last executing test programs: 3m54.964154312s ago: executing program 4 (id=908): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) 3m54.595040654s ago: executing program 4 (id=910): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) mknod(&(0x7f0000000000)='./file3\x00', 0x8, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x15) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x304982f, 0x0, 0x3, 0x0, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 3m51.153431336s ago: executing program 4 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@metadata_ratio}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getpeername$unix(r1, 0x0, &(0x7f0000000400)) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) 3m49.397654612s ago: executing program 4 (id=921): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1553, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, 0x0) socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) socket$kcm(0x21, 0x2, 0x2) 3m46.405305419s ago: executing program 4 (id=925): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 3m45.204653788s ago: executing program 4 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) 3m29.954933931s ago: executing program 32 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) 1m43.894400551s ago: executing program 0 (id=1229): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) write$tun(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="413f03"], 0x329) 1m43.551197452s ago: executing program 0 (id=1232): r0 = epoll_create1(0x80000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x3) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x5, 0x0, 0x2000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20002014}) 1m43.170791504s ago: executing program 0 (id=1235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x1, 0x0, @pic={0x86, 0x82, 0x1, 0x1, 0x45, 0x29, 0xbf, 0xe2, 0x2, 0x6, 0x7, 0x84, 0xfc, 0xfd, 0xff, 0xec}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8, 0xe, 0x4, 0x1, 0x2, 0x80000002, 0xf1, 0x3, 0x7fffffffffffb, 0x1, 0xd254, 0x40001, 0x2c22, 0xc12, 0x1, 0x5], 0xffffffff, 0x3d4316}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m42.767595848s ago: executing program 0 (id=1239): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') symlink(&(0x7f0000000280)='./file0/file1\x00', &(0x7f00000002c0)='./file0/file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m42.477890286s ago: executing program 0 (id=1240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0xaaaaaaaaaaaabb7, 0x0, [{0x7, 0x40000006, 0x4, 0x1, 0x800}]}) 1m41.947231924s ago: executing program 0 (id=1242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x1, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x25}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1m41.515800758s ago: executing program 33 (id=1242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x1, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x25}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1m24.718925111s ago: executing program 1 (id=1352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0xdb8b5d1f5ddd795a}) 1m23.903132598s ago: executing program 1 (id=1354): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 1m23.680261904s ago: executing program 1 (id=1358): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x109a02, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 1m23.419862263s ago: executing program 1 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m23.175119041s ago: executing program 1 (id=1362): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x151000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x3}) 1m18.039137447s ago: executing program 1 (id=1386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$key(0xf, 0x3, 0x2) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1m17.577486342s ago: executing program 34 (id=1386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$key(0xf, 0x3, 0x2) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 9.043179168s ago: executing program 7 (id=1864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000000c0)="5cdd30", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 8.262982753s ago: executing program 3 (id=1866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000040)="b9ff033168440372b89e14f00800a25e414debf30a4d5613fdbe33d2889a062eb05f", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.039111301s ago: executing program 3 (id=1867): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x1, 0x0, 0x0, 0x4, 0x5}]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x28) 7.934317204s ago: executing program 3 (id=1868): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr, @restrict={0x1, 0x0, 0x0, 0x4, 0x5}]}, {0x0, [0x2e]}}, 0x0, 0x4b}, 0x28) 7.806813788s ago: executing program 3 (id=1869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.670294043s ago: executing program 3 (id=1870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(0x3) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) 6.983392605s ago: executing program 5 (id=1874): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 6.084114754s ago: executing program 5 (id=1875): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd635f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3b) 5.442776814s ago: executing program 7 (id=1878): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/14, @ANYRES32, @ANYRES32], 0x50) 3.642749562s ago: executing program 6 (id=1889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)='%+9llu \x00'}, 0x20) 3.294229034s ago: executing program 6 (id=1890): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0xfffffffffffffec1, 0x0, 0x0, 0x0, 0x0, 0x20000090}, 0x0) 2.17771581s ago: executing program 2 (id=1893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 2.079118603s ago: executing program 2 (id=1894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x4f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.977290196s ago: executing program 2 (id=1895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.693266896s ago: executing program 2 (id=1896): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x800, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 918.903421ms ago: executing program 7 (id=1897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 827.458244ms ago: executing program 5 (id=1898): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x80) 806.773614ms ago: executing program 6 (id=1899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ca8}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 706.690517ms ago: executing program 7 (id=1900): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0xffffffffffffffdb, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 705.419397ms ago: executing program 2 (id=1901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x200}) 531.249373ms ago: executing program 5 (id=1902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 530.997063ms ago: executing program 6 (id=1903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 514.682814ms ago: executing program 2 (id=1904): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b99}, 0x4c, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffe, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x18, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x80, 0xc, 0xf9a2, 0x80000001, 0xfe, 0x0, 0x2, 0x2, 0x2, 0x100, 0x1, 0x7ff, 0x4, 0x4007f, 0x86, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000072, 0x7, 0xd50, 0x7, 0x5, 0x2, 0x1e20, 0x4, 0xa7, 0x1000, 0x0, 0x280b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x6, 0x1003, 0x8, 0xffffff7f, 0x400, 0x6, 0x400, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x80203, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x5, 0x9, 0x95, 0x7fffffff, 0x3, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x8000, 0x9, 0x3, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x7, 0xd3, 0x2, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x401, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x100055, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x10009d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0xbd, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x8bdc, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800000, 0x8004, 0x5, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x800009, 0x1ff, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x2000001, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0xdddd0000, 0x304}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 418.348167ms ago: executing program 7 (id=1905): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 368.663909ms ago: executing program 6 (id=1906): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) 300.653021ms ago: executing program 5 (id=1907): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) write$cgroup_netprio_ifpriomap(r1, 0x0, 0xfffffcb4) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[], 0xee8a) 154.986235ms ago: executing program 7 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 141.890496ms ago: executing program 6 (id=1909): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 79.195328ms ago: executing program 5 (id=1910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) 0s ago: executing program 3 (id=1911): openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1102, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230040) close(r0) kernel console output (not intermixed with test programs): ectors = 1 limit=64 [ 621.502462][ T5728] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 621.502496][ T5728] kworker/u4:8: attempt to access beyond end of device [ 621.502496][ T5728] loop3: rw=1, sector=175, nr_sectors = 1 limit=64 [ 621.502523][ T5728] Buffer I/O error on dev loop3, logical block 175, lost async page write [ 622.304308][ T9546] loop2: detected capacity change from 0 to 1024 [ 622.493272][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 622.522997][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 622.550915][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 622.581820][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 622.607716][ T9551] siw: device registration error -23 [ 622.727764][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 622.745033][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 622.824941][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 622.863076][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 622.895497][ T9557] hfsplus: request for non-existent node 33423360 in B*Tree [ 622.902867][ T9557] hfsplus: request for non-existent node 33423360 in B*Tree [ 622.981010][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.039297][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.050728][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.058472][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.068152][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.075850][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.096910][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.193183][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.354000][ T9557] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.520024][ T9557] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.599939][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.668502][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.743591][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 623.844919][ T9546] hfsplus: request for non-existent node 33423360 in B*Tree [ 624.287163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.879304][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.885739][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.070021][ T9576] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 627.529722][ T9588] loop3: detected capacity change from 0 to 32768 [ 627.539756][ T9588] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 627.595886][ T9591] tmpfs: Unknown parameter 'usrquota' [ 627.861948][ T9586] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 628.339124][ T9598] tmpfs: Unknown parameter 'usrquota' [ 630.215913][ T9613] loop2: detected capacity change from 0 to 1024 [ 630.251038][ T9616] loop3: detected capacity change from 0 to 128 [ 630.298521][ T9616] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 630.368343][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 630.397091][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 630.443806][ T9620] hfsplus: request for non-existent node 33423360 in B*Tree [ 630.463278][ T9616] hpfs: filesystem error: improperly stopped [ 630.672363][ T9616] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 630.672433][ T9620] hfsplus: request for non-existent node 33423360 in B*Tree [ 630.688393][ T9616] [ 630.690772][ T9616] hpfs: You really don't want any checks? You are crazy... [ 630.896178][ T9616] hpfs: Code page index out of array [ 631.168010][ T9630] lo speed is unknown, defaulting to 1000 [ 631.541358][ T9616] hpfs: code page support is disabled [ 631.704960][ T9616] hpfs: hpfs_map_4sectors(): unaligned read [ 631.795581][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 631.802947][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 631.815226][ T9616] hpfs: hpfs_map_4sectors(): unaligned read [ 631.821180][ T9616] hpfs: filesystem error: unable to find root dir [ 631.848993][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 631.911098][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 632.029446][ T9620] hfsplus: request for non-existent node 33423360 in B*Tree [ 632.161437][ T9637] loop0: detected capacity change from 0 to 1024 [ 632.218079][ T9620] hfsplus: request for non-existent node 33423360 in B*Tree [ 632.550458][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 632.916442][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 632.984891][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 632.984913][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.023522][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.069347][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.085598][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.145814][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.185078][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.193733][ T9645] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.214963][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.253261][ T9645] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.300724][ T9620] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.325548][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.344900][ T9620] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.386388][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 633.447985][ T9653] siw: device registration error -23 [ 