last executing test programs: 17.318891731s ago: executing program 0 (id=334): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 13.58618553s ago: executing program 0 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) 12.40384894s ago: executing program 0 (id=351): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004ec0)=[{{&(0x7f0000001000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x1) 12.403699069s ago: executing program 1 (id=352): r0 = msgget$private(0x0, 0x401) msgsnd(r0, &(0x7f0000000240)={0x3, "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"}, 0x3c3, 0x800) 12.292400614s ago: executing program 3 (id=353): sched_setattr(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a5b}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.460208311s ago: executing program 1 (id=354): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000240)={r3}) 11.403791057s ago: executing program 0 (id=356): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x12f34, &(0x7f0000000000)={0x0, 0x2d3b, 0x400, 0x3, 0x1e}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) 11.359645392s ago: executing program 3 (id=357): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040004) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) 9.096671878s ago: executing program 0 (id=358): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000001300)=""/4096) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x6, 0x80000001, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x204, 0x6, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x5, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x88, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x402, 0x5, 0x8, 0x4ad1, 0x1, 0x252e, 0x4251, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x401, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0x6d5f, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x2, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x9, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x804, 0x7fff, 0x62, 0xfffeffff, 0x5, 0x0, 0x7fffffff, 0x3, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) r2 = epoll_create1(0x80000) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.826770393s ago: executing program 1 (id=360): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x28) close(r2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@mmap={0x9, 0x0, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x6, 0x3, 0xc, 0x5, "7a1e9b25"}, 0xffffffff, 0x1, {}, 0x4, 0x0, r2}) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 6.438844005s ago: executing program 2 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x7c380000}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 6.418323464s ago: executing program 1 (id=364): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x18, 0x1a, "0da2308726fd6a318c40a4de07adc921a6165deae5c78929681c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.315275785s ago: executing program 2 (id=365): syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2b, 0x80801, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 4.843919277s ago: executing program 4 (id=366): r0 = msgget$private(0x0, 0x401) msgsnd(r0, &(0x7f0000000240)={0x3, "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"}, 0x3c3, 0x800) 4.817408542s ago: executing program 3 (id=367): sched_setattr(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a5b}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.478549329s ago: executing program 4 (id=368): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x12f34, &(0x7f0000000000)={0x0, 0x2d3b, 0x400, 0x3, 0x1e}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) 4.477345924s ago: executing program 3 (id=369): r0 = socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0xfffffffc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r4 = dup2(r0, r0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x46) 4.008689676s ago: executing program 1 (id=370): syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000240)={r3}) 3.131081129s ago: executing program 4 (id=371): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.079450262s ago: executing program 2 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) 2.496233405s ago: executing program 1 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000004000380140000001100"], 0xc0}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) 2.495662024s ago: executing program 4 (id=374): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf252100000008000300", @ANYRES32=r2], 0x80}}, 0x4000000) 1.546842489s ago: executing program 2 (id=375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x9b7, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 1.318783562s ago: executing program 0 (id=376): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, &(0x7f0000001300)=[{0x0}], 0x1, 0x1000, 0x3f2f0fde) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.283744513s ago: executing program 4 (id=377): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040004) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) 1.095693607s ago: executing program 2 (id=378): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009"], 0x1c}], 0x1}, 0x0) 608.890651ms ago: executing program 3 (id=379): r0 = msgget$private(0x0, 0x401) msgsnd(r0, &(0x7f0000000240)={0x3, "c02fc3f3457613925d40420157f11e9117aa9757e2eb5c1a97566d7b0230581edcff0bad41c868c8882eaf9724f5116dbad0a07433708ab54c03400ccb02101741765895c13d2bc38bec18e4f049ee651ce1adc5228a49da72fe0a319c337da2c82b214f930eef5f107868d6edfb84237e2b9262f766e5ffb7d230747c697f6c751eb6d0a00f61f23eb25b11fe59e4ef9fc869d0719b134b96a153624636d149d91707c8418c14a9b2c8e4a97eb9df8d28776cba35eed04f23663c259f29753044545a054853f07cd8bf665ca5be044a50dfa0eb3259d17ce9462fc7f86e9669dd47963e08ffd9e486a45c5d61b65cd7b7342cce4b6b9abb97c5bffe75adf35f291f3b8490724636c3ab04f0ca5080b3b3739f6d0fd1976bd3e2859a8f0f7ce213f0540c8ba88ab7e6ca44d4ac38a56ebfd0eae85a1b8a7a1c9dc71515b5614491f751a2db5e8cf518e5b4f3bbd9dbd7f70a3c48e05656383016bfa53a6098c2dd08b5473272e80b9c393474377dc8eda0cd28360a0c135bf9fb4d40f7fdcd59ac638c4a13f2449a3d279bda64050241d9a6f9d34f8f073552b809714f7a2744b720f330058af5a41a65432c2ca8015043864938c395f7857717e0a687952f6bbd31aeba3cae470abfb9d01f99e0883ecf4d38cbfcc07c137b35e3e5bd227045f0fa42825eed36c2ca4204663a381ccec067b563fa0bacf767e28f3a2fc696bf872a680698a56c61dbd8d7cee024bb155d1a65eae81383f71a04b9e4391e6ec8baa6b84b5589821f4a2f7f03e4bd923cc315633b14bc20d6004f318b536027ad0874da0ae2698873117a541f6850e86e915ff932c8e5cf228878ea53a282699c07bafd82bef3e9b4797318179758f2af6c755f98338e8c7f6209b436a4909ba4edac7b69fe73d59b89a9937236086a88294cd8bfba9da8919e7e3366dc741d44b7323bbb117a5392226a9cf9ba3ddf442665e615bb4f6467a22497e05faa4bc97b64d6dc46b3f407fddfeecda10bb8ad965093a62022adfeddf02e4c88184dfe5c861dd9da5db2bac6d646e23fa1120f0d5acab41e7239cc631ea44b9d0c82f5e6c72ff7ef0fb55fc04c8b0ef30e53be37f4e59df469f58fc717fe76f75654ff69b720ae3ed9905bb781605fa23d69bea75b91eba527056b657af677727a276f845a546c3aeea1a77b5cad9341af38dfe2344225757c242038d179c9cc5bb0128dcde38aa50f1b93ce8c68b5a323361c0fa6280d53565ebd96fe0da727133b06a0c182ea41bd46734aa6de606f49fe5a75d795d68589eef13951bea828984dfc807aefb31e4793c1765271ef3fb84c154ef47a1c1168b383a9e110"}, 0x3c3, 0x800) 436.424008ms ago: executing program 2 (id=380): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x7, 0x0, 0x2}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 347.314194ms ago: executing program 3 (id=381): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 0s ago: executing program 4 (id=382): syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2b, 0x80801, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. [ 79.112359][ T5789] cgroup: Unknown subsys name 'net' [ 79.393774][ T5789] cgroup: Unknown subsys name 'cpuset' [ 79.448963][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.030872][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.711238][ T36] cfg80211: failed to load regulatory.db [ 83.275127][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.292531][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.314461][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.318082][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.362729][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.368161][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.380428][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.383139][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.391044][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.392635][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.393389][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.397113][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.397369][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.407094][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.408341][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.409052][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.438986][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.439164][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.440044][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.448075][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.451041][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.455919][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.456817][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.476354][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.553209][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.579307][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 84.597703][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 84.657888][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 84.666377][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 84.743462][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 84.991343][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.991426][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.991540][ T5808] bridge_slave_0: entered allmulticast mode [ 84.993077][ T5808] bridge_slave_0: entered promiscuous mode [ 85.005868][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.005985][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.006139][ T5807] bridge_slave_0: entered allmulticast mode [ 85.009061][ T5807] bridge_slave_0: entered promiscuous mode [ 85.064154][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.064320][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.064486][ T5808] bridge_slave_1: entered allmulticast mode [ 85.066543][ T5808] bridge_slave_1: entered promiscuous mode [ 85.072523][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.072641][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.072793][ T5807] bridge_slave_1: entered allmulticast mode [ 85.075227][ T5807] bridge_slave_1: entered promiscuous mode [ 85.100351][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.100461][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.100916][ T5806] bridge_slave_0: entered allmulticast mode [ 85.103277][ T5806] bridge_slave_0: entered promiscuous mode [ 85.107138][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.107244][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.107688][ T5809] bridge_slave_0: entered allmulticast mode [ 85.111574][ T5809] bridge_slave_0: entered promiscuous mode [ 85.178403][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.178561][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.178740][ T5806] bridge_slave_1: entered allmulticast mode [ 85.180707][ T5806] bridge_slave_1: entered promiscuous mode [ 85.183351][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.183440][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.183534][ T5809] bridge_slave_1: entered allmulticast mode [ 85.184928][ T5809] bridge_slave_1: entered promiscuous mode [ 85.222943][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.223051][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.223199][ T5810] bridge_slave_0: entered allmulticast mode [ 85.226586][ T5810] bridge_slave_0: entered promiscuous mode [ 85.273427][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.277432][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.277646][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.277766][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.277920][ T5810] bridge_slave_1: entered allmulticast mode [ 85.281397][ T5810] bridge_slave_1: entered promiscuous mode [ 85.330392][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.352040][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.354217][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.356650][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.394842][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.411227][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.431441][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.476431][ T5808] team0: Port device team_slave_0 added [ 85.481568][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.539795][ T59] Bluetooth: hci1: command tx timeout [ 85.540231][ T5824] Bluetooth: hci4: command tx timeout [ 85.618448][ T59] Bluetooth: hci3: command tx timeout [ 85.618657][ T5824] Bluetooth: hci0: command tx timeout [ 85.699975][ T5824] Bluetooth: hci2: command tx timeout [ 85.750735][ T5807] team0: Port device team_slave_0 added [ 85.768781][ T5808] team0: Port device team_slave_1 added [ 85.783329][ T5806] team0: Port device team_slave_0 added [ 85.786615][ T5807] team0: Port device team_slave_1 added [ 85.791463][ T5809] team0: Port device team_slave_0 added [ 85.830780][ T5806] team0: Port device team_slave_1 added [ 85.844983][ T5809] team0: Port device team_slave_1 added [ 85.860088][ T5810] team0: Port device team_slave_0 added [ 85.900135][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.900148][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.900162][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.902943][ T5810] team0: Port device team_slave_1 added [ 85.919590][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.919612][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.919634][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.943983][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.943999][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.944023][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.963680][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.963695][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.963718][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.965323][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.965335][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.965358][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.967421][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.967434][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.967456][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.015794][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.015810][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.015832][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.020278][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.020292][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.020327][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.031977][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.031992][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.032014][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.067875][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.067890][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.067913][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.223237][ T5808] hsr_slave_0: entered promiscuous mode [ 86.224761][ T5808] hsr_slave_1: entered promiscuous mode [ 86.239722][ T5807] hsr_slave_0: entered promiscuous mode [ 86.240893][ T5807] hsr_slave_1: entered promiscuous mode [ 86.242339][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 86.242440][ T5807] Cannot create hsr debugfs directory [ 86.316143][ T5806] hsr_slave_0: entered promiscuous mode [ 86.317370][ T5806] hsr_slave_1: entered promiscuous mode [ 86.319030][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 86.319055][ T5806] Cannot create hsr debugfs directory [ 86.330735][ T5809] hsr_slave_0: entered promiscuous mode [ 86.332029][ T5809] hsr_slave_1: entered promiscuous mode [ 86.332845][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 86.332867][ T5809] Cannot create hsr debugfs directory [ 86.412337][ T5810] hsr_slave_0: entered promiscuous mode [ 86.413534][ T5810] hsr_slave_1: entered promiscuous mode [ 86.414356][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 86.414377][ T5810] Cannot create hsr debugfs directory [ 87.342063][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.384504][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.387355][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.415412][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.416520][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.455716][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.474659][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.501299][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.593255][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.620135][ T5824] Bluetooth: hci1: command tx timeout [ 87.620145][ T59] Bluetooth: hci4: command tx timeout [ 87.641781][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.645436][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.679018][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.681680][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.698485][ T5824] Bluetooth: hci3: command tx timeout [ 87.698495][ T59] Bluetooth: hci0: command tx timeout [ 87.735016][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.764033][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.778618][ T5824] Bluetooth: hci2: command tx timeout [ 87.797039][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.928698][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.973644][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.984361][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.005978][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.014131][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.042680][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.063940][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.101571][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.250918][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.283785][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.287235][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.311018][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.317217][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.357524][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.383734][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.424790][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.505399][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.551655][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.583823][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.596662][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.622683][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.625739][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.663347][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.670927][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.701793][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.736504][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.770244][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.777779][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.778121][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.826527][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.826659][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.889716][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.928779][ T1568] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.928898][ T1568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.946386][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.975982][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.976070][ T1568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.083156][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.127505][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.141456][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.146636][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.183621][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.183811][ T1568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.273047][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.302748][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.346015][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.346142][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.418559][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.418672][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.473953][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.514172][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.514373][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.567955][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.568153][ T1568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.620222][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.701904][ T5824] Bluetooth: hci1: command tx timeout [ 89.701917][ T59] Bluetooth: hci4: command tx timeout [ 89.778564][ T5824] Bluetooth: hci0: command tx timeout [ 89.778594][ T5824] Bluetooth: hci3: command tx timeout [ 89.802603][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.868302][ T59] Bluetooth: hci2: command tx timeout [ 89.965320][ T5808] veth0_vlan: entered promiscuous mode [ 90.026576][ T5808] veth1_vlan: entered promiscuous mode [ 90.143813][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.203471][ T5809] veth0_vlan: entered promiscuous mode [ 90.259587][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.275791][ T5808] veth0_macvtap: entered promiscuous mode [ 90.296530][ T5809] veth1_vlan: entered promiscuous mode [ 90.317896][ T5808] veth1_macvtap: entered promiscuous mode [ 90.437279][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.485380][ T5807] veth0_vlan: entered promiscuous mode [ 90.490410][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.564497][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.566744][ T5809] veth0_macvtap: entered promiscuous mode [ 90.585559][ T1523] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.603762][ T1523] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.606556][ T5807] veth1_vlan: entered promiscuous mode [ 90.620064][ T1523] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.625192][ T5809] veth1_macvtap: entered promiscuous mode [ 90.627338][ T1523] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.905898][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.972497][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.017758][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.036760][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.075797][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.100965][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.101502][ T5807] veth0_macvtap: entered promiscuous mode [ 91.104258][ T5810] veth0_vlan: entered promiscuous mode [ 91.156182][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.156211][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.197160][ T5807] veth1_macvtap: entered promiscuous mode [ 91.226041][ T5806] veth0_vlan: entered promiscuous mode [ 91.377748][ T5810] veth1_vlan: entered promiscuous mode [ 91.520023][ T5806] veth1_vlan: entered promiscuous mode [ 91.522004][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.522018][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.615680][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.675546][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.685685][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.685704][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.764284][ T2970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.773291][ T2970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.778338][ T59] Bluetooth: hci4: command tx timeout [ 91.778941][ T59] Bluetooth: hci1: command tx timeout [ 91.805450][ T2970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.812825][ T2970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.851944][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.851967][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.859782][ T59] Bluetooth: hci3: command tx timeout [ 91.859810][ T59] Bluetooth: hci0: command tx timeout [ 91.935269][ T5810] veth0_macvtap: entered promiscuous mode [ 91.939308][ T5824] Bluetooth: hci2: command tx timeout [ 91.984446][ T5806] veth0_macvtap: entered promiscuous mode [ 92.102480][ T5810] veth1_macvtap: entered promiscuous mode [ 92.133063][ T5806] veth1_macvtap: entered promiscuous mode [ 92.376859][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.409191][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.437442][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.548367][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.548437][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.589383][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.592626][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.596229][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.712840][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.713605][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.713620][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.722877][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.235256][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.271671][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.987401][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.987420][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.460375][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.460394][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.577139][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.577159][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.020535][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.020555][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.096385][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.096405][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.316307][ T5944] No memory to map [ 101.827576][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.194600][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 102.377573][ T5815] usb 4-1: device descriptor read/all, error -71 [ 103.836651][ T6018] bridge0: port 3(syz_tun) entered blocking state [ 103.837407][ T6018] bridge0: port 3(syz_tun) entered disabled state [ 103.887648][ T6018] syz_tun: entered allmulticast mode [ 103.935068][ T6018] syz_tun: entered promiscuous mode [ 104.033637][ T6020] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 104.134772][ T6018] bridge0: port 3(syz_tun) entered blocking state [ 104.134933][ T6018] bridge0: port 3(syz_tun) entered forwarding state [ 104.210627][ T6020] bridge0: port 3(syz_tun) entered disabled state [ 104.233990][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.291772][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.371946][ T6020] bridge0: port 3(syz_tun) entered blocking state [ 104.372061][ T6020] bridge0: port 3(syz_tun) entered forwarding state [ 104.402556][ T6020] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.402687][ T6020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.402971][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.404536][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.433013][ T6020] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 105.088219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.426336][ T6042] No memory to map [ 108.428352][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.769960][ T31] usb 5-1: no configurations [ 108.769982][ T31] usb 5-1: can't read configurations, error -22 [ 108.914567][ T5888] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.938501][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.941031][ T6072] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 109.973695][ T37] audit: type=1326 audit(1776510009.871:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5cdc819 code=0x7ffc0000 [ 109.973750][ T37] audit: type=1326 audit(1776510009.871:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d5cdc819 code=0x7ffc0000 [ 109.973803][ T37] audit: type=1326 audit(1776510009.881:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79d5c9d04e code=0x7ffc0000 [ 109.973841][ T37] audit: type=1326 audit(1776510009.931:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79d5c9d04e code=0x7ffc0000 [ 109.973877][ T37] audit: type=1326 audit(1776510009.931:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79d5c9d04e code=0x7ffc0000 [ 109.973914][ T37] audit: type=1326 audit(1776510009.941:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79d5c9d04e code=0x7ffc0000 [ 109.973942][ T37] audit: type=1326 audit(1776510009.941:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79d5c9d04e code=0x7ffc0000 [ 109.973980][ T37] audit: type=1326 audit(1776510009.941:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79d5c9d04e code=0x7ffc0000 [ 109.974019][ T37] audit: type=1326 audit(1776510009.941:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79d5c9d04e code=0x7ffc0000 [ 109.974057][ T37] audit: type=1326 audit(1776510009.951:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79d5c9d04e code=0x7ffc0000 [ 110.187710][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 110.187739][ T5888] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 110.187763][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 110.187783][ T5888] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 110.187825][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 110.187847][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.338364][ T31] usb 5-1: device not accepting address 3, error -71 [ 110.443160][ T31] usb usb5-port1: attempt power cycle [ 110.453008][ T5888] usb 3-1: config 0 descriptor?? [ 110.494811][ T6083] binder: 6082:6083 ioctl c0306201 200000000680 returned -14 [ 110.932232][ T5888] usb 3-1: can't set config #0, error -71 [ 111.173748][ T5888] usb 3-1: USB disconnect, device number 2 [ 113.897213][ T6127] binder: 6124:6127 ioctl c0306201 0 returned -14 [ 