last executing test programs: 4m40.82621806s ago: executing program 0 (id=284): ioperm(0x0, 0x7fff, 0x15f9) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) 4m40.496767916s ago: executing program 0 (id=287): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6d3, &(0x7f00000014c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.redirect\x00') 4m39.7670103s ago: executing program 0 (id=291): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 4m39.29455604s ago: executing program 0 (id=293): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0xc, 0x4) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x4000) creat(&(0x7f0000000200)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x0) preadv2(r0, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 4m38.648763412s ago: executing program 0 (id=297): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$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") timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{0x77359400}}, 0x0) 4m34.289510877s ago: executing program 0 (id=313): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f0000000200)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$eJzs3c1vHGcdB/DvrNeuN1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeIit0LgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmftXXv9lthrBz6faDzPM8/L/OaZZ2a866w2wP+t6xfSfJgi1y+8sVzm11Zn22ursy/Uxe0kZbqRNLurFHeT4lEyV5YXfUv61lt8vHjtrc8er33ezTXrpao/tlO7IYbUXamXTNf9TQ9tOb7XXazU4eXFJDfq9aCJvfY1ULEctPP1Go5cZ4uV/TTfz3ULHDO9p1PRfW5uMZWcSDJZ/x6Q+u7QGF2Eh2NfdzkAAAB4Tn1676gjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdP/f3/Rb006nWmU/S+/3+it61OH0Nze6758FDjAAAAAAAAAIDR+PqTPMlyTvbynaL6m/+5KnM6X3SSL+X9PMhC7udiljOfpSzlfi4nmerraGJ5fmnp/uX1lqXhLa8MbXllVEcMAAAAAAAAAP+TfpnWxt//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOCiSse6qWk7X60yl0cxGWVaSfyaZOOp496EYtvHh6OMAAACAZzL5FG2+/CRPspyTvXynqF7zf6V6vTyZ93M3S1nMUtpZyM36NXT5qr+xtjrbXludvVMuZX6w3+//e19hTNQ9jFW5YXs+W9Vo5VYWqy0Xc6MK5mYa3X2fT8724umLq89HZUzF92p7jKxZD2u5s99v9y7CgRh8K6KxQ83WRnDJ+ojM1LGVLU91R6Co3qhJNo/ErmenOZCbqnodX9/T5TTW3/k5fQhjfqJel8fzm0Md8/1aH4lGqpG40pt95TWz80gk3/jrn96+3b777u1bDy4cn0Paxdg22zfPidm+kXjluR6J5j7rz1QjcWY9fz0/yk9yIdN5M/ezmJ9mPktZSKcun6/nc/lzaueRmhvIvblbJBP1eemes73ENJ0fVqn5nKvansxiitzLzSzk9erflVzOt3M1V3Ot7wyf2Tbu6tiqq76x+arvnem/DQ3+/DfrRHl3++3GXW5upyPebnYelO69vxzXU33j2p31j9drneq7Dmb6Ruml3uiMD+38ae6Nza/WiXIfv9rlOTFaU/VIlBdQ7ynRi+7l7kg0q2fR1nn+h07ZLu27nc7t+fe26X9lU/61el1Oq9Wv7Va7Z/ipOFjlfHkpk/WdZHB2lGUvr99l+so6G3O5Wzb4xC3bnanKiqJ3pf4496oJsPVKnah/h9va05Wq7JWhZbNV2dm+soHft3Iv7dwcwfgB8DT+8fZ6cionJlr/an3a+qT169bt1huTP3jhOy+8OpHxv49/tzkz9lrj1eIv+SQ/33j9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPL0HH3z47ny7vXB/eKKxfdFAopXNW3breVOiqL/QZ3+tjm9iMsnAlup7jkYeRmtzGFsSnV8kIx+f3pcIDq/zuzLR3DKjhiXmBrb8eWuHH+0zwmJv18UhJhoZ7U7HMnwCHOFNCRiJS0t33rv04IMPv7V4Z/6dhXcW7o5fvXpt5trV12cv3VpsL8x0fx51lMBh2HjoH3UkAAAAAAAAAAAAwF4N+2DAuRd3+9DInj7j4X8WAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfi+oU0H6bI5ZmLM2V+bXW2XS699EbNZpJGIyl+lhSPkrl0l0z1dVfkj4/SGbKfjxevvfXZ47XPN/pqdusnjXq9vZ1Lk6zUS6aTjNXrZzDQ341n7q/4T+8YygH7otPpzD1bfHAw/hsAAP//msX1EQ==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x4000) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xee01, 0x0) ftruncate(r0, 0x81fd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001240)) 4m33.834558286s ago: executing program 32 (id=313): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f0000000200)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x4000) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xee01, 0x0) ftruncate(r0, 0x81fd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001240)) 3m24.926392654s ago: executing program 2 (id=546): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x40}) 3m24.283121027s ago: executing program 2 (id=548): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x72) 3m23.126417879s ago: executing program 2 (id=550): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 3m22.838076994s ago: executing program 2 (id=555): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m20.064404919s ago: executing program 2 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x1000) 3m18.997567789s ago: executing program 2 (id=570): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x8100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x1a3f42, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000000)=0x2) 3m3.652415607s ago: executing program 33 (id=570): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x8100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x1a3f42, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000000)=0x2) 2m54.76921198s ago: executing program 1 (id=648): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2m54.584315523s ago: executing program 1 (id=650): r0 = syz_open_dev$swradio(&(0x7f0000000780), 0x1, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) fchown(r0, 0x0, 0x0) 2m54.425363756s ago: executing program 1 (id=652): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 2m53.856048817s ago: executing program 1 (id=656): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 2m45.285077354s ago: executing program 1 (id=667): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'adq12b\x00', [0x2f00, 0x5, 0xd09a, 0xfff7ffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1001, 0x9, 0x4, 0xffff, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x10003, 0x2, 0x800, 0xe2db, 0x2, 0xd, 0x7, 0x3, 0x4, 0x5, 0x70f]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) futex(&(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)=0x1, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='9P2000.u') write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000280)={0x10, 0xfffffffffffffffe}, 0x10) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000480)='./file1\x00', 0x810010, &(0x7f000001c200)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="46252759fefcc11c542289d4212a61fde842ebacb80f05d69bd76bfd4d4045f6c55fbfe794b1de95f5d99bbfefc065caf75ff701c3342630e4dc87ae2b13fc67b783de66a802a1f401c0e27c218f5818d19013e19eadb8425d6abd7bdfdc2e003400a2362cd5d0eb8c603f37b1216dc8b1c6846f4d96ffcf25228bf8ce6af60b1b6de1e21ec86f845c8924c16f98fb183e3b0ae20ac34534b765d75e8db56d97fbf72b2745e7b5dcd2a780ce6952ce6f2af0017e734759ac9c2d63cbb39846fba99ea12d64cbd0324cd168ec1fa0296abe1def7e7a94453fce8672175e5ebf21099ad08c8b264f8f35d4116d861cc4d46be70be2fc14c9fc19357b2453f28dad93d2dd6c2c81c12afceb5e670a668e3eeecb00b42618a8f3bc13acf15bef7c16a1f7281aafc0f121d87d844dc8302579d96376efa7027791d05272c12d715ac36f5e131e95170dab3010eeff2abf59491e2fd29ad1183282b0bff8e29f29bac6da60630d0372dc1889ec5ba00e1e05439d2268a22cbd37f09163e07ad6154d5af0adfe1b7c8512c44c5c0686c896965e7eada093c28d963e6402e080ccb7d1c6dd36502c661acc89443aef2e9364f0081533196ba0d6bcdee05e8e70496a61c28aaa5ec1df7ff425789ac3a9837e9c09519e73dc9287f09f4d484d3bac5d19528d1ab2b0fe7cea6498b80e5b3709090c8cbd3d48b5dde8e46de6878e5f063c3ac4db9f3dbeaba14c8f33c5c75a2b76b86ee7e01a13b86433de9e2a90ab29d8d1b03604aab97326cbc232dfa4178c82189aa31cb23c22fc970e4508f4abd7a74d7c462c5636c1bce88b7bb10639d97c71e56bd6a56df06e9563079d7e5714f19f6f4689d096923587a53a94190d0127a208c60d1c1d094877eff4e9a8e15314caa25d0afd540a532dca2c23d03a3cdf45bae7afc24fa2b5f7a1d30b3299c4fd4de25d144895648297fe477f010f24d0a256f117efd91e5d29f301b6ce0ac1652509b86a454071c2483e20954091b63212880f19ab58df4f194804929213798ab777328092a5010c4d287209bcd3a876588e97fcbd7344b1a2ca6f169c10a5a10504b7e5832f6bbabb8bedb5f1e12e76672ac65a128418583e7af2fe795fa02720570f1545e5e4eab004478a4930d49397efa0b57f3efeb2f552344a3e03d6ad8bb26a2fa8d88cb1316c1fb28e1070ac12358829286affbdd61e07a005f9c6861044c3d803262f1b6a81c26ea8e4e653e06a6ffab0e93f86f29a512bef098918c89a31e1bcdd0f2b21f57442b1d907cdee2d194cb2ffcb9c237f3ded504194ff4fa4ce0644da5c4de5078fd335f1f20e1c7db4f7e561c8e63357f6291f2acaebab03b9ff1b61b637e6154fa2c4ec0f050247715b9603786253ac1e9a6c55df1123c0872a95306aa49b764f8b5b28aad8086517c543203b3f704f09f2d574a46e548edec463d73fcdf5ddb99daa0101aeb7381e228659ec499a191a5dff5c42f0011189883a92793dd1d83e9b82f8fcaa78becbeba7ccd68338f8528237a6492721b1a250b4fb29634bae608f82470de33a49f0b2e585c1711e18f4ae12954dab70ced4c5e7d40c4c4d09e3cefb31707ff4f725deecbc8b63fa08ab5219d1bcb804176f1ab4230f0a482579f6437c8ba1b26bb6e41dded9a73966fd69ee898054493459708273bcb4279f31442629be06e5bb7a73743549f1b1eda50d2a4ae3927d6207858e78964f8c6deb103620516df37110d51c25aa2d27dbfef8831800daa860526eafa156a52c80d0eed4a93524cc0a6f4a7a38e662456f8281251f26f8ba6679605ba7a2d33db8cf0a02fa4547c445a6ce9e823568c1f79387a86c6626b76fa36463f71c3588bbaf5aefb68f5579102a35e019e29386d66bd0affc82b322aa3f5d91a9d823acab020f55e01ca2b5b9ae5fc4f8accb2dbbc5fda027e812e8f12f73e250407cfc0ccde590410bb4d63748e749002c4ac640085c2e9c5891d7040d6ac3d1a73c684193f482ee6554a7a4cdee59b3d6055d7c70b7fa1a2a17541c9b5ebdaa900b1359198c7a5e35938ad25d82db823192d22f40363eedb0ce4ba9937e9aa350b373735c4df1119ec4fced5db76fcdff89e9de99db19bf3819072552cdb22c50cb239b1db0d28be5ef07c2ac046d7b3e7a256a6d203069a984c89b10b425d685cc69d442b873182d42766f5d5fc1238ed52a34e1ee35cce5f04b7e44c22f55b91c7e119a5773b871696e29cb3a67dc596fe1a7551cafcec8b216013ac0654bbd7d09d561c6f859d48b183a70827ecde84973b59dd784fa4e7130947e113604c6a2a8e7586ffea2d59f4b0614b5cdce9adb96176acd42d2320cc55fbf827ac33efe2304db8a542a46d050a2f0b4379a54e034bac4cb9bcc16860649f581ea831621b3bd0cf2fe08fd646044cf80e47e1bae2407072b21c709a6815f974557e7ce7e9bb6fd3b67ae6da5c67087803b25074abc1ec5761eaec9a2dc6c0811db7fd848ae63d5dc57a561eb85bd0970ac8cd3893121050c3a52e02f2361322f782a2f661956af944aef6f8e3f430e84e96ec836b90ee26d0356aaaba57df5ecd858721a431644180f8639d9615c5361e7d983e0f77d0a1d6f74931ac9c0977adbbe8186efb1962ac5e4f394bc864cb4f84cad03ed8c5686e61e518ff1929acb2920a0260143c0a0d1c94213b6d7621d936c6d889a3b6e01db64c88d0fee6a78ade903239645725983d128ab1cf0949f9c5c56c4d48fd58b86d7de697b8f00815e0fbe018b36ca1aabb86ecb40b4a8b97a974e44dc78bbad19e71ae65590b8b1d124fb18bbf1ed976c2c7cdfdec946e146833195bea3122cd7c03f44a9d3db4b51e2616f8c5012476484037146a95a61c4b28435c51e1ad0f781bcb507211bc61a3c97e7e34aad7f6a70e56a0181e30db2aabc02955a8ced82fabdba38d3c2a9283a223baa155cd47ea11ba698033564bad7e15cf8dcf15ed848a041feb429068d38a4a67c152edca954639adc76c505f51a38a7f15dd2c7936e69bc2fcd3a718b7d1916d72f44c99e1461c7fe4ff25befb7f6cb5be331f56db7b98e91fb9992724d88eb993493e2ba4ccd37b6da28d1540759e5caeb6121284b833fad57b0faea5ada60993555cde45b62f7a3ec117e4e475932b7290e4e14fa299f60bec5dfbe4139f72b35e7b94fef8665ec6a4685806bff912f25bf2f6a9e38423f9d4cc1a48482559a9a2e67571e908fe7998812e6a6c2962a501cad137b0b09ba3c2b45e5dbd338f3d11019d8f4e51dfad6a1004536eabbeeea76ce47741767c998c73af5812858b89295f49bf0a0842bbf53fdcf2f85df596f8b7b824843f713a01510e3921f90c0ceb94804393326fe0725d69361c2d6c78121682e898387fc0fa53e2f258052fda0f21cb602fda8003e5224df53b4d225ba9d472048bf0745f33bcab462d239e19ffb417ca7901beae55c816bf52d8068a45203574d6797f84d550490d68d4997611627061ce040c5f90ba846985dc7ecf0bb3cec36ea53893db83b9eef6d5a7578c9e017570ddf76c2db594c2bc9d4339a37c21e187c965456e2f36f848e96d7a17f4200934a5532d33de91efa4956e46f25b53e35870c1ee71be622a4a84dcdf46ac86582464bbd63f5a6dc3320b0b0af7f2a01f2db3baeb3887224404ea5addc82e3fbc454f53110790dbe2716e7fccbbf6db4db344958060ba5df319f12306cb7f0ff86ba8aa06d02d9c267c8e4aeda9eb0cac1ef3b471ace40122a48a52174018cd814f38509e01d58e8ec2815ac8a8d751774bd357cc3e87a5f028e5ee8818e1ce83bef570a7a57f5a295bfcb16d3fed3891ce88ed014eceaba109baa959680fb57bbe8440dbd534b1ec87d7ea66928a9956fd80f0d006a962560ae35f731ba5a504efee8a27c99a7f295bac83ea76d3697d1e59eda0f544da6d4176308c67cf10fec4f32707c2836fbc869598239c3a88d84d2f7ace2ce2843f85ae28b3a3c0a10a12c2af83065692d7bd65f76dc437fc28e21a70a8343b4e7152b4ce69868cf198857c7a5f43908de24d27ecb6c0ced81330694937dd11d92407cb0822a33168c456b1ce3e019f14ba2c7c9624c1acb6b0a8f75c6ccb2e7b596a0bcb6bff476a5b0deea12e91a1376fce6379097434901ef7bbc1dd11b12d91144e0a8427e2965b7f8e9f4cfc0b7aae5e1e8cd74fc11642c3202f81f8b3b88c1267f99d01c020dbc43e696f5ea7f4b7ce7622cb7ffae84db43e453b3fc83709e1b7a1f9985deac9218d94e5f254aeada32d4ef9478dba3105543dcde464d09c5ce9c6839e8e9de27ecd0833791c043d4547f075bc9d43e77834780c581b90c891100ba9860cac46dc498f1b78a15c0a1c047d347762940faf4b668b06b04599bd64cd73fbc5ad6d06e9769e6dc8fdfb1ea5ee61d5b86e7961eab1e88e8a88c6dbbaa204aae0d81cc893867d066f018db97611fa8df724c13528903fec73b95f3ef95becd157f4db2554cd8bc728f1bd547506b36eaf66880eb8d9d9a5b3f54c5a29413137a3e0d55e5accd97dfda3aeff940ac67af33049a0150f0ff75a0e94af711548465fb971eb6d370faf94ea351a6d55a3781e6c3fdf88a016535fcaa932108d72e44d8c378604cc4700be46f99b4c704ac0e9d526ac7949c37da844c79381b557db0611692685fbd33d3e8e3c991e570670c7106c6b6bde470214bd1de7eea168856218f26bb9005d3119f818a07b86ae342f5399c7dd1985b4eb0756fd6b8788ea2c7773ee3973201585e99146414f34576532cbc6e49a7be338363f614f225630f6a7337c98f2847bfe371f5c73de3e4f23c9154c4351a36f9aae872be229b5cb3f013783e4aba6968f4b76c536671014dd70e6e5960d01c7059a446212de8d405047ec0489181d6a23a6327436d002000fc7213e9782a9fb4711bb6a07c6bdf7e3c796fb6e43109f1c142b1135a5d6e50d10626937c9f23e1aee4430d5d944fad2796a2e70a731b78acf990cab2a01a7745c83e357e1ee083e4f6b4795c0983d574544b53bc645def856a2d610690528e158e4995607f496f5caa09482ab58c6a1a2e4aad4db2cfef6cc7b841aaa21637dbfdd20b0e440157823e9c042751f0c1ee885276cc31bea5398aa843c64cf16945d8cd82bf75794e622368b0cc4edc2f557b198cf280397f7657b8761c4eef374ee1f67f4955a900cc6c83f682d543aeb6a955ecb5eda54bb94ba9b9916a1286f4eb082fa7fb256ec18f8eb82ba62e5c24a77d06c346adab500a8fa4084b445bed9a9c6c661a697f2ea81ed164b8af2d82c8fb4b5148908fcc4cb218bf244b51ca4fccf9b9e3f84586b53246d22873ee9d845c736c3912b2fc842c9379937f4516a8822f84a4cf5acd719c25dec51a59849badeb0215fdbabdd4eff426c4b9b7da0e559c44bcd9fdd8cf613eb68bf64d2534441d065a789712ad51dea26237722e1726d5aeb2e8cb99ffe9c018d8e6eefa535e1fd07f4fe6c61bf36408d3608d14584fe612030c42f2b2c3c49944fd5380d8402d3ff34962322bb44d20345b4e361b32d67062a1845055d6a38da4a410c7749c87841d66498256743b60651739e853272785113b55c0292261321f0cdafe32cea062a8548307d5f3a3ac711c8188e016c6ae8279300f461f81ca6b5aaece24632c95aed94df0246f5cb448abecbfd68d306688413b783f0bd5b31cd83b65438e16b3234bedfdf30898b8d3754afd0cdebc4388a96b5742a6597c4e9983c3d7f014b15b460abef4b50926fec617cb98852515a1", @ANYRESDEC=0x0], 0x1, 0x1fb, &(0x7f0000000280)="$eJzskk9rE08Yxz+zu0n296OlQaKiCEUtWg9tNqnGPwcFLwb1JBVqQTAkaQ2m/mkCNaGHCEIRL4JVaBEPoqSIB/ENmIOn3hSKt1LouYcevEjryuxOtpN34GE+h/3uzDzP99nn2blbe1RLALvb80VIInFI8V0IHGBQBFuU7FBdpdeVxtX5FSvUjtLfSnfPNicmQVSOreeszsHSUZGkL/VrdYMiA7c5//bapx83Yotr+7Y+fJXxV282viBOlgbevfn84vJSf2Avbk3qPnbnyLIrjYCXOxPrG84hUl2vyuLafvfPgdWn7Y+5Z7KD11MIb9kFRr+NLF30+p9byrPWaN4rVKvl2dqlJxZbQamf2/NF+XInAb7v+0HvQB7QY2T7K+zFHHZgHLDxoxiHPdL1mYfpWqM5UpkpTJeny/ez2bGcd9rzzmTTU5Xq+1fyWfaEVkJNEKmnAPmb/tPOY8COivkfWlo1hPZp6lzouXHt1w0fpwdLy+2qoBPlJlScHME4J5CjnWsJbXcocHEIWsojsOfCRcbRvi+s5QYHo8UH1dICAtFNa+NEHplNYtEiqy/GzkVtLygdUppX2la6qXTQ7b2pTuBgqfs83II4jwv1+mwmDit9KkvtZeXgwrdkSx+YrJq0e5u7YGMwGAwGg8FgMBgM/wx/AwAA//+2K50Q") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x7, 0x4, {{0x16, 0x4, 0x0, 0x1, 0x58, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x94, 0x9, "5efa2a0f2d845b"}, @cipso={0x86, 0x25, 0x2, [{0x4, 0x10, "321866292c4937a340bdd14d6ca8"}, {0x0, 0xc, "fc2fd7a2c860edab4c93"}, {0x1, 0x3, '@'}]}, @rr={0x7, 0x13, 0xe1, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xbdee, '\x00', r6, r3, 0x1, 0x0, 0x1}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x1, 0x0, 0x6, 0x4, 0x6, 0x18}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0x4, 0x3, 0x0, 0x4, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x7d, &(0x7f0000000780)=""/125, 0x40f00, 0x30, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000008c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x2, 0x1, 0x1d9a}, 0x10, 0x106c1, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000940)=[{0x1, 0x1, 0xf, 0x3}, {0x4, 0x5, 0x7, 0x7}], 0x10, 0x80}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x20000d, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@fowner_gt}, {@fowner_lt}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_lt}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'adq12b\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '\''}}], 0x6b}}) 2m42.532300817s ago: executing program 1 (id=673): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x2, "fcd1ca9a0967216a"}}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) sync() 2m27.079751247s ago: executing program 34 (id=673): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x2, "fcd1ca9a0967216a"}}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) sync() 15.357812221s ago: executing program 6 (id=1203): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x270, 0x2b8, 0xb0000010, 0x270, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x270, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x73, 0x6e7, 0x1000000, 0x1, 0x7fffffff, 0x0, 0x0, 0x8}}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x0, [0x0, 0x3, 0x7, 0x6, 0x5, 0x8, 0x3ff, 0x8001, 0x200, 0x1, 0xc, 0x7ff, 0xfff, 0x8, 0x81, 0x7], 0xf}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syz_io_uring_setup(0x2af8, 0x0, &(0x7f0000000340), &(0x7f0000000080)) io_submit(0x0, 0x0, &(0x7f00000008c0)) r4 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000580), &(0x7f00000000c0)) io_uring_enter(r4, 0x0, 0x235c, 0x3, 0x0, 0x0) 13.967489878s ago: executing program 6 (id=1205): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) 13.234302392s ago: executing program 6 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.764886731s ago: executing program 6 (id=1214): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0xffffffff) 11.441461727s ago: executing program 6 (id=1215): syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') syz_open_procfs(0x0, &(0x7f0000002040)='net/anycast6\x00') r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0xfd, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, r4}, 0xc) read$watch_queue(r3, &(0x7f0000000540)=""/4096, 0x1000) 10.30281597s ago: executing program 4 (id=1219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000580)="14f3b0f5435b"}) 9.126194042s ago: executing program 4 (id=1220): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000040)=0x438b, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10140, 0x0, 0x5a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x93, 0x7, 0xffff, 0x0, 0x7fffffffffffffff, 0x7]}, &(0x7f0000000140)=0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 8.948688256s ago: executing program 6 (id=1221): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x10000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) 6.389356166s ago: executing program 7 (id=1223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = memfd_secret(0x0) ftruncate(r6, 0x51a9497) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT], 0xfe, 0x677, &(0x7f0000000c00)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 6.389080565s ago: executing program 3 (id=1224): ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000340), 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x5, 0x6, 0x4d, 0x39cc191a, 0x96a3, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x8006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x1009, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0xdf2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x8, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x203, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.388799516s ago: executing program 4 (id=1225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.655869659s ago: executing program 7 (id=1228): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0xffffffff) 4.280512247s ago: executing program 4 (id=1230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62e", 0x2, 0x8040, 0x0, 0x0) 4.267953467s ago: executing program 5 (id=1231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) setsockopt$inet6_udp_int(r4, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6c, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.070277671s ago: executing program 7 (id=1232): setuid(0xee01) ioprio_set$uid(0x3, 0x0, 0x2004) 3.818346025s ago: executing program 5 (id=1234): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000dc0)=ANY=[], 0x1, 0x1207, &(0x7f0000003000)="$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") creat(&(0x7f0000001740)='./bus\x00', 0xa1) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x16f842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x500f0, 0x0, 0x0) 3.56028069s ago: executing program 7 (id=1235): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 3.308568635s ago: executing program 5 (id=1236): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 3.166339198s ago: executing program 4 (id=1237): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_create1(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000024c0)={0x2020}, 0x2020) flock(r0, 0x5) 1.552298959s ago: executing program 4 (id=1238): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000040)=0x438b, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10140, 0x0, 0x5a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x93, 0x7, 0xffff, 0x0, 0x7fffffffffffffff, 0x7]}, &(0x7f0000000140)=0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1.467687521s ago: executing program 7 (id=1239): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x6, &(0x7f0000000240)={0x1, 0x0, 0x9}) 1.350354114s ago: executing program 3 (id=1240): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x101, 0x0}) 1.196400596s ago: executing program 3 (id=1241): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x141) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 937.718242ms ago: executing program 3 (id=1242): openat$rtc(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) close(0x3) 778.616464ms ago: executing program 5 (id=1243): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0xffffffff) 510.34538ms ago: executing program 3 (id=1244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 451.766481ms ago: executing program 5 (id=1245): setuid(0xee01) ioprio_set$uid(0x3, 0x0, 0x2004) 277.718914ms ago: executing program 5 (id=1246): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) openat(0xffffffffffffffff, 0x0, 0x20c601, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 202.335025ms ago: executing program 7 (id=1247): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000dc0)=ANY=[], 0x1, 0x1207, &(0x7f0000003000)="$eJzs3E9rXFUYB+DXpDUxNX/UWm1BetCNbi5NFm4UJEgK0gGlbYRWEG7NjQ65zgxzh8CIGF259XOIS3eCuNNNNn4Gd9m47EK8kpnGdsqAlkpuDM+zmZc55zfz3jnDwBnmzMGb33y6s11l2/kgZp54K2Z6EeluihQzceTLeO2Nn3956cat29fWW62N6yldXb+5+npKaenyjx98/t3LPw3Ovf/90g9zsb/y4cHva7/tX9i/ePDnzU/aVWpXqdMdpDzd6XYH+Z2ySFvtaidL6b2yyKsitTtV0Z8Y3y67vd4w5Z2txYVev6iqlHeGaacYpkE3DfrDlH+ctzspy7K0uBA8js1v79Z1HVHXZ+PJqOu6fioW4lw8HYuxFMuxEs/Es/FcnI/n40K8EC/GxdGspvsGAAAAAAAAAAAAAAAAAACA0+Wxzv9fbrh5AAAAAAAAAAAAAAAAAAAAOCVu3Lp9bb3V2rie0nxE+fXu5u7m+HY8vr4d7SijiCuxHH/E6PT/2Li++k5r40oaWYmvyr17+b3dzdnJ/Oro7wSm5lfH+TSZn4uFB/NrsRznp+fXpubn49VXHshnsRy/fhTdKGMrDrP381+spvT2u62H8pdG8wAAAOA0yNLfpu7fs2zq+NxR/hG+H3hof30mLp1p8so5VA0/28nLsug3Xhx1NL5nLyJOSGMnoliKiP/+kc/+45z5e6tyIl6Ef1fMTryRmu/nf1o083nE8bq/6E13AgAAAAAAAAAAwKM4jp8THj7PbNMXCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApQIAAP//2ZfHAQ==") creat(&(0x7f0000001740)='./bus\x00', 0xa1) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x16f842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x500f0, 0x0, 0x0) 0s ago: executing program 3 (id=1248): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2a0800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) socket(0x27, 0x1, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x2, 0x8, 0x5, "c5320120", "f8091004"}}, 0x0}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000280)) kernel console output (not intermixed with test programs): descriptor/start: -61 [ 274.961011][ T129] usb 5-1: can't read configurations, error -61 [ 274.975450][ T129] usb usb5-port1: attempt power cycle [ 275.103823][ T4389] usb 4-1: config 0 has no interfaces? [ 275.111843][ T4389] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 275.131680][ T4389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.141804][ T4389] usb 4-1: Product: syz [ 275.149225][ T4389] usb 4-1: Manufacturer: syz [ 275.154534][ T4389] usb 4-1: SerialNumber: syz [ 275.181555][ T4389] usb 4-1: config 0 descriptor?? [ 275.398800][ T129] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 275.421110][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.679'. [ 275.441587][ T6882] device macvtap5 entered promiscuous mode [ 275.466884][ T4323] usb 4-1: USB disconnect, device number 18 [ 275.479462][ T129] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 275.515635][ T129] usb 5-1: can't read configurations, error -61 [ 275.545116][ T6888] loop5: detected capacity change from 0 to 8 [ 275.676109][ T129] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 276.553774][ T129] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 276.975663][ T129] usb 5-1: can't read configurations, error -61 [ 276.987299][ T129] usb usb5-port1: unable to enumerate USB device [ 277.088666][ T6888] 9pnet_fd: Insufficient options for proto=fd [ 277.605345][ T129] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 277.785393][ T129] usb 6-1: Using ep0 maxpacket: 8 [ 277.792567][ T129] usb 6-1: config 8 has an invalid interface number: 161 but max is 0 [ 277.802373][ T129] usb 6-1: config 8 has no interface number 0 [ 277.808623][ T129] usb 6-1: config 8 interface 161 has no altsetting 0 [ 277.828117][ T129] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=60.da [ 277.859361][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.867867][ T129] usb 6-1: Product: syz [ 277.872093][ T129] usb 6-1: Manufacturer: syz [ 277.877130][ T129] usb 6-1: SerialNumber: syz [ 278.091062][ T129] net1080: probe of 6-1:8.161 failed with error -22 [ 278.100780][ T129] usb 6-1: USB disconnect, device number 18 [ 278.335346][ T4309] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 278.515340][ T4309] usb 7-1: Using ep0 maxpacket: 32 [ 278.522703][ T4309] usb 7-1: config index 0 descriptor too short (expected 539, got 27) [ 278.531105][ T4309] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 278.542731][ T4309] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 278.551971][ T4309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.560026][ T4309] usb 7-1: Product: syz [ 278.564296][ T4309] usb 7-1: Manufacturer: syz [ 278.569009][ T4309] usb 7-1: SerialNumber: syz [ 278.576221][ T4309] usb 7-1: config 0 descriptor?? [ 278.583200][ T4309] hub 7-1:0.0: bad descriptor, ignoring hub [ 278.589315][ T4309] hub: probe of 7-1:0.0 failed with error -5 [ 278.608454][ T4309] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input12 [ 278.623192][ T4309] usbtouchscreen 7-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 278.648690][ T4309] usbtouchscreen: probe of 7-1:0.0 failed with error -8 [ 278.905646][ T4309] usb 7-1: USB disconnect, device number 2 [ 279.146552][ T126] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 279.356785][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.385237][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.432065][ T126] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 279.491545][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.538783][ T126] usb 5-1: config 0 descriptor?? [ 279.571517][ T6935] loop6: detected capacity change from 0 to 8 [ 280.168222][ T126] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 280.492837][ T126] hid-steam 0003:28DE:1142.000F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 280.560013][ T126] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0 [ 280.678070][ T126] hid-steam 0003:28DE:1142.0010: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 280.855354][ T126] hid-steam 0003:28DE:1142.000F: Steam wireless receiver connected [ 280.892240][ T126] usb 5-1: USB disconnect, device number 20 [ 280.932180][ T126] hid-steam 0003:28DE:1142.000F: Steam wireless receiver disconnected [ 282.483199][ T6943] fido_id[6943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 282.734264][ T6965] qnx4: no qnx4 filesystem (no root dir). [ 283.345454][ T126] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 283.680541][ T126] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.724916][ T126] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.813565][ T126] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 283.886166][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 284.026050][ T126] usb 6-1: SerialNumber: syz [ 284.255143][ T126] usb 6-1: 0:2 : does not exist [ 284.262236][ T126] usb 6-1: unit 5: unexpected type 0x03 [ 284.314075][ T126] usb 6-1: USB disconnect, device number 19 [ 284.705392][ T4323] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 284.907401][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.925423][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.955610][ T4323] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.975215][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.009910][ T4323] usb 5-1: config 0 descriptor?? [ 285.366306][ T7008] loop5: detected capacity change from 0 to 8 [ 285.609302][ T7009] 9pnet_fd: Insufficient options for proto=fd [ 286.257387][ T7012] loop5: detected capacity change from 0 to 8 [ 286.651161][ T4323] uclogic 0003:256C:006D.0011: v1 frame probing failed: -71 [ 286.823755][ T4323] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 286.836706][ T4323] uclogic: probe of 0003:256C:006D.0011 failed with error -71 [ 286.865180][ T4323] usb 5-1: USB disconnect, device number 21 [ 286.888963][ T7014] 9pnet_fd: Insufficient options for proto=fd [ 287.865426][ T129] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 287.945368][ T4332] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 288.232263][ T129] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 289.065430][ T129] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 289.083301][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.101600][ T129] usb 4-1: Product: syz [ 289.105969][ T129] usb 4-1: Manufacturer: syz [ 289.115392][ T129] usb 4-1: SerialNumber: syz [ 289.265313][ T4332] usb 7-1: Using ep0 maxpacket: 8 [ 289.272787][ T4332] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 289.299935][ T4332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.322625][ T7043] loop5: detected capacity change from 0 to 8 [ 289.352496][ T129] comedi comedi5: Wrong number of endpoints [ 289.391296][ T4332] usb 7-1: config 0 descriptor?? [ 289.392181][ T129] ni6501 4-1:5.0: driver 'ni6501' failed to auto-configure device. [ 289.603093][ T4332] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 289.655467][ T129] usb 4-1: USB disconnect, device number 19 [ 290.222716][ T4332] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 290.328575][ T4332] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 290.405454][ T4332] asix: probe of 7-1:0.0 failed with error -71 [ 290.444615][ T4332] usb 7-1: USB disconnect, device number 3 [ 290.559383][ T7048] 9pnet_fd: Insufficient options for proto=fd [ 290.973470][ T7051] loop3: detected capacity change from 0 to 8 [ 291.284504][ T7053] loop6: detected capacity change from 0 to 8 [ 291.703306][ T7058] netlink: 76 bytes leftover after parsing attributes in process `syz.5.737'. [ 292.071005][ T7061] 9pnet_fd: Insufficient options for proto=fd [ 292.432486][ T7051] 9pnet_fd: Insufficient options for proto=fd [ 292.502839][ T7066] loop5: detected capacity change from 0 to 8 [ 292.603554][ T7068] loop4: detected capacity change from 0 to 8 [ 292.977135][ T7071] 9pnet_fd: Insufficient options for proto=fd [ 293.086731][ T4282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.099948][ T4282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 293.277545][ T4282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 293.300909][ T4282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.397932][ T4282] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 293.434968][ T4282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.664158][ T7073] 9pnet_fd: Insufficient options for proto=fd [ 294.139406][ T7082] loop5: detected capacity change from 0 to 8 [ 294.177076][ T7069] chnl_net:caif_netlink_parms(): no params data found [ 295.461331][ T7090] 9pnet_fd: Insufficient options for proto=fd [ 295.487208][ T4280] Bluetooth: hci6: command 0x0409 tx timeout [ 295.980132][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.005647][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.033788][ T7094] loop3: detected capacity change from 0 to 8 [ 296.078471][ T7069] device bridge_slave_0 entered promiscuous mode [ 296.099188][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.149394][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.225041][ T7069] device bridge_slave_1 entered promiscuous mode [ 296.255913][ T4324] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 296.561074][ T4324] usb 5-1: Using ep0 maxpacket: 16 [ 296.627396][ T4324] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 296.667307][ T4324] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 296.683095][ T4324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.689018][ T7101] loop6: detected capacity change from 0 to 8 [ 296.694927][ T4324] usb 5-1: config 0 has no interface number 0 [ 296.778727][ T4324] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 297.009072][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.145464][ T4324] usb 5-1: Product: syz [ 297.149792][ T4324] usb 5-1: Manufacturer: syz [ 297.154409][ T4324] usb 5-1: SerialNumber: syz [ 297.338398][ T7069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.365406][ T4324] usb 5-1: config 0 descriptor?? [ 297.381711][ T7101] 9pnet_fd: Insufficient options for proto=fd [ 297.403341][ T7069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.442033][ T7094] 9pnet_fd: Insufficient options for proto=fd [ 297.502147][ T7069] team0: Port device team_slave_0 added [ 297.521097][ T7069] team0: Port device team_slave_1 added [ 297.565370][ T4280] Bluetooth: hci6: command 0x041b tx timeout [ 297.711539][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.726359][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.761868][ T7069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.774899][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.782204][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.808707][ T7069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.862360][ T7069] device hsr_slave_0 entered promiscuous mode [ 297.894298][ T7069] device hsr_slave_1 entered promiscuous mode [ 297.902082][ T7069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.909862][ T7069] Cannot create hsr debugfs directory [ 298.015420][ T4309] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 298.266503][ T7069] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 298.278600][ T7069] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 298.291210][ T7069] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 298.311495][ T7069] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 298.325471][ T4309] usb 7-1: Using ep0 maxpacket: 32 [ 298.337178][ T4309] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 298.352606][ T4309] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 298.362968][ T4309] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.374782][ T4309] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.402790][ T4309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.426293][ T4309] usb 7-1: Product: syz [ 298.435106][ T4309] usb 7-1: Manufacturer: syz [ 298.447196][ T4309] usb 7-1: SerialNumber: syz [ 298.679515][ T7069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.682508][ T4309] usb 7-1: 0:2 : does not exist [ 298.778453][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.808353][ T4323] usb 5-1: USB disconnect, device number 22 [ 298.845118][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.873979][ T4309] usb 7-1: USB disconnect, device number 4 [ 299.057186][ T7069] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.136140][ T4419] udevd[4419]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.167403][ T7130] loop3: detected capacity change from 0 to 8 [ 299.234488][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.548276][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.645462][ T4280] Bluetooth: hci6: command 0x040f tx timeout [ 299.855645][ T7134] loop4: detected capacity change from 0 to 8 [ 299.866129][ T4629] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.873288][ T4629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.101352][ T7139] 9pnet_fd: Insufficient options for proto=fd [ 300.995467][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.005670][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.355636][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.365823][ T4629] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.372942][ T4629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.391486][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.418128][ T7141] 9pnet_fd: Insufficient options for proto=fd [ 301.432259][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.454835][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.475198][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.494886][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.509088][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.532342][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.542806][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.566626][ T7069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.590950][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.656190][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.676723][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.720500][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.730225][ T4280] Bluetooth: hci6: command 0x0419 tx timeout [ 302.075484][ T22] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 302.199197][ T4308] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 303.337138][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.344682][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.354787][ T22] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 303.364683][ T4308] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 303.383591][ T4308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.392246][ T22] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 303.421142][ T7160] loop4: detected capacity change from 0 to 8 [ 303.433419][ T4308] usb 7-1: config 0 descriptor?? [ 303.446222][ T7069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.460692][ T22] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 303.472029][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 303.483749][ T22] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 303.494109][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.510806][ T22] usb 4-1: Product: syz [ 303.525317][ T22] usb 4-1: Manufacturer: syz [ 303.535733][ T22] usb 4-1: SerialNumber: syz [ 303.546519][ T22] usb 4-1: config 0 descriptor?? [ 303.552047][ T7145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 303.694726][ T7163] 9pnet_fd: Insufficient options for proto=fd [ 303.804509][ T4308] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 303.805766][ T7145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 303.813423][ T4308] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 304.240324][ T4308] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 304.249591][ T4308] [drm] Initialized udl on minor 2 [ 304.272367][ T22] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 304.462566][ T4308] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 304.474562][ T129] usb 4-1: USB disconnect, device number 20 [ 304.483929][ T4308] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 304.554703][ T4308] usb 7-1: USB disconnect, device number 5 [ 304.579130][ T22] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 304.621907][ T22] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 304.643205][ T22] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 305.202175][ T7178] tipc: Started in network mode [ 305.221846][ T7178] tipc: Node identity 4, cluster identity 4711 [ 305.244611][ T7178] tipc: Node number set to 4 [ 305.249755][ T4308] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 305.449331][ T4308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.485554][ T4308] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 305.543396][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.576050][ T4308] usb 5-1: config 0 descriptor?? [ 305.579068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.619388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.716574][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.739569][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.792394][ T4308] usbhid 5-1:0.0: can't add hid device: -71 [ 305.803109][ T4308] usbhid: probe of 5-1:0.0 failed with error -71 [ 305.805039][ T7069] device veth0_vlan entered promiscuous mode [ 305.828052][ T4308] usb 5-1: USB disconnect, device number 23 [ 305.882647][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.911010][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.969129][ T7069] device veth1_vlan entered promiscuous mode [ 306.079112][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.089442][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.106361][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.123204][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.135941][ T7069] device veth0_macvtap entered promiscuous mode [ 306.187158][ T7069] device veth1_macvtap entered promiscuous mode [ 306.233297][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.254465][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.280019][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.298780][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.329131][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.345707][ T4323] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 306.351736][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.365856][ T4308] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 306.382856][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.403341][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.414980][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.566079][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.585371][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.595942][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.632876][ T7069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.644232][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.655480][ T4308] usb 5-1: Using ep0 maxpacket: 32 [ 306.663542][ T4308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.675466][ T4323] usb 7-1: Using ep0 maxpacket: 16 [ 306.685012][ T4323] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 306.710343][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.733354][ T4308] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 306.735124][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.742600][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.744754][ T4308] usb 5-1: config 0 descriptor?? [ 306.765459][ T4323] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 306.787480][ T4323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.827540][ T4308] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 306.843190][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.876111][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.891571][ T4323] usb 7-1: config 0 descriptor?? [ 306.929253][ T4323] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input14 [ 306.944352][ T4308] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 306.967495][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.185370][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.247069][ T4308] usb 5-1: USB disconnect, device number 24 [ 307.266343][ T4308] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 307.406850][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.645464][ T4277] Bluetooth: hci0: command 0x0016 tx timeout [ 307.651628][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.774039][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.837246][ T7206] loop5: detected capacity change from 0 to 8 [ 308.065358][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.084869][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.114716][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.155489][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.185514][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.235397][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.845936][ T7208] 9pnet_fd: Insufficient options for proto=fd [ 308.887252][ T7069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.902156][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.914239][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.988752][ T7069] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.035496][ T7069] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.057238][ T7069] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.075213][ T7211] loop4: detected capacity change from 0 to 8 [ 309.091373][ T7069] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.143059][ T3623] bcm5974 7-1:0.0: could not read from device [ 309.164232][ T4323] usb 7-1: USB disconnect, device number 6 [ 309.177946][ T3623] bcm5974 7-1:0.0: could not read from device [ 310.688666][ T7211] 9pnet_fd: Insufficient options for proto=fd [ 310.840525][ T4492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.873234][ T4492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.878195][ T7224] device syzkaller1 entered promiscuous mode [ 310.952212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.969182][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.981128][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.996980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.025522][ T4323] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 311.175634][ T4309] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 311.199725][ T7232] netlink: 5 bytes leftover after parsing attributes in process `syz.3.783'. [ 311.215686][ T4323] usb 7-1: Using ep0 maxpacket: 16 [ 311.243777][ T7234] loop4: detected capacity change from 0 to 8 [ 311.246148][ T4323] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 311.297564][ T4323] usb 7-1: config 0 has no interface number 0 [ 311.304233][ T4323] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 311.365385][ T4309] usb 6-1: Using ep0 maxpacket: 8 [ 311.389570][ T4309] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.450868][ T4309] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 311.468311][ T4309] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 311.504739][ T4309] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 311.525557][ T4309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 311.533793][ T4309] usb 6-1: Product: syz [ 311.539108][ T4309] usb 6-1: Manufacturer: syz [ 311.543970][ T4309] usb 6-1: SerialNumber: syz [ 311.568664][ T4309] usb 6-1: config 0 descriptor?? [ 311.604287][ T4309] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 311.612992][ T4309] radio-si470x: probe of 6-1:0.0 failed with error -5 [ 311.613217][ T4323] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 311.620287][ T4309] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 311.638382][ T4756] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 311.753956][ T4323] usb 7-1: config 0 interface 41 has no altsetting 0 [ 311.762246][ T7237] 9pnet_fd: Insufficient options for proto=fd [ 311.905566][ T4756] usb 8-1: Using ep0 maxpacket: 8 [ 311.931266][ T4756] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 311.941436][ T4756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.949759][ T4756] usb 8-1: Product: syz [ 311.954905][ T4756] usb 8-1: Manufacturer: syz [ 311.959804][ T4756] usb 8-1: SerialNumber: syz [ 311.988107][ T4756] usb 8-1: config 0 descriptor?? [ 312.037359][ T7240] loop3: detected capacity change from 0 to 8 [ 312.068254][ T4323] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 312.115537][ T4323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.145611][ T4323] usb 7-1: Product: syz [ 312.149843][ T4323] usb 7-1: Manufacturer: syz [ 312.154479][ T4323] usb 7-1: SerialNumber: syz [ 312.217649][ T4323] usb 7-1: config 0 descriptor?? [ 312.251602][ T4756] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 312.253436][ T7222] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 312.288083][ T7222] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 312.619218][ T7245] loop4: detected capacity change from 0 to 8 [ 312.638353][ T7241] 9pnet_fd: Insufficient options for proto=fd [ 312.811843][ T7222] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 312.892890][ T7222] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 313.104097][ T4756] usb write operation failed. (-71) [ 313.149351][ T4756] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 313.180342][ T4756] dvbdev: DVB: registering new adapter (Terratec H7) [ 313.187323][ T4756] usb 8-1: media controller created [ 313.257927][ T7246] 9pnet_fd: Insufficient options for proto=fd [ 313.543957][ T4756] usb read operation failed. (-71) [ 313.554025][ T4756] usb write operation failed. (-71) [ 313.581386][ T4756] dvb_usb_az6007: probe of 8-1:0.0 failed with error -5 [ 313.667659][ T4756] usb 8-1: USB disconnect, device number 2 [ 313.741047][ T4323] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 314.005848][ T4323] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 314.917536][ T4323] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 314.927673][ T4323] CoreChips: probe of 7-1:0.41 failed with error -71 [ 314.937349][ T4323] usb 7-1: USB disconnect, device number 7 [ 315.212234][ T4323] usb 6-1: USB disconnect, device number 20 [ 315.288059][ T7258] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 315.294656][ T7258] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 315.315481][ T14] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 315.331744][ T7258] vhci_hcd vhci_hcd.0: Device attached [ 315.334219][ T7266] loop5: detected capacity change from 0 to 8 [ 315.387735][ T7259] vhci_hcd: connection closed [ 315.389843][ T4492] vhci_hcd: stop threads [ 315.405863][ T4492] vhci_hcd: release socket [ 315.414507][ T4492] vhci_hcd: disconnect device [ 315.545363][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 315.600664][ T14] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 315.623307][ T14] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 315.638524][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.683845][ T14] usb 4-1: config 0 has no interface number 0 [ 315.725052][ T14] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 315.943652][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.125537][ T14] usb 4-1: Product: syz [ 316.129775][ T14] usb 4-1: Manufacturer: syz [ 316.146434][ T14] usb 4-1: SerialNumber: syz [ 316.175223][ T14] usb 4-1: config 0 descriptor?? [ 316.376688][ T7266] 9pnet_fd: Insufficient options for proto=fd [ 316.746253][ T7296] loop6: detected capacity change from 0 to 8 [ 316.759373][ T7298] loop5: detected capacity change from 0 to 8 [ 317.089229][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.095609][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.394932][ T7304] 9pnet_fd: Insufficient options for proto=fd [ 318.152622][ T7305] 9pnet_fd: Insufficient options for proto=fd [ 318.261751][ T4332] usb 4-1: USB disconnect, device number 21 [ 318.522829][ T26] audit: type=1326 audit(1757548098.122:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.5.805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff36878eba9 code=0x0 [ 319.505562][ T6385] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 319.535342][ T4332] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 319.715426][ T6385] usb 6-1: Using ep0 maxpacket: 32 [ 319.751008][ T6385] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 319.857472][ T6385] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.895319][ T4332] usb 4-1: Using ep0 maxpacket: 32 [ 319.914071][ T4332] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 319.974070][ T6385] usb 6-1: Product: syz [ 319.999688][ T6385] usb 6-1: Manufacturer: syz [ 320.038156][ T6385] usb 6-1: SerialNumber: syz [ 320.092473][ T6385] usb 6-1: config 0 descriptor?? [ 320.106508][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.114562][ T4332] usb 4-1: Product: syz [ 320.158137][ T6385] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 320.235492][ T7384] tmpfs: Unknown parameter 'usrquota' [ 320.380268][ T4332] usb 4-1: Manufacturer: syz [ 320.598451][ T4332] usb 4-1: SerialNumber: syz [ 320.678187][ T4332] usb 4-1: config 0 descriptor?? [ 320.817672][ T4332] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 321.332847][ T7394] loop4: detected capacity change from 0 to 8 [ 321.378572][ T7396] loop7: detected capacity change from 0 to 8 [ 321.558959][ T129] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 321.648130][ T7397] 9pnet_fd: Insufficient options for proto=fd [ 321.865546][ T129] usb 7-1: Using ep0 maxpacket: 8 [ 321.917163][ T129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.187066][ T129] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 322.236457][ T4332] gspca_stk1135: reg_w 0xf err -71 [ 322.243093][ T4332] gspca_stk1135: serial bus timeout: status=0x00 [ 