633.574279][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 634.303927][ T9613] hfsplus: request for non-existent node 33423360 in B*Tree [ 634.350914][ T9645] hfsplus: request for non-existent node 33423360 in B*Tree [ 634.387876][ T9645] hfsplus: request for non-existent node 33423360 in B*Tree [ 634.757393][ T9657] hfsplus: request for non-existent node 33423360 in B*Tree [ 634.800544][ T9657] hfsplus: request for non-existent node 33423360 in B*Tree [ 634.910494][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 634.928977][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 634.972132][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.013546][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.073364][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.134438][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.180732][ T9645] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.212103][ T9645] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.284119][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.545112][ T9637] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.590816][ T9657] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.590838][ T9657] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.601534][ T9657] hfsplus: request for non-existent node 33423360 in B*Tree [ 635.601557][ T9657] hfsplus: request for non-existent node 33423360 in B*Tree [ 637.922283][ T9709] loop2: detected capacity change from 0 to 164 [ 638.209055][ T9716] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 638.872195][ T9719] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 639.204174][ T9728] loop3: detected capacity change from 0 to 1024 [ 639.382630][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.382652][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.415153][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.464966][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.536838][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.564497][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.601499][ T9736] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.647340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.691836][ T9736] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.734627][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.750498][ T9742] loop5: detected capacity change from 0 to 164 [ 639.758345][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.787359][ T9736] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.805882][ T9736] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.936821][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 639.987621][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 640.063340][ T9742] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 640.145750][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 640.163549][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 640.233029][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 640.291420][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 640.561781][ T9745] lo speed is unknown, defaulting to 1000 [ 640.675120][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 640.675140][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 640.684975][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 640.684995][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 644.243316][ T9774] lo speed is unknown, defaulting to 1000 [ 644.565411][ T9784] tmpfs: Unknown parameter 'usrquota' [ 646.833342][ T9806] loop0: detected capacity change from 0 to 128 [ 646.898629][ T9806] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 647.002734][ T9806] hpfs: filesystem error: improperly stopped [ 647.054238][ T9806] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 647.175266][ T9806] hpfs: You really don't want any checks? You are crazy... [ 647.260856][ T9806] hpfs: Code page index out of array [ 647.418341][ T9806] hpfs: code page support is disabled [ 647.725737][ T9806] hpfs: hpfs_map_4sectors(): unaligned read [ 647.762340][ T9806] hpfs: hpfs_map_4sectors(): unaligned read [ 647.788114][ T9806] hpfs: filesystem error: unable to find root dir [ 647.920396][ T9809] loop2: detected capacity change from 0 to 4096 [ 648.092494][ T9809] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 648.929528][ T9809] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 649.087718][ T9809] ntfs3: loop2: Failed to load $Extend. [ 649.165977][ T9809] ntfs3: loop2: no free space to extend mft [ 649.236953][ T9840] ntfs3: loop2: no free space to extend mft [ 649.254684][ T9839] tmpfs: Unknown parameter 'usrquota' [ 649.263828][ T9837] loop0: detected capacity change from 0 to 256 [ 649.293049][ T9809] ntfs3: loop2: no free space to extend mft [ 649.325846][ T9837] exfat: Deprecated parameter 'utf8' [ 649.574385][ T9833] loop3: detected capacity change from 0 to 4096 [ 649.790877][ T9837] exFAT-fs (loop0): bogus number of FAT structure [ 649.910359][ T9837] exFAT-fs (loop0): failed to read boot sector [ 650.067796][ T9837] exFAT-fs (loop0): failed to recognize exfat type [ 651.634147][ T27] audit: type=1800 audit(1782015904.081:1288): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1120" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 651.754103][ T27] audit: type=1800 audit(1782015904.111:1289): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1120" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 651.790217][ T9857] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 652.215968][ T9870] device syzkaller1 entered promiscuous mode [ 653.045866][ T9905] input: syz1 as /devices/virtual/input/input7 [ 653.565191][ T9927] loop4: detected capacity change from 0 to 8 [ 653.598132][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 653.614859][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.624065][ C1] buffer_io_error: 6 callbacks suppressed [ 653.624077][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.684907][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.694112][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.706221][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.715469][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.759038][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.768322][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.784957][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.794288][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 653.876446][ T9907] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 653.902475][ T9907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 653.914230][ T9907] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 653.922916][ T9907] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 653.936614][ T9907] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 653.962245][ T9907] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 653.975853][ T9907] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 653.982012][ T9907] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 654.006598][ T9907] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 654.524773][ T4537] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 654.564940][ T4451] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 654.734902][ T4537] usb 2-1: Using ep0 maxpacket: 8 [ 654.747039][ T4451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 654.762680][ T4537] usb 2-1: config 0 interface 0 altsetting 95 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.768784][ T4451] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.804886][ T4537] usb 2-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.813946][ T4451] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 654.845047][ T4537] usb 2-1: config 0 interface 0 has no altsetting 0 [ 654.857006][ T4451] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 654.862256][ T4537] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 654.888571][ T4451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.904411][ T4537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.924847][ T4451] usb 6-1: Product: syz [ 654.930134][ T4537] usb 2-1: config 0 descriptor?? [ 654.971900][ T4451] usb 6-1: Manufacturer: syz [ 655.002312][ T4451] usb 6-1: SerialNumber: syz [ 655.164979][ T9001] Bluetooth: hci1: command 0x0c1a tx timeout [ 655.214824][ T4621] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 655.255886][ T4451] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 655.277777][ T4451] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 655.390114][ T4537] uclogic 0003:28BD:0078.0001: interface is invalid, ignoring [ 655.445092][ T4621] usb 1-1: Using ep0 maxpacket: 16 [ 655.459456][ T4621] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.470543][ T4451] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 655.488988][ T4451] usb 6-1: USB disconnect, device number 2 [ 655.522250][ T4621] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.543129][ T9586] udevd[9586]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.570467][ T4621] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.588424][ T4621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.611398][ T4621] usb 1-1: Product: syz [ 655.619117][ T4621] usb 1-1: Manufacturer: syz [ 655.629271][ T4621] usb 1-1: SerialNumber: syz [ 655.637834][ T4537] usb 2-1: USB disconnect, device number 7 [ 655.667561][ T4874] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 655.706568][ T9974] kvm [9973]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x7 [ 655.848211][ T4621] usb 1-1: 0:2 : does not exist [ 655.873061][ T4621] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 655.875566][ T4874] usb 3-1: Using ep0 maxpacket: 32 [ 655.893866][ T4874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.920170][ T4874] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 655.935233][ T4621] usb 1-1: USB disconnect, device number 3 [ 655.951351][ T4874] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 655.964879][ T9001] Bluetooth: hci4: command 0x0c1a tx timeout [ 655.965181][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 655.972286][ T9001] Bluetooth: hci0: command 0x0c1a tx timeout [ 656.016579][ T4874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.028872][ T4874] usb 3-1: config 0 descriptor?? [ 656.044835][ T9984] Bluetooth: hci3: command 0x0c1a tx timeout [ 656.226865][ T9968] udevd[9968]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.519605][ T4621] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 656.734831][ T4621] usb 2-1: Using ep0 maxpacket: 8 [ 656.742949][ T4621] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.788721][ T4621] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 656.827726][ T4621] usb 2-1: config 0 interface 0 has no altsetting 0 [ 656.846064][ T4621] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 656.860932][ T4621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.886800][ T4621] usb 2-1: config 0 descriptor?? [ 657.308959][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x3 [ 657.319371][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.334951][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.348818][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.364970][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.394997][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.419829][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.445471][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.464086][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.481286][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.518367][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.544855][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.564379][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.588239][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.611113][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.628616][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.647187][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.677537][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.707849][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.738278][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.759295][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.784069][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.804284][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.842114][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.859562][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.879852][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.894484][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.909534][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.923554][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.953319][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.970905][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 657.982282][ T4621] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 658.020952][ T4621] apple 0003:05AC:027C.0002: hidraw0: USB HID v0.03 Device [HID 05ac:027c] on usb-dummy_hcd.1-1/input0 [ 658.044784][ T9984] Bluetooth: hci4: command 0x0406 tx timeout [ 658.067186][ T4621] usb 2-1: USB disconnect, device number 8 [ 658.125479][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 658.796127][T10051] fido_id[10051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 658.835459][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 658.855039][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1180'. [ 658.930037][T10067] device syzkaller0 entered promiscuous mode [ 659.253466][T10077] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 660.268912][T10123] capability: warning: `syz.2.1195' uses deprecated v2 capabilities in a way that may be insecure [ 660.458321][T10129] binder: 10127:10129 ioctl c0306201 200000000080 returned -14 [ 660.504243][T10129] binder: 10127:10129 ioctl c0306201 2000000003c0 returned -14 [ 660.744818][ T4621] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 660.920907][T10140] device syzkaller1 entered promiscuous mode [ 660.941144][ T4621] usb 1-1: Using ep0 maxpacket: 16 [ 661.078478][ T4537] usb 3-1: USB disconnect, device number 3 [ 661.414928][ T4874] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 661.618734][ T4874] usb 6-1: Using ep0 maxpacket: 32 [ 661.625160][ T4576] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 661.637158][ T4874] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 661.671849][ T4874] usb 6-1: config 0 has no interface number 0 [ 661.684944][ T4874] usb 6-1: config 0 interface 184 has no altsetting 0 [ 661.730930][ T4874] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 661.750584][ T4874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.768340][ T4874] usb 6-1: Product: syz [ 661.772686][ T4874] usb 6-1: Manufacturer: syz [ 