last executing test programs: 51.379816061s ago: executing program 0 (id=315): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) 50.483494685s ago: executing program 0 (id=318): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x140, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0x4e20, 0x4e24, 0x4e23, 0x4e23, 0x4e23, 0x4e24, 0x4e23, 0x4e23, 0x4e23, 0x4e20], [0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'gretap0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) 50.423335759s ago: executing program 0 (id=319): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x9}}, './file1\x00'}) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'ovf\x00', 0x11, 0x10000004, 0x8}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 50.303057628s ago: executing program 0 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 50.195402655s ago: executing program 0 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) chdir(&(0x7f00000001c0)='./bus\x00') setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)=@known='system.advise\x00', &(0x7f0000000440)='{@\x00', 0x3, 0x2) 49.864497579s ago: executing program 0 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0xe03019e2e81abe04}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.723916119s ago: executing program 32 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0xe03019e2e81abe04}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.293149121s ago: executing program 4 (id=633): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 15.095745215s ago: executing program 4 (id=635): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x14c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x5}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) recvmmsg(0xffffffffffffffff, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000003740)=""/40, 0x28}, {&(0x7f0000003800)=""/4093, 0xffd}], 0x6}, 0x8}], 0x1, 0x120, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 15.043909978s ago: executing program 4 (id=636): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r0, 0x1ff) accept4(r0, 0x0, 0x0, 0x800) 11.98652581s ago: executing program 4 (id=659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0xe000, 0x5, 0x80000001, 0x5, 0x0, [{0x7, 0xfa, 0x6, '\x00', 0xfa}, {0xfd, 0x5, 0x4, '\x00', 0x2}, {0x1, 0x6, 0x6, '\x00', 0x1}, {0x1, 0x4, 0x0, '\x00', 0x1}, {0x6, 0x8, 0x6, '\x00', 0x1}, {0x3, 0xe, 0x6b, '\x00', 0xb}, {0x6c, 0x3, 0xfa}, {0x9, 0x9, 0xa, '\x00', 0x5}, {0x2, 0x1, 0x9, '\x00', 0x49}, {0x5, 0x6, 0x4d, '\x00', 0x6}, {0x7f, 0x3, 0x1, '\x00', 0x4}, {0xa8, 0xb, 0xa0, '\x00', 0x9}, {0xf5, 0xff, 0x9, '\x00', 0x35}, {0x9, 0x0, 0xc7, '\x00', 0x5}, {0xd, 0x3, 0xe, '\x00', 0x3}, {0xdb, 0x7f, 0x8, '\x00', 0x88}, {0x3, 0x8, 0x6, '\x00', 0x2}, {0x7, 0xa, 0x6, '\x00', 0x3}, {0x9, 0xf5, 0x38, '\x00', 0x8}, {0x9f, 0xf, 0x5, '\x00', 0x9}, {0x1, 0x5, 0x0, '\x00', 0x1}, {0x0, 0x6, 0x5}, {0xce, 0xf, 0x9, '\x00', 0x10}, {0xe7, 0x81, 0x8, '\x00', 0x40}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x20000000000000, 0x3, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0x100000000, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.733272768s ago: executing program 4 (id=662): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000200)="13000000010203", 0x7}], 0x1) 5.616424737s ago: executing program 3 (id=732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x38}}, 0x4008000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{r3}, 0x0, &(0x7f0000000c80)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="f0683e674db0044a9803db399000d6c39cb3ba6dcf53f54cfb2fc1f53d6b18fdcead34f3111731cb3060f793ec83f7", @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x140000c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec57", 0x10}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000500)={{}, 0x5, &(0x7f0000000280)=[0x7, 0x1, 0x40, 0x4, 0xba], 0x8, 0xe}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.503709905s ago: executing program 3 (id=733): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002"], 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 4.326098519s ago: executing program 1 (id=745): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x84c8, &(0x7f0000000140)) umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9) 4.18672268s ago: executing program 1 (id=746): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100"], 0x7c}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478", 0xd7}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000500)={{}, 0x5, &(0x7f0000000280)=[0x7, 0x1, 0x40, 0x4, 0xba], 0x8, 0xe}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.051830409s ago: executing program 1 (id=747): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63716368653d667363656368652c76657273696f6e3d3970323030302e75"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800100, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x0, 0x100) 3.963914495s ago: executing program 1 (id=748): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) syz_open_dev$dvb_dvr(&(0x7f0000000280), 0x0, 0x10b401) lseek(r0, 0x0, 0x3) write$eventfd(r0, &(0x7f00000000c0), 0x8) 3.635595489s ago: executing program 3 (id=750): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 3.635335889s ago: executing program 1 (id=751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="b99d0100000f320fc76fb4360fc9bb25cc00007666ba6b416000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x33, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.565226836s ago: executing program 1 (id=752): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x2, 0x1, 0xc, 0x3, "bab9655b7a3ef30407815caa1d04518b300ddec3e356ca91c9779a49620899f8"}) 1.614272784s ago: executing program 5 (id=758): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x3) 1.293823717s ago: executing program 4 (id=761): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x12, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)) 1.025020936s ago: executing program 5 (id=764): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, 0x0) 855.875299ms ago: executing program 5 (id=766): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000140)='./bus\x00', 0x193) 804.829382ms ago: executing program 5 (id=768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000980)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 695.90699ms ago: executing program 5 (id=769): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x18000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$sndmidi(0x0, 0x3022, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x165) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, 0x0, 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x2) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(r6) mount(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x11, 0x0) sendfile(r2, r2, 0x0, 0x8000002) 583.787478ms ago: executing program 2 (id=770): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 522.859103ms ago: executing program 5 (id=771): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000000)=0x3) 479.877685ms ago: executing program 2 (id=772): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2004c0d0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x8, 0x6, 0x2, 0x80}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x9, 0x44, 0x2000000, 0x0, 0x2004cd, 0x0, 0x3, 0x200068fe, 0x9, 0x0, 0x5, 0xa], 0x10000, 0x202}) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 307.609748ms ago: executing program 2 (id=773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000007, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00123c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00000000", 0x31}, {&(0x7f0000001300)="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", 0xcde}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a26954143da754b6b15", 0xb4}, {&(0x7f0000003340)="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", 0x1f4}, {&(0x7f00000008c0)="f60f27117e4a8ca5f38ea69db4650925c916adc0dd9095173532452d876e9f077dddbfab219f37cc4d529aff0800000000000000a8bf82bd297ea1f71e3cd465dc08be", 0x43}], 0x5}, 0x4005) 297.100378ms ago: executing program 3 (id=774): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x110a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 245.600242ms ago: executing program 3 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 159.824028ms ago: executing program 2 (id=776): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 159.553159ms ago: executing program 2 (id=777): r0 = io_uring_setup(0x744b, &(0x7f00000000c0)={0x0, 0xaf08, 0x1, 0x3, 0x1c6}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x63ad, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x20000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x443, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x4, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x41fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 6.34794ms ago: executing program 3 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x38}}, 0x4008000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{r3}, 0x0, &(0x7f0000000c80)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="f0683e674db0044a9803db399000d6c39cb3ba6dcf53f54cfb2fc1f53d6b18fdcead34f3111731cb3060f793ec83f7", @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x140000c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec57", 0x10}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000500)={{}, 0x5, &(0x7f0000000280)=[0x7, 0x1, 0x40, 0x4, 0xba], 0x8, 0xe}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=779): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x181040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0xd7, 0x8, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x6, 0x403, 0x8001}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) fcntl$dupfd(r2, 0x0, r3) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.719304][ T4228] cdc_wdm 1-1:1.0: skipping garbage [ 73.730593][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.733893][ T4228] cdc_wdm 1-1:1.0: skipping garbage [ 73.749898][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.757449][ T4228] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 73.760493][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.766313][ T4228] cdc_wdm 1-1:1.0: Unknown control protocol [ 73.785388][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.805668][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.827160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.839874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.849869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.857894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.867267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.895085][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.904861][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.911865][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.925129][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.933854][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.943699][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.971542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.094432][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.124802][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.138857][ T4276] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.161419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.273140][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.283156][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 74.290946][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 74.292412][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.300610][ T4229] usb 1-1: USB disconnect, device number 2 [ 74.315481][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.331607][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.341543][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.379023][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.495412][ T4280] netlink: 'syz.2.3': attribute type 18 has an invalid length. [ 74.585712][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.604528][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.632205][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.772278][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.783870][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 74.801956][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 74.808477][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.833464][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 74.840282][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 74.877508][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 74.892746][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.098969][ T4293] loop1: detected capacity change from 0 to 512 [ 75.141008][ T4293] EXT4-fs (loop1): Ignoring removed orlov option [ 75.149848][ T4293] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 75.221755][ T4293] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.2: corrupted in-inode xattr [ 75.381368][ T4293] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 75.408963][ T4293] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 75.425011][ T4302] ======================================================= [ 75.425011][ T4302] WARNING: The mand mount option has been deprecated and [ 75.425011][ T4302] and is ignored by this kernel. Remove the mand [ 75.425011][ T4302] option from the mount to silence this warning. [ 75.425011][ T4302] ======================================================= [ 75.499564][ T4293] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 75.576537][ T4293] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 75.644941][ T4302] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.683383][ T4302] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.863079][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.117217][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 76.283371][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.371874][ T4347] device syzkaller1 entered promiscuous mode [ 76.384039][ T13] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 76.424233][ T13] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 76.427365][ T4349] loop6: detected capacity change from 0 to 7 [ 76.463754][ T4349] Dev loop6: unable to read RDB block 7 [ 76.480264][ T4349] loop6: unable to read partition table [ 76.491698][ T4349] loop6: partition table beyond EOD, truncated [ 76.510876][ T4349] loop_reread_partitions: partition scan of loop6 (Wý* %4FLQk݊5) failed (rc=-5) [ 76.603328][ T13] usb 4-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 76.621441][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.631021][ T13] usb 4-1: Product: syz [ 76.643050][ T4228] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.649569][ T13] usb 4-1: Manufacturer: syz [ 76.685594][ T13] usb 4-1: SerialNumber: syz [ 76.923091][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 