322.295304][ T4332] gspca_stk1135: Sensor write failed [ 322.301336][ T4332] gspca_stk1135: serial bus timeout: status=0x00 [ 322.308410][ T4332] gspca_stk1135: Sensor write failed [ 322.314466][ T4332] gspca_stk1135: serial bus timeout: status=0x00 [ 322.322191][ T4332] gspca_stk1135: Sensor read failed [ 322.344465][ T4332] gspca_stk1135: serial bus timeout: status=0x00 [ 322.357424][ T4332] gspca_stk1135: Sensor read failed [ 322.363664][ T4332] gspca_stk1135: Detected sensor type unknown (0x0) [ 322.370553][ T4332] gspca_stk1135: serial bus timeout: status=0x00 [ 322.403465][ T7398] 9pnet_fd: Insufficient options for proto=fd [ 322.591627][ T4332] gspca_stk1135: Sensor read failed [ 322.598367][ T4332] gspca_stk1135: serial bus timeout: status=0x00 [ 322.604760][ T4332] gspca_stk1135: Sensor read failed [ 322.610450][ T4332] gspca_stk1135: serial bus timeout: status=0x00 [ 322.618127][ T129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.619636][ T4332] gspca_stk1135: Sensor write failed [ 322.631837][ T4332] gspca_stk1135: serial bus timeout: status=0x00 [ 322.652184][ T4332] gspca_stk1135: Sensor write failed [ 322.662378][ T4332] stk1135: probe of 4-1:0.0 failed with error -71 [ 322.663604][ T129] usb 7-1: config 0 descriptor?? [ 322.685467][ T4332] usb 4-1: USB disconnect, device number 22 [ 322.893030][ T129] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 323.106527][ T4332] usb 7-1: USB disconnect, device number 8 [ 323.129143][ T7407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.825'. [ 323.601998][ T6385] gspca_stk1135: reg_w 0x353 err -71 [ 323.608603][ T6385] gspca_stk1135: serial bus timeout: status=0x00 [ 323.618223][ T6385] gspca_stk1135: Sensor write failed [ 323.623585][ T6385] gspca_stk1135: serial bus timeout: status=0x00 [ 323.677279][ T6385] gspca_stk1135: Sensor write failed [ 323.682923][ T6385] gspca_stk1135: serial bus timeout: status=0x00 [ 323.715294][ T6385] gspca_stk1135: Sensor read failed [ 323.720591][ T6385] gspca_stk1135: serial bus timeout: status=0x00 [ 323.750352][ T6385] gspca_stk1135: Sensor read failed [ 323.760471][ T6385] gspca_stk1135: Detected sensor type unknown (0x0) [ 323.788492][ T6385] gspca_stk1135: serial bus timeout: status=0x00 [ 323.802750][ T6385] gspca_stk1135: Sensor read failed [ 323.817610][ T6385] gspca_stk1135: serial bus timeout: status=0x00 [ 323.826184][ T6385] gspca_stk1135: Sensor read failed [ 323.831548][ T6385] gspca_stk1135: serial bus timeout: status=0x00 [ 323.855381][ T6385] gspca_stk1135: Sensor write failed [ 323.871206][ T6385] gspca_stk1135: serial bus timeout: status=0x00 [ 323.881687][ T6385] gspca_stk1135: Sensor write failed [ 323.891444][ T6385] stk1135: probe of 6-1:0.0 failed with error -71 [ 323.922176][ T6385] usb 6-1: USB disconnect, device number 21 [ 324.122252][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.7.839'. [ 324.175350][ T129] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 324.375550][ T129] usb 7-1: Using ep0 maxpacket: 32 [ 324.389001][ T129] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 324.398838][ T6385] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 324.444879][ T129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.461204][ T129] usb 7-1: Product: syz [ 324.466268][ T129] usb 7-1: Manufacturer: syz [ 324.470930][ T129] usb 7-1: SerialNumber: syz [ 324.493993][ T129] usb 7-1: config 0 descriptor?? [ 324.532716][ T129] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 324.605493][ T6385] usb 6-1: Using ep0 maxpacket: 32 [ 324.613020][ T6385] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.631855][ T6385] usb 6-1: config 0 has no interface number 0 [ 324.653426][ T6385] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 324.687890][ T6385] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.745672][ T6385] usb 6-1: Product: syz [ 324.755601][ T6385] usb 6-1: Manufacturer: syz [ 324.770595][ T6385] usb 6-1: SerialNumber: syz [ 324.796460][ T6385] usb 6-1: config 0 descriptor?? [ 324.823506][ T6385] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 324.847003][ T6385] usb 6-1: selecting invalid altsetting 1 [ 324.852866][ T6385] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 324.882181][ T6385] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 324.912396][ T6385] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 324.931793][ T6385] usb 6-1: media controller created [ 324.990347][ T6385] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.030937][ T7462] loop7: detected capacity change from 0 to 8 [ 325.105841][ T6385] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 325.113378][ T6385] zl10353_read_register: readreg error (reg=127, ret==-71) [ 325.321692][ T7465] loop3: detected capacity change from 0 to 8 [ 325.705451][ T6385] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 326.262427][ T7462] 9pnet_fd: Insufficient options for proto=fd [ 326.291183][ T6385] usb 6-1: USB disconnect, device number 22 [ 326.299703][ T7470] loop4: detected capacity change from 0 to 8 [ 326.391294][ T129] gspca_stk1135: reg_w 0x200 err -71 [ 326.404832][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 326.515350][ T129] gspca_stk1135: Sensor write failed [ 326.692720][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 326.699199][ T129] gspca_stk1135: Sensor write failed [ 326.701117][ T7465] 9pnet_fd: Insufficient options for proto=fd [ 326.711090][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 326.721201][ T129] gspca_stk1135: Sensor read failed [ 326.728953][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 326.784320][ T129] gspca_stk1135: Sensor read failed [ 326.807080][ T129] gspca_stk1135: Detected sensor type unknown (0x0) [ 326.815045][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 326.823655][ T129] gspca_stk1135: Sensor read failed [ 327.078049][ T7475] 9pnet_fd: Insufficient options for proto=fd [ 327.107958][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 327.144760][ T129] gspca_stk1135: Sensor read failed [ 327.179956][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 327.206053][ T129] gspca_stk1135: Sensor write failed [ 327.221690][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 327.241894][ T129] gspca_stk1135: Sensor write failed [ 327.287885][ T129] stk1135: probe of 7-1:0.0 failed with error -71 [ 327.358848][ T129] usb 7-1: USB disconnect, device number 9 [ 327.666074][ T7486] overlayfs: unrecognized mount option "dont_appraise" or missing value [ 327.718762][ T4280] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 327.798882][ T7492] loop6: detected capacity change from 0 to 8 [ 328.015715][ T4332] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 328.225426][ T4332] usb 6-1: Using ep0 maxpacket: 8 [ 328.239543][ T4332] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 330.430365][ T7498] 9pnet_fd: Insufficient options for proto=fd [ 330.674709][ T4332] usb 6-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 331.685492][ T4332] usb 6-1: string descriptor 0 read error: -71 [ 331.696098][ T4332] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 331.706479][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.725821][ T4332] usb 6-1: can't set config #6, error -71 [ 331.736460][ T4332] usb 6-1: USB disconnect, device number 23 [ 332.276293][ T4308] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 332.487341][ T4308] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 332.496837][ T4332] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 332.511227][ T4308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.539473][ T4308] usb 8-1: config 0 descriptor?? [ 332.560643][ T4308] cp210x 8-1:0.0: cp210x converter detected [ 332.698334][ T4332] usb 7-1: Using ep0 maxpacket: 8 [ 332.708090][ T4332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.745447][ T4332] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 332.781125][ T4332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.806738][ T4332] usb 7-1: config 0 descriptor?? [ 333.024761][ T4332] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 333.167450][ T4308] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 333.179174][ T4308] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 333.185416][ T6385] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 333.197647][ T4308] usb 8-1: cp210x converter now attached to ttyUSB0 [ 333.223018][ T4308] usb 8-1: USB disconnect, device number 3 [ 333.250631][ T4324] usb 7-1: USB disconnect, device number 10 [ 333.253874][ T4308] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 333.270770][ T4308] cp210x 8-1:0.0: device disconnected [ 333.495531][ T6385] usb 6-1: Using ep0 maxpacket: 8 [ 333.502378][ T6385] usb 6-1: config 0 interface 0 altsetting 218 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.516007][ T6385] usb 6-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 333.529355][ T6385] usb 6-1: config 0 interface 0 has no altsetting 0 [ 333.536622][ T6385] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 333.545962][ T6385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.556120][ T6385] usb 6-1: config 0 descriptor?? [ 333.969755][ T6385] redragon 0003:0C45:760B.0012: item fetching failed at offset 5/7 [ 334.062733][ T6385] redragon: probe of 0003:0C45:760B.0012 failed with error -22 [ 334.382701][ T6385] usb 6-1: USB disconnect, device number 24 [ 336.685439][ T4324] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 337.447831][ T4324] usb 7-1: device descriptor read/all, error -71 [ 337.894612][ T7587] fuse: Unknown parameter '0x0000000000000005' [ 340.221194][ T7603] fuse: Unknown parameter 'fd0x0000000000000005' [ 341.595464][ T41] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 341.805542][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 341.818430][ T41] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 342.000355][ T41] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 342.050414][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.106235][ T41] usb 6-1: config 0 descriptor?? [ 342.122527][ T7622] fuse: Unknown parameter 'user_i00000000000000000000' [ 342.605870][ T126] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 342.739322][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 342.755392][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 342.762518][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 342.770060][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 342.785336][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 342.789132][ T4324] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 342.792505][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 342.808429][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 343.045577][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 343.138669][ T4324] usb 5-1: config 249 has an invalid interface number: 212 but max is 0 [ 343.192525][ T4324] usb 5-1: config 249 contains an unexpected descriptor of type 0x2, skipping [ 343.219631][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 343.227065][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 343.234370][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 343.241823][ T41] corsair 0003:1B1C:1B09.0013: unknown main item tag 0x0 [ 343.243095][ T4324] usb 5-1: config 249 contains an unexpected descriptor of type 0x1, skipping [ 343.252777][ T41] corsair 0003:1B1C:1B09.0013: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.5-1/input0 [ 343.270849][ T126] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 343.278803][ T4324] usb 5-1: config 249 has no interface number 0 [ 343.298189][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.304042][ T4324] usb 5-1: config 249 interface 212 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 343.306534][ T41] usb 6-1: USB disconnect, device number 25 [ 343.328402][ T126] usb 7-1: Product: syz [ 343.332603][ T126] usb 7-1: Manufacturer: syz [ 343.337352][ T126] usb 7-1: SerialNumber: syz [ 343.352249][ T126] usb 7-1: config 0 descriptor?? [ 343.394185][ T4324] usb 5-1: config 249 interface 212 has no altsetting 0 [ 343.447218][ T4324] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=96.8f [ 343.520472][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.545338][ T4324] usb 5-1: Product: syz [ 343.577160][ T4324] usb 5-1: Manufacturer: syz [ 343.581827][ T4324] usb 5-1: SerialNumber: syz [ 343.605967][ T129] usb 7-1: USB disconnect, device number 13 [ 343.722861][ T7632] fido_id[7632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 343.854189][ T4324] peak_usb 5-1:249.212 can0: unable to request usb[type=0 value=1] err=-71 [ 343.864237][ T4324] peak_usb 5-1:249.212: unable to read PCAN-USB Pro firmware info (err -71) [ 343.956248][ T4324] peak_usb: probe of 5-1:249.212 failed with error -71 [ 344.000431][ T4324] usb 5-1: USB disconnect, device number 25 [ 344.104635][ T7644] loop7: detected capacity change from 0 to 8 [ 344.435499][ T41] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 344.635317][ T41] usb 4-1: Using ep0 maxpacket: 32 [ 344.642612][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.672232][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.682878][ T41] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 344.692376][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.729895][ T41] usb 4-1: config 0 descriptor?? [ 345.150781][ T41] isku 0003:1E7D:319C.0014: ignoring exceeding usage max [ 345.174447][ T41] isku 0003:1E7D:319C.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 345.366487][ T41] usb 4-1: USB disconnect, device number 23 [ 345.480652][ T7663] fido_id[7663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 345.496474][ T4324] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 345.685513][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 345.694994][ T4324] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 345.713335][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.739746][ T4324] usb 5-1: Product: syz [ 345.745679][ T4324] usb 5-1: Manufacturer: syz [ 345.750389][ T4324] usb 5-1: SerialNumber: syz [ 345.766112][ T4324] usb 5-1: config 0 descriptor?? [ 345.775895][ T4324] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 345.786428][ T7679] tmpfs: Unknown parameter 'usrquota' [ 346.011614][ T7683] loop6: detected capacity change from 0 to 8 [ 346.036981][ T7684] loop5: detected capacity change from 0 to 8 [ 348.169168][ T4324] gspca_stk1135: reg_w 0x203 err -71 [ 348.698082][ T7683] 9pnet_fd: Insufficient options for proto=fd [ 348.876248][ T4324] gspca_stk1135: serial bus timeout: status=0x00 [ 348.882779][ T4324] gspca_stk1135: Sensor write failed [ 348.895009][ T7684] 9pnet_fd: Insufficient options for proto=fd [ 350.623203][ T4324] gspca_stk1135: serial bus timeout: status=0x00 [ 350.629837][ T4324] gspca_stk1135: Sensor write failed [ 350.635181][ T4324] gspca_stk1135: serial bus timeout: status=0x00 [ 350.641619][ T4324] gspca_stk1135: Sensor read failed [ 350.647523][ T4324] gspca_stk1135: serial bus timeout: status=0x00 [ 350.654105][ T4324] gspca_stk1135: Sensor read failed [ 350.659442][ T4324] gspca_stk1135: Detected sensor type unknown (0x0) [ 350.666134][ T4324] gspca_stk1135: serial bus timeout: status=0x00 [ 350.672505][ T4324] gspca_stk1135: Sensor read failed [ 350.678001][ T4324] gspca_stk1135: serial bus timeout: status=0x00 [ 350.684364][ T4324] gspca_stk1135: Sensor read failed [ 350.689658][ T4324] gspca_stk1135: serial bus timeout: status=0x00 [ 350.696527][ T4324] gspca_stk1135: Sensor write failed [ 350.701862][ T4324] gspca_stk1135: serial bus timeout: status=0x00 [ 350.708262][ T4324] gspca_stk1135: Sensor write failed [ 350.713626][ T4324] stk1135: probe of 5-1:0.0 failed with error -71 [ 350.731156][ T4324] usb 5-1: USB disconnect, device number 26 [ 351.240156][ T4324] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 351.285576][ T7723] loop4: detected capacity change from 0 to 8 [ 351.364609][ T7725] loop5: detected capacity change from 0 to 8 [ 351.466923][ T4324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.515432][ T4324] usb 8-1: config 0 has no interfaces? [ 352.016617][ T4324] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 352.355296][ T4324] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 352.531376][ T4324] usb 8-1: Product: syz [ 352.539017][ T4324] usb 8-1: Manufacturer: syz [ 352.545506][ T4324] usb 8-1: SerialNumber: syz [ 352.590058][ T4324] usb 8-1: config 0 descriptor?? [ 352.599235][ T7737] loop3: detected capacity change from 0 to 8 [ 353.007625][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 353.136501][ T7725] 9pnet_fd: Insufficient options for proto=fd [ 353.835509][ T4322] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 353.967130][ T4324] usb 8-1: USB disconnect, device number 4 [ 353.995892][ T7756] loop6: detected capacity change from 0 to 8 [ 354.025706][ T4322] usb 6-1: Using ep0 maxpacket: 16 [ 354.033408][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.073789][ T4322] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 354.111399][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.136211][ T4322] usb 6-1: config 0 descriptor?? [ 354.144002][ T7758] loop3: detected capacity change from 0 to 8 [ 354.289051][ T7759] 9pnet_fd: Insufficient options for proto=fd [ 354.745069][ T4322] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 354.800317][ T4322] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 354.817238][ T4322] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 354.894691][ T4322] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 354.905465][ T4322] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 354.919081][ T4322] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 355.172439][ T4322] usb 6-1: USB disconnect, device number 26 [ 356.834103][ T7802] loop6: detected capacity change from 0 to 8 [ 