661.779163][ T4874] usb 6-1: SerialNumber: syz [ 661.802424][ T4874] usb 6-1: config 0 descriptor?? [ 661.818938][ T4874] smsc75xx v1.0.0 [ 661.834961][ T4576] usb 2-1: Using ep0 maxpacket: 16 [ 661.845876][ T4576] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 661.867552][ T4576] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 661.887588][ T4576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.907848][ T4576] usb 2-1: Product: syz [ 661.912106][ T4576] usb 2-1: Manufacturer: syz [ 661.928124][ T4576] usb 2-1: SerialNumber: syz [ 661.955264][ T4576] r8152-cfgselector 2-1: config 0 descriptor?? [ 662.278551][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 662.299198][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1211'. [ 662.311861][T10171] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 662.343662][T10171] kvm: pic: non byte read [ 662.348900][T10171] kvm: pic: non byte read [ 662.353860][T10171] kvm: pic: non byte read [ 662.363711][T10171] kvm: pic: non byte read [ 662.369106][T10171] kvm: pic: single mode not supported [ 662.369346][T10171] kvm: pic: non byte read [ 662.381021][T10171] kvm: pic: non byte read [ 662.391714][ T4576] r8152-cfgselector 2-1: Unknown version 0x0000 [ 662.409664][ T4576] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 662.435769][ T4874] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 662.457696][ T4874] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 662.823850][T10181] process 'syz.3.1214' launched './file0' with NULL argv: empty string added [ 663.365060][ T9425] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 663.506642][ T4621] usb 1-1: unable to get BOS descriptor or descriptor too short [ 663.522366][ T4621] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 663.531130][ T4621] usb 1-1: can't read configurations, error -71 [ 663.582958][ T9425] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.603654][ T9425] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 663.619321][ T9425] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 663.645983][ T9425] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 663.680807][ T9425] usb 4-1: New USB device found, idVendor=0582, idProduct=622b, bcdDevice= 0.0f [ 663.694444][ T9425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.709285][ T9425] usb 4-1: Product: syz [ 663.713678][ T9425] usb 4-1: Manufacturer: syz [ 663.719763][ T9425] usb 4-1: SerialNumber: syz [ 663.947814][ T9425] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 664.012951][ T9425] usb 4-1: USB disconnect, device number 2 [ 664.194014][T10210] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 664.276605][ T9968] udevd[9968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.661429][T10224] overlayfs: upper fs does not support file handles, falling back to index=off. [ 664.695956][ T4874] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 664.733001][ T4874] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 664.753877][ T4874] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 664.785608][ T4874] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 664.813683][ T4874] usb 6-1: USB disconnect, device number 3 [ 665.089931][T10237] device syzkaller1 entered promiscuous mode [ 665.294937][ T4621] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 665.541847][ T4621] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 665.560172][ T4621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.579592][ T4621] usb 4-1: Product: syz [ 665.583985][ T4621] usb 4-1: Manufacturer: syz [ 665.591340][ T4621] usb 4-1: SerialNumber: syz [ 665.620331][ T4621] r8152-cfgselector 4-1: config 0 descriptor?? [ 665.735019][ T4576] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 665.837179][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.888140][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.937810][ T4576] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 665.964275][ T4576] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 7 [ 665.993873][ T4576] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 666.019639][ T4576] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 666.040906][ T4576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.052980][ T4576] usb 6-1: Product: syz [ 666.064329][ T4576] usb 6-1: Manufacturer: syz [ 666.069388][ T4576] usb 6-1: SerialNumber: syz [ 666.105638][ T4576] usb 6-1: config 0 descriptor?? [ 666.146185][ T4621] r8152-cfgselector 4-1: Unknown version 0x0000 [ 666.157522][ T4621] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 666.168176][ T4576] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress ff [ 666.387761][ T4576] usb 6-1: USB disconnect, device number 4 [ 666.624653][ T4329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.662458][ T9586] udevd[9586]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.746065][ T4621] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 666.879287][ T4329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.971308][ T4621] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 666.992875][ T4621] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.056573][ T4621] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 667.094949][ T4621] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 667.104095][ T4329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.123842][ T4621] usb 3-1: Product: syz [ 667.132088][ T4621] usb 3-1: Manufacturer: syz [ 667.167703][ T4621] hub 3-1:4.0: USB hub found [ 667.357473][ T4621] hub 3-1:4.0: 2 ports detected [ 667.506669][ T4533] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 667.699670][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 667.709947][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 667.718928][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 667.724890][ T4533] usb 6-1: Using ep0 maxpacket: 32 [ 667.732063][ T4533] usb 6-1: no configurations [ 667.737464][ T4533] usb 6-1: can't read configurations, error -22 [ 667.744059][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 667.759567][ T4621] hub 3-1:4.0: set hub depth failed [ 667.770679][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 667.778258][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.799513][ T4621] usb 3-1: USB disconnect, device number 4 [ 667.895889][ T4533] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 668.108524][T10315] Invalid argument reading file caps for ./file0 [ 668.134903][ T4533] usb 6-1: Using ep0 maxpacket: 32 [ 668.148282][ T4533] usb 6-1: no configurations [ 668.160683][ T4533] usb 6-1: can't read configurations, error -22 [ 668.174894][T10304] lo speed is unknown, defaulting to 1000 [ 668.189373][ T4533] usb usb6-port1: attempt power cycle [ 668.645969][ T4533] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 668.755730][ T4533] usb 6-1: Using ep0 maxpacket: 32 [ 668.761804][ T4533] usb 6-1: no configurations [ 668.793960][ T4533] usb 6-1: can't read configurations, error -22 [ 668.812394][T10343] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 668.955026][ T4533] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 669.025725][ T4533] usb 6-1: Using ep0 maxpacket: 32 [ 669.031757][ T4533] usb 6-1: no configurations [ 669.041910][T10304] chnl_net:caif_netlink_parms(): no params data found [ 669.054779][ T4533] usb 6-1: can't read configurations, error -22 [ 669.085470][ T4533] usb usb6-port1: unable to enumerate USB device [ 669.568757][T10304] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.585223][T10304] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.593660][T10304] device bridge_slave_0 entered promiscuous mode [ 669.639870][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.676982][T10304] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.690932][T10304] device bridge_slave_1 entered promiscuous mode [ 669.804881][ T9984] Bluetooth: hci1: command 0x0409 tx timeout [ 669.870887][T10304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.946519][ T4329] device hsr_slave_0 left promiscuous mode [ 669.953628][ T4329] device hsr_slave_1 left promiscuous mode [ 669.978791][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.004014][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.023860][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.034136][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.041711][T10374] binder: 10373:10374 ioctl c0306201 200000000080 returned -14 [ 670.051464][ T4329] device bridge_slave_1 left promiscuous mode [ 670.065052][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.082338][T10374] binder: 10373:10374 ioctl c0306201 2000000003c0 returned -14 [ 670.086673][ T4329] device bridge_slave_0 left promiscuous mode [ 670.138234][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.246684][ T4329] device veth1_macvtap left promiscuous mode [ 670.254936][ T4533] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 670.272991][ T4329] device veth0_macvtap left promiscuous mode [ 670.282645][ T4329] device veth1_vlan left promiscuous mode [ 670.297139][ T4329] device veth0_vlan left promiscuous mode [ 670.451086][ T4533] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.498461][ T4533] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 670.536466][ T4533] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 670.564799][ T4533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.574869][ T4533] usb 2-1: Product: syz [ 670.583079][ T4533] usb 2-1: Manufacturer: syz [ 670.604850][ T4533] usb 2-1: SerialNumber: syz [ 670.645528][ T4533] usb 2-1: config 0 descriptor?? [ 670.711009][T10395] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 670.909128][ T4533] usb 2-1: USB disconnect, device number 10 [ 671.878267][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 671.894990][ T9984] Bluetooth: hci1: command 0x041b tx timeout [ 671.944156][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 671.987604][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.033401][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.347227][ T4329] bond0 (unregistering): Released all slaves [ 672.450496][T10304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.504334][T10304] team0: Port device team_slave_0 added [ 672.560945][T10304] team0: Port device team_slave_1 added [ 672.705464][T10304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.752285][T10304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.852133][T10304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.921095][T10304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.948680][T10304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.083974][T10304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.149417][T10304] device hsr_slave_0 entered promiscuous mode [ 673.157560][T10439] fuse: Bad value for 'fd' [ 673.163046][T10304] device hsr_slave_1 entered promiscuous mode [ 673.179488][T10304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.193724][T10304] Cannot create hsr debugfs directory [ 673.559787][T10304] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 673.580354][T10304] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 673.599985][T10304] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 673.618303][T10304] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 673.719791][T10430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 673.730605][T10430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 673.750622][T10430] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 673.762889][T10304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.772409][T10430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 673.784839][T10430] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 673.801583][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 673.806483][T10430] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 673.821865][T10430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 673.828556][T10430] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 673.835876][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 673.845862][T10430] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 673.857136][T10304] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.879798][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 673.900488][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 673.927252][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.934452][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.016027][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 674.041800][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.075409][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.097293][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.104467][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.151540][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 674.173706][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 674.199840][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 674.241851][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 674.265507][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 674.281021][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 674.303725][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 674.352550][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 674.395636][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 674.429745][T10304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.465856][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 674.492118][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 674.502437][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 675.245062][ T9984] Bluetooth: hci0: command 0x0c1a tx timeout [ 675.368915][ T6864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 675.394017][ T6864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 675.528662][T10304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.805517][ T9984] Bluetooth: hci3: command 0x0c1a tx timeout [ 675.805534][ T4292] Bluetooth: hci4: command 0x0c1a tx timeout [ 675.811588][ T9984] Bluetooth: hci2: command 0x0c1a tx timeout [ 675.824856][T10518] input: syz0 as /devices/virtual/input/input8 [ 675.885406][ T9984] Bluetooth: hci1: command 0x0419 tx timeout [ 676.575741][ T4533] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 676.699755][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 676.713370][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 676.761181][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 676.781479][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 676.794875][ T4533] usb 4-1: Using ep0 maxpacket: 32 [ 676.802316][ T4533] usb 4-1: config 0 has no interfaces? [ 676.802487][T10304] device veth0_vlan entered promiscuous mode [ 676.818561][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 676.827290][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 