77.053149][ T4228] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 77.062281][ T4228] usb 3-1: config 0 has no interface number 0 [ 77.071983][ T4228] usb 3-1: config 0 interface 184 has no altsetting 0 [ 77.105892][ T13] usb 4-1: Can't get UAC3 power state for id 10 [ 77.202916][ T13] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 77.225553][ T13] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 77.249581][ T13] usb 4-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8215 device_setup=1 to enable and report any issues to g@b4.vu [ 77.273691][ T4228] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 77.285294][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.294714][ T4228] usb 3-1: Product: syz [ 77.299698][ T4228] usb 3-1: Manufacturer: syz [ 77.310289][ T4228] usb 3-1: SerialNumber: syz [ 77.332766][ T4228] usb 3-1: config 0 descriptor?? [ 77.395119][ T4228] smsc75xx v1.0.0 [ 77.401547][ T13] usb 4-1: USB disconnect, device number 2 [ 77.774976][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.940879][ T4400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 78.359509][ T4411] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 78.380935][ T4417] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 78.388791][ T4411] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 78.396798][ T4417] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 78.592966][ T4229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.735167][ T4228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 78.767256][ T4228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 78.843148][ T4228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 78.865490][ T4228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 78.883042][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 78.898741][ T4228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 78.927065][ T4228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 78.984493][ T4228] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 79.003203][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.032163][ T4228] usb 3-1: USB disconnect, device number 2 [ 79.041033][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.068527][ T4229] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 79.104329][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.153838][ T4229] usb 1-1: config 0 descriptor?? [ 79.285207][ T4441] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 79.302674][ T4441] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 79.674700][ T4229] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 79.762973][ T13] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 79.934383][ T4229] usb 1-1: USB disconnect, device number 3 [ 79.944436][ T4454] fido_id[4454]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1E7D:2D5A.0001/report_descriptor': No such device [ 80.061635][ T4458] tipc: Can't bind to reserved service type 2 [ 80.173197][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.203964][ T4432] syz.1.53 (4432) used greatest stack depth: 21144 bytes left [ 80.228735][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 80.323352][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.364623][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.464809][ T4464] device syzkaller1 entered promiscuous mode [ 80.623429][ T13] usb 3-1: string descriptor 0 read error: -22 [ 80.631954][ T13] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.667648][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.755989][ T13] usb 3-1: 0:2 : does not exist [ 80.812726][ T4474] tipc: Started in network mode [ 80.818850][ T4474] tipc: Node identity 7f000001, cluster identity 4711 [ 80.830473][ T4474] tipc: New replicast peer: 100.1.1.1 [ 80.845085][ T4474] tipc: Enabled bearer , priority 10 [ 80.856874][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.039989][ T4479] kvm: emulating exchange as write [ 81.123029][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 81.128627][ T1324] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.183172][ T4192] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.247152][ T4488] input: syz1 as /devices/virtual/input/input5 [ 81.255357][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.281098][ T4227] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.292727][ T4227] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.313431][ T4227] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 81.328043][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.335239][ T4227] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 81.345828][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.363119][ T13] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 81.378205][ T4227] usb 1-1: config 0 descriptor?? [ 81.421571][ T4490] binder: 4489:4490 ioctl 400c620e 0 returned -14 [ 81.443055][ T4192] usb 5-1: Using ep0 maxpacket: 16 [ 81.513293][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.525954][ T1324] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.536750][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.562963][ T1324] usb 4-1: config 0 descriptor?? [ 81.573124][ T13] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 81.575936][ T4192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.602319][ T4192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.620064][ T4192] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 81.641304][ T4192] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 81.651558][ T4192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.680006][ T4192] usb 5-1: config 0 descriptor?? [ 81.803165][ T13] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 81.864557][ T4227] hid-thrustmaster 0003:044F:B65D.0002: item fetching failed at offset 3/5 [ 81.875125][ T4227] hid-thrustmaster 0003:044F:B65D.0002: parse failed with error -22 [ 81.885106][ T4227] hid-thrustmaster: probe of 0003:044F:B65D.0002 failed with error -22 [ 81.933218][ T1324] usbhid 4-1:0.0: can't add hid device: -71 [ 81.941256][ T1324] usbhid: probe of 4-1:0.0 failed with error -71 [ 81.963990][ T1324] usb 4-1: USB disconnect, device number 3 [ 82.000070][ T7] tipc: Node number set to 2130706433 [ 82.013062][ T13] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 82.033995][ T13] usb 3-1: USB disconnect, device number 3 [ 82.089423][ T4468] udc-core: couldn't find an available UDC or it's busy [ 82.097784][ T4468] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.108422][ T4229] usb 1-1: USB disconnect, device number 4 [ 82.218752][ T4192] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0003/input/input6 [ 82.324234][ T4192] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 82.393110][ T1324] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 82.432913][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.503633][ T4229] usb 5-1: USB disconnect, device number 2 [ 82.592973][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.673010][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 82.763020][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.775448][ T1324] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.784737][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.793804][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.807535][ T13] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.823785][ T1324] usb 4-1: config 0 descriptor?? [ 82.833622][ T13] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.844199][ T13] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 82.858332][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 82.864535][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.872321][ T13] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 82.893605][ T1324] hub 4-1:0.0: USB hub found [ 82.900038][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.927516][ T13] usb 3-1: config 0 descriptor?? [ 82.968286][ T4516] device syzkaller0 entered promiscuous mode [ 82.983190][ T7] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.002911][ T7] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.018124][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.025436][ T7] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 83.035213][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.065618][ T7] usb 2-1: config 0 descriptor?? [ 83.093674][ T1324] hub 4-1:0.0: 1 port detected [ 83.321551][ T4509] udc-core: couldn't find an available UDC or it's busy [ 83.329067][ T4509] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.414538][ T13] zeroplus 0003:0C12:0030.0004: ignoring exceeding usage max [ 83.424802][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0xd [ 83.432352][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.440470][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.447823][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.459060][ T4227] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.466904][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.474485][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.482127][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.490709][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.498450][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.510421][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.518524][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.527118][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.534567][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.541908][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.549875][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.557955][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.568458][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.576279][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.584402][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.591851][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.600175][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.607918][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.616330][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.624823][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.632187][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.639794][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.647171][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.654804][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.662148][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.669448][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.676970][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.684271][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.691415][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.698702][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.705914][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 83.711374][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.718534][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.727065][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.734884][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.742303][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.750052][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.757831][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.765614][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.773282][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.780845][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.788859][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.796378][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.803896][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.811447][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.818694][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.829769][ T4227] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.842734][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.850546][ T4227] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.864431][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.871878][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.879337][ T13] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 83.888610][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.895633][ T13] zeroplus 0003:0C12:0030.0004: hidraw0: USB HID vea.f1 Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0 [ 83.907479][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.915488][ T7] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 83.923271][ T13] zeroplus 0003:0C12:0030.0004: no inputs found [ 83.933471][ T7] uclogic 0003:5543:0005.0005: item fetching failed at offset 35/36 [ 83.934450][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.942091][ T7] uclogic 0003:5543:0005.0005: parse failed [ 83.971348][ T13] usb 3-1: USB disconnect, device number 4 [ 83.980338][ T7] uclogic: probe of 0003:5543:0005.0005 failed with error -22 [ 84.013391][ T4227] usb 1-1: New USB device found, idVendor=056a, idProduct=8ef8, bcdDevice=fc.47 [ 84.023408][ T4227] usb 1-1: New USB device strings: Mfr=76, Product=0, SerialNumber=0 [ 84.038403][ T4227] usb 1-1: Manufacturer: syz [ 84.045041][ T7] usb 2-1: USB disconnect, device number 2 [ 84.056855][ T4227] usb 1-1: config 0 descriptor?? [ 84.098733][ T4521] fido_id[4521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 84.174268][ T4524] binder: 4523:4524 ioctl c00c620f 200000000280 returned -22 [ 84.486651][ T4274] usb 4-1: USB disconnect, device number 4 [ 84.493357][ T1324] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 84.493494][ T1324] hub 4-1:0.0: get_hub_status failed [ 84.555643][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x1 [ 84.564083][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.571761][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.579395][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.586538][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.593900][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.601002][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.609299][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.616925][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.624179][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.631883][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.639448][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.648502][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.656172][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.663505][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.670893][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.678453][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.686058][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.693492][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.700865][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.708059][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.715784][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.722913][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.729984][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.737052][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.744528][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.752283][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.761309][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.769135][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.776857][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.783971][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.791145][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.798457][ T4227] wacom 0003:056A:8EF8.0006: unknown main item tag 0x0 [ 84.806145][ T4227] wacom 0003:056A:8EF8.0006: Unknown device_type for 'syz'. Ignoring. [ 84.821663][ T4227] usb 1-1: USB disconnect, device number 5 [ 84.983020][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.183170][ T1324] Bluetooth: hci0: command 0x0401 tx timeout [ 85.193262][ T1324] Bluetooth: hci5: command 0x1003 tx timeout [ 85.199651][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 85.263650][ T7] usb 2-1: no configurations [ 85.268754][ T7] usb 2-1: can't read configurations, error -22 [ 85.423318][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.632909][ T4274] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 85.713286][ T7] usb 2-1: no configurations [ 85.718154][ T7] usb 2-1: can't read configurations, error -22 [ 85.727263][ T7] usb usb2-port1: attempt power cycle [ 85.903068][ T4274] usb 1-1: Using ep0 maxpacket: 32 [ 86.044363][ T4274] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 86.054664][ T4274] usb 1-1: config 0 has no interface number 0 [ 86.061011][ T4274] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 86.085954][ T4574] device syzkaller0 entered promiscuous mode [ 86.093074][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 86.143361][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 86.253189][ T4274] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 86.267040][ T4274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.273081][ T7] usb 2-1: no configurations [ 86.278460][ T4274] usb 1-1: Product: syz [ 86.280337][ T7] usb 2-1: can't read configurations, error -22 [ 86.288912][ T4274] usb 1-1: Manufacturer: syz [ 86.299650][ T4274] usb 1-1: SerialNumber: syz [ 86.323345][ T4274] usb 1-1: config 0 descriptor?? [ 86.353600][ T4551] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.453112][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.493768][ T4584] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.596582][ T7] usb 2-1: no configurations [ 86.601440][ T7] usb 2-1: can't read configurations, error -22 [ 86.608801][ T4551] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.638210][ T7] usb usb2-port1: unable to enumerate USB device [ 86.751825][ T4592] netlink: 188 bytes leftover after parsing attributes in process `syz.3.115'. [ 86.864554][ T4596] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 86.878006][ T4596] overlayfs: failed to set xattr on upper [ 86.889331][ T4596] overlayfs: ...falling back to index=off,metacopy=off. [ 86.933147][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.027825][ T23] cfg80211: failed to load regulatory.db [ 87.172964][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 87.222983][ T4227] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.263112][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 87.269992][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 87.293253][ T7] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 87.303005][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.318855][ T7] usb 3-1: config 0 descriptor?? [ 87.463030][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 87.596574][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.627033][ T4227] usb 4-1: config 0 has no interfaces? [ 87.733173][ T13] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 87.764065][ T13] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.783138][ T4227] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 87.815296][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 87.824275][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.833193][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 87.840102][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 87.852889][ T4227] usb 4-1: Product: syz [ 87.857279][ T4227] usb 4-1: Manufacturer: syz [ 87.862058][ T4227] usb 4-1: SerialNumber: syz [ 87.882919][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 87.889959][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 87.903724][ T4227] usb 4-1: config 0 descriptor?? [ 87.923232][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 87.958796][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 87.972975][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 87.980435][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.002950][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.010043][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.042934][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.050313][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.072912][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.080349][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.102912][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.109912][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.132956][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.140752][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.166118][ T4228] usb 4-1: USB disconnect, device number 5 [ 88.185711][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.193858][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.201439][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.223165][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.233330][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.240450][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.273021][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.280071][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.304965][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.312082][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.341259][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.367177][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.382969][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.389800][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.412954][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.419966][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.443274][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.450219][ T7] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 88.520679][ T7] sony 0003:1345:3008.0008: hiddev0,hidraw0: USB HID v80.20 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 88.542948][ T7] sony 0003:1345:3008.0008: failed to claim input [ 88.573749][ T7] usb 3-1: USB disconnect, device number 5 [ 88.705968][ T4619] fido_id[4619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 88.968970][ T23] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 89.043224][ T4274] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 89.060647][ T4274] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 89.072762][ T4274] asix: probe of 1-1:0.188 failed with error -71 [ 89.089878][ T4274] usb 1-1: USB disconnect, device number 6 [ 89.168389][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.343657][ T4192] Bluetooth: hci5: command 0x1009 tx timeout [ 89.393098][ T23] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 89.409437][ T23] usb 2-1: config 0 has no interface number 0 [ 89.413011][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 89.420937][ T23] usb 2-1: config 0 interface 41 has no altsetting 0 [ 89.583751][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 89.613137][ T23] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 89.625161][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.634224][ T23] usb 2-1: Product: syz [ 89.638654][ T23] usb 2-1: Manufacturer: syz [ 89.643942][ T23] usb 2-1: SerialNumber: syz [ 89.653837][ T23] usb 2-1: config 0 descriptor?? [ 89.664298][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.678961][ T7] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.688148][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 89.706508][ T4644] kvm: pic: level sensitive irq not supported [ 89.706745][ T4644] kvm: pic: non byte read [ 89.719711][ T4644] kvm: pic: level sensitive irq not supported [ 89.719807][ T4644] kvm: pic: non byte read [ 89.731486][ T4644] kvm: pic: single mode not supported [ 89.731585][ T4644] kvm: pic: non byte read [ 89.742746][ T4644] kvm: pic: non byte read [ 89.748039][ T4644] kvm: pic: non byte read [ 89.753061][ T4192] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 89.760915][ T4644] kvm: pic: non byte read [ 89.765798][ T4644] kvm: pic: single mode not supported [ 89.765840][ T4644] kvm: pic: level sensitive irq not supported [ 89.777010][ T4644] kvm: pic: non byte read [ 89.788693][ T4644] kvm: pic: non byte read [ 89.797806][ T4644] kvm: pic: single mode not supported [ 89.797818][ T4644] kvm: pic: level sensitive irq not supported [ 89.804049][ T4644] kvm: pic: non byte read [ 89.853157][ T7] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 89.862644][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.872974][ T7] usb 3-1: Product: syz [ 89.877185][ T7] usb 3-1: Manufacturer: syz [ 89.881980][ T7] usb 3-1: SerialNumber: syz [ 90.002966][ T4192] usb 4-1: Using ep0 maxpacket: 32 [ 90.123114][ T4192] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 90.138914][ T4192] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 90.149473][ T4192] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 90.173141][ T4192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.184854][ T4192] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.195317][ T4192] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.209614][ T4192] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 90.219368][ T4192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.231174][ T4192] usb 4-1: config 0 descriptor?? [ 90.253205][ T7] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 90.270121][ T7] usb 3-1: 1:1 : format type 10 is not supported yet [ 90.291995][ T4652] binder: 4651:4652 ioctl c0306201 2000000003c0 returned -22 [ 90.300121][ T7] usb 3-1: 0:2 : does not exist [ 90.312417][ T7] usb 3-1: unit 4 not found! [ 90.338471][ T7] usb 3-1: USB disconnect, device number 6 [ 90.505903][ T4192] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 90.519529][ T4192] usb 4-1: USB disconnect, device number 6 [ 90.532036][ T4192] usblp0: removed [ 90.595381][ T4405] udevd[4405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.759440][ T4227] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.773368][ T23] CoreChips: probe of 2-1:0.41 failed with error -71 [ 90.785911][ T23] usb 2-1: USB disconnect, device number 7 [ 91.002979][ T4227] usb 1-1: Using ep0 maxpacket: 16 [ 91.103030][ T4274] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 91.122980][ T4227] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.132963][ T4192] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 91.140221][ T4227] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 91.156185][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.164177][ T4227] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 91.174803][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.189855][ T4227] usb 1-1: config 0 descriptor?? [ 91.363174][ T4274] usb 3-1: Using ep0 maxpacket: 16 [ 91.393753][ T4192] usb 4-1: Using ep0 maxpacket: 32 [ 91.543128][ T4192] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 91.552016][ T4192] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 91.560974][ T4192] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 91.570493][ T4274] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.572968][ T1324] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 91.578777][ T4192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.596597][ T4192] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.606417][ T4192] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 91.620391][ T4192] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 91.629833][ T4192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.639926][ T4192] usb 4-1: config 0 descriptor?? [ 91.673418][ T4274] usb 3-1: config 1 interface 0 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024 [ 91.675348][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.685072][ T4274] usb 3-1: config 1 interface 0 has no altsetting 0 [ 91.693453][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.706360][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.715515][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.723569][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.731340][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.739107][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.746808][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.754881][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.762484][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.770446][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.778167][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.786142][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.793866][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.802142][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.810453][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.819402][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.827605][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.835275][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.843474][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.851263][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.859607][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.863029][ T4274] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.868066][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.883439][ T4274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.885241][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.899199][ T4274] usb 3-1: Product: syz [ 91.901688][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.908348][ T4274] usb 3-1: Manufacturer: syz [ 91.914910][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.925633][ T4274] usb 3-1: SerialNumber: syz [ 91.928312][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.940539][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.948659][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.950638][ T4192] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 91.956596][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.956627][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.956651][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.956673][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.956696][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 