284512121s ago: executing program 2 (id=1558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000380)=0xa, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000700)=[{0x0, 0x2, {0x2}, {0x2, 0x0, 0x3}, 0xff, 0xfe}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r3 = inotify_init() mkdir(0x0, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'team0\x00', 0x1}, 0x18) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42}, 0x2000400c) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x15, 0x2c}, {0x5000, 0x2000, 0xe, 0x0, 0x40, 0x5, 0x6d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x7, 0x9, 0x11, 0xa7, 0x4, 0x81}, {0x80a0000, 0xeeee0000, 0xb, 0x3, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xd000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdf, 0x83}, {0x1000, 0x100000, 0xc, 0xc, 0xb1, 0x8, 0x21, 0xa0, 0x82, 0x3, 0x1}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x1, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x10, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x80a0000, 0x1000}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x800, 0x3000, [0xaffe, 0x4, 0x80, 0xfff]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, 0x0) syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x6a}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) ppoll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x2097}, {}, {0xffffffffffffffff, 0x81}], 0x3, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.146701326s ago: executing program 5 (id=1559): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x40040) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.145789606s ago: executing program 3 (id=1560): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000840)=[{0x1, 0x5010, 0x2, &(0x7f0000000640)="ebae"}], 0x1}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000a80)=ANY=[], &(0x7f00000002c0)=ANY=[@ANYBLOB="00030000000004030c08"], &(0x7f0000000300)={0x0, 0xf, 0x8e, {0x5, 0xf, 0x8e, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x40, 0xff00, 0xffff, [0x0]}, @generic={0x5b, 0x10, 0xa, "7fa0b90ac4455960bda2dfe1d06a6e3f6d08387cb2329cb8062981e1d1017a5b53217a8586b5f8a932f087a0861dac47ffe44a2d261d6dba941052a073f347280460063e12dfb0ef3a89ac3bea00106bd7b60ff22b074945"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a5695c381e5f87dde6f3d7170fd427f6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0x1, 0xffff}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x4, 0x0, "1cb74b2b", "f8cfb747"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x6c, 0x97, 0x2, 0x2, 0x3}}}, &(0x7f00000009c0)={0x84, &(0x7f00000004c0)={0x20, 0x0, 0x56, "944dd2b4dd38e3720f56ad06ff4f53a15665a9ec11856bb4ec03e76c10de016d6609e11d8c7e7ad3a610f7149392c54758df2c97a50eebdf52b0c257a3a6eb86933f3f729bf0a5b3d0d326616ef1f1651411e27c7bcb"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xd7}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x1000, 0x0, [0x1ef]}}, &(0x7f0000000680)={0x40, 0x7, 0x2}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0xb, 0x2, "3ce0"}, &(0x7f0000000780)={0x40, 0xf, 0x2}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, "a5e1"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x8c}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x8}}) 1.844029447s ago: executing program 1 (id=1561): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x40402) preadv(r1, &(0x7f0000000840)=[{&(0x7f00000000c0)=""/243, 0xf3}, {0x0}], 0x2, 0x40e, 0x54) 1.813516557s ago: executing program 5 (id=1563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) 1.269053866s ago: executing program 2 (id=1564): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 787.905073ms ago: executing program 5 (id=1565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x90003, 0x0, {[0x7, 0x2, 0x200, 0x2, 0x8, 0x80000001, 0x10000000000001, 0x1fffc]}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000100)={0x10000, 0x0, {[0xfffffffffffffff7, 0x0, 0x8, 0x5, 0x7, 0xc, 0x81, 0x2]}}) 717.680685ms ago: executing program 4 (id=1566): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 655.016077ms ago: executing program 5 (id=1567): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x44) fsopen(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x8000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 489.350153ms ago: executing program 4 (id=1568): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 370.514287ms ago: executing program 5 (id=1569): ioprio_set$pid(0x3, 0x0, 0x5ffe) 362.699237ms ago: executing program 4 (id=1570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 143.897035ms ago: executing program 2 (id=1571): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x300000f) 143.475805ms ago: executing program 5 (id=1572): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\r', 0x1}], 0x1}, 0x4) 119.131846ms ago: executing program 2 (id=1573): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x492283, 0x0) 0s ago: executing program 2 (id=1574): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x50000, 0x4, 0xf435, 0xb, 0x0, [{0x4, 0x1, 0x90, '\x00', 0x7}, {0x7f, 0x9, 0x8, '\x00', 0x80}, {0x7, 0x7, 0x9, '\x00', 0xf7}, {0x8, 0x5, 0x7, '\x00', 0x2}, {0x5, 0x19, 0x10, '\x00', 0x3}, {0x7, 0x78, 0x9, '\x00', 0xfa}, {0x10, 0xb3, 0xf, '\x00', 0x9}, {0xfa, 0x0, 0x6, '\x00', 0xa}, {0x35, 0xec, 0x0, '\x00', 0xf}, {0xa, 0x8, 0x4, '\x00', 0x7}, {0x0, 0x1, 0x9, '\x00', 0x20}, {0x7, 0x2, 0x46, '\x00', 0x2}, {0xc0, 0xff, 0x7, '\x00', 0x5}, {0x10, 0x4e, 0x3, '\x00', 0x8}, {0x6, 0x5, 0x2, '\x00', 0x1}, {0x3, 0x2, 0xe4}, {0xfc, 0x1, 0x4, '\x00', 0x8b}, {0xe0, 0x0, 0xe5, '\x00', 0xda}, {0x6, 0x4, 0x7, '\x00', 0x6}, {0x1, 0x1d, 0x5, '\x00', 0x2}, {0x4, 0x6, 0x6, '\x00', 0x18}, {0x4, 0x19, 0x8, '\x00', 0xf5}, {0x0, 0x3, 0x1b, '\x00', 0x4}, {0x8, 0xf9, 0x64, '\x00', 0x5}]}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}, @timestamp_addr={0x44, 0x4, 0xdc, 0x1, 0x1}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): 03:0458:5011.001E: unknown main item tag 0x0 [ 197.926785][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 197.933557][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 197.940272][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 197.946947][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 197.953956][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 197.960672][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 197.967344][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 197.974097][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 197.981252][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 197.988039][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 197.994728][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.001569][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.008297][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.015163][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.022020][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.028814][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.035533][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.042347][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.049090][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.055766][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.062541][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.069309][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.076078][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.083407][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.090188][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.096879][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.104068][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.110812][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.117490][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.124718][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.131937][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.138897][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.145707][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.152691][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.159927][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.166636][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.173407][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.180158][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.187315][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.194317][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.201089][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.208057][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.214873][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.221723][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.228578][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.235264][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.242003][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.248826][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.255659][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.262437][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.269183][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.275943][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.282684][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.289836][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.296625][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.303434][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.310248][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.317007][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.323763][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.329616][ T6947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.330559][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.348874][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.355629][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.362724][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.369996][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.376723][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.383943][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.398570][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.405330][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.425728][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.447319][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.460117][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.466895][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.474097][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.480985][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.487776][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.494915][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.501689][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.508444][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.515131][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.522236][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.529219][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.535919][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.542701][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.549445][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.556205][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.563054][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.569813][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.576517][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.583334][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.590174][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.597325][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.604163][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.610954][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.617651][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.624459][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.631217][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.637965][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.644665][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.651421][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.658477][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.665258][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.672063][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.678897][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.685653][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.692522][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.699720][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.706430][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.713406][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.720150][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.726920][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.733664][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.737799][ T4173] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 198.740396][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.754695][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.761561][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.768363][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.775055][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.781850][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.788609][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.795281][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.802602][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.809367][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.816062][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.822895][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.829718][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.836388][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.843693][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.850457][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.857155][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.863909][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.870645][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.877338][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.884060][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.890817][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.897492][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.904859][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.911891][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.918750][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.925466][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.932333][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.939051][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.945722][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.952490][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.959204][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.965894][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.972650][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.979713][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.986396][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.993155][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 198.997831][ T4173] usb 2-1: Using ep0 maxpacket: 8 [ 