357.661540][ T7802] 9pnet_fd: Insufficient options for proto=fd [ 358.098931][ T7831] netlink: 'syz.4.976': attribute type 4 has an invalid length. [ 358.758002][ T7859] binder: 7858:7859 ioctl 4008f50a 0 returned -22 [ 358.876209][ T4322] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 358.978302][ T22] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 359.012539][ T22] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 359.075336][ T4322] usb 8-1: Using ep0 maxpacket: 16 [ 359.082684][ T4322] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 359.103988][ T4322] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.126549][ T4322] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.146592][ T4322] usb 8-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 359.190152][ T4322] usb 8-1: config 7 interface 0 has no altsetting 0 [ 359.212781][ T4322] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 359.228575][ T4322] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.668227][ T4322] hid (null): invalid report_size 28531 [ 359.700083][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.709984][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.718015][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.725014][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.733261][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.740742][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.748127][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.756776][ T7875] loop5: detected capacity change from 0 to 8 [ 359.763482][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.771699][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.779206][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.786414][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.793542][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.802482][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.810359][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.817424][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.824445][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.833571][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.840567][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.847456][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.854362][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.861202][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.872755][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.883877][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.891645][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.908332][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.930282][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.938729][ T7881] 9pnet_fd: Insufficient options for proto=fd [ 359.945641][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.963803][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.971369][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.983850][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 359.996289][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.003308][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.011943][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.039875][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.064434][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.084829][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.110078][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.129639][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.165608][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.172418][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.179600][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.187393][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.194224][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.203578][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.221282][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.231499][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.240521][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.247750][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.254496][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.261473][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.268273][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.275038][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.281885][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.291100][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.298629][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.306132][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.312888][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.320205][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.327081][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.333857][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.340717][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.349775][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.359727][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.368309][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.375669][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.382715][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.405393][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.412198][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.419068][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.426970][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.433726][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.440630][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.447633][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.454373][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.466012][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.472777][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.479804][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.487696][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.494443][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.504382][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.518709][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.529103][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.536734][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.543471][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.550542][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.557792][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.564846][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.568334][ T7891] netlink: 336 bytes leftover after parsing attributes in process `syz.7.997'. [ 360.577266][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.587573][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.594366][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.602395][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.612797][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.623641][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.631001][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.637841][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.644597][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.665321][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.672550][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.680213][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.683677][ T7893] netlink: 9 bytes leftover after parsing attributes in process `syz.7.998'. [ 360.687489][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.703174][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.711311][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.718187][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.724977][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.732313][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.739247][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.746167][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.752914][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.759788][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.766638][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.773374][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.780221][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.787111][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.793856][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.800670][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.807455][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.814182][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.820977][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.827845][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.834827][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.841653][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.848436][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.855143][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.861962][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.868762][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.875591][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.882320][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.889133][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.895941][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.902676][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.909487][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.916355][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.923126][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.929991][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.937887][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.944643][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.951433][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.958213][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.964919][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.971747][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.978550][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.985352][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.992093][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 360.998908][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.005735][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.012451][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.019283][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.026104][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.032840][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.039953][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.046811][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.053544][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.060341][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.067165][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.073904][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.080710][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.087697][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.094421][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.101235][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.107991][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.114717][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.121518][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.128266][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.134960][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.142106][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.148885][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.155681][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.162402][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.169191][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.176010][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.182729][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.189529][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.196430][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.203149][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.209968][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.216753][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.223479][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.230248][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.237742][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.245049][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.252451][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.259299][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.266094][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.272816][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.279665][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.286404][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.293097][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.299882][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.306633][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.313353][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.320154][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.327231][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.333951][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.340777][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.347923][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.354654][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.361451][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.368473][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.375320][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.382213][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.389068][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.395874][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.402588][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.409385][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.416187][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.422910][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.429763][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.436549][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.443258][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.450374][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.457222][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.463945][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.470705][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.477458][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.484157][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.490948][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.497738][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.504465][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.511253][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.518075][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.524883][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.531669][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.538467][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.545187][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.552482][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.559382][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.566185][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.573004][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.579871][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.586668][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.593381][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.600180][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.606948][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.613687][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.620480][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.627268][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.633990][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.640782][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.647586][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.654639][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.661463][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.668251][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.674996][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.681777][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.688558][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.695377][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.702096][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.708881][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.715668][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.722383][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.729179][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.735958][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.742725][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.749513][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.756641][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.763357][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.770109][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.776880][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.783614][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.790417][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.797228][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.803989][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.810880][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.817670][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.824394][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.831176][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.837944][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.844656][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.851403][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.858535][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.865347][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.872072][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.878862][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.886011][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.892746][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.899576][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.906353][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.913067][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.919944][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.926709][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.933442][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.940321][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.947120][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.953837][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.961056][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.967978][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.974697][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.981482][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.988263][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 