676.835509][ T4533] usb 4-1: config 0 has no interfaces? [ 676.849283][T10304] device veth1_vlan entered promiscuous mode [ 676.853071][ T4533] usb 4-1: config 0 has no interfaces? [ 676.864585][ T4533] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 676.897558][ T4533] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 676.918230][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 676.919135][ T4533] usb 4-1: Product: syz [ 676.937295][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 676.948531][ T4533] usb 4-1: Manufacturer: syz [ 676.956919][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 676.972011][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 676.988664][T10304] device veth0_macvtap entered promiscuous mode [ 676.999853][ T4533] usb 4-1: config 0 descriptor?? [ 677.011296][T10304] device veth1_macvtap entered promiscuous mode [ 677.046387][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.068476][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.089610][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.112359][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.133384][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.162039][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.172311][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.183150][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.202956][T10304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.214005][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 677.228974][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 677.250624][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 677.277589][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 677.299705][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.315899][T10548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 677.325582][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.337199][T10548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 677.344781][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.364925][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.367222][T10548] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 677.386791][T10548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 677.391247][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.403452][T10548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.403541][T10548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 677.436389][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.447683][T10304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.461751][T10304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.473273][T10548] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 677.480516][T10304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.484360][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 677.508725][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 677.518048][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.541870][T10304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.546605][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.572449][T10304] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.581773][T10304] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.598258][T10304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.620940][ T4621] usb 4-1: USB disconnect, device number 4 [ 677.806446][ T5742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.824841][ T4576] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 677.827456][ T5742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.866776][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 677.925255][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.933166][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.956715][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 677.964630][T10572] kvm: pic: non byte write [ 678.038586][ T4576] usb 6-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 678.070500][ T4576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.094786][ T4576] usb 6-1: Product: syz [ 678.099046][ T4576] usb 6-1: Manufacturer: syz [ 678.103680][ T4576] usb 6-1: SerialNumber: syz [ 678.358126][T10585] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 678.379714][T10585] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 678.615038][ T9984] Bluetooth: hci0: command 0x0c1a tx timeout [ 678.971558][ T4576] usb 6-1: MIDIStreaming interface descriptor not found [ 679.177003][ T4576] usb 6-1: USB disconnect, device number 9 [ 679.331776][ T9984] Bluetooth: hci2: command 0x0c1a tx timeout [ 679.405154][ T9984] Bluetooth: hci1: command 0x0406 tx timeout [ 679.411258][ T9984] Bluetooth: hci3: command 0x0c1a tx timeout [ 679.417398][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 680.375016][ T4621] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 680.585404][ T4621] usb 7-1: unable to get BOS descriptor or descriptor too short [ 680.614466][ T4621] usb 7-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 680.651446][ T4621] usb 7-1: string descriptor 0 read error: -22 [ 680.677459][ T4621] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 680.703211][ T4621] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.161342][T10670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1331'. [ 681.182441][T10674] input: syz0 as /devices/virtual/input/input9 [ 681.435461][T10670] device veth0_to_bond entered promiscuous mode [ 681.485043][ T4292] Bluetooth: hci1: command 0x0c1a tx timeout [ 681.537018][ T4621] usb 7-1: current rate 48061 is different from the runtime rate 48000 [ 681.554795][ T22] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 681.747390][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.769806][ T22] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 681.781815][ T4621] usb 7-1: USB disconnect, device number 2 [ 681.815000][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.857525][ T22] usb 6-1: config 0 descriptor?? [ 682.270536][ T22] hid (null): global environment stack underflow [ 682.280301][ T22] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 682.473477][ T4621] usb 6-1: USB disconnect, device number 10 [ 682.892657][T10726] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 683.384960][ T4621] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 683.565878][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 683.575254][ T4621] usb 6-1: Using ep0 maxpacket: 16 [ 683.589476][ T4621] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 683.646612][ T4621] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 683.684620][ T4621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.713615][ T4621] usb 6-1: Product: syz [ 683.723788][ T4621] usb 6-1: Manufacturer: syz [ 683.754955][ T4621] usb 6-1: SerialNumber: syz [ 683.772140][ T4621] r8152-cfgselector 6-1: config 0 descriptor?? [ 684.435387][T10742] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 684.442285][T10742] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 684.455088][T10742] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 684.462833][T10742] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 684.474900][T10742] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 685.007820][T10780] kvm: pic: non byte write [ 685.334949][ T4451] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 685.537855][ T4451] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 685.554836][ T4451] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 685.584836][ T4451] usb 7-1: config 0 interface 0 has no altsetting 0 [ 685.592177][ T4451] usb 7-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 685.614777][ T4451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.635954][ T4451] usb 7-1: config 0 descriptor?? [ 685.726816][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.728611][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 685.733150][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.068281][ T4451] wacom 0003:056A:0314.0004: unknown main item tag 0x2 [ 686.087413][ T4451] wacom 0003:056A:0314.0004: unknown main item tag 0x0 [ 686.129435][ T4451] wacom 0003:056A:0314.0004: unknown main item tag 0x0 [ 686.149024][ T4451] wacom 0003:056A:0314.0004: unknown main item tag 0x0 [ 686.166874][ T4451] wacom 0003:056A:0314.0004: unknown main item tag 0x0 [ 686.183732][ T4451] wacom 0003:056A:0314.0004: unknown main item tag 0x0 [ 686.203725][ T4451] wacom 0003:056A:0314.0004: unknown main item tag 0x0 [ 686.220861][ T4451] wacom 0003:056A:0314.0004: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 686.256562][ T4451] wacom 0003:056A:0314.0004: hidraw0: USB HID v0.04 Device [HID 056a:0314] on usb-dummy_hcd.6-1/input0 [ 686.313302][ T4451] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0314.0004/input/input10 [ 686.432303][ T4451] usb 7-1: USB disconnect, device number 3 [ 686.444832][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 686.524998][ T4292] Bluetooth: hci1: command 0x0c1a tx timeout [ 686.532469][ T9984] Bluetooth: hci3: command 0x0c1a tx timeout [ 686.709387][T10812] fido_id[10812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 689.182575][ T4621] r8152-cfgselector 6-1: Unknown version 0x0000 [ 689.927425][ T4537] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 690.172675][ T4537] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.189815][ T4537] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 690.204300][ T4537] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 690.214291][ T4537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.273319][ T4537] usb 4-1: config 0 descriptor?? [ 690.287493][ T4537] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 690.628452][ T5770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.659808][ T5770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.681461][T10884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.735435][T10884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.867845][ T5770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.883713][ T5770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.969849][T10887] kvm: emulating exchange as write [ 691.037050][ T5770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.074334][ T5770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.828380][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 691.838657][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 691.880131][ T4292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 691.904421][ T4292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 691.913281][ T4292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 691.921096][ T4292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.033933][T10921] lo speed is unknown, defaulting to 1000 [ 692.304945][ T4533] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 692.495007][ T4533] usb 3-1: Using ep0 maxpacket: 32 [ 692.508319][ T4533] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.574433][ T4533] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 692.614942][ T4533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.643321][ T4533] usb 3-1: Product: syz [ 692.661637][ T4533] usb 3-1: Manufacturer: syz [ 692.707199][ T4533] usb 3-1: SerialNumber: syz [ 692.751829][ T4533] usb 3-1: config 0 descriptor?? [ 692.786050][ T4533] usb 3-1: bad CDC descriptors [ 692.811663][ T4533] usb 3-1: unsupported MDLM descriptors [ 692.872903][T10921] chnl_net:caif_netlink_parms(): no params data found [ 692.987096][ T4533] usb 3-1: USB disconnect, device number 5 [ 692.990932][ T4451] usb 4-1: USB disconnect, device number 5 [ 693.236034][T10960] binder: 10958:10960 ioctl c0306201 200000000080 returned -14 [ 693.264331][T10960] binder: 10958:10960 ioctl c0306201 2000000003c0 returned -14 [ 693.533328][T10921] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.555374][T10921] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.563732][T10921] device bridge_slave_0 entered promiscuous mode [ 693.611563][T10921] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.643883][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.692403][T10921] device bridge_slave_1 entered promiscuous mode [ 693.837644][T10921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.861520][ T5770] device hsr_slave_0 left promiscuous mode [ 693.874343][ T5770] device hsr_slave_1 left promiscuous mode [ 693.882501][ T5770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.892803][ T5770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.902222][ T5770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.910552][ T5770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.918672][ T5770] device bridge_slave_1 left promiscuous mode [ 693.925385][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.936647][ T5770] device bridge_slave_0 left promiscuous mode [ 693.948418][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.974094][ T4294] Bluetooth: hci4: command 0x0409 tx timeout [ 694.035005][ T4576] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 694.123944][ T5770] device veth1_macvtap left promiscuous mode [ 694.149099][ T5770] device veth0_macvtap left promiscuous mode [ 694.170991][ T5770] device veth1_vlan left promiscuous mode [ 694.181473][ T5770] device veth0_vlan left promiscuous mode [ 694.246966][ T4576] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 694.277599][ T4576] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 694.323092][ T4576] usb 3-1: config 1 interface 0 has no altsetting 0 [ 694.359298][ T4576] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 694.400401][ T4576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.428700][ T4576] usb 3-1: Product: syz [ 694.441799][T11003] kvm: pic: non byte write [ 694.456269][ T4576] usb 3-1: Manufacturer: syz [ 694.471408][ T4576] usb 3-1: SerialNumber: syz [ 694.500111][T10983] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 694.508372][T10983] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 695.507970][ T5770] team0 (unregistering): Port device team_slave_1 removed [ 695.540515][ T4576] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:54:05:70:1c:a3 [ 695.570496][ T5770] team0 (unregistering): Port device team_slave_0 removed [ 695.616000][ T5770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.669151][ T5770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.048204][ T5770] bond0 (unregistering): Released all slaves [ 696.054896][ T4294] Bluetooth: hci4: command 0x041b tx timeout [ 696.157486][T10921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.182883][T10988] device syzkaller0 entered promiscuous mode [ 696.196986][T11016] tipc: Started in network mode [ 696.203752][T11016] tipc: Node identity 7f000001, cluster identity 4711 [ 696.212618][T11016] tipc: Enabling of bearer rejected, failed to enable