198.999972][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.012426][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.019184][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.025889][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.032652][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.039374][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.046075][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.052972][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.059694][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.066372][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.073135][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.079871][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.086552][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.093298][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.100034][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.107255][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.114038][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.120812][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.127621][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.127900][ T4173] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.134486][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.134512][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.134533][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.134556][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.134579][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.144760][ T4173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.154475][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.158914][ T4173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.165862][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.172333][ T4173] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.181261][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.189135][ T4173] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.195812][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.209066][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.213386][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.262970][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.269905][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.276732][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.283520][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.290626][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.297350][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.304346][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.311971][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.324528][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.331369][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.338139][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.345229][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.352382][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.359442][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.366293][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.373071][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.379832][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.386535][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.393315][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.407181][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.414649][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.421590][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.428407][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.435209][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.441996][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.448756][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.455440][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.462223][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.468989][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.475679][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.482597][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.489348][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.496131][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.502924][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.509694][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.517078][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.523999][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.528006][ T4173] usb 2-1: GET_CAPABILITIES returned 0 [ 199.531024][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.536668][ T4173] usbtmc 2-1:16.0: can't read capabilities [ 199.543174][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543208][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543232][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543253][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543276][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543297][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543319][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543341][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543362][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543384][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543407][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543429][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543450][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543471][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543492][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543515][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543537][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.543559][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.672153][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.678989][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.685692][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.693227][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.699973][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.706670][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.713425][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.720766][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.727552][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.734342][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.741178][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.748053][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.754977][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.761736][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.768489][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.775267][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.777750][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 199.782191][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.798469][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.799729][ T4190] usb 2-1: USB disconnect, device number 17 [ 199.805174][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.818025][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.825404][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.832218][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.838978][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.845692][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.852512][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.859233][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.865915][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.872767][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.879578][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.886275][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.893063][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.899977][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.906682][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.913744][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.920615][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.927845][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.934717][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.941504][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.948245][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.954921][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.962037][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.968888][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.975577][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.982310][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.989033][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 199.995705][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.002558][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.009376][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.016058][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.022795][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.029985][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.036700][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.045053][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.051921][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.058686][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.065477][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.072236][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.078959][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.085661][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.092402][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.099235][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.105903][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.112918][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.119640][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.126423][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.133845][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.140632][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.147335][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.154182][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.160914][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.167585][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.174339][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.181052][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.187891][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.194577][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.201318][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.208413][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.215098][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.221830][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.228580][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.235702][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.242448][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.249188][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.255867][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.262600][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.269376][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.276138][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.282928][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.289660][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.296349][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.303101][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.309850][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.316614][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.323451][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.330203][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.337310][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.344095][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.350875][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.358137][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.365378][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.378836][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.392869][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.400176][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.406914][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.417189][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.424497][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.437485][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.445110][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.452033][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.459170][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.465881][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.473164][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.479916][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.486681][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.493452][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.500402][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.507349][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.514170][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.521192][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.528219][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.535280][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.542865][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.549732][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.556460][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.563253][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.570035][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.577023][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.583820][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.590624][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.597365][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.604190][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.611105][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.617893][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.624637][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.631427][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.638152][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.645293][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.652173][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.658994][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.665692][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.672466][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.679467][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.686210][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.693028][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.699784][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.706598][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.713361][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.720107][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.726874][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.733657][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.740396][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.747823][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.754560][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.761422][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.768343][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.775054][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.781841][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.788586][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.795271][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.802019][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.808892][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.815602][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.822443][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.829204][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.835911][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.842754][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.850013][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.856718][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.863443][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.870185][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.876884][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.883715][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.890479][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.897356][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.904146][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.910913][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.918336][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.925065][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.932013][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.938936][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.945626][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.953019][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.959793][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.966500][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.973280][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.980016][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.986689][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 