115.080300][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 115.689323][ T6146] syz.3.70 uses obsolete (PF_INET,SOCK_PACKET) [ 116.119770][ T5933] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.442500][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 116.672372][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 116.672424][ T5933] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 116.672446][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.466793][ T5933] usb 1-1: config 0 descriptor?? [ 117.475687][ T6148] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.800807][ T6170] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 117.836901][ T6169] bridge0: port 3(hsr0) entered blocking state [ 117.837156][ T6169] bridge0: port 3(hsr0) entered disabled state [ 117.837677][ T6169] hsr0: entered allmulticast mode [ 117.837695][ T6169] hsr_slave_0: entered allmulticast mode [ 117.863043][ T6169] hsr_slave_1: entered allmulticast mode [ 117.892268][ T6169] hsr0: entered promiscuous mode [ 117.934894][ T6173] IPVS: stopping master sync thread 6170 ... [ 117.986686][ T6169] bridge0: port 3(hsr0) entered blocking state [ 117.986808][ T6169] bridge0: port 3(hsr0) entered forwarding state [ 118.194601][ T6175] netlink: 68 bytes leftover after parsing attributes in process `syz.2.78'. [ 119.388428][ T5888] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 119.388715][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 119.539493][ T5888] usb 5-1: device descriptor read/64, error -32 [ 119.590269][ T5933] logitech-djreceiver 0003:046D:C52B.0001: unknown main item tag 0x0 [ 119.590312][ T5933] logitech-djreceiver 0003:046D:C52B.0001: unknown main item tag 0x0 [ 119.590341][ T5933] logitech-djreceiver 0003:046D:C52B.0001: unknown main item tag 0x0 [ 119.590368][ T5933] logitech-djreceiver 0003:046D:C52B.0001: unknown main item tag 0x0 [ 119.590396][ T5933] logitech-djreceiver 0003:046D:C52B.0001: unknown main item tag 0x0 [ 119.590423][ T5933] logitech-djreceiver 0003:046D:C52B.0001: unknown main item tag 0x0 [ 119.590448][ T5933] logitech-djreceiver 0003:046D:C52B.0001: unknown main item tag 0x0 [ 119.590475][ T5933] logitech-djreceiver 0003:046D:C52B.0001: unknown main item tag 0x0 [ 119.590511][ T5933] logitech-djreceiver 0003:046D:C52B.0001: unknown main item tag 0x0 [ 119.590538][ T5933] logitech-djreceiver 0003:046D:C52B.0001: unknown main item tag 0x0 [ 120.205031][ T5933] usb 1-1: USB disconnect, device number 2 [ 120.208252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.258628][ T5888] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 120.388741][ T6192] fuse: Bad value for 'fd' [ 120.545893][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 120.561612][ T5888] usb 5-1: not running at top speed; connect to a high speed hub [ 120.591496][ T5888] usb 5-1: config 6 has an invalid interface number: 247 but max is 0 [ 120.591526][ T5888] usb 5-1: config 6 has no interface number 0 [ 120.591557][ T5888] usb 5-1: config 6 interface 247 has no altsetting 0 [ 121.198807][ T5888] usb 5-1: string descriptor 0 read error: -71 [ 121.198904][ T5888] usb 5-1: New USB device found, idVendor=05ac, idProduct=2c1f, bcdDevice=94.a2 [ 121.198916][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.207036][ T5888] usb 5-1: can't set config #6, error -71 [ 121.213588][ T5888] usb 5-1: USB disconnect, device number 6 [ 121.882431][ T6179] kthread_run failed with err -4 [ 121.941810][ T5815] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.078335][ T5815] usb 4-1: device descriptor read/64, error -71 [ 122.492092][ T6201] Zero length message leads to an empty skb [ 122.538379][ T5815] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.016829][ T5815] usb 4-1: device descriptor read/64, error -71 [ 123.096968][ T6224] bridge0: port 3(syz_tun) entered blocking state [ 123.097026][ T6224] bridge0: port 3(syz_tun) entered disabled state [ 123.097317][ T6224] syz_tun: entered allmulticast mode [ 123.123773][ T5815] usb usb4-port1: attempt power cycle [ 123.142278][ T6224] syz_tun: entered promiscuous mode [ 123.142831][ T6224] bridge0: port 3(syz_tun) entered blocking state [ 123.142895][ T6224] bridge0: port 3(syz_tun) entered forwarding state [ 123.179709][ T6226] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 123.195727][ T6226] bridge0: port 3(syz_tun) entered disabled state [ 123.195947][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.232827][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.378376][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.413139][ T6226] bridge0: port 3(syz_tun) entered blocking state [ 123.413229][ T6226] bridge0: port 3(syz_tun) entered forwarding state [ 123.421333][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.421498][ T6226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.433273][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.433453][ T6226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.474152][ T6226] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 123.528615][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 123.530248][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 123.530294][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 123.530316][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.588674][ T5815] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.726510][ T10] usb 2-1: config 0 descriptor?? [ 123.729445][ T6225] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.040391][ T6231] bridge0: port 3(hsr0) entered blocking state [ 124.040993][ T6231] bridge0: port 3(hsr0) entered disabled state [ 124.041609][ T6231] hsr0: entered allmulticast mode [ 124.041627][ T6231] hsr_slave_0: entered allmulticast mode [ 124.041639][ T6231] hsr_slave_1: entered allmulticast mode [ 124.122543][ T6231] hsr0: entered promiscuous mode [ 124.234270][ T6231] bridge0: port 3(hsr0) entered blocking state [ 124.258396][ T6231] bridge0: port 3(hsr0) entered forwarding state [ 124.294674][ T5815] usb 4-1: device descriptor read/8, error -71 [ 124.498061][ T10] usb 2-1: USB disconnect, device number 2 [ 124.628392][ T5964] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 125.789357][ T5964] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.791604][ T5964] usb 3-1: not running at top speed; connect to a high speed hub [ 125.797101][ T5964] usb 3-1: config 6 has an invalid interface number: 247 but max is 0 [ 125.797126][ T5964] usb 3-1: config 6 has no interface number 0 [ 125.797157][ T5964] usb 3-1: config 6 interface 247 has no altsetting 0 [ 125.812174][ T5964] usb 3-1: New USB device found, idVendor=05ac, idProduct=2c1f, bcdDevice=94.a2 [ 125.812202][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.812222][ T5964] usb 3-1: Product: syz [ 125.812236][ T5964] usb 3-1: Manufacturer: syz [ 125.812250][ T5964] usb 3-1: SerialNumber: syz [ 126.612426][ T6252] netlink: 68 bytes leftover after parsing attributes in process `syz.3.97'. [ 126.777249][ T6254] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 127.147188][ T6241] kthread_run failed with err -4 [ 129.328662][ T5815] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.501405][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 129.508265][ T5815] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 129.508292][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.508310][ T5815] usb 1-1: config 0 has no interfaces? [ 129.517979][ T5815] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 129.518008][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.518026][ T5815] usb 1-1: Product: syz [ 129.518041][ T5815] usb 1-1: Manufacturer: syz [ 129.518054][ T5815] usb 1-1: SerialNumber: syz [ 129.553379][ T5815] usb 1-1: config 0 descriptor?? [ 129.637939][ T5964] ipheth 3-1:6.247: Unable to find alternate settings interface [ 129.660642][ T5964] usb 3-1: USB disconnect, device number 3 [ 129.788615][ T10] usb 1-1: USB disconnect, device number 3 [ 130.418195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.527043][ T6307] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 131.568117][ T6306] IPVS: stopping master sync thread 6307 ... [ 131.602560][ T6306] netlink: 68 bytes leftover after parsing attributes in process `syz.0.114'. [ 132.011738][ T6008] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.889800][ T6008] usb 4-1: Using ep0 maxpacket: 32 [ 132.892829][ T6008] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 132.892858][ T6008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.906116][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.913968][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.981702][ T6008] usb 4-1: config 0 descriptor?? [ 133.003033][ T6008] gspca_main: sunplus-2.14.0 probing 041e:400b [ 133.400932][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.568302][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 133.575108][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.577756][ T10] usb 1-1: config 0 has no interfaces? [ 133.585686][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 133.585714][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.585732][ T10] usb 1-1: Product: syz [ 133.585746][ T10] usb 1-1: Manufacturer: syz [ 133.585760][ T10] usb 1-1: SerialNumber: syz [ 133.597618][ T10] apple-mfi-fastcharge 1-1: config 0 descriptor?? [ 133.808335][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.847647][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.122'. [ 133.937896][ T6008] gspca_sunplus: reg_r err -110 [ 133.937999][ T6008] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 134.108821][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 134.114665][ T5815] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 134.114693][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.114712][ T5815] usb 2-1: config 0 has no interfaces? [ 134.118569][ T5815] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 134.118599][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.118619][ T5815] usb 2-1: Product: syz [ 134.118633][ T5815] usb 2-1: Manufacturer: syz [ 134.118648][ T5815] usb 2-1: SerialNumber: syz [ 134.352933][ T5815] usb 2-1: config 0 descriptor?? [ 134.382933][ T10] apple-mfi-fastcharge 