media [ 696.262293][ T4576] rtl8150 3-1:1.0: eth13: rtl8150 is detected [ 696.262310][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1418'. [ 696.355141][ T4621] usb 3-1: USB disconnect, device number 6 [ 696.459745][T10921] team0: Port device team_slave_0 added [ 696.575120][T10921] team0: Port device team_slave_1 added [ 696.738060][T10921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.782400][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.887767][T10921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.932037][T10921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.957956][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.034281][T11033] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 697.065767][T10921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.084008][T11033] kvm: pic: non byte read [ 697.093910][T11033] kvm: pic: level sensitive irq not supported [ 697.094005][T11033] kvm: pic: non byte read [ 697.139032][T11033] kvm: pic: level sensitive irq not supported [ 697.149835][T11033] kvm: pic: non byte read [ 697.199713][T11033] kvm: pic: level sensitive irq not supported [ 697.200177][T11033] kvm: pic: non byte read [ 697.294902][T10921] device hsr_slave_0 entered promiscuous mode [ 697.323991][T10921] device hsr_slave_1 entered promiscuous mode [ 697.383907][T10921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.394217][T10921] Cannot create hsr debugfs directory [ 697.920016][T10921] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 698.003138][T10921] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 698.068364][T10921] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 698.119435][T10921] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 698.126377][ T9984] Bluetooth: hci4: command 0x040f tx timeout [ 698.474968][ T4621] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 698.500944][T10921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.558356][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 698.581678][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 698.616712][T10921] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.653894][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 698.662511][ T4621] usb 3-1: Using ep0 maxpacket: 32 [ 698.682513][ T4621] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 698.694873][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 698.706690][ T9424] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 698.730151][ T4621] usb 3-1: config 0 has no interface number 0 [ 698.736949][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.744127][ T7431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.761892][ T4621] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 698.785998][ T4621] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 698.797932][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 698.814837][ T4621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.823890][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 698.847893][ T4621] usb 3-1: Product: syz [ 698.852138][ T4621] usb 3-1: Manufacturer: syz [ 698.858488][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.865696][ T7431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.877759][ T4621] usb 3-1: SerialNumber: syz [ 698.893054][ T4621] usb 3-1: config 0 descriptor?? [ 698.898810][ T9424] usb 7-1: Using ep0 maxpacket: 32 [ 698.907506][ T9424] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 698.916067][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 698.928460][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 698.937509][ T9424] usb 7-1: config 0 has no interface number 0 [ 698.944231][T11078] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 698.960836][ T9424] usb 7-1: config 0 interface 184 has no altsetting 0 [ 698.979661][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 698.995789][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 699.021115][T11097] usb usb8: usbfs: process 11097 (syz.3.1436) did not claim interface 0 before use [ 699.029736][ T9424] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 699.042994][T11097] usb usb8: usbfs: process 11097 (syz.3.1436) did not claim interface 0 before use [ 699.070652][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 699.081138][ T9424] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.099428][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 699.111228][ T9424] usb 7-1: Product: syz [ 699.119455][ T9424] usb 7-1: Manufacturer: syz [ 699.124183][ T9424] usb 7-1: SerialNumber: syz [ 699.154259][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 699.164306][ T9424] usb 7-1: config 0 descriptor?? [ 699.176046][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 699.195883][T11078] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 699.233759][ T9424] smsc75xx v1.0.0 [ 699.252062][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 699.270598][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 699.320001][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 699.329699][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 699.348054][T10921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 699.801673][ T9424] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 699.824792][ T9424] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 699.878622][ T9424] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 699.909871][ T9424] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 699.948332][ T9424] usb 7-1: USB disconnect, device number 4 [ 700.162051][T10921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.180378][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.201123][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 700.208836][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 700.209536][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.415997][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 700.427540][ T22] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 700.474088][ T22] usb 4-1: config 0 has no interface number 0 [ 700.494362][ T22] usb 4-1: config 0 interface 184 has no altsetting 0 [ 700.520787][ T22] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 700.549088][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.570646][ T22] usb 4-1: Product: syz [ 700.593111][ T22] usb 4-1: Manufacturer: syz [ 700.608333][ T22] usb 4-1: SerialNumber: syz [ 700.637990][ T22] usb 4-1: config 0 descriptor?? [ 700.659448][ T22] smsc75xx v1.0.0 [ 700.775012][ T4451] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 700.851555][ T4621] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 700.890858][ T4621] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 700.926984][ T4621] asix: probe of 3-1:0.188 failed with error -71 [ 700.966706][ T4451] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 700.983537][ T4621] usb 3-1: USB disconnect, device number 7 [ 700.994832][ T4451] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.044911][ T4451] usb 7-1: config 0 interface 0 has no altsetting 0 [ 701.052058][ T4451] usb 7-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 701.102724][ T4451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.129304][ T4451] usb 7-1: config 0 descriptor?? [ 701.134976][T11136] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 701.164433][T11147] input: syz1 as /devices/virtual/input/input13 [ 701.282692][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 701.301112][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 701.402002][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 701.426007][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.445157][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 701.453315][ T5770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 701.485345][T10921] device veth0_vlan entered promiscuous mode [ 701.538096][T10921] device veth1_vlan entered promiscuous mode [ 701.595594][ T4451] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0909.0005/input/input14 [ 701.622571][ T5743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 701.631467][ T5743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 701.669847][ T5743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 701.698944][ T5743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.717931][ T4451] uclogic 0003:28BD:0909.0005: input,hidraw0: USB HID v0.04 Mouse [HID 28bd:0909] on usb-dummy_hcd.6-1/input0 [ 701.732197][T10921] device veth0_macvtap entered promiscuous mode [ 701.756882][T10921] device veth1_macvtap entered promiscuous mode [ 701.780352][ T9424] usb 7-1: USB disconnect, device number 5 [ 701.846646][T10921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.885789][T10921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.896194][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 701.905843][T10921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.934822][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 701.946939][T10921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.964988][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 701.983462][T10921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.004726][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 702.024667][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 702.034812][T10921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.064799][ T22] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 702.064950][T10921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.090795][ T22] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 702.108174][T10921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.135066][ T22] usb 4-1: USB disconnect, device number 6 [ 702.146017][T10921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.149756][T11162] fido_id[11162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 702.193976][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 702.234398][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 702.251679][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 702.264305][T11168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.268989][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 702.291848][T11168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.297310][T10921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.339644][T10921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.364371][T10921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.398813][T10921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.414393][T10921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.447963][T10921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.458367][T10921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.483163][T10921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.509565][T10921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.560979][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 702.586719][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 702.629061][T10921] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.654344][T10921] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.675011][T10921] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.683797][T10921] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.920496][ T5743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.982675][ T5743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.013321][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 703.144401][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.157895][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.173440][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 703.682570][T11205] KVM: debugfs: duplicate directory 11205-6 [ 703.885222][ T4576] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 704.064791][ T4874] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 704.078901][ T4576] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.095792][ T4576] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.105989][ T4576] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 704.115508][ T4576] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.144012][ T4576] usb 8-1: config 0 descriptor?? [ 704.244748][ T4533] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 704.260163][ T4874] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.280590][ T4874] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.303148][ T4874] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 704.322590][ T4874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 704.342869][ T4874] usb 7-1: SerialNumber: syz [ 704.436610][ T4533] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.458265][ T4533] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 704.478131][ T4533] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 704.493145][ T4533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.502233][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.538168][ T4533] hub 4-1:1.0: bad descriptor, ignoring hub [ 704.544152][ T4533] hub: probe of 4-1:1.0 failed with error -5 [ 704.553634][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.566379][ T4576] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 704.574303][ T4576] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 704.614824][ T4576] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 704.622739][ T4576] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 704.654428][ T4576] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 704.662923][ T4576] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 704.672170][ T4576] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 704.695785][ T4576] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 704.749047][ T4576] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 704.778657][ C1] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x0, unable to proceed further with wheel init [ 704.932478][ T4874] usb 7-1: 0:2 : does not exist [ 704.982077][ T4874] usb 7-1: USB disconnect, device number 6 [ 705.006300][ T4576] usb 8-1: USB disconnect, device number 2 [ 705.033402][T11233] fido_id[11233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 705.265702][ T9590] udevd[9590]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.536669][ T4533] usb 4-1: reset low-speed USB device number 7 using dummy_hcd [ 705.785731][T11261] KVM: debugfs: duplicate directory 11261-6 [ 706.234610][ T4533] usb 4-1: USB disconnect, device number 7 [ 707.056267][T11317] binder: 11316:11317 ioctl c0306201 200000000080 returned -14 [ 707.066894][T11317] binder: 11316:11317 ioctl c0306201 2000000003c0 returned -14 [ 707.274812][ T4451] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 707.474836][ T4451] usb 7-1: Using ep0 maxpacket: 32 [ 707.490381][ T4451] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.553016][ T4451] usb 7-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 707.598262][ T4451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.655580][ T4451] usb 7-1: config 0 descriptor?? [ 708.252857][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.272603][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.304187][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.332065][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.359189][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.391507][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.415047][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.445020][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.479780][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.511080][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.558340][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.576086][ T4451] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0 [ 708.590074][ T4451] zeroplus 0003:0C12:0030.0007: item fetching failed at offset 12/40 [ 708.630383][ T4451] zeroplus 0003:0C12:0030.0007: parse failed [ 708.655027][ T4451] zeroplus: probe of 0003:0C12:0030.0007 failed with error -22 [ 708.687881][ T4451] usb 7-1: USB disconnect, device number 7 [ 708.822882][T11380] lo speed is unknown, defaulting to 1000 [ 709.460087][T11400] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 709.544779][ T4537] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 709.589824][T11400] kvm: pic: non byte read [ 709.629804][T11400] kvm: pic: level sensitive irq not supported [ 709.630544][T11400] kvm: pic: non byte read [ 709.695435][T11400] kvm: pic: level sensitive irq not supported [ 709.696028][T11400] kvm: pic: non byte read [ 709.751556][T11400] kvm: pic: level sensitive irq not supported [ 709.752003][T11400] kvm: pic: non byte read [ 709.766932][ T4537] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.796352][ T4537] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.847829][ T4537] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 709.906606][ T4537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.933582][ T4537] usb 7-1: config 0 descriptor?? [ 710.380637][ T4537] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 710.408857][ T4537] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 710.432544][ T4537] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 710.457570][ T4537] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 710.481719][ T4537] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 710.502479][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.523432][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.541510][ T4537] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 710.665224][ T4537] playstation 0003:054C:0DF2.0008: Invalid reportID received, expected 9 got 0 [ 710.686388][ T4537] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22 [ 710.710444][ T4537] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 710.747724][ T4537] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 710.768632][ T4537] playstation: probe of 0003:054C:0DF2.0008 failed with error -22 [ 710.872313][ T4621] usb 7-1: USB disconnect, device number 8 [ 711.054460][T11447] fido_id[11447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 711.244815][ T9424] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 711.374810][T11467] input: syz0 as /devices/virtual/input/input15 [ 711.427094][ T9424] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 711.461741][ T9424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.499175][ T9424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.570113][ T9424] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 711.640010][ T9424] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 711.672140][ T9424] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 711.714224][ T9424] usb 4-1: Manufacturer: syz [ 711.744454][ T9424] usb 4-1: config 0 descriptor?? [ 712.114943][T11481] binder: 11480:11481 unknown command 1074553620 [ 712.121451][T11481] binder: 11480:11481 ioctl c0306201 200000000640 returned -22 [ 712.182718][ T9424] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 712.205782][ T9424] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 712.251145][ T9424] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 713.665112][ T129] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 713.813567][T11538] kvm: pic: single mode not supported [ 713.814834][T11538] kvm: pic: single mode not supported [ 713.820834][T11538] kvm: pic: level sensitive irq not supported [ 713.844117][T11538] kvm: pic: single mode not supported [ 713.854747][T11538] kvm: pic: single mode not supported [ 714.307419][ T27] audit: type=1326 audit(1782015966.751:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.5.1536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82da39ce59 code=0x0 [ 715.444925][ T129] usb 4-1: device descriptor read/64, error -71 [ 715.495283][T11590] binder: 11589:11590 ioctl c0306201 200000000080 returned -14 [ 715.541906][T11590] binder: BINDER_SET_CONTEXT_MGR already set [ 715.569222][T11590] binder: 11589:11590 ioctl 4018620d 200000000040 returned -16 [ 715.604306][T11594] binder: 11589:11594 ioctl c0306201 2000000003c0 returned -14 [ 715.714923][ T129] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 715.894932][ T129] usb 4-1: device descriptor read/64, error -71 [ 716.041410][T11608] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 716.069507][ T4451] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 716.103247][T11608] kvm: pic: level sensitive irq not supported [ 716.103333][T11608] kvm: pic: non byte read [ 716.107346][ T4874] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 716.127904][T11608] kvm: pic: level sensitive irq not supported [ 716.128238][T11608] kvm: pic: non byte read [ 716.167883][T11608] kvm: pic: level sensitive irq not supported [ 716.168211][T11608] kvm: pic: non byte read [ 716.179401][ T129] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 716.225642][ T129] usb 4-1: device descriptor read/8, error -71 [ 716.269687][ T4451] usb 3-1: Using ep0 maxpacket: 16 [ 716.299029][ T4451] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.321115][ T4451] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.334280][ T4874] usb 7-1: config 0 interface 0 altsetting 210 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.363775][ T4451] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 716.376849][ T4874] usb 7-1: config 0 interface 0 has no altsetting 0 [ 716.383616][ T4451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 716.392454][ T4874] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 716.402036][ T4451] usb 3-1: SerialNumber: syz [ 716.413301][ T4874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.430395][ T4451] usb 3-1: 0:2 : does not exist [ 716.437655][ T4874] usb 7-1: config 0 descriptor?? [ 716.514755][ T129] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 716.585860][ T129] usb 4-1: device descriptor read/8, error -71 [ 716.710130][ T9424] usb 4-1: USB disconnect, device number 8 [ 716.885751][ T4874] usbhid 7-1:0.0: can't add hid device: -71 [ 716.891879][ T4874] usbhid: probe of 7-1:0.0 failed with error -71 [ 716.905903][ T9424] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 716.943482][ T4874] usb 7-1: USB disconnect, device number 9 [ 717.038971][ T4451] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 717.053477][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.069419][ T9424] usb 4-1: device descriptor read/64, error -71 [ 717.078562][ T4451] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 717.090788][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.134330][ T4451] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 717.154803][ T4451] usb 3-1: USB disconnect, device number 8 [ 717.344799][ T9424] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 717.416495][ T9590] udevd[9590]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.512495][ T9424] usb 4-1: device descriptor read/64, error -71 [ 717.525258][T11649] netlink: 'syz.6.1559': attribute type 4 has an invalid length. [ 717.595825][T11650] netlink: 'syz.6.1559': attribute type 4 has an invalid length. [ 717.672245][ T9424] usb usb4-port1: attempt power cycle [ 717.979667][ T129] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 718.100053][ T9424] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 718.155351][ T9424] usb 4-1: device descriptor read/8, error -71 [ 718.193252][ T129] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 718.230152][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.267438][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.292375][ T129] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.336064][ T129] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.372373][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.415697][ T129] usb 3-1: config 0 descriptor?? [ 718.465033][ T4874] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 718.572087][T11677] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 718.655005][ T4874] usb 7-1: Using ep0 maxpacket: 16 [ 718.668349][ T4874] usb 7-1: config 0 has no interfaces? [ 718.687236][ T4874] usb 7-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 718.721863][ T4874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.809758][ T4874] usb 7-1: config 0 descriptor?? [ 718.833076][ T129] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 718.863045][ T129] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 718.894801][ T129] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 718.943871][T11697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.984277][T11697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.108278][ T129] usb 3-1: USB disconnect, device number 9 [ 719.247305][ T4874] usb 7-1: USB disconnect, device number 10 [ 719.270548][T11698] fido_id[11698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 719.836595][T11720] binder: 11719:11720 ioctl c0306201 200000000180 returned -14 [ 720.324776][ T4874] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 720.525208][ T4874] usb 4-1: Using ep0 maxpacket: 8 [ 720.535454][ T4874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.554848][ T4874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 720.574994][ T129] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 720.585055][ T4874] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 720.594170][ T4874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.630914][ T4874] usb 4-1: config 0 descriptor?? [ 720.784898][ T129] usb 7-1: Using ep0 maxpacket: 16 [ 720.792757][ T129] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.817283][ T129] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.837657][ T129] usb 7-1: config 0 interface 0 has no altsetting 0 [ 720.844356][ T129] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 720.904825][ T129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.909909][ T22] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 720.955797][ T129] usb 7-1: config 0 descriptor?? [ 720.981376][ T22] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 721.067863][ T4874] microsoft 0003:045E:00F9.000C: unexpected long global item [ 721.113143][ T4874] microsoft 0003:045E:00F9.000C: parse failed [ 721.138769][ T4874] microsoft: probe of 0003:045E:00F9.000C failed with error -22 [ 721.298524][ T4874] usb 4-1: USB disconnect, device number 13 [ 721.411392][T11760] fido_id[11760]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 721.577502][ T129] usb 7-1: USB disconnect, device number 11 [ 722.164806][ T4533] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 722.366772][ T4533] usb 4-1: Using ep0 maxpacket: 32 [ 722.377866][ T4533] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 722.424432][ T4533] usb 4-1: config 0 has no interface number 0 [ 722.457055][ T4533] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 722.481773][ T4533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.519380][ T4533] usb 4-1: Product: syz [ 722.539316][ T4533] usb 4-1: Manufacturer: syz [ 722.544469][ T4533] usb 4-1: SerialNumber: syz [ 722.560549][ T4533] usb 4-1: config 0 descriptor?? [ 722.588824][ T4533] smsc95xx v2.0.0 [ 722.835230][ T9424] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 722.979229][ T4533] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 722.999041][ T4533] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 723.044863][ T9424] usb 7-1: Using ep0 maxpacket: 16 [ 723.052225][ T9424] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.086540][ T9424] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.108745][ T9424] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.124405][ T9424] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 723.154887][ T9424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.202759][ T9424] usb 7-1: config 0 descriptor?? [ 723.299724][T11825] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 723.635514][ T9424] hid (null): unknown global tag 0xd [ 723.640979][ T9424] hid (null): invalid report_count 218908673 [ 723.662265][ T9424] hid (null): invalid report_size 64835 [ 723.683792][ T9424] hid (null): unknown global tag 0xc [ 723.720838][ T9424] hid (null): invalid report_size -44574717 [ 723.836650][ T9424] usb 7-1: USB disconnect, device number 12 [ 724.389756][ T4621] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 724.433112][ T4533] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 724.467054][ T4533] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 724.480617][T11861] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 724.495009][ T4533] usb 4-1: USB disconnect, device number 14 [ 724.585355][ T4621] usb 3-1: Using ep0 maxpacket: 16 [ 724.592467][ T4621] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x29, skipping [ 724.640851][ T4621] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.659554][ T4621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.678050][ T4621] usb 3-1: Product: syz [ 724.690801][ T4621] usb 3-1: Manufacturer: syz [ 724.699964][ T4621] usb 3-1: SerialNumber: syz [ 725.306608][T11891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.330532][T11891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.752266][ T4621] cdc_ncm 3-1:1.0: bind() failure [ 725.770501][ T4621] usbtest: probe of 3-1:1.1 failed with error -71 [ 725.811676][ T4621] usb 3-1: USB disconnect, device number 10 [ 725.827224][T11899] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 726.715027][ T129] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 726.904800][ T129] usb 8-1: Using ep0 maxpacket: 32 [ 726.911997][ T129] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 726.949620][ T129] usb 8-1: config 0 has no interface number 0 [ 726.984826][ T129] usb 8-1: config 