91.997446][ T4666] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.998855][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.025694][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.035988][ T1324] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 92.045366][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 92.052968][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 92.060934][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 92.069338][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.078406][ T4227] smartjoyplus 0003:6666:8801.0009: unknown main item tag 0x0 [ 92.087161][ T1324] usb 2-1: config 0 descriptor?? [ 92.099412][ T4227] smartjoyplus 0003:6666:8801.0009: hidraw0: USB HID v0.08 Device [HID 6666:8801] on usb-dummy_hcd.0-1/input0 [ 92.113355][ T4227] smartjoyplus 0003:6666:8801.0009: no output reports found [ 92.127239][ T4227] usb 1-1: USB disconnect, device number 7 [ 92.154907][ T23] usb 4-1: USB disconnect, device number 7 [ 92.164796][ T23] usblp0: removed [ 92.201450][ T4669] fido_id[4669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 92.337214][ T4274] usb 3-1: USB disconnect, device number 7 [ 92.575104][ T1324] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 92.583966][ T1324] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 92.598373][ T1324] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 92.610402][ T1324] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 92.693050][ T1324] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 92.723605][ T1324] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT submitted - nothing to read [ 92.799549][ T23] usb 2-1: USB disconnect, device number 8 [ 92.844969][ T23] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 92.912339][ T4681] fido_id[4681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 93.513091][ T1324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 93.522437][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 93.604089][ T4711] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 93.627690][ T4711] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 93.793146][ T1324] usb 4-1: Using ep0 maxpacket: 8 [ 93.953130][ T1324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.969133][ T4716] binder: 4715:4716 ioctl c0306201 200000000080 returned -14 [ 93.979504][ T4716] binder: 4715:4716 ioctl c0306201 2000000003c0 returned -14 [ 94.023210][ T1107] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 94.203096][ T1324] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 94.220685][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.237329][ T1324] usb 4-1: Product: syz [ 94.241654][ T1324] usb 4-1: Manufacturer: syz [ 94.248682][ T1324] usb 4-1: SerialNumber: syz [ 94.255377][ T4729] netlink: 128 bytes leftover after parsing attributes in process `syz.4.169'. [ 94.266501][ T4729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.169'. [ 94.278820][ T4729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.169'. [ 94.402983][ T1107] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 94.418181][ T1107] usb 2-1: config 0 has no interface number 0 [ 94.425924][ T1107] usb 2-1: config 0 interface 41 has no altsetting 0 [ 94.583025][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.595729][ T1107] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 94.614498][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.643845][ T1107] usb 2-1: Product: syz [ 94.648274][ T1107] usb 2-1: Manufacturer: syz [ 94.658236][ T1107] usb 2-1: SerialNumber: syz [ 94.665239][ T1107] usb 2-1: config 0 descriptor?? [ 94.733297][ T1324] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 94.789386][ T1324] usb 4-1: USB disconnect, device number 8 [ 94.865356][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.973158][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.993012][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.033090][ T13] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 95.042458][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.053762][ T13] usb 5-1: config 0 descriptor?? [ 95.281742][ T4736] Bluetooth: hci6: Frame reassembly failed (-84) [ 95.292190][ T4212] Bluetooth: hci6: Frame reassembly failed (-84) [ 95.332952][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.536406][ T13] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 95.544606][ T13] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 95.554533][ T13] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 95.567224][ T1107] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 95.581609][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 95.593013][ T4192] Bluetooth: hci5: command 0x1003 tx timeout [ 95.599496][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 95.703060][ T7] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 95.712309][ T7] usb 3-1: config 0 has no interface number 0 [ 95.719894][ T7] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 95.738043][ T13] usb 5-1: USB disconnect, device number 3 [ 95.883156][ T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 95.893255][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.901691][ T7] usb 3-1: Product: syz [ 95.906049][ T7] usb 3-1: Manufacturer: syz [ 95.910753][ T7] usb 3-1: SerialNumber: syz [ 95.919982][ T7] usb 3-1: config 0 descriptor?? [ 95.943344][ T4734] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.053092][ T1107] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 96.064145][ T1107] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 96.073957][ T1107] CoreChips: probe of 2-1:0.41 failed with error -71 [ 96.083634][ T1107] usb 2-1: USB disconnect, device number 9 [ 96.166487][ T4734] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.584253][ T4744] netlink: 172 bytes leftover after parsing attributes in process `syz.1.175'. [ 96.597664][ T4744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 96.607453][ T4744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 96.952971][ T1107] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 97.313080][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 97.328716][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 97.340539][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.355579][ T4227] Bluetooth: hci6: command 0x1003 tx timeout [ 97.361761][ T4194] Bluetooth: hci6: sending frame failed (-49) [ 97.513236][ T1107] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 97.523081][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.531792][ T1107] usb 2-1: Product: syz [ 97.536047][ T1107] usb 2-1: Manufacturer: syz [ 97.541076][ T1107] usb 2-1: SerialNumber: syz [ 97.547959][ T1107] usb 2-1: config 0 descriptor?? [ 97.593050][ T4192] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 97.663054][ T1107] Bluetooth: hci5: command 0x1001 tx timeout [ 97.669439][ T7] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 97.680580][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 97.687194][ T7] asix: probe of 3-1:0.188 failed with error -71 [ 97.703367][ T7] usb 3-1: USB disconnect, device number 8 [ 97.801366][ T4274] usb 2-1: USB disconnect, device number 10 [ 97.983327][ T4192] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 97.995954][ T4192] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.007941][ T4192] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.018249][ T4192] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 98.031965][ T4192] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.038767][ T4192] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 98.048508][ T4192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.058700][ T4192] usb 5-1: config 0 descriptor?? [ 98.545813][ T4192] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0 [ 98.561081][ T4192] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0 [ 98.568916][ T4192] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0 [ 98.584426][ T4192] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0 [ 98.591832][ T4192] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0 [ 98.608271][ T4192] ryos 0003:1E7D:3138.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 98.722914][ T4227] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 98.755296][ T4192] usb 5-1: USB disconnect, device number 4 [ 98.962946][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 99.123017][ T4227] usb 2-1: unable to get BOS descriptor or descriptor too short [ 99.223117][ T4227] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 7 [ 99.443230][ T4227] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 99.458332][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.467830][ T4227] usb 2-1: Product: syz [ 99.472033][ T4227] usb 2-1: Manufacturer: syz [ 99.477134][ T4227] usb 2-1: SerialNumber: syz [ 99.483713][ T1107] Bluetooth: hci6: command 0x1001 tx timeout [ 99.490087][ T4194] Bluetooth: hci6: sending frame failed (-49) [ 99.745784][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 99.873338][ T4227] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 99.913224][ T4227] usb 2-1: 2:1 : unknown format tag 0x7 is detected. processed as MPEG. [ 99.929139][ T4227] usb 2-1: found format II with max.bitrate = 65535, frame size=9 [ 99.939286][ T4227] usb 2-1: 2:1 : unknown format tag 0x7 is detected. processed as MPEG. [ 99.950091][ T1107] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 99.957912][ T4227] usb 2-1: found format II with max.bitrate = 65535, frame size=9 [ 100.043093][ T4227] usb 2-1: failed to enable PITCH for EP 0x82 [ 100.073534][ T4227] usb 2-1: 2:1: cannot set freq 6155373 to ep 0x82 [ 100.137219][ T4227] usb 2-1: USB disconnect, device number 11 [ 100.213045][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 100.438841][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.513264][ T1107] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 100.536176][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.548088][ T1107] usb 3-1: Product: syz [ 100.552510][ T1107] usb 3-1: Manufacturer: syz [ 100.558084][ T1107] usb 3-1: SerialNumber: syz [ 100.735330][ T4810] binder: 4809:4810 ioctl c0306201 200000000080 returned -14 [ 100.748917][ T4810] binder: 4809:4810 ioctl c0306201 2000000003c0 returned -14 [ 101.273192][ T1107] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 101.302930][ T4192] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 101.482956][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.503111][ T13] Bluetooth: hci6: command 0x1009 tx timeout [ 101.563044][ T4192] usb 2-1: Using ep0 maxpacket: 16 [ 101.683127][ T4192] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.695400][ T4192] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.706043][ T4192] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 101.719756][ T4192] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.727204][ T4192] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 101.733012][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 101.737397][ T4192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.757077][ T4192] usb 2-1: config 0 descriptor?? [ 101.783271][ T1107] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 101.814832][ T1107] usb 3-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 101.863401][ T1107] usb 3-1: USB disconnect, device number 9 [ 102.083135][ T7] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 102.096696][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.105756][ T7] usb 5-1: Product: syz [ 102.112149][ T7] usb 5-1: Manufacturer: syz [ 102.123438][ T7] usb 5-1: SerialNumber: syz [ 102.240703][ T4192] hid (null): unknown global tag 0xc [ 102.246890][ T4192] hid (null): report_id 816866316 is invalid [ 102.254121][ T4192] hid (null): report_id 0 is invalid [ 102.391455][ T4841] netlink: 'syz.2.213': attribute type 4 has an invalid length. [ 102.408737][ T7] snd-usb-audio: probe of 5-1:1.1 failed with error -2 [ 102.430278][ T7] usb 5-1: USB disconnect, device number 5 [ 102.441316][ T4841] netlink: 'syz.2.213': attribute type 4 has an invalid length. [ 102.454812][ T1107] usb 2-1: USB disconnect, device number 12 [ 102.496080][ T4841] syz.2.213 (4841) used greatest stack depth: 20912 bytes left [ 102.928332][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 103.141020][ T4863] netlink: 104 bytes leftover after parsing attributes in process `syz.1.221'. [ 103.174245][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 103.218393][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 103.303151][ T13] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 103.312666][ T13] usb 3-1: config 0 has no interface number 0 [ 103.329585][ T13] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 103.493277][ T13] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 103.503222][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.511994][ T13] usb 3-1: Product: syz [ 103.526693][ T13] usb 3-1: Manufacturer: syz [ 103.531551][ T13] usb 3-1: SerialNumber: syz [ 103.553733][ T13] usb 3-1: config 0 descriptor?? [ 103.573213][ T4848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.586701][ T4875] Zero length message leads to an empty skb [ 103.603056][ T4192] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 103.801814][ T4848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.882973][ T4192] usb 2-1: Using ep0 maxpacket: 16 [ 104.033064][ T4192] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 104.042019][ T4192] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 104.051194][ T4192] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.061801][ T4192] usb 2-1: config 0 has no interface number 0 [ 104.103230][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.253042][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.260835][ T4192] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 104.270627][ T4192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.278739][ T4192] usb 2-1: Product: syz [ 104.283248][ T4192] usb 2-1: Manufacturer: syz [ 104.288468][ T4192] usb 2-1: SerialNumber: syz [ 104.295776][ T4192] usb 2-1: config 0 descriptor?? [ 104.344180][ T4192] asix: probe of 2-1:0.251 failed with error -22 [ 104.463162][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.475170][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.486004][ T7] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 104.496093][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.507796][ T7] usb 1-1: config 0 descriptor?? [ 104.512976][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 104.547760][ T4192] usb 2-1: USB disconnect, device number 13 [ 104.653086][ T23] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.661718][ T23] usb 5-1: config 0 has no interface number 0 [ 104.668400][ T23] usb 5-1: config 0 interface 184 has no altsetting 0 [ 104.873111][ T23] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.882601][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.890949][ T23] usb 5-1: Product: syz [ 104.895903][ T23] usb 5-1: Manufacturer: syz [ 104.901282][ T23] usb 5-1: SerialNumber: syz [ 104.908785][ T23] usb 5-1: config 0 descriptor?? [ 104.964694][ T23] smsc75xx v1.0.0 [ 104.994862][ T7] hid-steam 0003:28DE:1142.000F: item fetching failed at offset 3/5 [ 105.004440][ T7] hid-steam 0003:28DE:1142.000F: steam_probe:parse of hid interface failed [ 105.014120][ T7] hid-steam: probe of 0003:28DE:1142.000F failed with error -22 [ 105.195922][ T4274] usb 1-1: USB disconnect, device number 8 [ 105.423017][ T4192] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 105.584006][ T13] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.612887][ T13] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 105.613039][ T23] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 105.641310][ T23] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 105.656615][ T13] asix: probe of 3-1:0.188 failed with error -71 [ 105.668849][ T13] usb 3-1: USB disconnect, device number 10 [ 105.693289][ T4192] usb 2-1: Using ep0 maxpacket: 32 [ 105.879200][ T4909] binfmt_misc: register: failed to install interpreter file ./file0 [ 105.893191][ T4192] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.003326][ T4192] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 106.012572][ T4192] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.024061][ T4192] usb 2-1: config 0 has no interface number 0 [ 106.030498][ T4192] usb 2-1: config 0 interface 251 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.050122][ T4192] usb 2-1: config 0 interface 251 has no altsetting 0 [ 106.073835][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 106.131050][ T26] audit: type=1804 audit(1775804706.679:2): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.245" name="bus" dev="ramfs" ino=37183 res=1 errno=0 [ 106.147489][ T4920] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 106.164402][ T4920] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 106.174517][ T4920] pit: kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 106.183704][ T26] audit: type=1804 audit(1775804706.719:3): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.245" name="bus" dev="ramfs" ino=37183 res=1 errno=0 [ 106.186573][ T4920] pit: kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 106.283307][ T4192] usb 2-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 106.293168][ T4192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.301459][ T4192] usb 2-1: Product: syz [ 106.330369][ T4192] usb 2-1: Manufacturer: syz [ 106.352920][ T4192] usb 2-1: SerialNumber: syz [ 106.371050][ T4192] usb 2-1: config 0 descriptor?? [ 106.443090][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.457825][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.469044][ T7] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 106.478729][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.490116][ T4925] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 106.509391][ T7] usb 1-1: config 0 descriptor?? [ 106.514831][ T4925] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 106.608664][ T23] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 106.630998][ T23] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 106.659254][ T23] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 106.680960][ T4192] usb 2-1: USB disconnect, device number 14 [ 106.711530][ T23] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 106.739900][ T23] usb 5-1: USB disconnect, device number 6 [ 106.756002][ T13] usb 1-1: USB disconnect, device number 9 [ 107.446833][ T4953] tmpfs: Unknown parameter 'quota' [ 107.854840][ T4950] infiniband syz2: set down [ 107.887132][ T4950] infiniband syz2: added ipvlan0 [ 108.084250][ T4950] RDS/IB: syz2: added [ 108.105518][ T4950] smc: adding ib device syz2 with port count 1 [ 108.130351][ T4950] smc: ib device syz2 port 1 has pnetid [ 108.361389][ T4992] device syzkaller0 entered promiscuous mode [ 109.147631][ T5018] comedi comedi3: board detection failed [ 109.532977][ T4274] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 109.666794][ T5029] 0x000000000200-0x000000020000 : "" [ 109.712211][ T5029] ftl_cs: FTL header corrupt! [ 109.792945][ T4274] usb 4-1: Using ep0 maxpacket: 8 [ 109.923020][ T4274] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 109.932011][ T4274] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.979914][ T4274] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.029711][ T4274] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.075649][ T4274] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.139095][ T4274] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.185300][ T4274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.363068][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.463073][ T13] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 110.485587][ T4274] usb 4-1: usb_control_msg returned -32 [ 110.491418][ T4274] usbtmc 4-1:16.0: can't read capabilities [ 110.733425][ T7] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 110.753261][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.833437][ T13] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 110.842313][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.893176][ T7] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 110.912903][ T7] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 110.921969][ T7] usb 5-1: Manufacturer: syz [ 110.945694][ T7] usb 5-1: config 0 descriptor?? [ 110.963546][ T13] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 110.981245][ T13] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 110.997314][ T13] usb 2-1: Manufacturer: syz [ 111.011133][ T13] usb 2-1: config 0 descriptor?? [ 111.095205][ T7] rc_core: IR keymap rc-hauppauge not found [ 111.101548][ T7] Registered IR keymap rc-empty [ 111.116734][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 111.144270][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 111.163069][ T13] rc_core: IR keymap rc-hauppauge not found [ 111.169381][ T13] Registered IR keymap rc-empty [ 111.194910][ T13] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 111.233331][ T1107] usb 5-1: USB disconnect, device number 7 [ 111.243822][ T13] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input11 [ 111.304152][ T5067] usbtmc 4-1:16.0: usb_clear_halt returned -32 [ 111.310346][ T13] usb 2-1: USB disconnect, device number 15 [ 111.478706][ T7] usb 4-1: USB disconnect, device number 9 [ 111.635179][ T5079] binder: 5078:5079 ioctl c0306201 2000000001c0 returned -14 [ 111.689880][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.698761][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.035493][ T1107] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.172993][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 112.322954][ T4192] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 112.376827][ T5107] loop5: detected capacity change from 0 to 7 [ 112.389649][ T4382] Dev loop5: unable to read RDB block 7 [ 112.396508][ T4382] loop5: AHDI p1 [ 112.401009][ T4382] loop5: partition table partially beyond EOD, truncated [ 112.408724][ T1107] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 112.423003][ T5107] Dev loop5: unable to read RDB block 7 [ 112.432504][ T5107] loop5: AHDI p1 [ 112.432903][ T1107] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 112.437783][ T5107] loop5: partition table partially beyond EOD, truncated [ 112.472939][ T1107] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.550080][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.573151][ T7] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 112.597838][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.603801][ T4192] usb 4-1: Using ep0 maxpacket: 8 [ 112.617373][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 112.633895][ T1107] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.654411][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.668003][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 112.682687][ T1107] usb 5-1: Product: syz [ 112.689058][ T1107] usb 5-1: Manufacturer: syz [ 112.695702][ T1107] usb 5-1: SerialNumber: syz [ 112.716723][ T1107] usb 5-1: config 0 descriptor?? [ 112.743146][ T4192] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.753922][ T1107] hub 5-1:0.0: bad descriptor, ignoring hub [ 112.760095][ T1107] hub: probe of 5-1:0.0 failed with error -5 [ 112.761315][ T4192] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.778535][ T5116] binder: BINDER_SET_CONTEXT_MGR already set [ 112.784740][ T1107] usb 5-1: selecting invalid altsetting 0 [ 112.794966][ T5116] binder: 5115:5116 ioctl 4018620d 200000001000 returned -16 [ 112.810979][ T4192] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.813071][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.831830][ T4192] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.840962][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.853419][ T4192] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.869888][ T4192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.912163][ T7] usb 2-1: Product: syz [ 112.934980][ T7] usb 2-1: Manufacturer: syz [ 112.952194][ T5122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 112.984000][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 112.989447][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 112.998343][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 113.005182][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 113.079593][ T5128] 9pnet_virtio: no channels available for device syz [ 113.153098][ T4192] usb 4-1: GET_CAPABILITIES returned 0 [ 113.158761][ T4192] usbtmc 4-1:16.0: can't read capabilities [ 113.373562][ T4274] usb 4-1: USB disconnect, device number 10 [ 113.412955][ T5086] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 113.705680][ T4192] usb 2-1: USB disconnect, device number 16 [ 113.833879][ T5086] usb 5-1: device firmware changed [ 113.841167][ T23] usb 5-1: USB disconnect, device number 8 [ 113.948196][ T4355] Bluetooth: hci5: Frame reassembly failed (-84) [ 114.022986][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.059751][ T5136] APIC base relocation is unsupported by KVM [ 114.453316][ T23] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 114.472318][ T23] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.488430][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.651006][ T4183] syz-executor (4183) used greatest stack depth: 19952 bytes left [ 114.689122][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.777860][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.793403][ T23] usb 5-1: string descriptor 0 read error: -71 [ 114.809926][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.835896][ T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.864740][ T5165] syz.3.331 uses obsolete (PF_INET,SOCK_PACKET) [ 114.880367][ T23] usb 5-1: config 0 descriptor?? [ 114.903150][ T23] usb 5-1: can't set config #0, error -71 [ 114.929892][ T23] usb 5-1: USB disconnect, device number 9 [ 114.958797][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.088553][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.290221][ T5158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.927578][ T5200] kvm: pic: non byte write [ 115.982953][ T1324] Bluetooth: hci5: command 0x1003 tx timeout [ 115.989545][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 116.006187][ T5173] chnl_net:caif_netlink_parms(): no params data found [ 116.019175][ T4212] Bluetooth: (null): Invalid header checksum [ 116.039289][ T4212] Bluetooth: (null): Invalid header checksum [ 116.125572][ T4212] Bluetooth: (null): Invalid header checksum [ 116.169633][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.187820][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.215115][ T5173] device bridge_slave_0 entered promiscuous mode [ 116.235453][ T4212] Bluetooth: (null): Invalid header checksum [ 116.262588][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.272390][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.281972][ T5173] device bridge_slave_1 entered promiscuous mode [ 116.355415][ T4355] Bluetooth: (null): Invalid header checksum [ 116.398097][ T5173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.398416][ T5202] Bluetooth: Invalid esc byte 0x03 [ 116.416451][ T5173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.565622][ T5173] team0: Port device team_slave_0 added [ 116.604220][ T5173] team0: Port device team_slave_1 added [ 116.702506][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.742342][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.818770][ T5173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.859477][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.879656][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.941361][ T5173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.107422][ T5173] device hsr_slave_0 entered promiscuous mode [ 117.145903][ T5173] device hsr_slave_1 entered promiscuous mode [ 117.163981][ T5173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.192921][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 117.196391][ T5173] Cannot create hsr debugfs directory [ 117.432745][ T9] device hsr_slave_0 left promiscuous mode [ 117.469266][ T9] device hsr_slave_1 left promiscuous mode [ 117.559251][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.577291][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.587740][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.595990][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.613703][ T9] device bridge_slave_1 left promiscuous mode [ 117.622643][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.697301][ T5262] xt_hashlimit: size too large, truncated to 1048576 [ 117.702445][ T9] device bridge_slave_0 left promiscuous mode [ 117.717811][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.814758][ T5259] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 117.824166][ T5259] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 117.836411][ T9] device veth1_macvtap left promiscuous mode [ 117.845633][ T9] device veth0_macvtap left promiscuous mode [ 117.853640][ T9] device veth1_vlan left promiscuous mode [ 117.860258][ T9] device veth0_vlan left promiscuous mode [ 118.080793][ T4228] Bluetooth: hci5: command 0x1001 tx timeout [ 118.088866][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 118.356949][ T9] team0 (unregistering): Port device team_slave_1 removed [ 118.375965][ T9] team0 (unregistering): Port device team_slave_0 removed [ 118.403995][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.432752][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.544805][ T9] bond0 (unregistering): Released all slaves [ 118.854286][ T5173] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.910748][ T5173] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.988413][ T5281] binder: 5280:5281 ioctl c00c6211 200000000e40 returned -22 [ 119.040353][ T5173] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.093337][ T5173] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.263505][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 119.534737][ T5173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.600016][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.617670][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.647128][ T5173] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.676333][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.744664][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.779810][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.787115][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.844278][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.866094][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.914983][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.943392][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.950674][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.003217][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.048119][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.066862][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.095809][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.113960][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.133621][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.153029][ T4192] Bluetooth: hci5: command 0x1009 tx timeout [ 120.183818][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.203527][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.222662][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.242691][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.263070][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.285253][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.563112][ T4228] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.660103][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.669221][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.695282][ T5173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.023308][ T4228] usb 5-1: config 0 has no interfaces? [ 121.029179][ T4228] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 121.069650][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.105126][ T4228] usb 5-1: config 0 descriptor?? [ 121.255817][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.276083][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.341129][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.354564][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.360783][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 121.385307][ T5173] device veth0_vlan entered promiscuous mode [ 121.407188][ T23] usb 5-1: USB disconnect, device number 10 [ 121.420074][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.439958][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.479299][ T5173] device veth1_vlan entered promiscuous mode [ 121.578563][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.617991][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.658017][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.683940][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.726577][ T5173] device veth0_macvtap entered promiscuous mode [ 121.768246][ T5173] device veth1_macvtap entered promiscuous mode [ 121.840045][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.864634][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.881295][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.901352][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.926848][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.970509][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.017694][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.060139][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.104603][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.155665][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.183813][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.229424][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.260111][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.278469][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.298691][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.337430][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.372824][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.399557][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.432819][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.482722][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.521892][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.554214][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.574835][ T5371] device syzkaller0 entered promiscuous mode [ 122.590531][ T5173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.606327][ T5173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.625954][ T5173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.659176][ T5173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.888342][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.920873][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.944646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.025615][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.039443][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.060625][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.125199][ T26] audit: type=1326 audit(1775804723.679:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb374e4a819 code=0x7ffc0000 [ 123.208194][ T26] audit: type=1326 audit(1775804723.679:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb374e4a819 code=0x7ffc0000 [ 123.268076][ T5390] raw_sendmsg: syz.5.330 forgot to set AF_INET. Fix it! [ 123.283010][ T26] audit: type=1326 audit(1775804723.679:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb374e4a819 code=0x7ffc0000 [ 123.349428][ T5395] netlink: 32 bytes leftover after parsing attributes in process `syz.4.377'. [ 123.363015][ T26] audit: type=1326 audit(1775804723.679:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb374e4a819 code=0x7ffc0000 [ 123.414679][ T26] audit: type=1326 audit(1775804723.729:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb374e4a819 code=0x7ffc0000 [ 123.469411][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 123.535138][ T26] audit: type=1326 audit(1775804723.729:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb374e4a819 code=0x7ffc0000 [ 123.690277][ T26] audit: type=1326 audit(1775804723.729:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb374e4a819 code=0x7ffc0000 [ 123.710200][ T5416] 9pnet_virtio: no channels available for device syz [ 123.792051][ T26] audit: type=1326 audit(1775804723.729:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb374e4a4ab code=0x7ffc0000 [ 123.896732][ T26] audit: type=1326 audit(1775804723.729:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb374e4a4ab code=0x7ffc0000 [ 123.926831][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 123.940900][ T26] audit: type=1326 audit(1775804723.729:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb374e4a4ab code=0x7ffc0000 [ 124.220459][ T5437] pit: kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 124.248095][ T4199] Bluetooth: Wrong link type (-71) [ 124.324538][ T5437] pit: kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 124.345078][ T5437] pit: kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 124.395035][ T5437] pit: kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 124.424159][ T5437] pit: kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 124.467989][ T5437] pit: kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 124.533344][ T5437] pit: kvm: requested 89676 ns i8254 timer period limited to 200000 ns [ 124.585171][ T5437] pit: kvm: requested 77104 ns i8254 timer period limited to 200000 ns [ 124.634332][ T5437] pit: kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 124.675159][ T5437] pit: kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 124.758707][ T5453] netlink: 88 bytes leftover after parsing attributes in process `syz.2.393'. [ 125.303451][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 126.909597][ T5530] Dead loop on virtual device ip6_vti0, fix it urgently! [ 127.111181][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.414'. [ 127.553151][ T5549] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 129.813924][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 129.813943][ T26] audit: type=1326 audit(1775804730.369:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5642 comm="syz.5.452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0737b00819 code=0x0 [ 129.843228][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.457445][ T5676] misc userio: Begin command sent, but we're already running [ 130.930078][ T5685] device syzkaller0 entered promiscuous mode [ 131.774177][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 131.790616][ T5709] binder: BC_ACQUIRE_RESULT not supported [ 131.811197][ T5709] binder: 5707:5709 ioctl c0306201 200000000840 returned -22 [ 132.153176][ T7] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 132.189051][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.289395][ T7] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 132.319381][ T7] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 132.338574][ T7] usb 3-1: Manufacturer: syz [ 132.359599][ T7] usb 3-1: config 0 descriptor?? [ 132.518138][ T5728] xt_hashlimit: size too large, truncated to 1048576 [ 132.525601][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.602907][ T7] rc_core: IR keymap rc-hauppauge not found [ 132.612947][ T7] Registered IR keymap rc-empty [ 132.637197][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 132.675613][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 132.739924][ T7] usb 3-1: USB disconnect, device number 11 [ 132.862583][ T5743] netlink: 'syz.5.486': attribute type 16 has an invalid length. [ 132.963071][ T23] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 132.976360][ T23] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 133.033396][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.106371][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.114476][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.233093][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.252849][ T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.261426][ T23] usb 5-1: Product: syz [ 133.271564][ T23] usb 5-1: Manufacturer: syz [ 133.283465][ T23] usb 5-1: SerialNumber: syz [ 133.309225][ T23] usb 5-1: config 0 descriptor?? [ 133.363906][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 133.370040][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 133.410159][ T23] usb 5-1: selecting invalid altsetting 0 [ 134.681112][ T5791] binder: 5790:5791 unknown command 0 [ 134.687148][ T5791] binder: 5790:5791 ioctl c0306201 200000000080 returned -22 [ 135.233265][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 135.554734][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.562501][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.653100][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.666186][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.677479][ T23] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 135.687850][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.706972][ T23] usb 3-1: config 0 descriptor?? [ 136.104652][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.159239][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.194808][ T23] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 136.206012][ T23] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 136.220729][ T23] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0010/input/input15 [ 136.247068][ T23] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 136.427293][ T5803] usb 3-1: USB disconnect, device number 12 [ 136.673585][ T5801] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.683234][ T5801] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.710389][ T5801] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.720458][ T5801] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.980482][ T5819] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.007237][ T5819] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.016610][ T5823] comedi comedi0: Minor 2 could not be opened [ 137.023248][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 137.216999][ T5833] ip_vti0: Master is either lo or non-ether device [ 137.312918][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 137.483110][ T23] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 137.503340][ T23] usb 2-1: config 0 has no interface number 0 [ 137.509633][ T23] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 137.573314][ T23] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 137.625853][ T23] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.649549][ T23] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 137.679989][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.712138][ T23] usb 2-1: config 0 descriptor?? [ 137.764734][ T23] ldusb 2-1:0.55: Interrupt in endpoint not found [ 137.968374][ T23] usb 2-1: USB disconnect, device number 17 [ 138.026290][ T1107] usb 5-1: USB disconnect, device number 11 [ 138.039600][ T26] audit: type=1326 audit(1775804738.589:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07368d819 code=0x7ffc0000 [ 138.165527][ T26] audit: type=1326 audit(1775804738.659:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07368d819 code=0x7ffc0000 [ 138.280621][ T26] audit: type=1326 audit(1775804738.659:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07368d819 code=0x7ffc0000 [ 138.353442][ T26] audit: type=1326 audit(1775804738.659:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07368d819 code=0x7ffc0000 [ 138.376333][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.459631][ T26] audit: type=1326 audit(1775804738.659:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe07368d819 code=0x7ffc0000 [ 138.550944][ T1107] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 138.601452][ T26] audit: type=1326 audit(1775804738.689:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07368d819 code=0x7ffc0000 [ 138.625128][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.639704][ T5900] 9pnet_virtio: no channels available for device syz [ 138.721290][ T26] audit: type=1326 audit(1775804738.689:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07368d819 code=0x7ffc0000 [ 138.744267][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.812891][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 138.889953][ T26] audit: type=1326 audit(1775804738.689:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07368d819 code=0x7ffc0000 [ 138.958082][ T26] audit: type=1326 