1-1: USB disconnect, device number 4 [ 134.620537][ T6008] usb 2-1: USB disconnect, device number 3 [ 137.029047][ T6360] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 137.455179][ T6364] IPVS: stopping master sync thread 6360 ... [ 137.592084][ T6364] netlink: 52 bytes leftover after parsing attributes in process `syz.4.132'. [ 138.612170][ T6358] kthread_run failed with err -4 [ 139.596149][ T6374] libceph: resolve '0..' (ret=-3): failed [ 139.715767][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 140.328354][ T5815] usb 4-1: USB disconnect, device number 8 [ 140.958225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.088310][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.249393][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 141.273283][ T10] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 141.273310][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.273329][ T10] usb 2-1: config 0 has no interfaces? [ 141.304604][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 141.304625][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.304636][ T10] usb 2-1: Product: syz [ 141.304643][ T10] usb 2-1: Manufacturer: syz [ 141.304650][ T10] usb 2-1: SerialNumber: syz [ 141.341638][ T10] usb 2-1: config 0 descriptor?? [ 141.589087][ T10] usb 2-1: USB disconnect, device number 4 [ 141.708383][ T5815] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 142.269568][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 142.784712][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.797211][ T5815] usb 4-1: config 0 has no interfaces? [ 142.824101][ T5815] usb 4-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 142.824132][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.824151][ T5815] usb 4-1: Product: syz [ 142.824164][ T5815] usb 4-1: Manufacturer: syz [ 142.824177][ T5815] usb 4-1: SerialNumber: syz [ 142.874866][ T5815] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 143.130361][ T6403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.142'. [ 144.032177][ T6412] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.145'. [ 144.222535][ T36] apple-mfi-fastcharge 4-1: USB disconnect, device number 9 [ 146.340418][ T1001] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.268206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.288200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.298197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.308200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.318203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.380813][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 148.380831][ T37] audit: type=1326 audit(1776510048.871:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6445 comm="syz.0.156" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79d5cdc819 code=0x0 [ 148.420963][ T1001] usb 5-1: Using ep0 maxpacket: 32 [ 148.440004][ T1001] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 148.440034][ T1001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.474986][ T1001] usb 5-1: config 0 descriptor?? [ 148.494654][ T1001] gspca_main: sunplus-2.14.0 probing 041e:400b [ 149.558991][ T1001] gspca_sunplus: reg_w_riv err -110 [ 149.559097][ T1001] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 149.917820][ T6469] libceph: resolve '0..' (ret=-3): failed [ 150.068333][ T5963] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.458719][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 150.458738][ T5963] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 150.458750][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 150.458762][ T5963] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 150.458784][ T5963] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 150.458796][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.466883][ T5963] usb 3-1: config 0 descriptor?? [ 150.647303][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 150.707280][ T5963] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 150.707303][ T5963] hdpvr 3-1:0.0: device init failed [ 150.707382][ T5963] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 150.735696][ T5963] usb 3-1: USB disconnect, device number 4 [ 151.269401][ T6008] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.421224][ T6008] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.421241][ T6008] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.421262][ T6008] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 151.421274][ T6008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.424815][ T6008] usb 2-1: config 0 descriptor?? [ 151.699060][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.163'. [ 151.844526][ T5815] usb 2-1: USB disconnect, device number 5 [ 153.374040][ T6491] binder: BINDER_SET_CONTEXT_MGR already set [ 153.374056][ T6491] binder: 6490:6491 ioctl 4018620d 2000000002c0 returned -16 [ 153.521752][ T5933] usb 5-1: USB disconnect, device number 7 [ 156.607056][ T6520] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.175'. [ 156.930050][ T6008] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.961944][ T37] audit: type=1326 audit(1776510057.441:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6522 comm="syz.1.176" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c6c41c819 code=0x0 [ 157.158288][ T6008] usb 4-1: Using ep0 maxpacket: 8 [ 157.160360][ T6008] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.160392][ T6008] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.163155][ T6008] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 157.163171][ T6008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.163181][ T6008] usb 4-1: Product: syz [ 157.163189][ T6008] usb 4-1: Manufacturer: syz [ 157.163196][ T6008] usb 4-1: SerialNumber: syz [ 157.166391][ T6008] usb 4-1: config 0 descriptor?? [ 158.108277][ T5933] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.288332][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 158.485675][ T5933] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.485702][ T5933] usb 3-1: config 0 has no interfaces? [ 158.505573][ T5933] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 158.505604][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.505624][ T5933] usb 3-1: Product: syz [ 158.505638][ T5933] usb 3-1: Manufacturer: syz [ 158.505652][ T5933] usb 3-1: SerialNumber: syz [ 159.301050][ T5933] usb 3-1: config 0 descriptor?? [ 159.388195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.396094][ T5791] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 159.556942][ T5791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.556968][ T5791] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.557004][ T5791] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.557026][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.566307][ T5964] usb 4-1: USB disconnect, device number 10 [ 159.566446][ T6008] usb 3-1: USB disconnect, device number 5 [ 160.626679][ T5791] usb 5-1: config 0 descriptor?? [ 160.885689][ T5791] usb 5-1: can't set config #0, error -71 [ 160.916252][ T5791] usb 5-1: USB disconnect, device number 8 [ 162.229034][ T5888] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.828822][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 162.828854][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 162.828886][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 163.036704][ T5888] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 163.036735][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.036754][ T5888] usb 1-1: Product: syz [ 163.036769][ T5888] usb 1-1: Manufacturer: syz [ 163.036783][ T5888] usb 1-1: SerialNumber: syz [ 163.102415][ T5888] usb 1-1: config 0 descriptor?? [ 163.104862][ T6555] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.104981][ T6555] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.145801][ T5888] usb 1-1: ucan: probing device on interface #0 [ 163.315301][ T5888] usb 1-1: ucan: device protocol version 0 is not supported [ 163.315318][ T5888] usb 1-1: ucan: probe failed; try to update the device firmware [ 164.915535][ T6579] netlink: 64 bytes leftover after parsing attributes in process `syz.4.192'. [ 165.226230][ T5964] usb 1-1: USB disconnect, device number 5 [ 165.666591][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.239219][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 166.351589][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.351668][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.460840][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.460908][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.460928][ T9] usb 3-1: Product: syz [ 166.460942][ T9] usb 3-1: Manufacturer: syz [ 166.460956][ T9] usb 3-1: SerialNumber: syz [ 166.734112][ T6008] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 167.278281][ T6008] usb 2-1: Using ep0 maxpacket: 8 [ 167.328561][ T6008] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.328588][ T6008] usb 2-1: config 0 has no interfaces? [ 167.334214][ T6008] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 167.334238][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.334254][ T6008] usb 2-1: Product: syz [ 167.334264][ T6008] usb 2-1: Manufacturer: syz [ 167.334278][ T6008] usb 2-1: SerialNumber: syz [ 167.390989][ T9] usb 3-1: config 0 descriptor?? [ 167.396648][ T6008] usb 2-1: config 0 descriptor?? [ 167.606692][ T9] usb 2-1: USB disconnect, device number 6 [ 167.701304][ T6606] libceph: resolve '0..' (ret=-3): failed [ 167.875733][ T37] audit: type=1326 audit(1776510068.351:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6602 comm="syz.3.201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33b3e2c819 code=0x0 [ 168.903956][ T5823] usb 3-1: USB disconnect, device number 6 [ 169.049822][ T6620] netlink: 64 bytes leftover after parsing attributes in process `syz.1.204'. [ 171.688520][ T5791] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.888684][ T5791] usb 2-1: Using ep0 maxpacket: 16 [ 171.935844][ T5791] usb 2-1: config 0 has no interfaces? [ 171.935918][ T5791] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 171.935942][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.576523][ T5791] usb 2-1: config 0 descriptor?? [ 172.785293][ T5964] usb 2-1: USB disconnect, device number 7 [ 173.221826][ T5964] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.378359][ T5964] usb 1-1: Using ep0 maxpacket: 8 [ 173.556618][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.557499][ T5964] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 173.557521][ T5964] usb 1-1: can't read configurations, error -71 [ 175.594133][ T6693] ======================================================= [ 175.594133][ T6693] WARNING: The mand mount option has been deprecated and [ 175.594133][ T6693] and is ignored by this kernel. Remove the mand [ 175.594133][ T6693] option from the mount to silence this warning. [ 175.594133][ T6693] ======================================================= [ 176.026454][ T6692] libceph: resolve '0..' (ret=-3): failed [ 176.258659][ T5815] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.403779][ T37] audit: type=1326 audit(1776510076.891:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6700 comm="syz.4.229" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f238be2c819 code=0x0 [ 176.442863][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 176.445784][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 176.445832][ T5815] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 176.445853][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.506466][ T5815] usb 4-1: config 0 descriptor?? [ 176.508065][ T6696] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 177.793072][ T5815] hid_parser_main: 950 callbacks suppressed [ 177.793090][ T5815] logitech-djreceiver 0003:046D:C52B.0003: unknown main item tag 0x0 [ 177.793111][ T5815] logitech-djreceiver 0003:046D:C52B.0003: unknown main item tag 0x0 [ 177.793127][ T5815] logitech-djreceiver 0003:046D:C52B.0003: unknown main item tag 0x0 [ 177.793143][ T5815] logitech-djreceiver 0003:046D:C52B.0003: unknown main item tag 0x0 [ 177.793159][ T5815] logitech-djreceiver 0003:046D:C52B.0003: unknown main item tag 0x0 [ 177.793175][ T5815] logitech-djreceiver 0003:046D:C52B.0003: unknown main item tag 0x0 [ 177.793191][ T5815] logitech-djreceiver 0003:046D:C52B.0003: unknown main item tag 0x4 [ 177.793207][ T5815] logitech-djreceiver 0003:046D:C52B.0003: unknown main item tag 0x0 [ 177.793223][ T5815] logitech-djreceiver 0003:046D:C52B.0003: unknown main item tag 0x0 [ 177.793238][ T5815] logitech-djreceiver 0003:046D:C52B.0003: unknown main item tag 0x0 [ 177.827058][ T5815] usb 4-1: USB disconnect, device number 11 [ 177.848310][ T5933] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.061370][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 178.241467][ T5933] usb 2-1: unable to get BOS descriptor or descriptor too short [ 178.243054][ T5933] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 178.243075][ T5933] usb 2-1: can't read configurations, error -71 [ 178.268273][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 178.468292][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 179.303846][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.306498][ T9] usb 3-1: config 0 has no interfaces? [ 179.313984][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 179.314011][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.314030][ T9] usb 3-1: Product: syz [ 179.314044][ T9] usb 3-1: Manufacturer: syz [ 179.314056][ T9] usb 3-1: SerialNumber: syz [ 179.322260][ T9] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 179.995957][ T6722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.234'. [ 180.041040][ T6735] fuse: Bad value for 'fd' [ 180.090644][ T5933] apple-mfi-fastcharge 3-1: USB disconnect, device number 7 [ 180.404276][ T5964] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 180.482125][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 180.586845][ T6746] libceph: resolve '0..' (ret=-3): failed [ 180.644428][ T5964] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 180.644459][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.673921][ T5964] usb 2-1: config 0 descriptor?? [ 180.702763][ T5964] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 180.767942][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.767974][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.805811][ T9] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 180.805843][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.805862][ T9] usb 4-1: Product: syz [ 180.805870][ T9] usb 4-1: Manufacturer: syz [ 180.805877][ T9] usb 4-1: SerialNumber: syz [ 180.906383][ T9] usb 4-1: config 0 descriptor?? [ 181.083540][ T5964] gspca_cpia1: usb_control_msg 03, error -32 [ 181.086133][ T5964] cpia1 2-1:0.0: unexpected state after lo power cmd: 01 [ 181.299323][ T5964] gspca_cpia1: usb_control_msg 01, error -71 [ 181.299339][ T5964] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 181.458913][ T5964] usb 2-1: USB disconnect, device number 10 [ 183.202565][ T5815] usb 4-1: USB disconnect, device number 12 [ 184.788275][ T5964] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 184.938259][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 184.940102][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 184.940149][ T5964] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 184.940173][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.028729][ T5964] usb 2-1: config 0 descriptor?? [ 185.029520][ T6770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.271299][ T5964] hid_parser_main: 458 callbacks suppressed [ 186.271323][ T5964] logitech-djreceiver 0003:046D:C52B.0004: unknown main item tag 0x0 [ 186.271367][ T5964] logitech-djreceiver 0003:046D:C52B.0004: unknown main item tag 0x0 [ 186.271394][ T5964] logitech-djreceiver 0003:046D:C52B.0004: unknown main item tag 0x0 [ 186.271419][ T5964] logitech-djreceiver 0003:046D:C52B.0004: unknown main item tag 0x0 [ 186.271447][ T5964] logitech-djreceiver 0003:046D:C52B.0004: unknown main item tag 0x0 [ 186.271473][ T5964] logitech-djreceiver 0003:046D:C52B.0004: unknown main item tag 0x0 [ 186.271500][ T5964] logitech-djreceiver 0003:046D:C52B.0004: unknown main item tag 0x4 [ 186.271529][ T5964] logitech-djreceiver 0003:046D:C52B.0004: unknown main item tag 0x0 [ 186.271556][ T5964] logitech-djreceiver 0003:046D:C52B.0004: unknown main item tag 0x0 [ 186.271583][ T5964] logitech-djreceiver 0003:046D:C52B.0004: unknown main item tag 0x0 [ 186.382486][ T5964] usb 2-1: USB disconnect, device number 11 [ 186.396891][ T6794] libceph: resolve '0..' (ret=-3): failed [ 186.648522][ T6803] bridge0: port 4(syz_tun) entered blocking state [ 186.651082][ T6803] bridge0: port 4(syz_tun) entered disabled state [ 186.651288][ T6803] syz_tun: entered allmulticast mode [ 186.695768][ T6803] syz_tun: entered promiscuous mode [ 186.696212][ T6803] bridge0: port 4(syz_tun) entered blocking state [ 186.696456][ T6803] bridge0: port 4(syz_tun) entered forwarding state [ 188.435147][ T6820] libceph: resolve '0..' (ret=-3): failed [ 190.708483][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 191.678575][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 191.694204][ T9] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 191.694230][ T9] usb 3-1: config 8 has no interface number 0 [ 191.694272][ T9] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 191.694297][ T9] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 191.694340][ T9] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 191.694368][ T9] usb 3-1: config 8 interface 206 has no altsetting 0 [ 191.777605][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 191.781520][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.781546][ T9] usb 3-1: Product: syz [ 191.781560][ T9] usb 3-1: Manufacturer: syz [ 191.781575][ T9] usb 3-1: SerialNumber: syz [ 192.073704][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 192.180540][ T5815] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 192.229253][ T9] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 192.331017][ T5815] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 192.331049][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 192.331074][ T5815] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 192.334500][ T5815] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 192.334529][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.335112][ T5815] usb 4-1: Product: syz [ 192.335131][ T5815] usb 4-1: Manufacturer: syz [ 192.335146][ T5815] usb 4-1: SerialNumber: syz [ 192.492580][ T5815] usb 4-1: config 0 descriptor?? [ 192.494931][ T6849] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 192.514968][ T6849] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 192.563808][ T5815] usb 4-1: ucan: probing device on interface #0 [ 192.601261][ T9] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 192.692424][ T9] usb 3-1: USB disconnect, device number 8 [ 192.886442][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 192.928324][ T5815] usb 4-1: ucan: failed to retrieve device info [ 192.928347][ T5815] usb 4-1: ucan: probe failed; try to update the device firmware [ 194.108406][ T9] garmin_gps 3-1:8.206: device disconnected [ 194.358064][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.358106][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.347898][ T5823] usb 4-1: USB disconnect, device number 13 [ 195.478723][ T5964] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 195.629373][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 195.637077][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 195.637126][ T5964] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 195.637146][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.703469][ T5964] usb 2-1: config 0 descriptor?? [ 195.736605][ T6861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.810304][ T1001] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.958290][ T1001] usb 3-1: Using ep0 maxpacket: 8 [ 195.962039][ T1001] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.964878][ T1001] usb 3-1: config 0 has no interfaces? [ 195.989832][ T1001] usb 3-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 195.990076][ T1001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.990098][ T1001] usb 3-1: Product: syz [ 195.990113][ T1001] usb 3-1: Manufacturer: syz [ 195.990127][ T1001] usb 3-1: SerialNumber: syz [ 196.032584][ T1001] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 196.177012][ T5964] hid_parser_main: 456 callbacks suppressed [ 196.177035][ T5964] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x0 [ 196.177066][ T5964] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x0 [ 196.177093][ T5964] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x0 [ 196.177125][ T5964] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x0 [ 196.177152][ T5964] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x0 [ 196.177178][ T5964] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x0 [ 196.177205][ T5964] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x4 [ 196.177233][ T5964] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x0 [ 196.177259][ T5964] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x0 [ 196.177284][ T5964] logitech-djreceiver 0003:046D:C52B.0005: unknown main item tag 0x0 [ 196.308954][ T10] apple-mfi-fastcharge 3-1: USB disconnect, device number 9 [ 196.313006][ T6885] libceph: resolve '0..' (ret=-3): failed [ 196.406762][ T1001] usb 2-1: USB disconnect, device number 12 [ 196.688361][ T5964] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 196.869443][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 196.871685][ T5964] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 196.871711][ T5964] usb 5-1: config 8 has no interface number 0 [ 196.871743][ T5964] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 196.871757][ T5964] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 196.871771][ T5964] usb 5-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 196.871785][ T5964] usb 5-1: config 8 interface 206 has no altsetting 0 [ 196.876646][ T5964] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 196.876670][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.876680][ T5964] usb 5-1: Product: syz [ 196.876688][ T5964] usb 5-1: Manufacturer: syz [ 196.876695][ T5964] usb 5-1: SerialNumber: syz [ 197.225978][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 197.453073][ T5964] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 197.459188][ T5964] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 198.406917][ T5964] usb 5-1: USB disconnect, device number 9 [ 198.462733][ T6902] libceph: resolve '0..' (ret=-3): failed [ 198.494374][ T5964] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 198.494895][ T5964] garmin_gps 5-1:8.206: device disconnected [ 198.798501][ T1001] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 198.973128][ T1001] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 198.973160][ T1001] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 198.973184][ T1001] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 198.981748][ T1001] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 198.981777][ T1001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.981795][ T1001] usb 3-1: Product: syz [ 198.981809][ T1001] usb 3-1: Manufacturer: syz [ 198.981822][ T1001] usb 3-1: SerialNumber: syz [ 199.018119][ T1001] usb 3-1: config 0 descriptor?? [ 199.021267][ T6903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.021457][ T6903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.051955][ T1001] usb 3-1: ucan: probing device on interface #0 [ 199.138429][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.408433][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 199.423785][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.245842][ T1001] usb 3-1: ucan: could not read protocol version, ret=-110 [ 200.245864][ T1001] usb 3-1: ucan: probe failed; try to update the device firmware [ 200.265292][ T9] usb 2-1: config 0 has no interfaces? [ 200.294451][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 200.294477][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.294488][ T9] usb 2-1: Product: syz [ 200.294496][ T9] usb 2-1: Manufacturer: syz [ 200.294508][ T9] usb 2-1: SerialNumber: syz [ 200.341866][ T9] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 200.553841][ T6906] process 'syz.1.295' launched './file0' with NULL argv: empty string added [ 200.784679][ T815] apple-mfi-fastcharge 2-1: USB disconnect, device number 13 [ 201.482306][ T9] usb 3-1: USB disconnect, device number 10 [ 201.759531][ T6008] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 202.008274][ T6008] usb 1-1: Using ep0 maxpacket: 8 [ 202.032967][ T6008] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.039680][ T6008] usb 1-1: config 0 has no interfaces? [ 202.053360][ T6008] usb 1-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 202.053390][ T6008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.053410][ T6008] usb 1-1: Product: syz [ 202.053423][ T6008] usb 1-1: Manufacturer: syz [ 202.053437][ T6008] usb 1-1: SerialNumber: syz [ 202.090392][ T6008] apple-mfi-fastcharge 1-1: config 0 descriptor?? [ 202.360201][ T6008] apple-mfi-fastcharge 1-1: USB disconnect, device number 8 [ 203.692600][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 203.818598][ T6008] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 203.860215][ T6966] libceph: resolve '0..' (ret=-3): failed [ 204.058700][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 204.078312][ T6008] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 204.078344][ T6008] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 204.078367][ T6008] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 204.139321][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 204.216172][ T6008] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 204.216207][ T6008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.216227][ T6008] usb 4-1: Product: syz [ 204.216241][ T6008] usb 4-1: Manufacturer: syz [ 204.216255][ T6008] usb 4-1: SerialNumber: syz [ 204.344134][ T10] usb 5-1: config 0 has no interfaces? [ 204.498629][ T6008] usb 4-1: config 0 descriptor?? [ 204.538652][ T6968] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 204.538770][ T6968] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 204.564247][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 204.564278][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.564298][ T10] usb 5-1: Product: syz [ 204.564311][ T10] usb 5-1: Manufacturer: syz [ 204.564325][ T10] usb 5-1: SerialNumber: syz [ 204.721219][ T6008] usb 4-1: ucan: probing device on interface #0 [ 204.728224][ T10] apple-mfi-fastcharge 5-1: config 0 descriptor?? [ 205.064643][ T6008] usb 4-1: ucan: device reported invalid device info [ 205.064667][ T6008] usb 4-1: ucan: probe failed; try to update the device firmware [ 205.234601][ T6008] apple-mfi-fastcharge 5-1: USB disconnect, device number 10 [ 206.696062][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 206.696160][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 206.696190][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 206.696212][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 206.696235][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 207.199982][ T9] usb 4-1: USB disconnect, device number 14 [ 209.125612][ T5791] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 209.268287][ T5791] usb 2-1: Using ep0 maxpacket: 8 [ 209.270293][ T5791] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.271229][ T5791] usb 2-1: config 0 has no interfaces? [ 209.273530][ T5791] usb 2-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 209.273546][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.273556][ T5791] usb 2-1: Product: syz [ 209.273564][ T5791] usb 2-1: Manufacturer: syz [ 209.273571][ T5791] usb 2-1: SerialNumber: syz [ 209.329698][ T5791] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 209.585597][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 209.731905][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 209.731937][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 209.731959][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 209.753998][ T1001] apple-mfi-fastcharge 2-1: USB disconnect, device number 14 [ 209.783491][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 209.783521][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.783539][ T9] usb 1-1: Product: syz [ 209.783552][ T9] usb 1-1: Manufacturer: syz [ 209.783567][ T9] usb 1-1: SerialNumber: syz [ 209.954377][ T9] usb 1-1: config 0 descriptor?? [ 209.955136][ T7027] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.955244][ T7027] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.986998][ T9] usb 1-1: ucan: probing device on interface #0 [ 210.073498][ T7035] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.337'. [ 210.409136][ T9] usb 1-1: ucan: device reported invalid device info [ 210.409151][ T9] usb 1-1: ucan: probe failed; try to update the device firmware [ 210.460420][ T7041] libceph: resolve '0..' (ret=-3): failed [ 212.989718][ T10] usb 1-1: USB disconnect, device number 9 [ 213.238513][ T7071] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.349'. [ 217.653186][ T7100] fuse: Bad value for 'fd' [ 217.745199][ T7091] netlink: 32 bytes leftover after parsing attributes in process `syz.3.357'. [ 217.747338][ T7091] netlink: 32 bytes leftover after parsing attributes in process `syz.3.357'. [ 220.408318][ T1001] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 220.528349][ T815] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 220.638287][ T1001] usb 5-1: Using ep0 maxpacket: 8 [ 220.640687][ T1001] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 220.640715][ T1001] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.640733][ T1001] usb 5-1: config 0 has no interfaces? [ 220.644714][ T1001] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 220.644740][ T1001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.644750][ T1001] usb 5-1: Product: syz [ 220.644757][ T1001] usb 5-1: Manufacturer: syz [ 220.644765][ T1001] usb 5-1: SerialNumber: syz [ 220.733509][ T815] usb 2-1: Using ep0 maxpacket: 16 [ 220.737821][ T815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 220.737870][ T815] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 