200.993466][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.000195][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.007129][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.013955][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.020713][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.027396][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.034491][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.041248][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.048046][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.055201][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.062005][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.068746][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.075429][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.082174][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.088929][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.095612][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.102459][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.109210][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.115975][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.122741][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.129498][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.136185][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.142974][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.149724][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.156876][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.163657][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.170431][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.177132][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.183867][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.190698][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.197399][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.204222][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.211118][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.217985][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.224720][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.231608][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.238377][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.245102][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.251907][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.259111][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.265827][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.272621][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.279368][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.286048][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.292839][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.299584][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.306372][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.313124][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.319974][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.326890][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.333876][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.340718][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.347436][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.354223][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.361384][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.368183][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.374962][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.381809][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.388608][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.395379][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.402396][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.409191][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.415905][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.423101][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.429876][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.436554][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.443471][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x4 [ 201.450290][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.457058][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.464368][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.471159][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.477935][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x2 [ 201.484633][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.491386][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.498118][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.504802][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.511571][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.518395][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.525080][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.531926][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.538667][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.545433][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.552300][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.559029][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.566141][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.573086][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.579955][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.586668][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.593493][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.600232][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.606907][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.613673][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.620418][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.627131][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.633975][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.640825][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.647498][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.654274][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.660996][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.668491][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.675213][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.681984][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.688736][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.695514][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.702248][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.709003][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.715771][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.722531][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.729277][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.736013][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.742762][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.749647][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.756337][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.763094][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.770244][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.776947][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.783765][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.790513][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.798154][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.805738][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.812506][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.819276][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.826000][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.832808][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.839557][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.846254][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.853032][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.859760][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.867480][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.875650][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.882531][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.889398][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.896129][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.902958][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.909753][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.916500][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.923281][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.930066][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.936844][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.943599][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.950346][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.957146][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.964060][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.970857][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.978475][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.985208][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.991980][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 201.998724][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.005511][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.012328][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.019085][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.026738][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.033582][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.040651][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.047342][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.054113][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.060864][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.067774][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.074481][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.081808][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.088656][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.095491][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.102324][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.109087][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.115764][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.122525][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.129399][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.136073][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.142825][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.149669][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.156343][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.163587][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.170626][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.178030][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.184753][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.191650][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.198399][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.205081][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.211840][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.218573][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.225248][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.232103][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.238941][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.245738][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.252522][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.259343][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.266122][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.272973][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.280415][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.287234][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.294019][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.300856][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.307541][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.314321][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.321069][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.327883][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.334624][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.341597][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.348355][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.355044][ T21] kye 0003:0458:5011.001E: unknown main item tag 0x0 [ 202.375678][ T21] kye 0003:0458:5011.001E: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 202.387149][ T21] kye 0003:0458:5011.001E: tablet-enabling feature report not found [ 202.395248][ T21] kye 0003:0458:5011.001E: tablet enabling failed [ 202.416506][ T21] usb 4-1: USB disconnect, device number 17 [ 202.700585][ T6977] fido_id[6977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 202.908983][ T6999] loop5: detected capacity change from 0 to 7 [ 202.969983][ T6999] Dev loop5: unable to read RDB block 7 [ 203.017047][ T6999] loop5: unable to read partition table [ 203.028232][ T6999] loop5: partition table beyond EOD, truncated [ 203.044884][ T6999] loop_reread_partitions: partition scan of loop5 (~h"+x|Q` ) failed (rc=-5) [ 203.348248][ T4232] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 203.376790][ T7011] input: syz0 as /devices/virtual/input/input21 [ 203.388668][ T7009] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 203.422251][ T4272] udevd[4272]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 203.435915][ T4272] udevd[4272]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 