361.995084][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.001861][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.008599][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.015376][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.022095][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.029257][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.036026][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.042726][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.049534][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.056331][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.063402][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.070241][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.077053][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.083776][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.090572][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.097362][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.104254][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.111036][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.117795][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.124494][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.131261][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.138066][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.144787][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.151553][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.158436][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.165549][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.172380][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.179183][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.185956][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.192655][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.199470][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.206274][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.213013][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.219825][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.226703][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.233416][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.240239][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.246994][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.253694][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.260476][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.267644][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.274368][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.281154][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.288047][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.294768][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.301573][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.308428][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.315398][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.322132][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.328942][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.335702][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.342397][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.349174][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.355979][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.362705][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.369826][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.376639][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.383376][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.390493][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.398036][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.404868][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.411687][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.418588][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.425433][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.432251][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.439050][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.445964][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.452687][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.459547][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.466330][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.473340][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.480171][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.486950][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.493666][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.500474][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.507243][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.513984][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.520813][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.527628][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.534331][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.541154][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.547975][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.554699][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.561493][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.568276][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.575361][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.582099][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.589003][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.595800][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.602603][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.609390][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.616184][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.622901][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.629773][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.636572][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.643301][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.650094][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.656896][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.663623][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.670471][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.677637][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.684365][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.691145][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.697931][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.704747][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.711551][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.718323][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.725033][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.731810][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.738644][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.745443][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.752184][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.759016][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.765851][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.772573][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.779758][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.786591][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.793374][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.800190][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.806986][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.813703][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.820501][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.827315][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.834032][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.840852][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.847685][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.854401][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.861202][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.868003][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.874718][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.881820][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.888598][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.895391][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.902118][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.908891][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.915688][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.922409][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.929226][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.936021][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.942746][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.949534][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.956397][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.963141][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.969984][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.976790][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.983832][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.990661][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 362.997443][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 363.004173][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 363.010984][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 363.017780][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 363.024496][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 363.031306][ T4322] kye 0003:0458:5010.0017: unknown main item tag 0x0 [ 363.038069][ T4322] kye 0003:0458:5010.0017: invalid report_size 28531 [ 363.044787][ T4322] kye 0003:0458:5010.0017: item 0 2 1 7 parsing failed [ 363.052206][ T4322] kye 0003:0458:5010.0017: parse failed [ 363.057880][ T4322] kye: probe of 0003:0458:5010.0017 failed with error -22 [ 363.081679][ T4322] usb 8-1: USB disconnect, device number 5 [ 363.123070][ T7893] device gretap0 entered promiscuous mode [ 363.295909][ T7898] netlink: 1048 bytes leftover after parsing attributes in process `syz.3.995'. [ 363.342438][ T7899] loop5: detected capacity change from 0 to 4096 [ 363.371336][ T7901] loop4: detected capacity change from 0 to 8 [ 363.405886][ T7904] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.675363][ T7728] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 364.431973][ T7909] loop3: detected capacity change from 0 to 8 [ 364.466235][ T7913] loop7: detected capacity change from 0 to 4096 [ 364.546613][ T7728] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 364.604593][ T7728] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.656030][ T7915] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.734920][ T7728] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.802145][ T7728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.925441][ T7728] usb 7-1: config 0 descriptor?? [ 364.960118][ T7728] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 365.554081][ T26] audit: type=1800 audit(1757548145.152:39): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1003" name="file0" dev="loop7" ino=18 res=0 errno=0 [ 366.113016][ T7901] 9pnet_fd: Insufficient options for proto=fd [ 366.387431][ T7924] 9pnet_fd: Insufficient options for proto=fd [ 368.077243][ T7914] usb 7-1: USB disconnect, device number 14 [ 368.451559][ T7941] loop6: detected capacity change from 0 to 4096 [ 368.498092][ T7940] loop3: detected capacity change from 0 to 8 [ 369.794302][ T7945] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.978355][ T7951] loop4: detected capacity change from 0 to 4096 [ 371.057808][ T7960] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 371.110541][ T7948] 9pnet_fd: Insufficient options for proto=fd [ 371.685724][ T26] audit: type=1800 audit(1757548151.292:40): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1010" name="file0" dev="loop4" ino=18 res=0 errno=0 [ 371.973111][ T7963] 9pnet_fd: Insufficient options for proto=fd [ 372.803372][ T7965] loop6: detected capacity change from 0 to 8 [ 372.918075][ T7967] loop3: detected capacity change from 0 to 8 [ 374.734561][ T7984] loop4: detected capacity change from 0 to 4096 [ 374.844625][ T7990] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.898825][ T7993] netlink: 'syz.6.1020': attribute type 12 has an invalid length. [ 375.234978][ T26] audit: type=1800 audit(1757548154.832:41): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1016" name="file0" dev="loop4" ino=18 res=0 errno=0 [ 375.467322][ T8001] device pim6reg1 entered promiscuous mode [ 375.955351][ T4323] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 376.147117][ T4323] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 376.177944][ T4323] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 376.210325][ T4323] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 376.245281][ T4323] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.282755][ T4323] usb 8-1: Product: syz [ 376.297430][ T4323] usb 8-1: Manufacturer: syz [ 376.302130][ T4323] usb 8-1: SerialNumber: syz [ 376.335685][ T4323] usb 8-1: config 0 descriptor?? [ 376.344787][ T8009] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 376.366921][ T8009] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 376.583980][ T8009] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 376.591457][ T8009] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 376.645327][ T7] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 376.755399][ T14] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 376.765642][ T7914] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 376.827718][ T7] usb 7-1: config 0 has no interfaces? [ 376.837762][ T7] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 376.847016][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.855057][ T7] usb 7-1: Product: syz [ 376.859369][ T7] usb 7-1: Manufacturer: syz [ 376.864021][ T7] usb 7-1: SerialNumber: syz [ 376.871261][ T7] usb 7-1: config 0 descriptor?? [ 376.937278][ T14] usb 4-1: config 0 has no interfaces? [ 376.944969][ T14] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 376.954383][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.962790][ T14] usb 4-1: Product: syz [ 376.964896][ T7914] usb 5-1: config 0 has no interfaces? [ 376.967637][ T14] usb 4-1: Manufacturer: syz [ 376.977814][ T14] usb 4-1: SerialNumber: syz [ 376.983173][ T7914] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 376.996548][ T14] usb 4-1: config 0 descriptor?? [ 377.001107][ T7914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.003609][ T4323] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 377.011864][ T7914] usb 5-1: Product: syz [ 377.023573][ T7914] usb 5-1: Manufacturer: syz [ 377.030472][ T7914] usb 5-1: SerialNumber: syz [ 377.044709][ T7914] usb 5-1: config 0 descriptor?? [ 377.084902][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1033'. [ 377.101851][ T8026] device team_slave_0 entered promiscuous mode [ 377.108181][ T8026] device team_slave_1 entered promiscuous mode [ 377.114865][ T8026] device macvtap1 entered promiscuous mode [ 377.121190][ T8026] device team0 entered promiscuous mode [ 377.129511][ T8026] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 377.139157][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1033'. [ 377.149129][ T8033] device team0 left promiscuous mode [ 377.154943][ T8033] device team_slave_0 left promiscuous mode [ 377.161009][ T8033] device team_slave_1 left promiscuous mode [ 377.199995][ T126] usb 7-1: USB disconnect, device number 15 [ 377.223451][ T4323] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 377.236247][ T4323] usb 8-1: USB disconnect, device number 6 [ 377.247918][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 377.272007][ T8030] device team_slave_0 entered promiscuous mode [ 377.278332][ T8030] device team_slave_1 entered promiscuous mode [ 377.284672][ T8030] device macvtap6 entered promiscuous mode [ 377.290657][ T8030] device team0 entered promiscuous mode [ 377.298759][ T8030] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 377.308595][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 377.322084][ T8032] device team_slave_0 entered promiscuous mode [ 377.328371][ T8032] device team_slave_1 entered promiscuous mode [ 377.334716][ T8032] device macvtap4 entered promiscuous mode [ 377.340636][ T8032] device team0 entered promiscuous mode [ 377.347749][ T8032] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 377.355640][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 377.365624][ T8034] device team0 left promiscuous mode [ 377.371350][ T8034] device team_slave_0 left promiscuous mode [ 377.377402][ T8034] device team_slave_1 left promiscuous mode [ 377.392668][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 377.409919][ T14] usb 4-1: USB disconnect, device number 24 [ 377.427935][ T8035] device team0 left promiscuous mode [ 377.433648][ T8035] device team_slave_0 left promiscuous mode [ 377.439788][ T8035] device team_slave_1 left promiscuous mode [ 377.460860][ T7914] usb 5-1: USB disconnect, device number 27 [ 377.814633][ T26] audit: type=1804 audit(1757548157.412:42): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1046" name="bus" dev="ramfs" ino=48196 res=1 errno=0 [ 377.825548][ T8037] Invalid ELF header magic: != ELF [ 378.823293][ T7914] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 378.878581][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.884941][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.035357][ T4324] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 379.088384][ T7914] usb 7-1: config 0 has no interfaces? [ 379.183688][ T7914] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 379.213415][ T7914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.241050][ T7914] usb 7-1: Product: syz [ 379.260397][ T7914] usb 7-1: Manufacturer: syz [ 379.265883][ T7914] usb 7-1: SerialNumber: syz [ 379.272055][ T7914] usb 7-1: config 0 descriptor?? [ 379.355464][ T4324] usb 6-1: Using ep0 maxpacket: 16 [ 379.365604][ T4324] usb 6-1: config index 0 descriptor too short (expected 4495, got 71) [ 379.374064][ T4324] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 379.382462][ T4324] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.402040][ T4324] usb 6-1: config 0 has no interface number 0 [ 379.418293][ T4324] usb 6-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 379.428059][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.436498][ T4324] usb 6-1: Product: syz [ 379.440826][ T4324] usb 6-1: Manufacturer: syz [ 379.446400][ T4324] usb 6-1: SerialNumber: syz [ 379.453266][ T4324] usb 6-1: config 0 descriptor?? [ 379.485174][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1036'. [ 379.499789][ T8039] device bond_slave_0 entered promiscuous mode [ 379.506106][ T8039] device bond_slave_1 entered promiscuous mode [ 379.514673][ T8039] device macvtap2 entered promiscuous mode [ 379.515388][ T7] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 379.523637][ T8039] device bond0 entered promiscuous mode [ 379.536666][ T8039] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 379.544898][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1036'. [ 379.555069][ T8058] device bond0 left promiscuous mode [ 379.561069][ T8058] device bond_slave_0 left promiscuous mode [ 379.567153][ T8058] device bond_slave_1 left promiscuous mode [ 379.604848][ T7914] usb 7-1: USB disconnect, device number 16 [ 379.625370][ T14] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 379.683609][ T4324] usb 6-1: Found UVC 0.00 device syz (046c:14e0) [ 379.690204][ T4324] usb 6-1: No valid video chain found. [ 379.727348][ T7] usb 8-1: config 0 has no interfaces? [ 379.735386][ T7] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 379.744543][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.752785][ T7] usb 8-1: Product: syz [ 379.757105][ T7] usb 8-1: Manufacturer: syz [ 379.762007][ T7] usb 8-1: SerialNumber: syz [ 379.769355][ T7] usb 8-1: config 0 descriptor?? [ 379.817637][ T14] usb 5-1: config 0 has no interfaces? [ 379.825679][ T14] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 379.834872][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.842980][ T14] usb 5-1: Product: syz [ 379.847419][ T14] usb 5-1: Manufacturer: syz [ 379.852041][ T14] usb 5-1: SerialNumber: syz [ 379.859451][ T14] usb 5-1: config 0 descriptor?? [ 379.921922][ T7914] usb 6-1: USB disconnect, device number 27 [ 379.986543][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1040'. [ 380.001317][ T8055] device team_slave_0 entered promiscuous mode [ 380.007580][ T8055] device team_slave_1 entered promiscuous mode [ 380.013943][ T8055] device macvtap1 entered promiscuous mode [ 380.019877][ T8055] device team0 entered promiscuous mode [ 380.027154][ T8055] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 380.040653][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1040'. [ 380.051517][ T8055] device team0 left promiscuous mode [ 380.057375][ T8055] device team_slave_0 left promiscuous mode [ 380.063435][ T8055] device team_slave_1 left promiscuous mode [ 380.092555][ T8057] device team_slave_0 entered promiscuous mode [ 380.098845][ T8057] device team_slave_1 entered promiscuous mode [ 380.108953][ T126] usb 8-1: USB disconnect, device number 7 [ 380.117719][ T8057] device macvtap5 entered promiscuous mode [ 380.123761][ T8057] device team0 entered promiscuous mode [ 380.133913][ T8057] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 380.152179][ T8059] device team0 left promiscuous mode [ 380.158539][ T8059] device team_slave_0 left promiscuous mode [ 380.164603][ T8059] device team_slave_1 left promiscuous mode [ 380.278924][ T14] usb 5-1: USB disconnect, device number 28 [ 380.545479][ T4322] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 380.764828][ T4322] usb 7-1: config 0 has no interfaces? [ 380.810787][ T4322] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 380.920931][ T4322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.005418][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 381.027766][ T4322] usb 7-1: Product: syz [ 381.088610][ T4322] usb 7-1: Manufacturer: syz [ 381.146998][ T4322] usb 7-1: SerialNumber: syz [ 381.278947][ T4322] usb 7-1: config 0 descriptor?? [ 381.598514][ T8063] device team_slave_0 entered promiscuous mode [ 381.604846][ T8063] device team_slave_1 entered promiscuous mode [ 381.615744][ T8063] device macvtap3 entered promiscuous mode [ 381.623064][ T8063] device team0 entered promiscuous mode [ 381.635186][ T8063] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 381.649120][ T8077] device team0 left promiscuous mode [ 381.654975][ T8077] device team_slave_0 left promiscuous mode [ 381.661025][ T8077] device team_slave_1 left promiscuous mode [ 381.753655][ T8065] usb 7-1: USB disconnect, device number 17 [ 381.765539][ T4323] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 381.967222][ T4323] usb 6-1: Using ep0 maxpacket: 16 [ 381.984607][ T4323] usb 6-1: config index 0 descriptor too short (expected 4495, got 71) [ 382.024367][ T4323] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 382.034240][ T4323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.044622][ T4323] usb 6-1: config 0 has no interface number 0 [ 382.081263][ T4323] usb 6-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 382.099133][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.132391][ T4323] usb 6-1: Product: syz [ 382.136933][ T4323] usb 6-1: Manufacturer: syz [ 382.141570][ T4323] usb 6-1: SerialNumber: syz [ 382.162723][ T4323] usb 6-1: config 0 descriptor?? [ 383.220978][ T4323] usb 6-1: Found UVC 0.00 device syz (046c:14e0) [ 383.227431][ T4323] usb 6-1: No valid video chain found. [ 383.370520][ T8112] __nla_validate_parse: 4 callbacks suppressed [ 383.370546][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 383.481397][ T4309] usb 6-1: USB disconnect, device number 28 [ 383.545386][ T4323] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 383.752290][ T4323] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 383.786393][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.815053][ T4323] usb 4-1: config 0 descriptor?? [ 383.882154][ T8126] kvm: pic: single mode not supported [ 383.882583][ T8126] kvm: pic: non byte read [ 383.903915][ T8126] kvm: pic: non byte read [ 383.929994][ T8126] kvm: pic: non byte read [ 383.935762][ T8126] kvm: pic: single mode not supported [ 383.936076][ T8126] kvm: pic: level sensitive irq not supported [ 383.942246][ T8126] kvm: pic: non byte read [ 383.962941][ T8126] kvm: pic: non byte read [ 383.971752][ T8126] kvm: pic: non byte read [ 383.976969][ T8126] kvm: pic: non byte read [ 383.981770][ T8126] kvm: pic: non byte read [ 383.984293][ T8133] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 383.987477][ T8126] kvm: pic: non byte read [ 384.595746][ T14] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 384.668573][ T4323] usb 4-1: Cannot set autoneg [ 384.731310][ T4323] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 384.861399][ T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.971221][ T4323] usb 4-1: USB disconnect, device number 25 [ 384.994702][ T14] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 385.037895][ T14] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 385.075446][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.093947][ T14] usb 7-1: Product: syz [ 385.113985][ T14] usb 7-1: Manufacturer: syz [ 385.131770][ T14] usb 7-1: SerialNumber: syz [ 385.417224][ T8156] device pim6reg1 entered promiscuous mode [ 385.499887][ T126] usb 7-1: USB disconnect, device number 18 [ 386.384112][ T8169] kvm [8168]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 386.508497][ T8172] kvm: pic: single mode not supported [ 386.508582][ T8172] kvm: pic: non byte read [ 386.551576][ T8172] kvm: pic: single mode not supported [ 386.551596][ T8172] kvm: pic: level sensitive irq not supported [ 387.637491][ T8200] loop3: detected capacity change from 0 to 512 [ 387.686826][ T8200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 387.775140][ T8200] EXT4-fs (loop3): 1 truncate cleaned up [ 387.808436][ T8200] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 387.905099][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 387.985338][ T14] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 388.062063][ T8215] kvm [8214]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 388.075493][ T8065] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 388.177066][ T14] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.198710][ T14] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 388.223461][ T14] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 388.242811][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.255054][ T14] usb 8-1: Product: syz [ 388.259765][ T14] usb 8-1: Manufacturer: syz [ 388.264648][ T14] usb 8-1: SerialNumber: syz [ 388.267528][ T8065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.302257][ T8065] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 388.312111][ T8065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.358864][ T8065] usb 6-1: config 0 descriptor?? [ 388.514201][ T8218] kvm: pic: single mode not supported [ 388.515172][ T8218] kvm: pic: single mode not supported [ 388.520811][ T8218] kvm: pic: level sensitive irq not supported [ 388.675614][ T8226] device pim6reg1 entered promiscuous mode [ 389.101846][ T8065] microsoft 0003:045E:00F9.0018: item fetching failed at offset 3/7 [ 389.172067][ T8065] microsoft 0003:045E:00F9.0018: parse failed [ 389.179554][ T8065] microsoft: probe of 0003:045E:00F9.0018 failed with error -22 [ 389.418697][ T4756] usb 8-1: USB disconnect, device number 8 [ 389.585551][ T4332] usb 6-1: USB disconnect, device number 29 [ 389.805308][ T14] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 390.017167][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.033016][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.043492][ T14] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 390.053143][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.067993][ T14] usb 4-1: config 0 descriptor?? [ 390.471968][ T8246] loop7: detected capacity change from 0 to 128 [ 390.525618][ T4756] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 390.631301][ T14] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 390.725414][ T4756] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.736892][ T4756] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 390.776005][ T4756] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 390.789779][ T7910] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 390.817424][ T4756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.849704][ T4756] usb 5-1: Product: syz [ 390.854056][ T4756] usb 5-1: Manufacturer: syz [ 390.857969][ T14] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 390.859397][ T4756] usb 5-1: SerialNumber: syz [ 391.097533][ T14] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected [ 391.218595][ T14] hid-steam 0003:28DE:1142.0019: No HID_FEATURE_REPORT submitted - nothing to read [ 391.275417][ T14] usb 4-1: USB disconnect, device number 26 [ 391.321937][ T8252] device pim6reg1 entered promiscuous mode [ 391.377889][ T14] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected [ 391.548589][ T8253] fido_id[8253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 391.566036][ T4322] usb 5-1: USB disconnect, device number 29 [ 391.624885][ T8259] loop7: detected capacity change from 0 to 512 [ 391.636606][ T8257] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 391.671518][ T8259] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 391.764807][ T8259] EXT4-fs (loop7): 1 truncate cleaned up [ 391.773600][ T8259] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 391.830918][ T7069] EXT4-fs (loop7): unmounting filesystem. [ 391.980555][ T8265] kvm [8264]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 392.935475][ T8291] loop5: detected capacity change from 0 to 128 [ 394.441380][ T8327] loop7: detected capacity change from 0 to 164 [ 394.485433][ T8329] loop4: detected capacity change from 0 to 512 [ 394.536155][ T8329] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1131: invalid indirect mapped block 10 (level 1) [ 394.551416][ T8329] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1131: invalid indirect mapped block 8 (level 1) [ 394.562649][ T8327] isofs_fill_super: root inode is not a directory. Corrupted media? [ 394.579181][ T8329] EXT4-fs (loop4): 1 truncate cleaned up [ 394.584984][ T8329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 394.858692][ T8335] loop3: detected capacity change from 0 to 128 [ 395.056310][ T8335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 395.152593][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 395.220242][ T8335] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 395.456833][ T8342] loop7: detected capacity change from 0 to 256 [ 396.790202][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 397.702105][ T8375] loop3: detected capacity change from 0 to 512 [ 397.831632][ T8375] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.1146: invalid block [ 397.914023][ T8375] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1146: invalid indirect mapped block 10 (level 1) [ 397.967098][ T8375] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1146: invalid indirect mapped block 8 (level 1) [ 397.998723][ T8375] EXT4-fs (loop3): 1 truncate cleaned up [ 398.004567][ T8375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 398.149798][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 398.249647][ T8384] loop4: detected capacity change from 0 to 128 [ 398.291525][ T8384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 398.365019][ T8384] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 399.330427][ T8397] loop5: detected capacity change from 0 to 512 [ 399.417223][ T8397] EXT4-fs: Ignoring removed orlov option [ 399.443170][ T8397] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 399.595929][ T8397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 399.616615][ T8397] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.1158: corrupted in-inode xattr [ 399.968697][ T8397] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1158: couldn't read orphan inode 15 (err -117) [ 400.084545][ T8397] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 400.172874][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 400.302856][ T8412] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input15 [ 400.415020][ T8416] loop6: detected capacity change from 0 to 164 [ 400.442747][ T8416] isofs_fill_super: root inode is not a directory. Corrupted media? [ 400.501722][ T8419] loop3: detected capacity change from 0 to 128 [ 400.519159][ T8419] EXT4-fs: Ignoring removed orlov option [ 400.541080][ T8419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 400.860346][ T8423] loop6: detected capacity change from 0 to 256 [ 401.013567][ T8419] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 401.068801][ T5438] EXT4-fs (loop5): unmounting filesystem. [ 401.183698][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 401.512327][ T8439] loop5: detected capacity change from 0 to 512 [ 402.204308][ T8445] loop3: detected capacity change from 0 to 164 [ 404.599194][ T8445] Unable to read rock-ridge attributes [ 404.709844][ T8439] EXT4-fs: failed to create workqueue [ 405.026112][ T8439] EXT4-fs (loop5): mount failed [ 405.682928][ T8461] loop7: detected capacity change from 0 to 128 [ 406.456313][ T8461] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 406.544389][ T8461] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 407.392811][ T8480] loop4: detected capacity change from 0 to 128 [ 407.460132][ T8480] EXT4-fs: Ignoring removed orlov option [ 407.499263][ T8480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 407.541949][ T8065] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 407.551574][ T8480] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 407.552614][ T7069] EXT4-fs (loop7): unmounting filesystem. [ 407.642936][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 407.682106][ T8488] loop5: detected capacity change from 0 to 164 [ 407.706211][ T8488] isofs_fill_super: root inode is not a directory. Corrupted media? [ 407.746182][ T8065] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.756780][ T8065] usb 7-1: config 0 has no interfaces? [ 407.762357][ T8065] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 407.780774][ T8065] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.803116][ T8065] usb 7-1: config 0 descriptor?? [ 408.238800][ T8497] loop7: detected capacity change from 0 to 128 [ 408.250898][ T8497] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 408.261559][ T8497] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.567828][ T8504] xt_hashlimit: max too large, truncated to 1048576 [ 408.574770][ T8504] xt_hashlimit: invalid interval [ 409.829038][ T4390] usb 7-1: USB disconnect, device number 19 [ 409.983491][ T8511] loop6: detected capacity change from 0 to 512 [ 409.997938][ T8513] loop4: detected capacity change from 0 to 512 [ 410.021406][ T8513] EXT4-fs: Ignoring removed orlov option [ 410.032241][ T8513] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 410.088805][ T8513] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 410.206507][ T8513] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1181: corrupted in-inode xattr [ 410.219366][ T8511] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1179: invalid indirect mapped block 10 (level 1) [ 410.284961][ T8516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input16 [ 410.299333][ T8511] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1179: invalid indirect mapped block 8 (level 1) [ 410.316223][ T8513] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1181: couldn't read orphan inode 15 (err -117) [ 410.382411][ T8513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 410.391691][ T8511] EXT4-fs (loop6): 1 truncate cleaned up [ 410.417993][ T8511] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 411.341299][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 411.392668][ T6678] EXT4-fs (loop6): unmounting filesystem. [ 412.345527][ T7069] EXT4-fs (loop7): unmounting filesystem. [ 415.430424][ T8556] loop5: detected capacity change from 0 to 128 [ 415.602882][ T8556] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 415.765497][ T8556] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 415.984659][ T8560] loop3: detected capacity change from 0 to 164 [ 416.058154][ T8560] isofs_fill_super: root inode is not a directory. Corrupted media? [ 416.464951][ T8568] loop6: detected capacity change from 0 to 164 [ 417.270853][ T8568] Unable to read rock-ridge attributes [ 418.280549][ T8579] loop3: detected capacity change from 0 to 512 [ 418.303431][ T8579] EXT4-fs: Ignoring removed orlov option [ 418.310394][ T8579] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 418.330948][ T8576] loop6: detected capacity change from 0 to 8192 [ 418.426055][ T8579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 418.471274][ T8579] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1196: corrupted in-inode xattr [ 418.605879][ T8579] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1196: couldn't read orphan inode 15 (err -117) [ 418.655949][ T8579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 419.073768][ T8589] loop4: detected capacity change from 0 to 128 [ 419.574461][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 419.598552][ T8589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 419.739931][ T8589] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.127511][ T8603] kvm: pic: single mode not supported [ 421.127593][ T8603] picdev_read: 17 callbacks suppressed [ 421.127607][ T8603] kvm: pic: non byte read [ 421.149505][ T8603] kvm: pic: non byte read [ 421.163897][ T8603] kvm: pic: non byte read [ 421.481673][ T8610] xt_hashlimit: max too large, truncated to 1048576 [ 421.488492][ T8610] xt_hashlimit: invalid interval [ 422.245624][ T8603] kvm: pic: single mode not supported [ 422.245640][ T8603] kvm: pic: level sensitive irq not supported [ 422.275840][ T8603] kvm: pic: non byte read [ 422.936953][ T5438] EXT4-fs (loop5): unmounting filesystem. [ 423.088893][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 423.569287][ T8628] loop5: detected capacity change from 0 to 164 [ 423.589207][ T8628] Unable to read rock-ridge attributes [ 424.853271][ T8632] loop4: detected capacity change from 0 to 8192 [ 425.993557][ T8650] loop3: detected capacity change from 0 to 128 [ 426.076024][ T8650] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 426.086614][ T8650] ext4 filesystem being mounted at /256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 427.201357][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 427.486901][ T8666] loop3: detected capacity change from 0 to 128 [ 427.599316][ T8668] loop6: detected capacity change from 0 to 128 [ 427.611857][ T8666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 427.735673][ T8666] ext4 filesystem being mounted at /257/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 427.807275][ T8668] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 427.962786][ T8668] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.946847][ T8674] xt_hashlimit: max too large, truncated to 1048576 [ 428.953546][ T8674] xt_hashlimit: invalid interval [ 429.473509][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 430.242163][ T4323] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 430.398284][ T8686] loop7: detected capacity change from 0 to 164 [ 431.306768][ T8686] Unable to read rock-ridge attributes [ 431.345311][ T4323] usb 4-1: Using ep0 maxpacket: 32 [ 431.352389][ T4323] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 431.413589][ T4323] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 431.545326][ T4323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 431.585414][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 431.605384][ T4323] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 431.635287][ T4323] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 431.665429][ T4323] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 431.701501][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.758066][ T4323] usb 4-1: config 0 descriptor?? [ 432.004152][ T4323] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 432.051746][ T4323] usb 4-1: USB disconnect, device number 27 [ 432.086950][ T4323] usblp0: removed [ 432.555425][ T4323] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 432.693555][ T8701] loop5: detected capacity change from 0 to 8192 [ 432.760218][ T4323] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 432.788911][ T4323] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 432.829242][ T4323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 432.860873][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.882869][ T4323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 432.901042][ T4323] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 432.962432][ T4323] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 433.024152][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.068856][ T4323] usb 4-1: config 0 descriptor?? [ 433.124556][ T8678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 434.776655][ T4323] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 434.848232][ T4323] usb 4-1: USB disconnect, device number 28 [ 434.899698][ T4323] usblp0: removed [ 436.612345][ T8740] loop7: detected capacity change from 0 to 8192 [ 436.766675][ T27] INFO: task syz.1.673:6867 blocked for more than 143 seconds. [ 436.779474][ T27] Not tainted syzkaller #0 [ 436.799544][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.835099][ T27] task:syz.1.673 state:D stack:25248 pid:6867 ppid:4269 flags:0x00004004 [ 436.883458][ T27] Call Trace: [ 436.894078][ T27] [ 436.903728][ T27] __schedule+0x10ec/0x40b0 [ 436.911668][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 436.946979][ T27] ? lock_chain_count+0x20/0x20 [ 436.974156][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 437.003986][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 437.025532][ T27] ? rwsem_down_read_slowpath+0x50a/0x840 [ 437.047169][ T27] schedule+0xb9/0x180 [ 437.062493][ T27] schedule_preempt_disabled+0xf/0x20 [ 437.078160][ T27] rwsem_down_read_slowpath+0x4f4/0x840 [ 437.104265][ T27] ? down_write_killable_nested+0x90/0x90 [ 437.131921][ T27] ? read_lock_is_recursive+0x10/0x10 [ 437.152131][ T27] ? __rwlock_init+0x140/0x140 [ 437.172877][ T27] ? ksys_sync+0x150/0x150 [ 437.191105][ T27] down_read+0x94/0x2d0 [ 437.211263][ T27] ? ksys_sync+0x150/0x150 [ 437.232948][ T27] iterate_supers+0xa4/0x1d0 [ 437.251439][ T27] ksys_sync+0x91/0x150 [ 437.268229][ T27] ? sync_filesystem+0x220/0x220 [ 437.287988][ T27] ? syscall_enter_from_user_mode+0x21/0x80 [ 437.311859][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 437.334386][ T27] __ia32_sys_sync+0xa/0x10 [ 437.361037][ T27] do_syscall_64+0x4c/0xa0 [ 437.377989][ T27] ? clear_bhb_loop+0x60/0xb0 [ 437.397875][ T27] ? clear_bhb_loop+0x60/0xb0 [ 437.419552][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.441862][ T27] RIP: 0033:0x7f4e6538eba9 [ 437.452181][ T27] RSP: 002b:00007f4e66227038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 437.481236][ T27] RAX: ffffffffffffffda RBX: 00007f4e655d5fa0 RCX: 00007f4e6538eba9 [ 437.515393][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 437.534722][ T27] RBP: 00007f4e655d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 437.559561][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.581701][ T27] R13: 00007f4e655d6038 R14: 00007f4e655d5fa0 R15: 00007fff506842e8 [ 437.599969][ T27] [ 437.613186][ T27] [ 437.613186][ T27] Showing all locks held in the system: [ 437.646615][ T27] 1 lock held by rcu_tasks_kthre/12: [ 437.657637][ T6678] EXT4-fs (loop6): unmounting filesystem. [ 437.673727][ T27] #0: ffffffff8cb2b370 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 437.725735][ T27] 1 lock held by rcu_tasks_trace/13: [ 437.747090][ T27] #0: ffffffff8cb2bb90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 437.806080][ T27] 2 locks held by kworker/1:0/22: [ 437.814768][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 437.833611][ T27] #1: ffffc900001c7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 437.861062][ T27] 1 lock held by khungtaskd/27: [ 437.874926][ T27] #0: ffffffff8cb2a9e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 437.892193][ T27] 2 locks held by getty/4028: [ 437.899988][ T27] #0: ffff88802feff098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 437.914162][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 437.926409][ T27] 1 lock held by syz-executor/4265: [ 437.931751][ T27] #0: ffff888024c080e0 (&type->s_umount_key#77){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 437.942727][ T27] 3 locks held by kworker/u5:6/4280: [ 437.948451][ T27] #0: ffff888054c09138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 437.959141][ T27] #1: ffffc90003ec7d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 437.972855][ T27] #2: ffff88807b9dd0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1a9/0x6c0 [ 437.984030][ T27] 1 lock held by syz.1.673/6867: [ 437.997373][ T27] #0: ffff888024c080e0 (&type->s_umount_key#77){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 438.010555][ T27] 1 lock held by syz-executor/7069: [ 438.018236][ T27] #0: ffffffff8cb306b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 [ 438.033288][ T27] 2 locks held by kworker/1:10/7914: [ 438.042177][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 438.054119][ T27] #1: ffffc900036a7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 438.066209][ T27] 2 locks held by syz.6.1215/8645: [ 438.071483][ T27] 2 locks held by syz.3.1248/8742: [ 438.077091][ T27] #0: ffff88805779d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x58/0x200 [ 438.089123][ T27] #1: ffff8880590f2098 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x7c/0x200 [ 438.099541][ T27] 4 locks held by kvm-nx-lpage-re/8747: [ 438.105535][ T27] #0: ffffffff8cb53428 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x22/0xe0 [ 438.115839][ T27] #1: ffffffff8c9c7870 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0xd/0x30 [ 438.126230][ T27] #2: ffffffff8cb53610 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2c/0xe0 [ 438.138293][ T27] #3: ffffffff8cb306b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 [ 438.154658][ T27] [ 438.188853][ T27] ============================================= [ 438.188853][ T27] [ 438.234944][ T27] NMI backtrace for cpu 1 [ 438.239337][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 438.246555][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.256641][ T27] Call Trace: [ 438.259943][ T27] [ 438.262894][ T27] dump_stack_lvl+0x168/0x22e [ 438.267605][ T27] ? irq_work_queue+0xb8/0x140 [ 438.272407][ T27] ? show_regs_print_info+0x12/0x12 [ 438.277641][ T27] ? load_image+0x3b0/0x3b0 [ 438.282181][ T27] ? vprintk_emit+0x571/0x680 [ 438.286903][ T27] ? printk_sprint+0x460/0x460 [ 438.291708][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 438.296679][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 438.302864][ T27] ? _printk+0xcc/0x110 [ 438.307062][ T27] ? load_image+0x3b0/0x3b0 [ 438.311605][ T27] ? load_image+0x3b0/0x3b0 [ 438.316149][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 438.322330][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 438.328329][ T27] watchdog+0xeee/0xf30 [ 438.332501][ T27] ? watchdog+0x1ed/0xf30 [ 438.336844][ T27] kthread+0x29d/0x330 [ 438.340937][ T27] ? hungtask_pm_notify+0x40/0x40 [ 438.345983][ T27] ? kthread_blkcg+0xd0/0xd0 [ 438.350621][ T27] ret_from_fork+0x1f/0x30 [ 438.355069][ T27] [ 438.358683][ T27] Sending NMI from CPU 1 to CPUs 0: [ 438.363946][ C0] NMI backtrace for cpu 0 [ 438.363956][ C0] CPU: 0 PID: 7371 Comm: kworker/u4:20 Not tainted syzkaller #0 [ 438.363974][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.363985][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 438.364015][ C0] RIP: 0010:clear_page_erms+0x7/0x10 [ 438.364034][ C0] Code: 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 90 90 90 90 90 90 90 b9 00 10 00 00 31 c0 aa c3 90 90 90 90 90 90 89 c8 48 c1 e9 03 74 18 0f 1f 84 00 00 [ 438.364055][ C0] RSP: 0018:ffffc90005967678 EFLAGS: 00010246 [ 438.364069][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000f80 [ 438.364080][ C0] RDX: ffff88807be54000 RSI: 0000000000000004 RDI: ffff88807be54080 [ 438.364093][ C0] RBP: 00000000001d2a20 R08: dffffc0000000000 R09: ffffed100f7ca000 [ 438.364105][ C0] R10: fffff940003df287 R11: 1ffffd40003df286 R12: 0000000000000001 [ 438.364117][ C0] R13: 0000000000000000 R14: ffffea0001ef9400 R15: 0000000000000008 [ 438.364128][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 438.364143][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.364155][ C0] CR2: 00007ffd8a784b1c CR3: 000000000c88e000 CR4: 00000000003506f0 [ 438.364170][ C0] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005 [ 438.364181][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 438.364191][ C0] Call Trace: [ 438.364197][ C0] [ 438.364202][ C0] post_alloc_hook+0x12c/0x1a0 [ 438.364226][ C0] get_page_from_freelist+0x1a26/0x1ac0 [ 438.364254][ C0] ? stack_trace_save+0x98/0xe0 [ 438.364275][ C0] ? verify_lock_unused+0x140/0x140 [ 438.364299][ C0] ? __stack_depot_save+0x35/0x460 [ 438.364323][ C0] ? __next_zones_zonelist+0x99/0x120 [ 438.364356][ C0] __alloc_pages+0x1df/0x4e0 [ 438.364380][ C0] ? zone_statistics+0x170/0x170 [ 438.364410][ C0] alloc_slab_page+0x5d/0x160 [ 438.364431][ C0] new_slab+0x87/0x2c0 [ 438.364449][ C0] ___slab_alloc+0xbc6/0x1230 [ 438.364468][ C0] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 438.364494][ C0] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 438.364520][ C0] __kmem_cache_alloc_node+0x1a0/0x260 [ 438.364538][ C0] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 438.364563][ C0] __kmalloc_node_track_caller+0x9e/0x230 [ 438.364589][ C0] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 438.364613][ C0] __alloc_skb+0x22a/0x7e0 [ 438.364632][ C0] ? kmem_cache_free+0xf7/0x290 [ 438.364650][ C0] nsim_dev_trap_report_work+0x28f/0xaf0 [ 438.364684][ C0] ? process_one_work+0x7a1/0x1160 [ 438.364702][ C0] process_one_work+0x898/0x1160 [ 438.364727][ C0] ? worker_detach_from_pool+0x240/0x240 [ 438.364747][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 438.364772][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 438.364797][ C0] ? kthread_data+0x4b/0xc0 [ 438.364823][ C0] worker_thread+0xaa2/0x1250 [ 438.364854][ C0] kthread+0x29d/0x330 [ 438.364877][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 438.364895][ C0] ? kthread_blkcg+0xd0/0xd0 [ 438.364920][ C0] ret_from_fork+0x1f/0x30 [ 438.364949][ C0] [ 438.399960][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 438.399981][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 438.400004][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.400018][ T27] Call Trace: [ 438.400027][ T27] [ 438.400036][ T27] dump_stack_lvl+0x168/0x22e [ 438.400067][ T27] ? memcpy+0x3c/0x60 [ 438.400103][ T27] ? show_regs_print_info+0x12/0x12 [ 438.400130][ T27] ? load_image+0x3b0/0x3b0 [ 438.400176][ T27] panic+0x2c9/0x710 [ 438.400206][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 438.400238][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 438.400274][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 438.400313][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 438.400343][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 438.400373][ T27] watchdog+0xf2d/0xf30 [ 438.400404][ T27] ? watchdog+0x1ed/0xf30 [ 438.400435][ T27] kthread+0x29d/0x330 [ 438.400469][ T27] ? hungtask_pm_notify+0x40/0x40 [ 438.400494][ T27] ? kthread_blkcg+0xd0/0xd0 [ 438.400530][ T27] ret_from_fork+0x1f/0x30 [ 438.400576][ T27] [ 438.419336][ T27] Kernel Offset: disabled [ 438.784485][ T27] Rebooting in 86400 seconds..