last executing test programs: 17.340706474s ago: executing program 3 (id=640): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xaaca4, &(0x7f0000000200)={[{@max={'max', 0x3d, 0xffffffffffffffff}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x80, 0x141) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) 15.868044712s ago: executing program 3 (id=645): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb", 0x1d}], 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f0000000880)=""/242, 0xf2}, {&(0x7f0000000980)=""/84, 0x54}], 0x8, &(0x7f0000000d00)=[@rdma_args={0x48, 0x114, 0x1, {{0x2a, 0x3fffff}, {&(0x7f0000000a00)=""/197, 0xc5}, &(0x7f0000000440)=[{&(0x7f0000000b00)=""/224, 0xe0}], 0x1, 0x44, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x400, 0x81}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xc}, &(0x7f0000000800)=0x3, &(0x7f0000000cc0)=0x5, 0x6, 0x578d, 0x8, 0x5, 0x58, 0x8001}}], 0xb8, 0x40008080}, 0x20040080) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f00000003c0)={{0x9, 0x1, 0x4, 0x6, 'syz0\x00', 0x63}, 0x0, [0xfffffd57, 0x2, 0x5, 0x687, 0x74859519, 0x6, 0x2, 0x4, 0x2, 0x2, 0x8000, 0x6, 0x4a13, 0xa, 0x6, 0x8, 0xfffffff8, 0xfffffff8, 0x10, 0x8, 0x7ff, 0x9, 0x10, 0x9, 0x10000, 0xac8, 0x10000, 0x3, 0x400, 0x2, 0x3, 0x5, 0x15, 0x1, 0x10000, 0x2, 0x8, 0x4, 0x8, 0x7, 0xfffffff7, 0x401, 0x1, 0x1, 0x4, 0x1, 0x1, 0xffffff95, 0x1, 0x5354fdb3, 0x6, 0x9, 0xcd, 0xf, 0x4, 0xfff, 0x1, 0x6, 0x800, 0x3, 0x80000000, 0x8, 0x7, 0x7, 0x4, 0x5, 0xc, 0x81, 0x1ff, 0x3, 0x7, 0x101, 0x6, 0x20000, 0x2, 0xfffffffa, 0x66, 0x3, 0x4, 0x800, 0x4, 0x3ff, 0x0, 0x8, 0x2, 0x4, 0x9, 0x0, 0x2, 0x3fb, 0x81, 0x6, 0x8, 0x8d3a, 0x0, 0x800, 0xf38f, 0xd926, 0x2, 0x1, 0x2, 0x3, 0x9, 0x7, 0x3, 0x4, 0x6, 0x10000, 0x8, 0x32284b62, 0x5, 0x8490, 0xdd00, 0xb, 0xfffff801, 0x7bd4, 0x7, 0xffffffff, 0x6, 0x1, 0x10000, 0x2, 0x1, 0x549ac63b, 0x5, 0x4, 0x8001, 0x2]}) socket$nl_route(0x10, 0x3, 0x0) 15.412498572s ago: executing program 0 (id=646): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006310000000000000620002000000000095000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 15.385529554s ago: executing program 5 (id=647): fsopen(&(0x7f0000000080)='squashfs\x00', 0x1) fsopen(&(0x7f0000000680)='erofs\x00', 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000002080), 0x8ac3094c6a9c458c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x14cd) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x7f}) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ptrace$peekuser(0x3, 0x0, 0x9) r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r5, 0x0, 0x200000) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x1, 0x65, 0x80, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 12.971633593s ago: executing program 0 (id=650): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) 11.416305753s ago: executing program 0 (id=653): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x0, 0x1) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3fb, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) 10.910135949s ago: executing program 1 (id=654): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 10.143551807s ago: executing program 1 (id=655): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 9.67346378s ago: executing program 3 (id=657): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x10) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4048043) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000", @ANYRES32, @ANYRES32], 0x48) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r3 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 9.640670209s ago: executing program 1 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8.039930055s ago: executing program 5 (id=663): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006310000000000000620002000000000095000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 7.580507729s ago: executing program 5 (id=665): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) 7.557866172s ago: executing program 0 (id=666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r4, 