203.587840][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 203.693570][ T7019] tmpfs: Bad value for 'mpol' [ 203.708006][ T4232] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.738281][ T4232] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.769373][ T4232] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.804142][ T4232] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 203.821240][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.851684][ T4232] usb 4-1: config 0 descriptor?? [ 204.046955][ T7027] netlink: 66 bytes leftover after parsing attributes in process `syz.2.1014'. [ 204.098126][ T4229] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 204.321076][ T4232] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 204.337865][ T4232] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 204.348074][ T4229] usb 5-1: Using ep0 maxpacket: 8 [ 204.358059][ T4232] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 204.375600][ T4232] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 204.388233][ T4232] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 204.408547][ T4232] mcp2221 0003:04D8:00DD.001F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 204.523917][ T4232] usb 4-1: USB disconnect, device number 18 [ 204.573398][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1019'. [ 204.628061][ T4229] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 204.644264][ T7043] input: syz0 as /devices/virtual/input/input22 [ 204.657788][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.665942][ T4229] usb 5-1: Product: syz [ 204.691931][ T4229] usb 5-1: Manufacturer: syz [ 204.696658][ T4229] usb 5-1: SerialNumber: syz [ 204.713137][ T4229] usb 5-1: config 0 descriptor?? [ 204.760122][ T4229] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 204.775020][ T4229] dvb-usb: bulk message failed: -22 (2/0) [ 204.793837][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.819090][ T4229] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 204.831225][ T4229] usb 5-1: media controller created [ 204.880638][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.977937][ T4229] dvb-usb: bulk message failed: -22 (1/0) [ 205.065804][ T4229] DVB: Unable to find symbol mt352_attach() [ 205.073159][ T4229] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 205.270631][ T4229] rc_core: IR keymap rc-dvico-portable not found [ 205.277033][ T4229] Registered IR keymap rc-empty [ 205.287839][ T4173] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 205.295705][ T4229] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 205.327065][ T4229] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input23 [ 205.361734][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 205.377848][ T4229] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 205.414115][ T4229] usb 5-1: USB disconnect, device number 15 [ 205.517551][ T7062] device syzkaller0 entered promiscuous mode [ 205.562729][ T4229] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 205.577921][ T4173] usb 2-1: Using ep0 maxpacket: 8 [ 205.665831][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 205.718085][ T4173] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 205.757800][ T4173] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.789646][ T4173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.847800][ T4173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.881330][ T4173] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.936235][ T4173] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.961714][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.170387][ T4229] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 206.307876][ T4173] usb 2-1: usb_control_msg returned -71 [ 206.313619][ T4173] usbtmc 2-1:16.0: can't read capabilities [ 206.357804][ T4173] usb 2-1: USB disconnect, device number 18 [ 206.651541][ T7094] device bridge_slave_0 entered promiscuous mode [ 206.698541][ T4229] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 206.717867][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.746622][ T4229] usb 5-1: Product: syz [ 206.764572][ T4229] usb 5-1: Manufacturer: syz [ 206.779060][ T7096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1042'. [ 206.788931][ T4229] usb 5-1: SerialNumber: syz [ 206.802407][ T4229] usb 5-1: config 0 descriptor?? [ 206.944254][ T7099] device syzkaller0 entered promiscuous mode [ 207.013269][ T7102] binder: 7101:7102 unknown command 0 [ 207.056036][ T4232] usb 5-1: USB disconnect, device number 16 [ 207.065977][ T7102] binder: 7101:7102 ioctl c0306201 200000000080 returned -22 [ 207.199120][ T7105] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1045'. [ 207.233773][ T7105] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1045'. [ 207.450204][ T7113] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 207.490805][ T7113] device bond2 entered promiscuous mode [ 207.498148][ T7113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.582553][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1051'. [ 207.609474][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1054'. [ 207.726290][ T7113] bond2: (slave bridge1): making interface the new active one [ 207.754526][ T7113] device bridge1 entered promiscuous mode [ 207.777526][ T7113] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 207.806153][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 208.478064][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 208.640415][ T7173] 9pnet_virtio: no channels available for device syz [ 208.728909][ T7176] tmpfs: Unknown parameter 'quota' [ 208.855652][ T7183] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 209.228702][ T7196] 9pnet_virtio: no channels available for device syz [ 209.366364][ T7198] 9pnet_virtio: no channels available for device syz [ 209.504830][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1085'. [ 210.290478][ T4229] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.358450][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1097'. [ 210.667988][ T4229] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 210.688192][ T4229] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 210.699449][ T7258] block device autoloading is deprecated and will be removed. [ 210.739129][ T4229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.814494][ T7265] overlayfs: failed to get inode (-116) [ 210.839216][ T7265] overlayfs: failed to get inode (-116) [ 210.898105][ T4229] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.927329][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.941871][ T4229] usb 3-1: Product: syz [ 210.967882][ T4229] usb 3-1: Manufacturer: syz [ 210.977051][ T4229] usb 3-1: SerialNumber: syz [ 211.003201][ T4229] usb 3-1: config 0 descriptor?? [ 211.048642][ T4229] hub 3-1:0.0: bad descriptor, ignoring hub [ 211.060430][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1110'. [ 211.060981][ T4229] hub: probe of 3-1:0.0 failed with error -5 [ 211.093236][ T4229] usb 3-1: selecting invalid altsetting 0 [ 211.368488][ T4232] usb 3-1: USB disconnect, device number 15 [ 211.543842][ T7288] binder: 7287:7288 unknown command 1074553620 [ 211.551351][ T7288] binder: 7287:7288 ioctl c0306201 200000000640 returned -22 [ 211.834085][ T7297] "syz.0.1117" (7297) uses obsolete ecb(arc4) skcipher [ 212.078743][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1121'. [ 212.222754][ T7308] netlink: 'syz.4.1122': attribute type 3 has an invalid length. [ 212.251075][ T7310] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 212.298938][ T7310] device bond1 entered promiscuous mode [ 212.319207][ T7310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.404100][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1123'. [ 212.463395][ T7310] bond1: (slave bridge1): making interface the new active one [ 212.472221][ T7323] loop4: detected capacity change from 0 to 512 [ 212.478260][ T7310] device bridge1 entered promiscuous mode [ 212.508181][ T7323] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1126: invalid indirect mapped block 4294967295 (level 1) [ 212.520127][ T7310] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 212.537427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 212.598896][ T7323] EXT4-fs (loop4): Remounting filesystem read-only [ 212.605570][ T7323] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1126: invalid indirect mapped block 4294967295 (level 1) [ 212.649298][ T4232] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 212.668535][ T7323] EXT4-fs (loop4): Remounting filesystem read-only [ 212.684877][ T7323] EXT4-fs (loop4): 2 truncates cleaned up [ 212.694064][ T7323] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 212.722065][ T7323] device syz_tun entered promiscuous mode [ 212.933598][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1132'. [ 213.010414][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.046521][ T4232] usb 4-1: config 0 has no interfaces? [ 213.142426][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.173315][ T4232] usb 4-1: config 0 has no interfaces? [ 213.290504][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.319179][ T4232] usb 4-1: config 0 has no interfaces? [ 213.578068][ T4232] usb 4-1: string descriptor 0 read error: -22 [ 213.584908][ T4232] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 213.597636][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.653461][ T4232] usb 4-1: config 0 descriptor?? [ 213.797780][ T4232] Bluetooth: hci1: command 0x2016 tx timeout [ 213.819525][ T7376] netlink: 'syz.4.1139': attribute type 1 has an invalid length. [ 213.881285][ T7376] device bond1 entered promiscuous mode [ 213.887353][ T7376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.896076][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1139'. [ 213.914521][ T4232] usb 4-1: USB disconnect, device number 19 [ 214.112024][ T7380] bond1: (slave bridge2): making interface the new active one [ 214.125664][ T7380] device bridge2 entered promiscuous mode [ 214.142001][ T7380] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 214.166904][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 214.303971][ T7391] loop4: detected capacity change from 0 to 512 [ 214.410128][ T7391] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1141: invalid indirect mapped block 4294967295 (level 1) [ 214.455067][ T7391] EXT4-fs (loop4): Remounting filesystem read-only [ 214.480755][ T7391] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1141: invalid indirect mapped block 4294967295 (level 1) [ 214.497851][ T7391] EXT4-fs (loop4): Remounting filesystem read-only [ 214.504840][ T7391] EXT4-fs (loop4): 2 truncates cleaned up [ 214.518173][ T7391] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 214.671032][ T7403] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 214.718017][ T7403] overlayfs: missing 'lowerdir' [ 214.877582][ T7410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1144'. [ 215.000779][ T7417] 9pnet_virtio: no channels available for device syz [ 215.229921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.272399][ T7430] lo speed is unknown, defaulting to 1000 [ 215.327961][ T4264] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 215.568013][ T4264] usb 5-1: Using ep0 maxpacket: 8 [ 215.688259][ T4264] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.708085][ T4264] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.740331][ T4264] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.760176][ T4264] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.782941][ T4264] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.807857][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.987906][ T4228] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 216.097996][ T4264] usb 5-1: GET_CAPABILITIES returned 0 [ 216.104317][ T4264] usbtmc 5-1:16.0: can't read capabilities [ 216.186691][ T7462] loop0: detected capacity change from 0 to 512 [ 216.230507][ T4228] usb 4-1: Using ep0 maxpacket: 8 [ 216.339801][ T7462] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1154: invalid indirect mapped block 4294967295 (level 1) [ 216.363713][ T4232] usb 5-1: USB disconnect, device number 17 [ 216.380790][ T7462] EXT4-fs (loop0): Remounting filesystem read-only [ 216.381786][ T4228] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 216.387567][ T7462] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1154: invalid indirect mapped block 4294967295 (level 1) [ 216.411878][ T7462] EXT4-fs (loop0): Remounting filesystem read-only [ 216.425593][ T7462] EXT4-fs (loop0): 2 truncates cleaned up [ 216.428259][ T4228] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 216.432597][ T7462] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 216.480850][ T4228] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.507953][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.555566][ T7462] device syz_tun entered promiscuous mode [ 216.666967][ T26] audit: type=1800 audit(1775239778.110:2): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1157" name="/" dev="fuse" ino=1 res=0 errno=0 [ 216.769694][ T7486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1158'. [ 216.820113][ T21] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 216.837585][ T4232] usb 4-1: USB disconnect, device number 20 [ 217.188095][ T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.207799][ T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.247766][ T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.267357][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.500040][ T7513] loop0: detected capacity change from 0 to 512 [ 217.578020][ T21] usb 2-1: usb_control_msg returned -71 [ 217.590499][ T7516] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 217.599924][ T21] usbtmc 2-1:16.0: can't read capabilities [ 217.619041][ T7518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1170'. [ 217.632267][ T7513] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1168: invalid block [ 217.648146][ T7513] EXT4-fs (loop0): Remounting filesystem read-only [ 217.665136][ T7513] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1168: invalid indirect mapped block 4294967295 (level 1) [ 217.711183][ T21] usb 2-1: USB disconnect, device number 19 [ 217.718910][ T7513] EXT4-fs (loop0): Remounting filesystem read-only [ 217.725647][ T7513] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1168: invalid indirect mapped block 4294967295 (level 1) [ 217.768016][ T7513] EXT4-fs (loop0): Remounting filesystem read-only [ 217.829429][ T7513] EXT4-fs (loop0): 2 truncates cleaned up [ 217.875020][ T7524] 9pnet_virtio: no channels available for device syz [ 217.879064][ T7521] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 217.903730][ T7513] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 217.950269][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 217.984051][ T7522] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 218.026018][ T7522] bond3 (unregistering): Released all slaves [ 218.311617][ T4192] Bluetooth: unknown link type 6 [ 218.438697][ T4232] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 218.687809][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 218.808057][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.828300][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.870076][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.910690][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.983371][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.015408][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.217224][ T7553] lo speed is unknown, defaulting to 1000 [ 219.317944][ T4232] usb 2-1: GET_CAPABILITIES returned 0 [ 219.323507][ T4232] usbtmc 2-1:16.0: can't read capabilities [ 219.532064][ T7556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 219.548346][ T21] usb 2-1: USB disconnect, device number 20 [ 220.143069][ T7563] loop2: detected capacity change from 0 to 512 [ 220.221320][ T7563] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1183: invalid indirect mapped block 4294967295 (level 1) [ 220.236427][ T7563] EXT4-fs (loop2): Remounting filesystem read-only [ 220.246783][ T7563] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1183: invalid indirect mapped block 4294967295 (level 1) [ 220.263866][ T7563] EXT4-fs (loop2): Remounting filesystem read-only [ 220.271006][ T7563] EXT4-fs (loop2): 2 truncates cleaned up [ 220.277015][ T7563] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 220.306604][ T7563] device syz_tun entered promiscuous mode [ 220.357845][ T4228] Bluetooth: hci0: command 0x040a tx timeout [ 221.077964][ T7593] 9pnet_virtio: no channels available for device syz [ 221.220494][ T7595] device syzkaller0 entered promiscuous mode [ 221.261254][ T7599] tmpfs: Unknown parameter 'noswap' [ 221.521281][ T7612] loop1: detected capacity change from 0 to 512 [ 221.738792][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'. [ 221.750723][ T7612] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1196: invalid indirect mapped block 4294967295 (level 1) [ 221.819738][ T7618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.838767][ T7612] EXT4-fs (loop1): Remounting filesystem read-only [ 221.845351][ T7612] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1196: invalid indirect mapped block 4294967295 (level 1) [ 221.879291][ T7612] EXT4-fs (loop1): Remounting filesystem read-only [ 221.894899][ T7612] EXT4-fs (loop1): 2 truncates cleaned up [ 221.899276][ T7618] netlink: 'syz.2.1199': attribute type 1 has an invalid length. [ 221.900891][ T7612] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 221.979296][ T7618] device vxlan0 entered promiscuous mode [ 221.989351][ T7618] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.999081][ T7618] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.007880][ T7618] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.016614][ T7618] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.028610][ T7618] bond3: (slave vxlan0): Enslaving as an active interface with an up link [ 222.046425][ T7612] device syz_tun entered promiscuous mode [ 222.069129][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 222.127810][ T4228] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 222.259902][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1206'. [ 222.397843][ T4228] usb 5-1: Using ep0 maxpacket: 8 [ 222.520967][ T4228] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.548205][ T4228] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.600798][ T4228] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.621227][ T7650] tmpfs: Unknown parameter 'usrquota' [ 222.633868][ T7649] input: syz0 as /devices/virtual/input/input24 [ 222.652176][ T4228] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.724947][ T4228] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.764706][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.037498][ T7663] loop1: detected capacity change from 0 to 512 [ 223.070359][ T4228] usb 5-1: GET_CAPABILITIES returned 0 [ 223.076157][ T4228] usbtmc 5-1:16.0: can't read capabilities [ 223.115524][ T7663] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1215: invalid indirect mapped block 4294967295 (level 1) [ 223.130093][ T7663] EXT4-fs (loop1): Remounting filesystem read-only [ 223.136641][ T7663] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1215: invalid indirect mapped block 4294967295 (level 1) [ 223.158494][ T7663] EXT4-fs (loop1): Remounting filesystem read-only [ 223.166103][ T7663] EXT4-fs (loop1): 2 truncates cleaned up [ 223.178566][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1217'. [ 223.195605][ T7663] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 223.287733][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.301735][ T4228] usb 5-1: USB disconnect, device number 18 [ 223.697510][ T7686] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 223.916444][ T7691] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 223.934765][ T7691] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 224.266504][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1228'. [ 224.310108][ T7708] loop1: detected capacity change from 0 to 512 [ 224.424482][ T7708] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1229: invalid indirect mapped block 4294967295 (level 1) [ 224.468151][ T7708] EXT4-fs (loop1): Remounting filesystem read-only [ 224.475127][ T7708] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1229: invalid indirect mapped block 4294967295 (level 1) [ 224.526385][ T7708] EXT4-fs (loop1): Remounting filesystem read-only [ 224.538276][ T7708] EXT4-fs (loop1): 2 truncates cleaned up [ 224.544121][ T7708] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 224.952817][ T7729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.241948][ T7739] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.364310][ T7741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1240'. [ 225.754332][ T7753] loop4: detected capacity change from 0 to 512 [ 225.902722][ T7753] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1245: invalid indirect mapped block 4294967295 (level 1) [ 226.058619][ T7753] EXT4-fs (loop4): Remounting filesystem read-only [ 226.127630][ T7753] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1245: invalid indirect mapped block 4294967295 (level 1) [ 226.181655][ T7753] EXT4-fs (loop4): Remounting filesystem read-only [ 226.205316][ T7753] EXT4-fs (loop4): 2 truncates cleaned up [ 226.227889][ T7753] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 226.671307][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1252'. [ 227.319315][ T7804] loop1: detected capacity change from 0 to 512 [ 227.388355][ T7807] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.427472][ T7804] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1260: invalid indirect mapped block 4294967295 (level 1) [ 227.524994][ T7804] EXT4-fs (loop1): Remounting filesystem read-only [ 227.552156][ T7804] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1260: invalid indirect mapped block 4294967295 (level 1) [ 227.571175][ T4228] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 227.610507][ T7804] EXT4-fs (loop1): Remounting filesystem read-only [ 227.627919][ T7804] EXT4-fs (loop1): 2 truncates cleaned up [ 227.633703][ T7804] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 227.817760][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 227.938140][ T4228] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 228.052810][ T7813] loop2: detected capacity change from 0 to 7 [ 228.074634][ T7813] Dev loop2: unable to read RDB block 7 [ 228.094493][ T7813] loop2: unable to read partition table [ 228.102402][ T7813] loop2: partition table beyond EOD, truncated [ 228.117877][ T7813] loop_reread_partitions: partition scan of loop2 (~h"+x|Q` ) failed (rc=-5) [ 228.118550][ T4228] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 228.172789][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 228.217788][ T4228] usb 4-1: Product: syz [ 228.246228][ T7818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1266'. [ 228.247771][ T4228] usb 4-1: Manufacturer: syz [ 228.286555][ T4228] usb 4-1: SerialNumber: syz [ 228.308182][ T4228] usb 4-1: config 0 descriptor?? [ 228.328173][ T7803] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 228.370536][ T7820] lo speed is unknown, defaulting to 1000 [ 228.549873][ T7826] device syzkaller1 entered promiscuous mode [ 229.127256][ T7839] loop2: detected capacity change from 0 to 512 [ 229.270258][ T7839] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1273: invalid indirect mapped block 4294967295 (level 1) [ 229.304467][ T7839] EXT4-fs (loop2): Remounting filesystem read-only [ 229.314981][ T7839] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1273: invalid indirect mapped block 4294967295 (level 1) [ 229.337994][ T7839] EXT4-fs (loop2): Remounting filesystem read-only [ 229.355271][ T7839] EXT4-fs (loop2): 2 truncates cleaned up [ 229.361593][ T7839] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 229.592169][ T7845] device syzkaller0 entered promiscuous mode [ 229.702008][ T7850] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 229.763649][ T7850] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 229.885452][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1278'. [ 229.970264][ T13] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 230.024505][ T7855] netlink: 'syz.4.1279': attribute type 10 has an invalid length. [ 230.093848][ T7855] team0: Port device macvlan0 added [ 230.247846][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 230.279964][ T4228] usb 4-1: USB disconnect, device number 21 [ 230.398107][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 230.428750][ T13] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 230.678066][ T13] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 230.705078][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.750214][ T13] usb 3-1: Product: syz [ 230.754450][ T13] usb 3-1: Manufacturer: syz [ 230.796693][ T13] usb 3-1: SerialNumber: syz [ 230.824924][ T7870] loop4: detected capacity change from 0 to 512 [ 230.838876][ T13] usb 3-1: config 0 descriptor?? [ 230.938319][ T7870] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1286: invalid block [ 230.979649][ T7870] EXT4-fs (loop4): Remounting filesystem read-only [ 230.986497][ T7870] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1286: invalid indirect mapped block 4294967295 (level 1) [ 231.010324][ T7870] EXT4-fs (loop4): Remounting filesystem read-only [ 231.043819][ T7870] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1286: invalid indirect mapped block 4294967295 (level 1) [ 231.117404][ T13] usb 3-1: USB disconnect, device number 16 [ 231.150045][ T7870] EXT4-fs (loop4): Remounting filesystem read-only [ 231.162748][ T7870] EXT4-fs (loop4): 2 truncates cleaned up [ 231.179483][ T7870] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 231.728550][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1289'. [ 231.871656][ T7895] kvm: emulating exchange as write [ 232.103124][ T7901] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 232.150256][ T7901] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 232.226440][ T7912] loop4: detected capacity change from 0 to 512 [ 232.321431][ T7912] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1297: invalid indirect mapped block 4294967295 (level 1) [ 232.348689][ T7912] EXT4-fs (loop4): Remounting filesystem read-only [ 232.355249][ T7912] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1297: invalid indirect mapped block 4294967295 (level 1) [ 232.378874][ T7912] EXT4-fs (loop4): Remounting filesystem read-only [ 232.385939][ T7912] EXT4-fs (loop4): 2 truncates cleaned up [ 232.387783][ T1110] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 232.441338][ T7912] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 232.483795][ T7918] loop5: detected capacity change from 0 to 7 [ 232.510603][ T7918] Dev loop5: unable to read RDB block 7 [ 232.526995][ T7918] loop5: AHDI p1 p3 p4 [ 232.547304][ T7918] loop5: partition table partially beyond EOD, truncated [ 232.575512][ T7918] loop5: p1 size 100663296 extends beyond EOD, truncated [ 232.619277][ T7918] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 232.811430][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 232.811580][ T4272] udevd[4272]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 232.838198][ T1110] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 232.846877][ T1110] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 232.880363][ T1110] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 232.903832][ T1110] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 233.024279][ T1110] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 233.187883][ T1110] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.203112][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.220506][ T1110] usb 4-1: Product: syz [ 233.230417][ T1110] usb 4-1: Manufacturer: syz [ 233.351589][ T1110] cdc_wdm 4-1:1.0: skipping garbage [ 233.356870][ T1110] cdc_wdm 4-1:1.0: skipping garbage [ 233.763800][ T1110] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 233.769825][ T1110] cdc_wdm 4-1:1.0: Unknown control protocol [ 233.788510][ T1110] usb 4-1: USB disconnect, device number 22 [ 233.830300][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1304'. [ 235.096381][ T7962] lo speed is unknown, defaulting to 1000 [ 235.148102][ T7966] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 235.187889][ T7966] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 235.452213][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1315'. [ 235.676125][ T4192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 235.687026][ T4192] CPU: 1 PID: 4192 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 235.694651][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.704756][ T4192] Workqueue: hci4 hci_rx_work [ 235.709497][ T4192] Call Trace: [ 235.712815][ T4192] [ 235.715773][ T4192] dump_stack_lvl+0x188/0x250 [ 235.720491][ T4192] ? show_regs_print_info+0x20/0x20 [ 235.725732][ T4192] ? load_image+0x400/0x400 [ 235.730280][ T4192] sysfs_create_dir_ns+0x26a/0x290 [ 235.735434][ T4192] ? sysfs_warn_dup+0xa0/0xa0 [ 235.740178][ T4192] ? process_one_work+0x85f/0x1010 [ 235.745412][ T4192] ? do_raw_spin_unlock+0x11d/0x230 [ 235.750646][ T4192] kobject_add_internal+0x6e0/0xd90 [ 235.755973][ T4192] kobject_add+0x160/0x230 [ 235.760444][ T4192] ? kobject_init+0x1d0/0x1d0 [ 235.765168][ T4192] ? klist_children_get+0x50/0x50 [ 235.770228][ T4192] ? get_device_parent+0x121/0x3f0 [ 235.775381][ T4192] device_add+0x483/0xfb0 [ 235.779768][ T4192] hci_conn_add_sysfs+0xd1/0x1e0 [ 235.784749][ T4192] le_conn_complete_evt+0xc48/0x15c0 [ 235.790097][ T4192] ? cs_le_create_conn+0x5e0/0x5e0 [ 235.795252][ T4192] ? __mutex_trylock_common+0x155/0x260 [ 235.800847][ T4192] hci_le_meta_evt+0x285/0x3c90 [ 235.805739][ T4192] ? hci_event_packet+0x37b/0x1370 [ 235.810902][ T4192] ? __lock_acquire+0x7d10/0x7d10 [ 235.815985][ T4192] ? hci_remote_host_features_evt+0x280/0x280 [ 235.822113][ T4192] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 235.827801][ T4192] ? mark_lock+0x94/0x320 [ 235.832178][ T4192] ? mutex_unlock+0x10/0x10 [ 235.836817][ T4192] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 235.842864][ T4192] ? lock_chain_count+0x20/0x20 [ 235.847775][ T4192] ? __rwlock_init+0x140/0x140 [ 235.852593][ T4192] hci_event_packet+0xe48/0x1370 [ 235.857586][ T4192] ? lockdep_hardirqs_on+0x94/0x140 [ 235.862839][ T4192] ? rcu_lock_release+0x20/0x20 [ 235.867742][ T4192] ? hci_send_to_monitor+0x9c/0x4a0 [ 235.873387][ T4192] hci_rx_work+0x255/0xa10 [ 235.877860][ T4192] process_one_work+0x85f/0x1010 [ 235.882870][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 