audit(1775804738.689:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe07368d4ab code=0x7ffc0000 [ 138.993040][ T1107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.049632][ T26] audit: type=1326 audit(1775804738.689:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe07368d4ab code=0x7ffc0000 [ 139.103178][ T23] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 139.103436][ T1107] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 139.157695][ T1107] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 139.159403][ T1166] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.282938][ T4229] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 139.343419][ T1107] usb 5-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 139.364709][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.391777][ T1107] usb 5-1: Product: syz [ 139.396251][ T1107] usb 5-1: Manufacturer: syz [ 139.400964][ T1107] usb 5-1: SerialNumber: syz [ 139.513307][ T23] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 139.534553][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 139.683413][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.702888][ T4229] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.722895][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.733351][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 139.742654][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 139.763373][ T4229] usb 2-1: config 0 descriptor?? [ 139.768562][ T23] usb 3-1: Product: syz [ 139.773456][ T23] usb 3-1: Manufacturer: syz [ 139.778173][ T23] usb 3-1: SerialNumber: syz [ 139.793801][ T23] usb 3-1: config 0 descriptor?? [ 139.803033][ T1107] usb 5-1: Can't get UAC3 power state for id 10 [ 139.862810][ T5951] hsr0: VLAN not yet supported [ 139.883055][ T1107] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 139.920772][ T1107] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 139.930003][ T1107] usb 5-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8215 device_setup=1 to enable and report any issues to g@b4.vu [ 139.982239][ T23] usb 3-1: selecting invalid altsetting 0 [ 139.991321][ T1107] usb 5-1: USB disconnect, device number 12 [ 140.076372][ T23] usb 3-1: USB disconnect, device number 13 [ 140.343032][ T4229] usbhid 2-1:0.0: can't add hid device: -71 [ 140.349689][ T4229] usbhid: probe of 2-1:0.0 failed with error -71 [ 140.360275][ T4229] usb 2-1: USB disconnect, device number 18 [ 140.375433][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.408618][ T4402] udevd[4402]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 141.192907][ T4229] Bluetooth: hci5: command 0x1003 tx timeout [ 141.210761][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 141.956688][ T6019] tipc: Started in network mode [ 141.975102][ T6019] tipc: Node identity 060000000000000001, cluster identity 4711 [ 142.112420][ T6028] 9pnet_virtio: no channels available for device syz [ 142.125044][ T4196] block nbd3: Receive control failed (result -32) [ 142.128112][ T6029] 9pnet_virtio: no channels available for device syz [ 142.148953][ T5995] block nbd3: shutting down sockets [ 142.222738][ T4196] Bluetooth: Wrong link type (-22) [ 142.862944][ T4266] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.867237][ T6070] device syzkaller0 entered promiscuous mode [ 143.223211][ T4266] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 143.243681][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.263030][ T4228] Bluetooth: hci5: command 0x1001 tx timeout [ 143.270154][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 143.353139][ T4266] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 143.379841][ T4266] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 143.416447][ T4266] usb 5-1: Manufacturer: syz [ 143.445293][ T4266] usb 5-1: config 0 descriptor?? [ 143.622957][ T4266] rc_core: IR keymap rc-hauppauge not found [ 143.630410][ T4266] Registered IR keymap rc-empty [ 143.651899][ T4266] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 143.713516][ T4266] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 143.781456][ T4266] usb 5-1: USB disconnect, device number 13 [ 144.223112][ T4229] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 144.561171][ T6136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.595'. [ 144.630415][ T4229] usb 4-1: config 0 has no interfaces? [ 144.636847][ T4229] usb 4-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 144.651962][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.720429][ T4229] usb 4-1: config 0 descriptor?? [ 144.884415][ T6148] device syzkaller0 entered promiscuous mode [ 145.012943][ T1107] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 145.211744][ T4231] usb 4-1: USB disconnect, device number 11 [ 145.253081][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 145.343070][ T4228] Bluetooth: hci5: command 0x1009 tx timeout [ 145.373011][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.383743][ T1107] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.395424][ T1107] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.405707][ T1107] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 145.420519][ T1107] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.427522][ T1107] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 145.437952][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.449964][ T1107] usb 3-1: config 0 descriptor?? [ 145.776204][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 145.776222][ T26] audit: type=1326 audit(1775804746.319:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2425c1819 code=0x7ffc0000 [ 145.809207][ T26] audit: type=1326 audit(1775804746.339:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2425c1819 code=0x7ffc0000 [ 145.841031][ T26] audit: type=1326 audit(1775804746.339:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2425c1819 code=0x7ffc0000 [ 145.875770][ T26] audit: type=1326 audit(1775804746.339:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2425c1819 code=0x7ffc0000 [ 145.900468][ T26] audit: type=1326 audit(1775804746.339:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2425c1819 code=0x7ffc0000 [ 145.923500][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.970488][ T1107] hid-thrustmaster 0003:044F:B65D.0011: item fetching failed at offset 3/5 [ 145.981072][ T6164] binder: BINDER_SET_CONTEXT_MGR already set [ 145.983006][ T26] audit: type=1326 audit(1775804746.339:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2425c1819 code=0x7ffc0000 [ 146.007716][ T6164] binder: 6163:6164 ioctl 4018620d 200000004a80 returned -16 [ 146.022536][ T1107] hid-thrustmaster 0003:044F:B65D.0011: parse failed with error -22 [ 146.028687][ T26] audit: type=1326 audit(1775804746.339:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2425c1819 code=0x7ffc0000 [ 146.033759][ T1107] hid-thrustmaster: probe of 0003:044F:B65D.0011 failed with error -22 [ 146.054627][ T26] audit: type=1326 audit(1775804746.339:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2425c1819 code=0x7ffc0000 [ 146.092716][ T26] audit: type=1326 audit(1775804746.339:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2425c14ab code=0x7ffc0000 [ 146.118885][ T26] audit: type=1326 audit(1775804746.339:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2425c14ab code=0x7ffc0000 [ 146.142558][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.204736][ T4243] Bluetooth: (null): Invalid header checksum [ 146.211053][ T4243] Bluetooth: (null): Invalid header checksum [ 146.215665][ T6142] udc-core: couldn't find an available UDC or it's busy [ 146.231623][ T6142] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.250094][ T1107] usb 3-1: USB disconnect, device number 14 [ 146.315045][ T4355] Bluetooth: (null): Invalid header checksum [ 146.354410][ T6166] Bluetooth: Invalid esc byte 0x03 [ 146.853063][ T4228] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 146.902897][ T6177] input: syz1 as /devices/virtual/input/input17 [ 147.103110][ T4228] usb 5-1: Using ep0 maxpacket: 8 [ 147.243119][ T4228] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 147.265653][ T4228] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.280608][ T4228] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.298745][ T4228] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.309579][ T4228] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.324270][ T4228] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.334100][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.592977][ T1107] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.594149][ T4228] usb 5-1: usb_control_msg returned -32 [ 147.607566][ T4228] usbtmc 5-1:16.0: can't read capabilities [ 147.963119][ T1107] usb 4-1: config 0 has no interfaces? [ 147.969754][ T1107] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 147.983026][ T6195] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 147.994991][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.007792][ T4231] usb 5-1: USB disconnect, device number 14 [ 148.031814][ T1107] usb 4-1: config 0 descriptor?? [ 148.449324][ T4231] usb 4-1: USB disconnect, device number 12 [ 148.560048][ T4243] Bluetooth: (null): Invalid header checksum [ 148.569972][ T4243] Bluetooth: (null): Invalid header checksum [ 148.683288][ T1166] Bluetooth: (null): Invalid header checksum [ 148.793157][ T4243] Bluetooth: (null): Invalid header checksum [ 148.903667][ T9] Bluetooth: (null): Too short H5 packet [ 148.912940][ T9] Bluetooth: (null): Invalid header checksum [ 149.652969][ T4228] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 149.919131][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 150.083076][ T4228] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.102854][ T4228] usb 4-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.126985][ T4228] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.142835][ T4228] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 150.162182][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.182348][ T4228] usb 4-1: config 0 descriptor?? [ 150.443708][ T6241] udc-core: couldn't find an available UDC or it's busy [ 150.451073][ T6241] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.746255][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.767499][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.795617][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.822876][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.836691][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.852485][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.875450][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.876279][ T4199] Bluetooth: hci0: unknown advertising packet type: 0x6b [ 150.883809][ T4199] Bluetooth: hci0: Dropping invalid advertising data [ 150.892895][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.899827][ T4199] Bluetooth: hci0: Malicious advertising data. [ 150.920336][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.937998][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.967049][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 150.992900][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 151.021720][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 151.072135][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 151.100806][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 151.142891][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 151.172724][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 151.208326][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 151.225745][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 151.250701][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 151.268968][ T4228] uclogic 0003:5543:0005.0012: unknown main item tag 0x0 [ 151.291315][ T6285] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 151.293657][ T4228] uclogic 0003:5543:0005.0012: item fetching failed at offset 35/36 [ 151.312519][ T6285] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 151.343283][ T4228] uclogic 0003:5543:0005.0012: parse failed [ 151.349889][ T4228] uclogic: probe of 0003:5543:0005.0012 failed with error -22 [ 151.414483][ T4228] usb 4-1: USB disconnect, device number 13 [ 152.093070][ T4266] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 152.157010][ T6309] device syzkaller0 entered promiscuous mode [ 152.170503][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 152.170521][ T26] audit: type=1804 audit(1775804752.719:188): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.658" name="bus" dev="ramfs" ino=46032 res=1 errno=0 [ 152.256829][ T26] audit: type=1804 audit(1775804752.719:189): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.658" name="bus" dev="ramfs" ino=46032 res=1 errno=0 [ 152.352890][ T4266] usb 3-1: Using ep0 maxpacket: 32 [ 152.473140][ T4266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.487355][ T4266] usb 3-1: config 0 has no interfaces? [ 152.653100][ T4266] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 152.671124][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.687657][ T4266] usb 3-1: Product: syz [ 152.695390][ T4266] usb 3-1: Manufacturer: syz [ 152.700048][ T4266] usb 3-1: SerialNumber: syz [ 152.724353][ T4266] usb 3-1: config 0 descriptor?? [ 152.851626][ T4355] Bluetooth: hci5: Frame reassembly failed (-84) [ 153.015036][ T4234] usb 3-1: USB disconnect, device number 15 [ 153.254954][ T6332] block device autoloading is deprecated and will be removed. [ 153.268569][ T6331] md2: error: bitmap file must be a regular file [ 153.644291][ T6347] block device autoloading is deprecated and will be removed. [ 153.780435][ T6341] md: could not open device unknown-block(0,0). [ 153.817961][ T6341] md: md_import_device returned -6 [ 153.865903][ T6355] device syzkaller1 entered promiscuous mode [ 153.983984][ T6359] tmpfs: Unknown parameter 'usrquota' [ 154.503741][ T6383] device ip6gre1 entered promiscuous mode [ 154.613109][ T4234] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 154.833364][ T4229] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 154.862921][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 154.873077][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 154.879982][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 154.898489][ T4231] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 154.982978][ T4234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.994182][ T4234] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.103049][ T4229] usb 6-1: Using ep0 maxpacket: 32 [ 155.120351][ T26] audit: type=1326 audit(1775804755.669:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.1.696" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb374e4a819 code=0x0 [ 155.148397][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 155.183549][ T4234] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 155.197994][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.207653][ T4234] usb 3-1: Product: syz [ 155.211950][ T4234] usb 3-1: Manufacturer: syz [ 155.217076][ T4234] usb 3-1: SerialNumber: syz [ 155.224607][ T4234] usb 3-1: config 0 descriptor?? [ 155.283122][ T4229] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 155.293235][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.306881][ T4229] usb 6-1: config 0 descriptor?? [ 155.313005][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.377932][ T4229] as10x_usb: device has been detected [ 155.384439][ T4229] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 155.394811][ T4231] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.405984][ T4229] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 155.422242][ T4231] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.428327][ T4229] as10x_usb: error during firmware upload part1 [ 155.439326][ T4229] Registered device nBox DVB-T Dongle [ 155.508840][ T4234] usb 3-1: USB disconnect, device number 16 [ 155.583275][ T4231] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 155.602043][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.612208][ T4231] usb 4-1: Product: syz [ 155.624332][ T4231] usb 4-1: Manufacturer: syz [ 155.624979][ T4229] usb 6-1: USB disconnect, device number 2 [ 155.629164][ T4231] usb 4-1: SerialNumber: syz [ 155.654513][ T4229] Unregistered device nBox DVB-T Dongle [ 155.656046][ T4229] as10x_usb: device has been disconnected [ 155.973246][ T4231] usb 4-1: cannot find UAC_HEADER [ 156.077623][ T4231] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 156.125905][ T4231] usb 4-1: USB disconnect, device number 14 [ 156.343889][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.447927][ T6421] 9pnet_virtio: no channels available for device syz [ 156.943041][ T4229] Bluetooth: hci5: command 0x1001 tx timeout [ 156.949420][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 157.868707][ T1107] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 158.114104][ T1107] usb 6-1: Using ep0 maxpacket: 32 [ 158.233142][ T1107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.268419][ T1107] usb 6-1: config 0 has no interfaces? [ 158.443149][ T1107] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 158.452702][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.502957][ T1107] usb 6-1: Product: syz [ 158.507210][ T1107] usb 6-1: Manufacturer: syz [ 158.511855][ T1107] usb 6-1: SerialNumber: syz [ 158.534968][ T1107] usb 6-1: config 0 descriptor?? [ 158.575525][ T6480] netlink: 'syz.3.729': attribute type 9 has an invalid length. [ 158.602979][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 158.634098][ T6480] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.645384][ T6480] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.654184][ T6480] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.662973][ T6480] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.675588][ T6480] netlink: 'syz.3.729': attribute type 9 has an invalid length. [ 158.691114][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 158.790797][ T6485] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.812190][ T1107] usb 6-1: USB disconnect, device number 3 [ 158.816494][ T6485] IPVS: sed: FWM 3 0x00000003 - no destination available [ 159.022956][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 159.299572][ T4229] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 159.623168][ T6507] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 159.630722][ T6507] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.644926][ T6507] vhci_hcd vhci_hcd.0: Device attached [ 159.661061][ T6508] vhci_hcd: connection closed [ 159.671012][ T4243] vhci_hcd: stop threads [ 159.683232][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.689209][ T4243] vhci_hcd: release socket [ 159.711623][ T4243] vhci_hcd: disconnect device [ 159.713706][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.913862][ T4229] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 159.931299][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.954362][ T4229] usb 4-1: Product: syz [ 159.963441][ T4229] usb 4-1: Manufacturer: syz [ 159.968533][ T4229] usb 4-1: SerialNumber: syz [ 160.020587][ T4229] usb 4-1: config 0 descriptor?? [ 160.279519][ T4234] usb 4-1: USB disconnect, device number 15 [ 160.366006][ T1107] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.479890][ T6528] 9pnet_virtio: no channels available for device syz [ 160.633147][ T1107] usb 6-1: Using ep0 maxpacket: 8 [ 160.661224][ T6530] device veth0_vlan left promiscuous mode [ 160.793204][ T1107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 160.881802][ T6535] xt_hashlimit: size too large, truncated to 1048576 [ 160.992848][ T4229] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 161.058222][ T1107] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 161.077748][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.096934][ T1107] usb 6-1: Product: syz [ 161.107605][ T1107] usb 6-1: Manufacturer: syz [ 161.118261][ T1107] usb 6-1: SerialNumber: syz [ 161.252843][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 161.384370][ T4229] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 161.392325][ T4229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 161.436108][ T4229] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 161.579301][ T4229] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 161.593790][ T4229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 161.627989][ T4229] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 161.733108][ T4229] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 161.740827][ T4229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 161.780471][ T4229] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 161.796856][ T1107] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 161.844854][ T1107] usb 6-1: USB disconnect, device number 4 [ 162.115767][ T4405] udevd[4405]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.118735][ T4229] usb 3-1: string descriptor 0 read error: -22 [ 162.173430][ T4229] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 162.199344][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.284634][ T4229] adutux 3-1:168.0: interrupt endpoints not found [ 162.314565][ T4229] Bluetooth: hci2: command 0x0406 tx timeout [ 162.522265][ T4228] usb 3-1: USB disconnect, device number 17 [ 163.053387][ T144] Bluetooth: (null): Invalid header checksum [ 163.059770][ T144] Bluetooth: (null): Invalid header checksum [ 163.166782][ T144] Bluetooth: (null): Invalid header checksum [ 163.254339][ T4199] Bluetooth: hci4: Received unexpected HCI Event 00000000 [ 163.276524][ T4243] Bluetooth: (null): Invalid header checksum [ 163.908689][ T6584] autofs4:pid:6584:autofs_fill_super: called with bogus options [ 164.223522][ T6595] device syzkaller0 entered promiscuous mode [ 164.318044][ T6599] device syzkaller0 entered promiscuous mode [ 164.407854][ T6603] input: syz0 as /devices/virtual/input/input18 [ 164.564609][ T4231] [ 164.567003][ T4231] ====================================================== [ 164.574227][ T4231] WARNING: possible circular locking dependency detected [ 164.581977][ T4231] syzkaller #0 Not tainted [ 164.586590][ T4231] ------------------------------------------------------ [ 164.594053][ T4231] kworker/0:5/4231 is trying to acquire lock: [ 164.600489][ T4231] ffff88807e87cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 164.611850][ T4231] [ 164.611850][ T4231] but task is already holding lock: [ 164.619859][ T4231] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 164.629430][ T4231] [ 164.629430][ T4231] which lock already depends on the new lock. [ 164.629430][ T4231] [ 164.640219][ T4231] [ 164.640219][ T4231] the existing dependency chain (in reverse order) is: [ 164.649516][ T4231] [ 164.649516][ T4231] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 164.657553][ T4231] __mutex_lock_common+0x1e3/0x2400 [ 164.663396][ T4231] mutex_lock_nested+0x17/0x20 [ 164.669063][ T4231] rfkill_register+0x33/0x8a0 [ 164.674382][ T4231] hci_register_dev+0x452/0x970 [ 164.680326][ T4231] vhci_create_device+0x32c/0x5c0 [ 164.685970][ T4231] vhci_write+0x391/0x450 [ 164.691086][ T4231] vfs_write+0x745/0xd60 [ 164.695943][ T4231] ksys_write+0x152/0x260 [ 164.700931][ T4231] do_syscall_64+0x4c/0xa0 [ 164.705986][ T4231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.712768][ T4231] [ 164.712768][ T4231] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 164.720775][ T4231] __mutex_lock_common+0x1e3/0x2400 [ 164.726909][ T4231] mutex_lock_nested+0x17/0x20 [ 164.732376][ T4231] vhci_send_frame+0x88/0x100 [ 164.737836][ T4231] hci_send_frame+0x1a9/0x2e0 [ 164.743073][ T4231] hci_tx_work+0x9f9/0x1710 [ 164.748103][ T4231] process_one_work+0x85f/0x1010 [ 164.753832][ T4231] worker_thread+0xaa6/0x1290 [ 164.759411][ T4231] kthread+0x436/0x520 [ 164.764156][ T4231] ret_from_fork+0x1f/0x30 [ 164.769124][ T4231] [ 164.769124][ T4231] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 164.778349][ T4231] __flush_work+0x116/0x210 [ 164.783381][ T4231] hci_dev_do_open+0xc58/0x1270 [ 164.788761][ T4231] hci_power_on+0x1c1/0x610 [ 164.793789][ T4231] process_one_work+0x85f/0x1010 [ 164.799426][ T4231] worker_thread+0xaa6/0x1290 [ 164.804712][ T4231] kthread+0x436/0x520 [ 164.809484][ T4231] ret_from_fork+0x1f/0x30 [ 164.814535][ T4231] [ 164.814535][ T4231] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 164.822539][ T4231] __mutex_lock_common+0x1e3/0x2400 [ 164.828667][ T4231] mutex_lock_nested+0x17/0x20 [ 164.834214][ T4231] bg_scan_update+0x44/0x3b0 [ 164.839429][ T4231] process_one_work+0x85f/0x1010 [ 164.845153][ T4231] worker_thread+0xaa6/0x1290 [ 164.850661][ T4231] kthread+0x436/0x520 [ 164.855351][ T4231] ret_from_fork+0x1f/0x30 [ 164.860560][ T4231] [ 164.860560][ T4231] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 164.870820][ T4231] __lock_acquire+0x2c42/0x7d10 [ 164.876293][ T4231] lock_acquire+0x19e/0x400 [ 164.881321][ T4231] __flush_work+0x116/0x210 [ 164.886343][ T4231] __cancel_work_timer+0x3f4/0x560 [ 164.892102][ T4231] hci_request_cancel_all+0xcc/0x300 [ 164.898175][ T4231] hci_dev_do_close+0x4e/0x1030 [ 164.903638][ T4231] hci_rfkill_set_block+0x10a/0x190 [ 164.909822][ T4231] rfkill_set_block+0x1c6/0x420 [ 164.915286][ T4231] rfkill_epo+0x75/0x170 [ 164.920255][ T4231] rfkill_op_handler+0x76/0x220 [ 164.925890][ T4231] process_one_work+0x85f/0x1010 [ 164.931351][ T4231] worker_thread+0xaa6/0x1290 [ 164.936552][ T4231] kthread+0x436/0x520 [ 164.941386][ T4231] ret_from_fork+0x1f/0x30 [ 164.946620][ T4231] [ 164.946620][ T4231] other info that might help us debug this: [ 164.946620][ T4231] [ 164.957302][ T4231] Chain exists of: [ 164.957302][ T4231] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 164.957302][ T4231] [ 164.973873][ T4231] Possible unsafe locking scenario: [ 164.973873][ T4231] [ 164.981479][ T4231] CPU0 CPU1 [ 164.987078][ T4231] ---- ---- [ 164.992536][ T4231] lock(rfkill_global_mutex); [ 164.997758][ T4231] lock(&data->open_mutex); [ 165.005328][ T4231] lock(rfkill_global_mutex); [ 165.013321][ T4231] lock((work_completion)(&hdev->bg_scan_update)); [ 165.020274][ T4231] [ 165.020274][ T4231] *** DEADLOCK *** [ 165.020274][ T4231] [ 165.028676][ T4231] 3 locks held by kworker/0:5/4231: [ 165.034402][ T4231] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 165.045489][ T4231] #1: ffffc9000303fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 165.056597][ T4231] #2: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 165.067109][ T4231] [ 165.067109][ T4231] stack backtrace: [ 165.073429][ T4231] CPU: 0 PID: 4231 Comm: kworker/0:5 Not tainted syzkaller #0 [ 165.081529][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.091938][ T4231] Workqueue: events rfkill_op_handler [ 165.097683][ T4231] Call Trace: [ 165.101195][ T4231] [ 165.104230][ T4231] dump_stack_lvl+0x188/0x250 [ 165.108926][ T4231] ? load_image+0x400/0x400 [ 165.113432][ T4231] ? show_regs_print_info+0x20/0x20 [ 165.118645][ T4231] ? print_circular_bug+0x12b/0x1a0 [ 165.123962][ T4231] check_noncircular+0x296/0x330 [ 165.128995][ T4231] ? look_up_lock_class+0x71/0x110 [ 165.134122][ T4231] ? add_chain_block+0x940/0x940 [ 165.139436][ T4231] ? lockdep_lock+0xf1/0x1f0 [ 165.144124][ T4231] ? __lock_acquire+0x12e8/0x7d10 [ 165.149685][ T4231] ? mark_lock+0x94/0x320 [ 165.154193][ T4231] __lock_acquire+0x2c42/0x7d10 [ 165.159322][ T4231] ? verify_lock_unused+0x140/0x140 [ 165.164938][ T4231] lock_acquire+0x19e/0x400 [ 165.169448][ T4231] ? __flush_work+0xfa/0x210 [ 165.174135][ T4231] ? __lock_acquire+0x7d10/0x7d10 [ 165.179360][ T4231] ? read_lock_is_recursive+0x10/0x10 [ 165.184738][ T4231] ? start_flush_work+0x776/0x820 [ 165.189854][ T4231] __flush_work+0x116/0x210 [ 165.194367][ T4231] ? __flush_work+0xfa/0x210 [ 165.199183][ T4231] ? flush_work+0x20/0x20 [ 165.203864][ T4231] ? try_to_grab_pending+0xfa/0x7f0 [ 165.209427][ T4231] ? mark_lock+0x94/0x320 [ 165.214019][ T4231] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 165.220334][ T4231] ? lock_chain_count+0x20/0x20 [ 165.225398][ T4231] ? mark_lock+0x94/0x320 [ 165.229840][ T4231] ? __cancel_work_timer+0x36a/0x560 [ 165.235429][ T4231] __cancel_work_timer+0x3f4/0x560 [ 165.240864][ T4231] ? cancel_work_sync+0x20/0x20 [ 165.246004][ T4231] ? __cancel_work+0x1f9/0x2e0 [ 165.250787][ T4231] ? lockdep_hardirqs_on+0x94/0x140 [ 165.255999][ T4231] ? __cancel_work+0x27b/0x2e0 [ 165.260768][ T4231] ? cancel_work+0x20/0x20 [ 165.265831][ T4231] hci_request_cancel_all+0xcc/0x300 [ 165.271415][ T4231] hci_dev_do_close+0x4e/0x1030 [ 165.276632][ T4231] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 165.282805][ T4231] ? _raw_spin_unlock+0x40/0x40 [ 165.287917][ T4231] ? kobject_uevent_env+0x371/0x890 [ 165.293692][ T4231] hci_rfkill_set_block+0x10a/0x190 [ 165.299334][ T4231] ? rcu_lock_release+0x20/0x20 [ 165.304563][ T4231] rfkill_set_block+0x1c6/0x420 [ 165.309506][ T4231] rfkill_epo+0x75/0x170 [ 165.313752][ T4231] rfkill_op_handler+0x76/0x220 [ 165.318969][ T4231] process_one_work+0x85f/0x1010 [ 165.324027][ T4231] ? worker_detach_from_pool+0x240/0x240 [ 165.330147][ T4231] ? lockdep_hardirqs_off+0x70/0x100 [ 165.335926][ T4231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 165.341222][ T4231] ? _raw_spin_lock_irqsave+0x100/0x100 [ 165.347123][ T4231] ? wq_worker_running+0x97/0x170 [ 165.352450][ T4231] worker_thread+0xaa6/0x1290 [ 165.357675][ T4231] kthread+0x436/0x520 [ 165.361951][ T4231] ? rcu_lock_release+0x20/0x20 [ 165.367696][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 165.372474][ T4231] ret_from_fork+0x1f/0x30 [ 165.377278][ T4231] [ 165.386019][ T4228] Bluetooth: hci5: command 0x1003 tx timeout [ 165.417429][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 167.513225][ T4274] Bluetooth: hci5: command 0x1001 tx timeout [ 167.519975][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 169.583430][ T4274] Bluetooth: hci5: command 0x1009 tx timeout