220.737893][ T815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.781726][ T1001] usb 5-1: config 0 descriptor?? [ 220.811707][ T815] usb 2-1: config 0 descriptor?? [ 220.814125][ T7117] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.012765][ T10] usb 5-1: USB disconnect, device number 11 [ 221.405184][ T815] hid_parser_main: 456 callbacks suppressed [ 221.405202][ T815] logitech-djreceiver 0003:046D:C52B.0006: unknown main item tag 0x0 [ 221.405223][ T815] logitech-djreceiver 0003:046D:C52B.0006: unknown main item tag 0x0 [ 221.405239][ T815] logitech-djreceiver 0003:046D:C52B.0006: unknown main item tag 0x0 [ 221.405255][ T815] logitech-djreceiver 0003:046D:C52B.0006: unknown main item tag 0x0 [ 221.405271][ T815] logitech-djreceiver 0003:046D:C52B.0006: unknown main item tag 0x0 [ 221.405287][ T815] logitech-djreceiver 0003:046D:C52B.0006: unknown main item tag 0x0 [ 221.405302][ T815] logitech-djreceiver 0003:046D:C52B.0006: unknown main item tag 0x4 [ 221.405321][ T815] logitech-djreceiver 0003:046D:C52B.0006: unknown main item tag 0x0 [ 221.405337][ T815] logitech-djreceiver 0003:046D:C52B.0006: unknown main item tag 0x0 [ 221.405352][ T815] logitech-djreceiver 0003:046D:C52B.0006: unknown main item tag 0x0 [ 221.536197][ T815] usb 2-1: USB disconnect, device number 15 [ 225.149595][ T7144] netlink: 100 bytes leftover after parsing attributes in process `syz.4.374'. [ 225.844280][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.4.377'. [ 225.844342][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.4.377'. [ 225.918027][ T7154] libceph: resolve '0..' (ret=-3): failed [ 225.970287][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 226.003319][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.4.377'. [ 226.003359][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.4.377'. [ 226.008314][ T815] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 226.170334][ T815] usb 1-1: Using ep0 maxpacket: 8 [ 226.176959][ T815] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 226.176991][ T815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.177010][ T815] usb 1-1: config 0 has no interfaces? [ 226.212159][ T815] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 226.212193][ T815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.212302][ T815] usb 1-1: Product: syz [ 226.212318][ T815] usb 1-1: Manufacturer: syz [ 226.212333][ T815] usb 1-1: SerialNumber: syz [ 226.362232][ T815] usb 1-1: config 0 descriptor?? [ 226.587480][ T6008] usb 1-1: USB disconnect, device number 10 [ 227.148486][ T7153] ------------[ cut here ]------------ [ 227.148501][ T7153] kcov->t != t [ 227.148518][ T7153] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: syz.0.376/7153 [ 227.148575][ T7153] Modules linked in: [ 227.148611][ T7153] CPU: 0 UID: 0 PID: 7153 Comm: syz.0.376 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 227.148635][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 227.148650][ T7153] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 227.148681][ T7153] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 6a 55 00 48 89 df 5b 41 5e 41 5f e9 79 1c 5b 00 7c 1c 5b 41 5e 41 5f e9 7d bb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 54 68 09 48 89 df be 03 00 [ 227.148699][ T7153] RSP: 0000:ffffc90010defae0 EFLAGS: 00010202 [ 227.148715][ T7153] RAX: aed2dc08688e5d00 RBX: ffff888020f2e100 RCX: 0000000000000000 [ 227.148728][ T7153] RDX: 000000004f957620 RSI: ffffffff8ba72ac0 RDI: 00000000ffffffff [ 227.148741][ T7153] RBP: ffffc90010defc28 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 227.148758][ T7153] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: dffffc0000000000 [ 227.148782][ T7153] R13: 0000000000000000 R14: ffff888020f2e108 R15: ffff888031515c40 [ 227.148802][ T7153] FS: 00007f79d3f2e6c0(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 227.148821][ T7153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.148834][ T7153] CR2: 000020000003e030 CR3: 000000003cc9e000 CR4: 00000000003526f0 [ 227.148864][ T7153] Call Trace: [ 227.148872][ T7153] [ 227.148882][ T7153] do_exit+0x150/0x22c0 [ 227.148911][ T7153] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 227.148939][ T7153] ? lockdep_hardirqs_on+0x7a/0x110 [ 227.148965][ T7153] ? __pfx_do_exit+0x10/0x10 [ 227.148985][ T7153] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 227.149002][ T7153] ? reacquire_held_locks+0x104/0x190 [ 227.149026][ T7153] ? rt_spin_lock+0x1e0/0x400 [ 227.149047][ T7153] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 227.149074][ T7153] do_group_exit+0x21b/0x2d0 [ 227.149118][ T7153] ? rt_spin_unlock+0x160/0x200 [ 227.149140][ T7153] get_signal+0x125c/0x1310 [ 227.149190][ T7153] arch_do_signal_or_restart+0xbc/0x830 [ 227.149223][ T7153] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 227.149265][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.149287][ T7153] exit_to_user_mode_loop+0x86/0x480 [ 227.149309][ T7153] ? rcu_is_watching+0x15/0xb0 [ 227.149335][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.149356][ T7153] do_syscall_64+0x33e/0xf80 [ 227.149379][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.149399][ T7153] ? clear_bhb_loop+0x40/0x90 [ 227.149424][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.149444][ T7153] RIP: 0033:0x7f79d5cdc819 [ 227.149471][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.149489][ T7153] RSP: 002b:00007f79d3f2e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.149510][ T7153] RAX: fffffffffffffe00 RBX: 00007f79d5f55fa8 RCX: 00007f79d5cdc819 [ 227.149525][ T7153] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79d5f55fa8 [ 227.149539][ T7153] RBP: 00007f79d5f55fa0 R08: 0000000000000000 R09: 0000000000000000 [ 227.149552][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.149565][ T7153] R13: 00007f79d5f56038 R14: 00007ffce304f430 R15: 00007ffce304f518 [ 227.149597][ T7153] [ 227.149606][ T7153] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 227.149621][ T7153] CPU: 0 UID: 0 PID: 7153 Comm: syz.0.376 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 227.149644][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 227.149655][ T7153] Call Trace: [ 227.149663][ T7153] [ 227.149670][ T7153] vpanic+0x56c/0xa60 [ 227.149693][ T7153] ? __pfx__printk+0x10/0x10 [ 227.149718][ T7153] ? __pfx_vpanic+0x10/0x10 [ 227.149736][ T7153] ? is_bpf_text_address+0x292/0x2b0 [ 227.149759][ T7153] ? is_bpf_text_address+0x26/0x2b0 [ 227.149792][ T7153] panic+0xc5/0xd0 [ 227.149819][ T7153] ? __pfx_panic+0x10/0x10 [ 227.149854][ T7153] __warn+0x315/0x4c0 [ 227.149872][ T7153] ? kcov_task_exit+0xf5/0x160 [ 227.149902][ T7153] ? kcov_task_exit+0xf5/0x160 [ 227.149932][ T7153] __report_bug+0x29a/0x540 [ 227.149967][ T7153] ? kcov_task_exit+0xf5/0x160 [ 227.149996][ T7153] ? __pfx___report_bug+0x10/0x10 [ 227.150019][ T7153] ? try_to_take_rt_mutex+0x840/0xb00 [ 227.150039][ T7153] ? reacquire_held_locks+0x104/0x190 [ 227.150068][ T7153] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 227.150094][ T7153] ? rt_spin_lock+0x1e0/0x400 [ 227.150115][ T7153] ? rt_spin_lock+0x1e0/0x400 [ 227.150138][ T7153] ? kcov_task_exit+0xf5/0x160 [ 227.150168][ T7153] report_bug+0x16a/0x220 [ 227.150194][ T7153] ? kcov_task_exit+0xf5/0x160 [ 227.150222][ T7153] ? kcov_task_exit+0xf7/0x160 [ 227.150250][ T7153] handle_bug+0x9c/0x200 [ 227.150279][ T7153] exc_invalid_op+0x1a/0x50 [ 227.150308][ T7153] asm_exc_invalid_op+0x1a/0x20 [ 227.150329][ T7153] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 227.150359][ T7153] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 6a 55 00 48 89 df 5b 41 5e 41 5f e9 79 1c 5b 00 7c 1c 5b 41 5e 41 5f e9 7d bb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 54 68 09 48 89 df be 03 00 [ 227.150376][ T7153] RSP: 0000:ffffc90010defae0 EFLAGS: 00010202 [ 227.150393][ T7153] RAX: aed2dc08688e5d00 RBX: ffff888020f2e100 RCX: 0000000000000000 [ 227.150408][ T7153] RDX: 000000004f957620 RSI: ffffffff8ba72ac0 RDI: 00000000ffffffff [ 227.150422][ T7153] RBP: ffffc90010defc28 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 227.150438][ T7153] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: dffffc0000000000 [ 227.150454][ T7153] R13: 0000000000000000 R14: ffff888020f2e108 R15: ffff888031515c40 [ 227.150476][ T7153] ? rt_spin_lock+0x1e0/0x400 [ 227.150505][ T7153] do_exit+0x150/0x22c0 [ 227.150533][ T7153] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 227.150560][ T7153] ? lockdep_hardirqs_on+0x7a/0x110 [ 227.150587][ T7153] ? __pfx_do_exit+0x10/0x10 [ 227.150609][ T7153] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 227.150629][ T7153] ? reacquire_held_locks+0x104/0x190 [ 227.150656][ T7153] ? rt_spin_lock+0x1e0/0x400 [ 227.150676][ T7153] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 227.150703][ T7153] do_group_exit+0x21b/0x2d0 [ 227.150728][ T7153] ? rt_spin_unlock+0x160/0x200 [ 227.150748][ T7153] get_signal+0x125c/0x1310 [ 227.150792][ T7153] arch_do_signal_or_restart+0xbc/0x830 [ 227.150832][ T7153] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 227.150877][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.150899][ T7153] exit_to_user_mode_loop+0x86/0x480 [ 227.150920][ T7153] ? rcu_is_watching+0x15/0xb0 [ 227.150948][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.150970][ T7153] do_syscall_64+0x33e/0xf80 [ 227.150994][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.151015][ T7153] ? clear_bhb_loop+0x40/0x90 [ 227.151040][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.151060][ T7153] RIP: 0033:0x7f79d5cdc819 [ 227.151078][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.151094][ T7153] RSP: 002b:00007f79d3f2e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.151114][ T7153] RAX: fffffffffffffe00 RBX: 00007f79d5f55fa8 RCX: 00007f79d5cdc819 [ 227.151130][ T7153] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79d5f55fa8 [ 227.151142][ T7153] RBP: 00007f79d5f55fa0 R08: 0000000000000000 R09: 0000000000000000 [ 227.151154][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.151166][ T7153] R13: 00007f79d5f56038 R14: 00007ffce304f430 R15: 00007ffce304f518 [ 227.151198][ T7153] [ 227.151394][ T7153] Kernel Offset: disabled