235.888544][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 235.893889][ T4192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 235.898965][ T4192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 235.904567][ T4192] ? wq_worker_running+0x97/0x170 [ 235.909637][ T4192] worker_thread+0xaa6/0x1290 [ 235.914394][ T4192] kthread+0x436/0x520 [ 235.918524][ T4192] ? rcu_lock_release+0x20/0x20 [ 235.923424][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 235.928059][ T4192] ret_from_fork+0x1f/0x30 [ 235.932538][ T4192] [ 235.944151][ T4192] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 235.965688][ T4192] Bluetooth: hci4: failed to register connection device [ 236.755794][ T8016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1328'. [ 236.782897][ T4192] Bluetooth: hci4: link tx timeout [ 236.788886][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 236.796733][ T4192] Bluetooth: hci4: link tx timeout [ 236.801960][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.911524][ T7962] chnl_net:caif_netlink_parms(): no params data found [ 237.001317][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 237.239690][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.301816][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.355860][ T7962] device bridge_slave_0 entered promiscuous mode [ 237.390929][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.435215][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.458079][ T7962] device bridge_slave_1 entered promiscuous mode [ 237.555681][ T7962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.620998][ T7962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.755816][ T7962] team0: Port device team_slave_0 added [ 237.798952][ T7962] team0: Port device team_slave_1 added [ 237.845502][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.871186][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.964380][ T7962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.991204][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.017758][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.107253][ T7962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.165243][ T8056] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 238.363056][ T7962] device hsr_slave_0 entered promiscuous mode [ 238.412120][ T7962] device hsr_slave_1 entered promiscuous mode [ 238.424196][ T7962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.437152][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1341'. [ 238.439149][ T7962] Cannot create hsr debugfs directory [ 238.848205][ T4234] Bluetooth: hci4: command 0x0406 tx timeout [ 239.023169][ T7962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.055447][ T7962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.078142][ T4234] Bluetooth: hci5: command 0x041b tx timeout [ 239.141420][ T7962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.165157][ T7962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.469424][ T4405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.486887][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1352'. [ 239.535196][ T7962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.592678][ T4405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.652948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.664738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.681847][ T7962] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.691794][ T8097] infiniband syz1: set active [ 239.703907][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.714875][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.730798][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.743690][ T8097] device bridge_slave_0 left promiscuous mode [ 239.752483][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.763086][ T8097] device bridge_slave_1 left promiscuous mode [ 239.776084][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.791706][ T8097] bond0: (slave bond_slave_0): Releasing backup interface [ 239.810368][ T8097] bond0: (slave bond_slave_1): Releasing backup interface [ 239.905913][ T8097] team0: Port device team_slave_0 removed [ 239.945826][ T8097] team0: Port device team_slave_1 removed [ 240.007228][ T8097] team0: Port device macvlan0 removed [ 240.024741][ T8097] bond1: (slave bridge2): Releasing backup interface [ 240.032931][ T8097] device bridge2 left promiscuous mode [ 240.078747][ T4264] lo speed is unknown, defaulting to 1000 [ 240.135926][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.145907][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.163692][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.171201][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.185436][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.208312][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.224008][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.231257][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.255772][ T4405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.301375][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.315484][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.348420][ T8107] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.351710][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.382119][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.400766][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.420727][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.449299][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.514339][ T4405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.553942][ T8112] program syz.4.1360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.598110][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.606854][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.630845][ T8117] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 240.663245][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.695728][ T7962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.720360][ T7962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.740917][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.747426][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1362'. [ 240.760130][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.171396][ T4234] Bluetooth: hci5: command 0x040f tx timeout [ 241.302694][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.311583][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.400173][ T21] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 241.452850][ T7962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.661808][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 241.783579][ T21] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.803358][ T8155] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 241.805692][ T21] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.832079][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.844615][ T21] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.869581][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.915976][ T21] usb 3-1: config 0 descriptor?? [ 242.045986][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.066367][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.313677][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.345435][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.376566][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.406385][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.462910][ T7962] device veth0_vlan entered promiscuous mode [ 242.579632][ T8179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1373'. [ 242.653258][ T7962] device veth1_vlan entered promiscuous mode [ 242.849466][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.888854][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.925636][ T7962] device veth0_macvtap entered promiscuous mode [ 242.969326][ T7962] device veth1_macvtap entered promiscuous mode [ 243.049443][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.082920][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.139077][ T7962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.183214][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.233371][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.244387][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 243.300115][ T7962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.353087][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.399496][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.456209][ T8201] xt_hashlimit: size too large, truncated to 1048576 [ 243.485797][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.520482][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.532215][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.588270][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.635040][ T7962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.676554][ T7962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.714356][ T7962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.749041][ T7962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.001023][ T4405] device hsr_slave_0 left promiscuous mode [ 244.021751][ T4405] device bridge_slave_1 left promiscuous mode [ 244.055204][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.101859][ T4405] device bridge_slave_0 left promiscuous mode [ 244.118268][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.191643][ T21] usbhid 3-1:0.0: can't add hid device: -71 [ 244.212486][ T21] usbhid: probe of 3-1:0.0 failed with error -71 [ 244.226881][ T4405] rdma_rxe: ignoring netdev event = 10 for bond0 [ 244.254161][ T21] usb 3-1: USB disconnect, device number 17 [ 244.289932][ T4405] device veth1_macvtap left promiscuous mode [ 244.296998][ T4405] device veth0_macvtap left promiscuous mode [ 244.330023][ T4405] device veth1_vlan left promiscuous mode [ 244.345617][ T4405] device veth0_vlan left promiscuous mode [ 244.683166][ T4405] infiniband syz2: set down [ 245.063202][ T4405] team0 (unregistering): Port device team_slave_1 removed [ 245.097065][ T4405] team0 (unregistering): Port device team_slave_0 removed [ 245.139653][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.166178][ T4405] rdma_rxe: ignoring netdev event = 12 for bond0 [ 245.213139][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.224933][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'. [ 245.236892][ T4405] rdma_rxe: ignoring netdev event = 8 for bond0 [ 245.250391][ T4405] rdma_rxe: ignoring netdev event = 18 for bond0 [ 245.257136][ T4405] rdma_rxe: ignoring netdev event = 12 for bond0 [ 245.410244][ T4405] bond0 (unregistering): Released all slaves [ 245.416147][ T4404] smc: removing ib device syz2 [ 245.533480][ T21] bond0 speed is unknown, defaulting to 1000 [ 245.693971][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.767776][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.787077][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.895804][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.924320][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.949238][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.357075][ T8247] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 246.449821][ T8242] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 246.465601][ T8249] loop5: detected capacity change from 0 to 512 [ 246.516855][ T8242] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 246.638279][ T8249] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1310: invalid indirect mapped block 4294967295 (level 1) [ 246.710934][ T8249] EXT4-fs (loop5): Remounting filesystem read-only [ 246.717562][ T8249] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1310: invalid indirect mapped block 4294967295 (level 1) [ 246.815016][ T8249] EXT4-fs (loop5): Remounting filesystem read-only [ 246.868160][ T8249] EXT4-fs (loop5): 2 truncates cleaned up [ 246.873964][ T8249] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 246.955785][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.112998][ T8267] team0: Port device bridge0 removed [ 247.141370][ T8267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.172802][ T8267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.192682][ T8267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.223652][ T8267] device bridge_slave_0 left promiscuous mode [ 247.237194][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.279887][ T8267] device bridge_slave_1 left promiscuous mode [ 247.286165][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.352480][ T8267] bond0: (slave bond_slave_0): Releasing backup interface [ 247.402859][ T8267] bond0: (slave bond_slave_1): Releasing backup interface [ 247.459542][ T8267] team0: Port device team_slave_0 removed [ 247.501068][ T8267] team0: Port device team_slave_1 removed [ 247.572915][ T8267] bond1: (slave geneve2): Releasing active interface [ 247.627023][ T8267] bond2: (slave bridge1): Releasing backup interface [ 247.645123][ T8267] device bridge1 left promiscuous mode [ 247.684541][ T8267] bond3: (slave vxlan0): Releasing backup interface [ 247.701955][ T8267] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.711272][ T8267] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.720739][ T8267] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.729680][ T8267] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.778298][ T8249] device syz_tun entered promiscuous mode [ 248.037378][ T8284] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 248.037750][ T8282] comedi comedi1: board detection failed [ 248.204432][ T8289] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 248.233464][ T4192] Bluetooth: Wrong link type (-57) [ 248.239500][ T4192] Bluetooth: hci4: link tx timeout [ 248.244681][ T4192] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 248.252551][ T4192] Bluetooth: hci4: link tx timeout [ 248.258187][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 248.391524][ T8284] device veth3 entered promiscuous mode [ 248.420645][ T8284] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 248.476745][ T8306] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 248.633981][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 248.783181][ T8310] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.904592][ T8313] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 248.944940][ T8313] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 248.956578][ T8318] bond3: (slave veth5): Enslaving as an active interface with an up link [ 248.986071][ T8323] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 249.022142][ T8323] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 249.062701][ T8322] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 249.108404][ T8322] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 249.136202][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 249.414468][ T8336] loop2: detected capacity change from 0 to 512 [ 249.416499][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1411'. [ 249.426123][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 249.450737][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.494015][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.516852][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.544898][ T8340] device bridge_slave_0 left promiscuous mode [ 249.601595][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.649230][ T8336] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1409: invalid indirect mapped block 4294967295 (level 1) [ 249.665243][ T8340] device bridge_slave_1 left promiscuous mode [ 249.733999][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.761835][ T8336] EXT4-fs (loop2): Remounting filesystem read-only [ 249.787031][ T8340] bond0: (slave bond_slave_0): Releasing backup interface [ 249.806173][ T8336] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1409: invalid indirect mapped block 4294967295 (level 1) [ 249.823625][ T8340] bond0: (slave bond_slave_1): Releasing backup interface [ 249.871943][ T8336] EXT4-fs (loop2): Remounting filesystem read-only [ 249.890302][ T8340] team0: Port device team_slave_0 removed [ 249.892494][ T8336] EXT4-fs (loop2): 2 truncates cleaned up [ 249.931640][ T8336] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 249.942445][ T8340] team0: Port device team_slave_1 removed [ 249.980136][ T8340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.009500][ T8340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.026916][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 250.049106][ T8340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.060880][ T8340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.092740][ T8340] bond1: (slave bridge1): Releasing backup interface [ 250.112228][ T8340] device bridge1 left promiscuous mode [ 250.135139][ T8340] bond2: (slave ip6gretap1): Releasing backup interface [ 250.142478][ T8340] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 1e:7c:1c:ff:27:3c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 250.174276][ T8340] bond2: (slave veth3): Releasing backup interface [ 250.206459][ T8340] bond3: (slave veth5): Releasing backup interface [ 250.230594][ T8340] bond3: (slave veth5): the permanent HWaddr of slave - 6a:e8:6f:cd:57:bb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 250.265940][ T8340] bond3: (slave batadv1): Releasing backup interface [ 250.318268][ T4228] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 250.363432][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 250.407978][ T4228] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.417022][ T4228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.469290][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 250.557937][ T4228] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.566982][ T4228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.622669][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 250.670045][ T8371] Zero length message leads to an empty skb [ 250.707994][ T4228] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.729495][ T4228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 250.773327][ T8371] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.822864][ T8374] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 250.842127][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 250.895250][ T8382] 9pnet_virtio: no channels available for device syz [ 250.937900][ T8376] bond4: (slave macvlan2): Error -22 calling dev_set_mtu [ 250.938069][ T4228] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.991488][ T4228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.023840][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 251.123306][ T4228] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.156318][ T4228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.203779][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 251.254681][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1423'. [ 251.310444][ T4228] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.348275][ T4228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.406426][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 251.422943][ T8402] netlink: 'syz.3.1425': attribute type 25 has an invalid length. [ 251.434224][ T8392] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 251.434480][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 251.493842][ T4228] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.506768][ T8402] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.516267][ T8402] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.525263][ T8402] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.534291][ T8402] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.556204][ T4228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.577462][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 251.595630][ T8402] netlink: 'syz.3.1425': attribute type 25 has an invalid length. [ 251.604175][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 251.658091][ T4228] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.687597][ T4228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 251.747808][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 251.928030][ T4228] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 251.952769][ T4228] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 251.977056][ T8427] misc userio: Begin command sent, but we're already running [ 252.003209][ T4228] usb 6-1: Product: syz [ 252.007435][ T4228] usb 6-1: Manufacturer: syz [ 252.034402][ T4228] usb 6-1: SerialNumber: syz [ 252.062591][ T4228] usb 6-1: config 0 descriptor?? [ 252.135562][ T4228] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 252.244258][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 252.412179][ T4228] usb 6-1: USB disconnect, device number 2 [ 252.433043][ T4228] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 252.458990][ T8436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.698314][ T8438] bond1: (slave veth3): Enslaving as an active interface with an up link [ 252.736023][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 252.784131][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 252.811735][ T8444] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 253.071072][ T8467] binder_alloc: 8466: binder_alloc_buf size 4088 failed, no address space [ 253.101694][ T8467] binder_alloc: allocated: 48 (num: 1 largest: 48), free: 4048 (num: 1 largest: 4048) [ 253.593684][ T8478] kvm: pic: non byte write [ 253.611702][ T8474] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 253.938230][ T8492] 9pnet_virtio: no channels available for device syz [ 254.093304][ T8497] loop3: detected capacity change from 0 to 512 [ 254.251805][ T8497] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1448: invalid indirect mapped block 4294967295 (level 1) [ 254.311308][ T8497] EXT4-fs (loop3): Remounting filesystem read-only [ 254.318594][ T8497] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1448: invalid indirect mapped block 4294967295 (level 1) [ 254.341720][ T8497] EXT4-fs (loop3): Remounting filesystem read-only [ 254.353677][ T8497] EXT4-fs (loop3): 2 truncates cleaned up [ 254.360129][ T8497] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 254.461655][ T8497] device syz_tun entered promiscuous mode [ 254.492332][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 254.924499][ T8522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.976813][ T4336] Bluetooth: hci0: Frame reassembly failed (-84) [ 254.990766][ T8522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.994727][ T8525] Bluetooth: hci0: Frame reassembly failed (-84) [ 255.018506][ T8522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.114286][ T8522] bond1: (slave veth3): Releasing backup interface [ 255.131712][ T8522] bond1: (slave veth3): the permanent HWaddr of slave - a6:97:3e:dc:ed:ca - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 255.214032][ T8522] bond1: (slave batadv1): Releasing backup interface [ 255.237824][ T7] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 255.497840][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 255.614235][ T8550] device syzkaller0 entered promiscuous mode [ 255.629353][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 255.720049][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.726683][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.853529][ T7] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.871194][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.892342][ T7] usb 5-1: Product: syz [ 255.897405][ T7] usb 5-1: Manufacturer: syz [ 255.903103][ T7] usb 5-1: SerialNumber: syz [ 255.909988][ T7] usb 5-1: config 0 descriptor?? [ 255.950207][ T7] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 255.959802][ T8559] loop2: detected capacity change from 0 to 512 [ 255.976662][ T7] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 256.083057][ T8559] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1463: invalid indirect mapped block 4294967295 (level 1) [ 256.122907][ T8559] EXT4-fs (loop2): Remounting filesystem read-only [ 256.144312][ T8559] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1463: invalid indirect mapped block 4294967295 (level 1) [ 256.182701][ T8559] EXT4-fs (loop2): Remounting filesystem read-only [ 256.206209][ T8559] EXT4-fs (loop2): 2 truncates cleaned up [ 256.220018][ T8559] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 256.325195][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 256.598017][ T7] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 256.998375][ T4192] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 257.088089][ T4232] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 257.120097][ T8604] loop5: detected capacity change from 0 to 512 [ 257.145859][ T8604] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1478: invalid indirect mapped block 4294967295 (level 1) [ 257.164271][ T8604] EXT4-fs (loop5): Remounting filesystem read-only [ 257.171862][ T8604] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1478: invalid indirect mapped block 4294967295 (level 1) [ 257.186738][ T8604] EXT4-fs (loop5): Remounting filesystem read-only [ 257.194353][ T8604] EXT4-fs (loop5): 2 truncates cleaned up [ 257.200564][ T8604] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 257.256339][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1478'. [ 257.338436][ T7] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 257.361755][ T21] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 257.366508][ T7] em28xx 5-1:0.0: board has no eeprom [ 257.458036][ T4232] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 257.472971][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.496013][ T4232] usb 3-1: config 0 has no interfaces? [ 257.505238][ T4232] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 257.507760][ T7] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 257.520855][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.533265][ T7] em28xx 5-1:0.0: dvb set to bulk mode. [ 257.543411][ T4232] usb 3-1: config 0 descriptor?? [ 257.556873][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.569275][ T7] usb 5-1: USB disconnect, device number 19 [ 257.576510][ T7] em28xx 5-1:0.0: Disconnecting em28xx [ 257.584756][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.607026][ T13] em28xx 5-1:0.0: Binding DVB extension [ 257.619547][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.728168][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.729432][ T13] em28xx 5-1:0.0: Registering input extension [ 257.750494][ T21] usb 2-1: config 0 has no interfaces? [ 257.772389][ T7] em28xx 5-1:0.0: Closing input extension [ 257.798194][ T7] em28xx 5-1:0.0: Freeing device [ 257.856228][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.898629][ T21] usb 2-1: config 0 has no interfaces? [ 257.957967][ T4234] Bluetooth: hci4: command 0x0406 tx timeout [ 257.997925][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.017908][ T21] usb 2-1: config 0 has no interfaces? [ 258.257940][ T21] usb 2-1: string descriptor 0 read error: -22 [ 258.272517][ T21] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 258.299381][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.329560][ T21] usb 2-1: config 0 descriptor?? [ 258.403480][ T144] Bluetooth: hci0: Frame reassembly failed (-84) [ 258.786875][ T8602] udc-core: couldn't find an available UDC or it's busy [ 258.804598][ T8602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 258.827327][ T21] usb 2-1: USB disconnect, device number 21 [ 258.834034][ T8640] loop3: detected capacity change from 0 to 512 [ 258.924237][ T8640] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1489: invalid indirect mapped block 4294967295 (level 1) [ 258.946514][ T8640] EXT4-fs (loop3): Remounting filesystem read-only [ 258.954212][ T8640] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1489: invalid indirect mapped block 4294967295 (level 1) [ 258.972661][ T8640] EXT4-fs (loop3): Remounting filesystem read-only [ 258.979719][ T8640] EXT4-fs (loop3): 2 truncates cleaned up [ 258.985468][ T8640] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 259.026566][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 259.240080][ T8649] device syzkaller0 entered promiscuous mode [ 259.522061][ T8654] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.785465][ T4234] usb 3-1: USB disconnect, device number 18 [ 259.889956][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 259.946266][ T8667] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 260.027875][ T21] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 260.130633][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.160524][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.168543][ T8682] 9pnet_virtio: no channels available for device syz [ 260.175998][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.280910][ T8684] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.398071][ T21] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 260.413280][ T21] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 260.447785][ T13] Bluetooth: hci0: command 0x1003 tx timeout [ 260.453942][ T4196] Bluetooth: hci0: sending frame failed (-49) [ 260.454268][ T21] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 260.618496][ T21] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 260.639608][ T21] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 260.684329][ T21] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 260.751976][ T8707] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 260.778014][ T21] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 260.799507][ T21] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 260.805011][ T8709] device syzkaller0 entered promiscuous mode [ 260.824013][ T8711] 9pnet_virtio: no channels available for device syz [ 260.826488][ T21] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 260.906888][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.919577][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.927462][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.939637][ T8714] device bridge_slave_0 left promiscuous mode [ 260.946026][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.973325][ T8714] device bridge_slave_1 left promiscuous mode [ 260.981435][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.998108][ T8714] bond0: (slave bond_slave_0): Releasing backup interface [ 261.015079][ T8714] bond0: (slave bond_slave_1): Releasing backup interface [ 261.073473][ T8714] team0: Port device team_slave_0 removed [ 261.107428][ T8714] team0: Port device team_slave_1 removed [ 261.108072][ T21] usb 4-1: string descriptor 0 read error: -22 [ 261.120756][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.125328][ T21] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 261.143496][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.144426][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.170882][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.186303][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.214455][ T21] adutux 4-1:168.0: interrupt endpoints not found [ 261.296606][ T8716] device syzkaller0 entered promiscuous mode [ 261.454231][ T4234] usb 4-1: USB disconnect, device number 23 [ 262.523691][ T4234] Bluetooth: hci0: command 0x1001 tx timeout [ 262.543442][ T4196] Bluetooth: hci0: sending frame failed (-49) [ 262.878070][ T21] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 263.127785][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 263.219233][ T8774] device syzkaller0 entered promiscuous mode [ 263.258062][ T21] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.290924][ T21] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.318686][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.335644][ T21] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 263.350413][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.385252][ T21] usb 3-1: config 0 descriptor?? [ 263.861002][ T21] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 263.893900][ T21] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 263.902489][ T1212] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 263.917306][ T21] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 263.941890][ T21] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 263.954797][ T21] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 263.965466][ T21] mcp2221 0003:04D8:00DD.0020: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 264.078881][ T21] usb 3-1: USB disconnect, device number 19 [ 264.397493][ T8814] binder: 8813:8814 ioctl 40046205 0 returned -22 [ 264.608072][ T4234] Bluetooth: hci0: command 0x1009 tx timeout [ 264.711657][ T8828] device syzkaller0 entered promiscuous mode [ 266.720038][ T8802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.106202][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 267.583702][ T7] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 267.767763][ T4232] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 267.832123][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 267.958142][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 268.017948][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 268.128101][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 268.139381][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.148120][ T4232] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.154004][ T7] usb 4-1: Product: syz [ 268.163733][ T7] usb 4-1: Manufacturer: syz [ 268.173933][ T7] usb 4-1: SerialNumber: syz [ 268.184082][ T4232] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.188669][ T7] usb 4-1: config 0 descriptor?? [ 268.215949][ T4232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 268.233365][ T4232] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 268.243378][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.260462][ T7] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 268.272687][ T7] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 268.281034][ T4232] usb 2-1: config 0 descriptor?? [ 268.767123][ T8937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.784732][ T8937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.800852][ T4232] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 268.813273][ T8937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.819970][ T4232] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 268.838773][ T4232] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 268.856296][ T4232] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 268.873230][ T4232] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 268.888233][ T4232] mcp2221 0003:04D8:00DD.0021: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 268.907975][ T7] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 269.070429][ T4232] usb 2-1: USB disconnect, device number 22 [ 269.566155][ T8967] [ 269.568944][ T8967] ============================= [ 269.573819][ T8967] WARNING: suspicious RCU usage [ 269.598281][ T8967] syzkaller #0 Not tainted [ 269.602766][ T8967] ----------------------------- [ 269.616033][ T8967] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 269.638014][ T7] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 269.653253][ T7] em28xx 4-1:0.0: board has no eeprom [ 269.682023][ T8967] [ 269.682023][ T8967] other info that might help us debug this: [ 269.682023][ T8967] [ 269.697893][ T8967] [ 269.697893][ T8967] rcu_scheduler_active = 2, debug_locks = 1 [ 269.727878][ T8967] 1 lock held by syz.2.1574/8967: [ 269.733046][ T8967] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 269.771472][ T8967] [ 269.771472][ T8967] stack backtrace: [ 269.777547][ T8967] CPU: 1 PID: 8967 Comm: syz.2.1574 Not tainted syzkaller #0 [ 269.785056][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.795140][ T8967] Call Trace: [ 269.798433][ T8967] [ 269.801384][ T8967] dump_stack_lvl+0x188/0x250 [ 269.806075][ T8967] ? load_image+0x400/0x400 [ 269.810675][ T8967] ? show_regs_print_info+0x20/0x20 [ 269.815979][ T8967] ? lockdep_rcu_suspicious+0x110/0x180 [ 269.821660][ T8967] ? local_bh_enable+0x20/0x20 [ 269.826430][ T8967] rhltable_lookup+0x7a9/0x7c0 [ 269.831292][ T8967] ? local_bh_enable+0x20/0x20 [ 269.836410][ T8967] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 269.842400][ T8967] ? release_firmware_map_entry+0x190/0x190 [ 269.848573][ T8967] ? lock_chain_count+0x20/0x20 [ 269.853433][ T8967] ? mr_mfc_find_parent+0x190/0x190 [ 269.858644][ T8967] ? local_bh_enable+0x20/0x20 [ 269.863500][ T8967] ? preempt_schedule+0xbc/0xd0 [ 269.868363][ T8967] ? ipmr_mfc_add+0x212d/0x2d40 [ 269.873225][ T8967] ? preempt_schedule+0xbc/0xd0 [ 269.878173][ T8967] ? schedule_preempt_disabled+0x20/0x20 [ 269.883812][ T8967] ? lock_chain_count+0x20/0x20 [ 269.888840][ T8967] mr_mfc_find_any_parent+0xb6/0x1e0 [ 269.894131][ T8967] ? local_bh_enable+0x20/0x20 [ 269.898902][ T8967] ip_mr_forward+0x24c/0xf90 [ 269.903508][ T8967] ipmr_mfc_add+0x23cc/0x2d40 [ 269.908286][ T8967] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 269.913230][ T8967] ? __lock_acquire+0x7d10/0x7d10 [ 269.918277][ T8967] ip_mroute_setsockopt+0xeaf/0x1250 [ 269.923574][ T8967] ? ipmr_rule_default+0x70/0x70 [ 269.928528][ T8967] ? __might_sleep+0xf0/0xf0 [ 269.933126][ T8967] ip_setsockopt+0x568/0x3130 [ 269.937815][ T8967] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 269.943185][ T8967] ? aa_sk_perm+0x7dc/0x910 [ 269.947749][ T8967] ? aa_af_perm+0x340/0x340 [ 269.952250][ T8967] ? __fget_files+0x40f/0x480 [ 269.956931][ T8967] ? aa_sock_opt_perm+0x74/0x100 [ 269.961876][ T8967] ? sock_common_setsockopt+0x32/0xb0 [ 269.967251][ T8967] ? raw_setsockopt+0xc5/0x180 [ 269.972193][ T8967] ? sock_common_recvmsg+0x1c0/0x1c0 [ 269.977485][ T8967] __sys_setsockopt+0x2bf/0x3d0 [ 269.982340][ T8967] __x64_sys_setsockopt+0xb1/0xc0 [ 269.987370][ T8967] do_syscall_64+0x4c/0xa0 [ 269.991786][ T8967] ? clear_bhb_loop+0x30/0x80 [ 269.996548][ T8967] ? clear_bhb_loop+0x30/0x80 [ 270.001231][ T8967] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.007127][ T8967] RIP: 0033:0x7ff741d92819 [ 270.011556][ T8967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.031165][ T8967] RSP: 002b:00007ff73ffec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 270.039586][ T8967] RAX: ffffffffffffffda RBX: 00007ff74200bfa0 RCX: 00007ff741d92819 [ 270.047558][ T8967] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 270.055539][ T8967] RBP: 00007ff741e28c91 R08: 000000000000003c R09: 0000000000000000 [ 270.063521][ T8967] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 270.071503][ T8967] R13: 00007ff74200c038 R14: 00007ff74200bfa0 R15: 00007ffc30cfeaf8 [ 270.079495][ T8967] [ 270.082639][ T7] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 270.101782][ T8967] [ 270.104181][ T8967] ============================= [ 270.120435][ T7] em28xx 4-1:0.0: dvb set to bulk mode. [ 270.131130][ T8967] WARNING: suspicious RCU usage [ 270.136024][ T8967] syzkaller #0 Not tainted [ 270.200986][ T8967] ----------------------------- [ 270.206537][ T8967] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 270.208016][ T7] usb 4-1: USB disconnect, device number 24 [ 270.225621][ T8967] [ 270.225621][ T8967] other info that might help us debug this: [ 270.225621][ T8967] [ 270.239923][ T8967] [ 270.239923][ T8967] rcu_scheduler_active = 2, debug_locks = 1 [ 270.248520][ T7] em28xx 4-1:0.0: Disconnecting em28xx [ 270.252988][ T8967] 1 lock held by syz.2.1574/8967: [ 270.255272][ T4234] em28xx 4-1:0.0: Binding DVB extension [ 270.259904][ T8967] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 270.289416][ T8967] [ 270.289416][ T8967] stack backtrace: [ 270.295371][ T8967] CPU: 1 PID: 8967 Comm: syz.2.1574 Not tainted syzkaller #0 [ 270.302776][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.312869][ T8967] Call Trace: [ 270.316151][ T8967] [ 270.319085][ T8967] dump_stack_lvl+0x188/0x250 [ 270.323799][ T8967] ? load_image+0x400/0x400 [ 270.328374][ T8967] ? show_regs_print_info+0x20/0x20 [ 270.333623][ T8967] ? lockdep_rcu_suspicious+0x110/0x180 [ 270.339303][ T8967] ? local_bh_enable+0x20/0x20 [ 270.344109][ T8967] rhltable_lookup+0x52a/0x7c0 [ 270.348919][ T8967] ? local_bh_enable+0x20/0x20 [ 270.353747][ T8967] ? mr_mfc_find_parent+0x190/0x190 [ 270.358984][ T8967] ? local_bh_enable+0x20/0x20 [ 270.363860][ T8967] ? preempt_schedule+0xbc/0xd0 [ 270.368725][ T8967] ? ipmr_mfc_add+0x212d/0x2d40 [ 270.373760][ T8967] ? preempt_schedule+0xbc/0xd0 [ 270.378900][ T8967] ? schedule_preempt_disabled+0x20/0x20 [ 270.384573][ T8967] ? lock_chain_count+0x20/0x20 [ 270.389428][ T8967] mr_mfc_find_any_parent+0xb6/0x1e0 [ 270.394720][ T8967] ? local_bh_enable+0x20/0x20 [ 270.399490][ T8967] ip_mr_forward+0x24c/0xf90 [ 270.404090][ T8967] ipmr_mfc_add+0x23cc/0x2d40 [ 270.408779][ T8967] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 270.413718][ T8967] ? __lock_acquire+0x7d10/0x7d10 [ 270.418762][ T8967] ip_mroute_setsockopt+0xeaf/0x1250 [ 270.424059][ T8967] ? ipmr_rule_default+0x70/0x70 [ 270.429012][ T8967] ? __might_sleep+0xf0/0xf0 [ 270.433605][ T8967] ip_setsockopt+0x568/0x3130 [ 270.438306][ T8967] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 270.443851][ T8967] ? aa_sk_perm+0x7dc/0x910 [ 270.448357][ T8967] ? aa_af_perm+0x340/0x340 [ 270.452855][ T8967] ? __fget_files+0x40f/0x480 [ 270.457536][ T8967] ? aa_sock_opt_perm+0x74/0x100 [ 270.462476][ T8967] ? sock_common_setsockopt+0x32/0xb0 [ 270.467848][ T8967] ? raw_setsockopt+0xc5/0x180 [ 270.472618][ T8967] ? sock_common_recvmsg+0x1c0/0x1c0 [ 270.478024][ T8967] __sys_setsockopt+0x2bf/0x3d0 [ 270.482885][ T8967] __x64_sys_setsockopt+0xb1/0xc0 [ 270.487914][ T8967] do_syscall_64+0x4c/0xa0 [ 270.492354][ T8967] ? clear_bhb_loop+0x30/0x80 [ 270.497115][ T8967] ? clear_bhb_loop+0x30/0x80 [ 270.501808][ T8967] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.507724][ T8967] RIP: 0033:0x7ff741d92819 [ 270.512170][ T8967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.532171][ T8967] RSP: 002b:00007ff73ffec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 270.540601][ T8967] RAX: ffffffffffffffda RBX: 00007ff74200bfa0 RCX: 00007ff741d92819 [ 270.548574][ T8967] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 270.556543][ T8967] RBP: 00007ff741e28c91 R08: 000000000000003c R09: 0000000000000000 [ 270.564515][ T8967] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 270.572492][ T8967] R13: 00007ff74200c038 R14: 00007ff74200bfa0 R15: 00007ffc30cfeaf8 [ 270.580546][ T8967] [ 270.595056][ T8967] [ 270.597590][ T8967] ============================= [ 270.601152][ T4234] em28xx 4-1:0.0: Registering input extension [ 270.603630][ T8967] WARNING: suspicious RCU usage [ 270.609345][ T7] em28xx 4-1:0.0: Closing input extension [ 270.624242][ T8967] syzkaller #0 Not tainted [ 270.630134][ T8967] ----------------------------- [ 270.639048][ T8967] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 270.641883][ T7] em28xx 4-1:0.0: Freeing device [ 270.652625][ T8967] [ 270.652625][ T8967] other info that might help us debug this: [ 270.652625][ T8967] [ 270.666661][ T8967] [ 270.666661][ T8967] rcu_scheduler_active = 2, debug_locks = 1 [ 270.677494][ T8967] 1 lock held by syz.2.1574/8967: [ 270.684674][ T8967] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 270.700506][ T8967] [ 270.700506][ T8967] stack backtrace: [ 270.706427][ T8967] CPU: 1 PID: 8967 Comm: syz.2.1574 Not tainted syzkaller #0 [ 270.713845][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.724269][ T8967] Call Trace: [ 270.727549][ T8967] [ 270.730482][ T8967] dump_stack_lvl+0x188/0x250 [ 270.735189][ T8967] ? load_image+0x400/0x400 [ 270.739712][ T8967] ? show_regs_print_info+0x20/0x20 [ 270.744927][ T8967] ? lockdep_rcu_suspicious+0x110/0x180 [ 270.750572][ T8967] ? local_bh_enable+0x20/0x20 [ 270.755342][ T8967] rhltable_lookup+0x61e/0x7c0 [ 270.760192][ T8967] ? local_bh_enable+0x20/0x20 [ 270.764986][ T8967] ? mr_mfc_find_parent+0x190/0x190 [ 270.770196][ T8967] ? local_bh_enable+0x20/0x20 [ 270.774952][ T8967] ? preempt_schedule+0xbc/0xd0 [ 270.779805][ T8967] ? ipmr_mfc_add+0x212d/0x2d40 [ 270.784650][ T8967] ? preempt_schedule+0xbc/0xd0 [ 270.789502][ T8967] ? schedule_preempt_disabled+0x20/0x20 [ 270.795139][ T8967] ? lock_chain_count+0x20/0x20 [ 270.799986][ T8967] mr_mfc_find_any_parent+0xb6/0x1e0 [ 270.805266][ T8967] ? local_bh_enable+0x20/0x20 [ 270.810023][ T8967] ip_mr_forward+0x24c/0xf90 [ 270.814614][ T8967] ipmr_mfc_add+0x23cc/0x2d40 [ 270.819289][ T8967] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 270.824218][ T8967] ? __lock_acquire+0x7d10/0x7d10 [ 270.829246][ T8967] ip_mroute_setsockopt+0xeaf/0x1250 [ 270.834619][ T8967] ? ipmr_rule_default+0x70/0x70 [ 270.839619][ T8967] ? __might_sleep+0xf0/0xf0 [ 270.844223][ T8967] ip_setsockopt+0x568/0x3130 [ 270.848913][ T8967] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 270.854391][ T8967] ? aa_sk_perm+0x7dc/0x910 [ 270.858892][ T8967] ? aa_af_perm+0x340/0x340 [ 270.863513][ T8967] ? __fget_files+0x40f/0x480 [ 270.868195][ T8967] ? aa_sock_opt_perm+0x74/0x100 [ 270.873133][ T8967] ? sock_common_setsockopt+0x32/0xb0 [ 270.878764][ T8967] ? raw_setsockopt+0xc5/0x180 [ 270.883539][ T8967] ? sock_common_recvmsg+0x1c0/0x1c0 [ 270.888915][ T8967] __sys_setsockopt+0x2bf/0x3d0 [ 270.893765][ T8967] __x64_sys_setsockopt+0xb1/0xc0 [ 270.898786][ T8967] do_syscall_64+0x4c/0xa0 [ 270.903194][ T8967] ? clear_bhb_loop+0x30/0x80 [ 270.907869][ T8967] ? clear_bhb_loop+0x30/0x80 [ 270.912645][ T8967] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.918796][ T8967] RIP: 0033:0x7ff741d92819 [ 270.923209][ T8967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.942809][ T8967] RSP: 002b:00007ff73ffec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 270.951308][ T8967] RAX: ffffffffffffffda RBX: 00007ff74200bfa0 RCX: 00007ff741d92819 [ 270.959279][ T8967] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 270.967275][ T8967] RBP: 00007ff741e28c91 R08: 000000000000003c R09: 0000000000000000 [ 270.975238][ T8967] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 270.983550][ T8967] R13: 00007ff74200c038 R14: 00007ff74200bfa0 R15: 00007ffc30cfeaf8 [ 270.991530][ T8967]