0 interface 184 has no altsetting 0 [ 727.036894][ T129] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 727.065224][ T129] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.084853][ T129] usb 8-1: Product: syz [ 727.114370][ T129] usb 8-1: Manufacturer: syz [ 727.124118][ T129] usb 8-1: SerialNumber: syz [ 727.149519][ T129] usb 8-1: config 0 descriptor?? [ 727.169314][ T129] smsc75xx v1.0.0 [ 727.549952][T11976] netlink: 'syz.2.1636': attribute type 4 has an invalid length. [ 727.652685][T11979] netlink: 'syz.2.1636': attribute type 4 has an invalid length. [ 727.763314][ T129] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 727.778956][ T129] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 728.402100][ T129] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 728.430793][ T129] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 728.452407][ T129] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 728.476524][ T129] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 728.510890][ T129] usb 8-1: USB disconnect, device number 3 [ 728.675138][ T4621] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 728.884849][ T4621] usb 7-1: Using ep0 maxpacket: 32 [ 728.902781][ T4621] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 728.955828][ T4621] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 728.988974][ T4621] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.016507][ T4621] usb 7-1: config 0 descriptor?? [ 729.022445][T11999] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 729.041563][ T4621] hub 7-1:0.0: bad descriptor, ignoring hub [ 729.059230][ T4621] hub: probe of 7-1:0.0 failed with error -5 [ 729.107429][ T4621] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 729.785201][ T4576] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 729.855057][ T4874] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 729.977167][ T4576] usb 4-1: not running at top speed; connect to a high speed hub [ 729.988938][ T4576] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.015808][ T4576] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 730.025181][ T4576] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.046760][ T4874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.074437][ T4576] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.091852][ T4874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.110867][ T4576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.123589][ T4874] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 730.137611][ T4576] usb 4-1: Product: ᠁ [ 730.141900][ T4576] usb 4-1: Manufacturer: 俇褐ꎱ㲲잠ⲅ歹婠۠䆷龜ᘥ㉛ᧈᲜ荹ï縝䈃₶苳뤀迓夜裖苬掱ꬔ필졡좺⿇娽촭簙뷀쩱⚋孃ɳ쬤わ訙證後쥍圗㪙 [ 730.160389][ T4874] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 730.169821][ T4874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.180549][ T4576] usb 4-1: SerialNumber: syz [ 730.200818][ T4874] usb 8-1: config 0 descriptor?? [ 730.414495][T12033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.426243][T12033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.443300][ T4576] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 730.457481][ T4576] cdc_ncm 4-1:1.0: bind() failure [ 730.479224][ T4576] usb 4-1: USB disconnect, device number 15 [ 730.617853][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.628736][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.637875][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.649223][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.656967][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.665010][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.672522][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.680475][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.688418][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.696755][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.704261][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.712273][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.719985][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.728777][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.737562][ T4874] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 730.748246][ T4874] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 730.771646][ T4874] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 730.905375][ T4874] usb 8-1: USB disconnect, device number 4 [ 730.921309][T12059] fido_id[12059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 731.327815][T12069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.388482][T12069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.475357][ T4874] usb 7-1: USB disconnect, device number 13 [ 731.706786][ T4621] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 731.914774][ T4621] usb 4-1: Using ep0 maxpacket: 16 [ 731.925724][ T4621] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 731.933779][ T4621] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.954741][ T4621] usb 4-1: config 0 has no interface number 0 [ 731.960885][ T4621] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.027856][ T4621] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 732.044900][ T4621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.069079][ T4621] usb 4-1: config 0 descriptor?? [ 732.096465][ T4621] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 732.260992][T12108] fuse: Bad value for 'fd' [ 732.311538][T12079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 732.330257][T12079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 732.337361][T12079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 732.343728][T12079] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 732.357801][T12079] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 732.368854][T12079] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 732.493588][T12112] binder: 12111:12112 unknown command 0 [ 732.507387][T12112] binder: 12111:12112 ioctl c0306201 200000000100 returned -22 [ 732.654782][ T129] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 732.854804][ T129] usb 3-1: Using ep0 maxpacket: 32 [ 732.862210][ T129] usb 3-1: unable to get BOS descriptor or descriptor too short [ 732.880545][ T129] usb 3-1: config 1 has an invalid interface number: 14 but max is 0 [ 732.904783][ T129] usb 3-1: config 1 has no interface number 0 [ 732.927036][ T129] usb 3-1: config 1 interface 14 has no altsetting 0 [ 732.962420][ T129] usb 3-1: New USB device found, idVendor=2100, idProduct=9e60, bcdDevice=cf.32 [ 732.992017][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.013102][ T129] usb 3-1: Product: syz [ 733.019848][ T129] usb 3-1: Manufacturer: syz [ 733.026137][ T129] usb 3-1: SerialNumber: syz [ 733.247064][ T129] cdc_ether 3-1:1.14: More than one union descriptor, skipping ... [ 733.257306][ T129] usb 3-1: bad CDC descriptors [ 733.264603][ T129] ftdi_sio 3-1:1.14: FTDI USB Serial Device converter detected [ 733.274581][ T129] ftdi_sio ttyUSB0: unknown device type: 0xcf32 [ 733.284268][ T129] usb 3-1: USB disconnect, device number 11 [ 733.296916][ T129] ftdi_sio 3-1:1.14: device disconnected [ 733.309343][ T9424] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 733.530680][ T9424] usb 8-1: Using ep0 maxpacket: 32 [ 733.545057][ T9424] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 733.563843][T12142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.572580][ T9984] Bluetooth: hci2: command 0x0c1a tx timeout [ 733.579020][T12142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.591225][ T9424] usb 8-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.606027][ T9424] usb 8-1: config 0 interface 0 has no altsetting 0 [ 733.613764][ T9424] usb 8-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 733.622997][ T9424] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.639127][ T9424] usb 8-1: config 0 descriptor?? [ 733.694819][ T4451] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 733.886806][ T4451] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.903043][ T4451] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.913248][ T4451] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 733.929689][ T4451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.940407][ T4451] usb 7-1: config 0 descriptor?? [ 734.057872][ T9424] wacom 0003:056A:0101.0010: unknown main item tag 0x2 [ 734.070898][ T9424] wacom 0003:056A:0101.0010: unknown main item tag 0x7 [ 734.081737][ T9424] wacom 0003:056A:0101.0010: hidraw0: USB HID v0.08 Device [HID 056a:0101] on usb-dummy_hcd.7-1/input0 [ 734.282585][ T9424] usb 8-1: USB disconnect, device number 5 [ 734.340706][T12157] fido_id[12157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 734.357613][ T4451] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 734.365437][ T9984] Bluetooth: hci4: command 0x0c1a tx timeout [ 734.365453][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 734.371489][ T9984] Bluetooth: hci3: command 0x0c1a tx timeout [ 734.394212][ T4451] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 734.410825][ T4451] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 734.425584][ T4451] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 734.441766][ T4451] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 734.457279][ T4451] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 734.471721][ T4451] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 734.489301][ T4451] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 734.524883][ T129] usb 4-1: USB disconnect, device number 16 [ 734.575618][ T4451] cp2112 0003:10C4:EA90.0011: Part Number: 0x00 Device Version: 0x00 [ 734.683048][T12165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.711343][T12165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.204769][ T4576] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 735.304881][ T4534] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 735.391892][ T4451] usb 7-1: USB disconnect, device number 14 [ 735.406957][ T4576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 735.426963][ T4576] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 735.487644][ T4576] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 735.497514][ T4576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.509995][ T4534] usb 3-1: unable to get BOS descriptor or descriptor too short [ 735.521752][ T4576] usb 4-1: config 0 descriptor?? [ 735.530462][ T4534] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.547194][ T4534] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 735.559237][ T4534] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 735.572178][ T4534] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 735.589339][ T4534] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 735.603230][ T4534] usb 3-1: config 1 interface 1 has no altsetting 0 [ 735.626666][ T4534] usb 3-1: string descriptor 0 read error: -22 [ 735.632981][ T4534] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 735.643119][ T4534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.934825][ T4576] usbhid 4-1:0.0: can't add hid device: -71 [ 735.942728][ T4576] usbhid: probe of 4-1:0.0 failed with error -71 [ 735.993758][ T4576] usb 4-1: USB disconnect, device number 17 [ 736.445068][ T9984] Bluetooth: hci4: command 0x0406 tx timeout [ 736.684977][ T4534] usb 3-1: 2:0: failed to get current value for ch 1 (-32) [ 736.734762][ T127] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 736.931045][ T127] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 736.996651][ T127] usb 8-1: config 0 interface 0 has no altsetting 0 [ 737.003522][ T127] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 737.013308][ T127] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.052028][ T127] usb 8-1: config 0 descriptor?? [ 737.067197][T12215] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 737.303408][ T4537] usb 3-1: USB disconnect, device number 12 [ 737.516637][ T127] hid-led 0003:1D34:000A.0012: unknown main item tag 0x1 [ 737.523975][ T127] hid-led 0003:1D34:000A.0012: ignoring exceeding usage max [ 737.710327][ T127] hid-led: probe of 0003:1D34:000A.0012 failed with error -71 [ 737.747443][ T127] usb 8-1: USB disconnect, device number 6 [ 738.355354][ T127] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 738.560258][ T127] usb 7-1: config 0 interface 0 altsetting 210 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.577897][ T127] usb 7-1: config 0 interface 0 has no altsetting 0 [ 738.585240][ T127] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 738.594383][ T127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.626244][ T127] usb 7-1: config 0 descriptor?? [ 738.704854][ T4534] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 738.894877][ T4534] usb 8-1: Using ep0 maxpacket: 32 [ 738.912925][ T127] usbhid 7-1:0.0: can't add hid device: -71 [ 738.920861][ T4534] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 177, changing to 7 [ 738.942758][ T127] usbhid: probe of 7-1:0.0 failed with error -71 [ 738.959563][ T127] usb 7-1: USB disconnect, device number 15 [ 738.981624][ T4534] usb 8-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 739.017757][ T4534] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.031859][ T4534] usb 8-1: Product: syz [ 739.049165][ T4534] usb 8-1: Manufacturer: syz [ 739.053834][ T4534] usb 8-1: SerialNumber: syz [ 739.281540][ T4534] usb 8-1: 1:1 : bogus bTerminalLink 11 [ 739.297832][ T4534] usb 8-1: unit 128 not found! [ 739.302673][ T4534] usb 8-1: unit 2 not found! [ 739.335614][ T4534] usb 8-1: unit 1 not found! [ 739.354733][ T4534] usb 8-1: unit 4 not found! [ 739.401458][ T4534] usb 8-1: can't set first interface for hiFace device. [ 739.425001][ T4534] snd-usb-hiface: probe of 8-1:1.2 failed with error -5 [ 739.465946][ T4534] usb 8-1: USB disconnect, device number 7 [ 739.515569][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.546366][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.708987][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1721'. [ 739.756287][ T9590] udevd[9590]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 739.885348][ T4874] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 740.084765][ T4874] usb 3-1: Using ep0 maxpacket: 32 [ 740.091914][ T4874] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 740.101509][ T4874] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 740.123471][ T4874] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 740.155331][ T4874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 740.183948][ T4874] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 740.204142][ T4874] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 740.217559][ T4451] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 740.242052][ T4874] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 740.269952][ T4874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.295414][ T4874] usb 3-1: config 0 descriptor?? [ 740.407014][ T4451] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.424765][ T4534] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 740.432528][ T4451] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.459120][ T4451] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 740.476419][ T4451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.489480][ T4451] usb 4-1: Product: syz [ 740.493748][ T4451] usb 4-1: Manufacturer: syz [ 740.501458][ T4451] usb 4-1: SerialNumber: syz [ 740.534649][ T4874] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 740.616408][ T4534] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.634213][ T4534] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.685212][ T4534] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 740.714751][ T4534] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.723880][ T4534] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.762751][ T4451] usb 4-1: 0:1 : does not exist [ 740.768266][ T4451] usb 4-1: unit 80 not found! [ 740.785971][ T4534] usb 8-1: config 0 descriptor?? [ 740.821045][ T4874] usb 3-1: USB disconnect, device number 13 [ 740.841445][ T4874] usblp0: removed [ 740.877095][ T4451] usb 4-1: USB disconnect, device number 18 [ 741.221490][ T4534] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 741.246587][ T4534] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 741.521876][T12343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.545073][T12343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.828421][ T4537] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 742.026842][ T4537] usb 4-1: unable to get BOS descriptor or descriptor too short [ 742.047091][ T4537] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.064850][ T4537] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.106310][ T4537] usb 4-1: string descriptor 0 read error: -22 [ 742.133983][ T4537] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 742.162924][ T4537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.217028][ T4537] usb 4-1: selecting invalid altsetting 1 [ 742.249387][ T4537] usb 4-1: unit 6 not found! [ 742.378930][T12364] device syzkaller0 entered promiscuous mode [ 742.392412][T12364] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 742.622293][ T4537] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 742.673922][ T4537] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 742.772022][ T9590] udevd[9590]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.114811][ T4361] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 743.251067][T12395] lo speed is unknown, defaulting to 1000 [ 743.284754][ T4537] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 743.317636][T12400] lo speed is unknown, defaulting to 1000 [ 743.444026][ T4361] usb 7-1: unable to get BOS descriptor or descriptor too short [ 743.462666][ T4361] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 743.477887][ T4361] usb 7-1: can't read configurations, error -71 [ 743.484974][ T4537] usb 3-1: Using ep0 maxpacket: 16 [ 743.492205][ T4537] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.533705][ T4537] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 743.566814][ T4537] usb 3-1: config 0 interface 0 has no altsetting 0 [ 743.587348][ T4537] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 743.616084][ T4537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.636958][ T4537] usb 3-1: config 0 descriptor?? [ 743.648500][ T4534] usb 8-1: reset high-speed USB device number 8 using dummy_hcd [ 743.669032][ T4534] usb 8-1: device reset changed ep0 maxpacket size! [ 743.679527][ T4451] usb 8-1: USB disconnect, device number 8 [ 743.866156][T12410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.884731][ T4451] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 743.892497][T12410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.075062][ T4451] usb 8-1: Using ep0 maxpacket: 16 [ 744.085641][ T4537] petalynx 0003:18B1:0037.0014: unknown main item tag 0x3 [ 744.094167][ T4451] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 744.098119][ T4537] petalynx 0003:18B1:0037.0014: unknown main item tag 0xd [ 744.115538][ T4451] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.122210][ T4537] petalynx 0003:18B1:0037.0014: unknown main item tag 0x0 [ 744.135546][ T4537] petalynx 0003:18B1:0037.0014: unknown main item tag 0x1 [ 744.142788][ T4537] petalynx 0003:18B1:0037.0014: unknown main item tag 0x0 [ 744.154174][ T4451] usb 8-1: config 0 has no interface number 0 [ 744.156213][ T4537] petalynx 0003:18B1:0037.0014: unknown main item tag 0x0 [ 744.171401][ T4451] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 744.184923][ T4451] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 744.194089][ T4451] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.194921][ T4537] petalynx 0003:18B1:0037.0014: unknown main item tag 0x3 [ 744.215546][ T4537] petalynx 0003:18B1:0037.0014: unknown main item tag 0x6 [ 744.231005][ T4537] petalynx 0003:18B1:0037.0014: hidraw0: USB HID v0.09 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 744.239398][ T4451] usb 8-1: config 0 descriptor?? [ 744.277736][ T4451] usbhid 8-1:0.1: couldn't find an input interrupt endpoint [ 744.288350][ T4537] usb 3-1: USB disconnect, device number 14 [ 744.488642][T12420] fido_id[12420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 744.581817][ T4537] usb 4-1: USB disconnect, device number 19 [ 744.864976][ T4534] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 745.054863][ T4534] usb 7-1: Using ep0 maxpacket: 16 [ 745.066074][ T4534] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 745.100693][ T4534] usb 7-1: config 0 has no interface number 0 [ 745.115848][ T4534] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 745.140333][ T4534] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 745.174381][ T4534] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 745.194048][ T4534] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.214712][ T4534] usb 7-1: Product: syz [ 745.224901][ T4534] usb 7-1: Manufacturer: syz [ 745.229547][ T4534] usb 7-1: SerialNumber: syz [ 745.252251][ T4534] usb 7-1: config 0 descriptor?? [ 745.264985][T12424] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 745.280906][T12424] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 745.533091][T12424] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 745.562151][T12424] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 745.664908][ T4361] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 745.814528][ T4534] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 745.898210][ T4361] usb 3-1: unable to get BOS descriptor or descriptor too short [ 745.937688][ T4361] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 745.964823][ T4361] usb 3-1: can't read configurations, error -71 [ 746.320713][ T4533] usb 8-1: USB disconnect, device number 9 [ 746.438354][T12482] kernel profiling enabled (shift: 0) [ 746.808026][T12494] usb usb2: usbfs: process 12494 (syz.2.1761) did not claim interface 0 before use [ 746.824196][ T4534] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 746.842827][ T4534] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 746.872585][ T4534] asix: probe of 7-1:0.34 failed with error -71 [ 746.894917][ T4534] usb 7-1: USB disconnect, device number 18 [ 747.070499][ T4537] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 747.167897][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.174385][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.274843][ T4537] usb 8-1: Using ep0 maxpacket: 8 [ 747.282462][ T4537] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.312614][ T4537] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 747.354787][ T4537] usb 8-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 747.381429][ T4537] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.411807][ T4537] usb 8-1: config 0 descriptor?? [ 747.853751][ T4537] chicony 0003:04F2:0418.0015: unknown main item tag 0x0 [ 747.861523][ T4537] chicony 0003:04F2:0418.0015: ignoring exceeding usage max [ 747.881001][ T4537] chicony 0003:04F2:0418.0015: item fetching failed at offset 37/41 [ 747.900165][ T4537] chicony 0003:04F2:0418.0015: Chicony hid parse failed: -22 [ 747.924802][ T4537] chicony: probe of 0003:04F2:0418.0015 failed with error -22 [ 748.058031][ T4534] usb 8-1: USB disconnect, device number 10 [ 748.342721][T12226] tipc: Subscription rejected, illegal request [ 748.774768][ T4361] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 748.967963][ T4361] usb 7-1: Using ep0 maxpacket: 16 [ 748.976636][ T4361] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.001655][ T4361] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.020588][ T4361] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.047188][ T4361] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 749.064776][ T4361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.110823][ T4361] usb 7-1: config 0 descriptor?? [ 749.541268][ T4361] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 749.557474][ T4361] microsoft 0003:045E:07DA.0016: report is too long [ 749.574504][ T4361] microsoft 0003:045E:07DA.0016: item 0 4 0 8 parsing failed [ 749.584859][ T4621] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 749.613895][ T4361] microsoft 0003:045E:07DA.0016: parse failed [ 749.637913][ T4361] microsoft: probe of 0003:045E:07DA.0016 failed with error -22 [ 749.753903][ T4534] usb 7-1: USB disconnect, device number 19 [ 749.798396][ T4621] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.845906][ T4621] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 749.870099][ T4621] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 749.895731][ T4621] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 749.925093][ T4621] usb 8-1: SerialNumber: syz [ 750.183658][ T4621] usb 8-1: 0:2 : does not exist [ 750.216286][ T4621] usb 8-1: USB disconnect, device number 11 [ 750.844891][ T4361] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 751.044833][ T4361] usb 3-1: Using ep0 maxpacket: 32 [ 751.052767][ T4361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.093670][ T4361] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.136511][ T4361] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 751.163865][ T4361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.216391][ T4361] usb 3-1: config 0 descriptor?? [ 751.261479][ T4621] kernel read not supported for file /vga_arbiter (pid: 4621 comm: kworker/0:18) [ 751.427289][T12612] netlink: 'syz.2.1786': attribute type 27 has an invalid length. [ 752.366189][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.374241][T12612] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.757056][T12683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.785526][T12683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.227415][T12612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.282347][T12612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.166562][T12612] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.186651][T12612] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.200399][T12612] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.523944][T12612] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.533326][T12612] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.542295][T12612] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.653741][ T9425] usb 3-1: USB disconnect, device number 17 [ 762.940948][T12946] lo speed is unknown, defaulting to 1000 [ 764.175697][T13007] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 768.486214][T13095] [ 768.488981][T13095] ============================= [ 768.493877][T13095] WARNING: suspicious RCU usage [ 768.498914][T13095] syzkaller #0 Not tainted [ 768.503363][T13095] ----------------------------- [ 768.508522][T13095] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 768.517089][T13095] [ 768.517089][T13095] other info that might help us debug this: [ 768.517089][T13095] [ 768.527470][T13095] [ 768.527470][T13095] rcu_scheduler_active = 2, debug_locks = 1 [ 768.535698][T13095] 1 lock held by syz.6.1909/13095: [ 768.540880][T13095] #0: ffffffff8cb2dce0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 768.551264][T13095] [ 768.551264][T13095] stack backtrace: [ 768.557229][T13095] CPU: 0 PID: 13095 Comm: syz.6.1909 Not tainted syzkaller #0 [ 768.564746][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 768.574834][T13095] Call Trace: [ 768.578129][T13095] [ 768.581077][T13095] dump_stack_lvl+0x188/0x24e [ 768.585804][T13095] ? show_regs_print_info+0x12/0x12 [ 768.591023][T13095] ? load_image+0x410/0x410 [ 768.595575][T13095] ? __lock_acquire+0x130c/0x7bd0 [ 768.600648][T13095] lockdep_rcu_suspicious+0x1dd/0x300 [ 768.606064][T13095] get_callchain_entry+0x2a5/0x3b0 [ 768.611245][T13095] get_perf_callchain+0xc4/0x490 [ 768.616228][T13095] ? put_callchain_entry+0xb0/0xb0 [ 768.621371][T13095] ? plist_add+0x3d7/0x490 [ 768.625835][T13095] ? verify_lock_unused+0x140/0x140 [ 768.631067][T13095] __bpf_get_stack+0x2de/0x520 [ 768.635946][T13095] ? stack_map_get_build_id_offset+0x9d0/0x9d0 [ 768.642135][T13095] ? bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 768.647829][T13095] bpf_get_stack_raw_tp+0x189/0x1c0 [ 768.653128][T13095] bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 768.658617][T13095] bpf_prog_run_pin_on_cpu+0xaa/0x150 [ 768.664023][T13095] bpf_prog_test_run_syscall+0x31c/0x4b0 [ 768.669683][T13095] ? sock_gen_cookie+0x60/0x60 [ 768.674471][T13095] ? sock_gen_cookie+0x60/0x60 [ 768.679266][T13095] bpf_prog_test_run+0x31c/0x390 [ 768.684311][T13095] __sys_bpf+0x62b/0x780 [ 768.688586][T13095] ? bpf_link_show_fdinfo+0x380/0x380 [ 768.694001][T13095] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 768.699983][T13095] ? lock_chain_count+0x20/0x20 [ 768.704887][T13095] __x64_sys_bpf+0x78/0x90 [ 768.709336][T13095] do_syscall_64+0x4c/0xa0 [ 768.713788][T13095] ? clear_bhb_loop+0x60/0xb0 [ 768.718520][T13095] ? clear_bhb_loop+0x60/0xb0 [ 768.723222][T13095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.729150][T13095] RIP: 0033:0x7fd270d9ce59 [ 768.733593][T13095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.753229][T13095] RSP: 002b:00007fd271d27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 768.761673][T13095] RAX: ffffffffffffffda RBX: 00007fd271015fa0 RCX: 00007fd270d9ce59 [ 768.769665][T13095] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 768.777653][T13095] RBP: 00007fd270e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 768.785644][T13095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.793632][T13095] R13: 00007fd271016038 R14: 00007fd271015fa0 R15: 00007ffc5d4a6b08 [ 768.801637][T13095]