0x4b46, &(0x7f00000000c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) 7.396210169s ago: executing program 4 (id=667): creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 7.1796657s ago: executing program 2 (id=668): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.235436584s ago: executing program 3 (id=669): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb", 0x1d}], 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/53, 0x35, 0x0, 0x7f, 0xfffffffe, 0x0, 0x803}}, 0x11c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f0000000880)=""/242, 0xf2}, {&(0x7f0000000980)=""/84, 0x54}], 0x8, &(0x7f0000000d00)=[@rdma_args={0x48, 0x114, 0x1, {{0x2a, 0x3fffff}, {&(0x7f0000000a00)=""/197, 0xc5}, &(0x7f0000000440)=[{&(0x7f0000000b00)=""/224, 0xe0}], 0x1, 0x44, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x400, 0x81}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xc}, &(0x7f0000000800)=0x3, &(0x7f0000000cc0)=0x5, 0x6, 0x578d, 0x8, 0x5, 0x58, 0x8001}}], 0xb8, 0x40008080}, 0x20040080) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f00000003c0)={{0x9, 0x1, 0x4, 0x6, 'syz0\x00', 0x63}, 0x0, [0xfffffd57, 0x2, 0x5, 0x687, 0x74859519, 0x6, 0x2, 0x4, 0x2, 0x2, 0x8000, 0x6, 0x4a13, 0xa, 0x6, 0x8, 0xfffffff8, 0xfffffff8, 0x10, 0x8, 0x7ff, 0x9, 0x10, 0x9, 0x10000, 0xac8, 0x10000, 0x3, 0x400, 0x2, 0x3, 0x5, 0x15, 0x1, 0x10000, 0x2, 0x8, 0x4, 0x8, 0x7, 0xfffffff7, 0x401, 0x1, 0x1, 0x4, 0x1, 0x1, 0xffffff95, 0x1, 0x5354fdb3, 0x6, 0x9, 0xcd, 0xf, 0x4, 0xfff, 0x1, 0x6, 0x800, 0x3, 0x80000000, 0x8, 0x7, 0x7, 0x4, 0x5, 0xc, 0x81, 0x1ff, 0x3, 0x7, 0x101, 0x6, 0x20000, 0x2, 0xfffffffa, 0x66, 0x3, 0x4, 0x800, 0x4, 0x3ff, 0x0, 0x8, 0x2, 0x4, 0x9, 0x0, 0x2, 0x3fb, 0x81, 0x6, 0x8, 0x8d3a, 0x0, 0x800, 0xf38f, 0xd926, 0x2, 0x1, 0x2, 0x3, 0x9, 0x7, 0x3, 0x4, 0x6, 0x10000, 0x8, 0x32284b62, 0x5, 0x8490, 0xdd00, 0xb, 0xfffff801, 0x7bd4, 0x7, 0xffffffff, 0x6, 0x1, 0x10000, 0x2, 0x1, 0x549ac63b, 0x5, 0x4, 0x8001, 0x2]}) socket$nl_route(0x10, 0x3, 0x0) 6.233576828s ago: executing program 5 (id=670): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() read$char_usb(r0, 0x0, 0x0) 6.078732787s ago: executing program 4 (id=671): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) pipe(0x0) epoll_create1(0x0) 5.625382405s ago: executing program 2 (id=672): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_create1(0x0) 5.412449713s ago: executing program 1 (id=673): fsopen(&(0x7f0000000080)='squashfs\x00', 0x1) fsopen(&(0x7f0000000680)='erofs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x14cd) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x7f}) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ptrace$peekuser(0x3, 0x0, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r4, 0x0, 0x200000) socket$inet_mptcp(0x2, 0x1, 0x106) 4.968931756s ago: executing program 2 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.629627811s ago: executing program 2 (id=675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 3.217278219s ago: executing program 5 (id=676): fsopen(&(0x7f0000000080)='squashfs\x00', 0x1) fsopen(&(0x7f0000000680)='erofs\x00', 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000002080), 0x8ac3094c6a9c458c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x14cd) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x7f}) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ptrace$peekuser(0x3, 0x0, 0x9) r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) sendfile(r5, r5, 0x0, 0x200000) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x1, 0x65, 0x80, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2.937694961s ago: executing program 4 (id=677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) sendto$inet6(r0, &(0x7f0000000080)='8', 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) 2.163770245s ago: executing program 4 (id=678): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000631000000000000062000200000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe64}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b19, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.820887255s ago: executing program 2 (id=679): r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0xffff1000, 0x43, &(0x7f00000010c0)=""/67}]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xa) 1.330414858s ago: executing program 1 (id=680): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs$pagemap(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x0, 0x1) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3fb, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) 1.225798207s ago: executing program 2 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000018000100fdffffff00000000020000000002030900000000080005000a01010108001e0047f8"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000024, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.214471963s ago: executing program 0 (id=682): r0 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) write$UHID_GET_REPORT_REPLY(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r6 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$netlink(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)=[{&(0x7f00000000c0)={0xf8, 0x39, 0x20, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x40, 0x0, 0x0, @pid=r6}, @nested={0xa3, 0x148, 0x0, 0x1, [@generic="6961af52fbded182cb787cffb9da71fd31b5206ee5dfc10ce85af55b81190e295b18121fbbb82b954c7703275484439bacbfcc615376f9d264cdf009f51c3c9c71c5c326c0419ebcc3951222977f5e92f6dee0799d5e099fcb2f4ffca036be03c0903c5743404deea09bbd00849cf6823ba99cf4f919feb943e1e62337f3d12a9d5167", @nested={0x4, 0xcf}, @nested={0x4, 0xeb}, @nested={0x4, 0x6}, @nested={0x4, 0x1d}, @typed={0xc, 0xf8, 0x0, 0x0, @u64=0x5}]}, @generic="4175e2247f53e9d94b9e1c1ab4714529b7e225de35c6ee0efb3c7ad403b700845ee338c633a1bac7eda763190acc071d7570de4e9a1b90ee0a5e"]}, 0xf8}, {&(0x7f00000001c0)={0x68, 0x21, 0x408, 0x70bd29, 0x25dfdbff, "", [@generic="3bdb78236d24682d95d25b10788c8b573b77667a03f99ed9b79f79301def8948144f66e82b4c94b834401469a948389245f287a6c5d9eaa3b2b7bf0d8d25b84281a870cf011d4921bb597fee66cd629ff31d5b84f8"]}, 0x68}, {&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfc}, {&(0x7f00000004c0)={0x1a4, 0x28, 0x100, 0x70bd2a, 0x25dfdbff, "", [@nested={0xea, 0x94, 0x0, 0x1, [@generic="8feb19eb1d43e80f0228c68c5e1063b26175619717fd80785bc0a4242fdf3f9c447a23e284a1ca6c38dd70a806aedb11adc6e0378b53cec2da8ab141d85b93d4aea64cec1a55d115911f99949a2cad41949550d8540fc4845fa654f8cb9527835877c8784ca8ee276e045ed57d370954dfa7069f40194dc648e9b8c9632dadd7336f2f9fead630bed0", @generic="feddb0edce053e8fcd2ddb8e4703743bca751248f2a3f3556542db1a22a8f907b3cc90c25546b0f632c2e4698d55249610b3500d92b92a5c13bf94ee3a3531c6aac6f4ce3cfc73b3755d412984a6b643d05015a7267dd53b59e31a2787"]}, @generic="9ba172c3d4f0e3f6a4cef1033aafe28a827d573405a880a2a97d2421e61990353c41d16cc15bec45055924e41f0c4c76311501687ef39bf5069ef692f235d6442bfc0e334f7efb4587433ad7f24f5594e9aa3041b46852a5eef494d79a54a1594296568242e689bc3cda99e1b27510e586ae33924fa089899e054ce3620dca893aab221471d26d881175a6f5184c003cf67266429cdb45f7fa37614d71e6441278f487603c3ea433"]}, 0x1a4}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000001000000", @ANYRES32], 0x10, 0x20008000}, 0x8000) syz_open_dev$dri(&(0x7f0000000400), 0x2, 0x303040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x7, 0x8002}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x10c, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff24}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa983}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1e3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffd5cf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xd0}, 0x80) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) 1.19161898s ago: executing program 3 (id=683): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_create1(0x0) 1.096980404s ago: executing program 4 (id=684): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 127.608254ms ago: executing program 4 (id=685): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) readv(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)={[{0x2d, 'net'}]}, 0x5) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000300010000", 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a40)=@newtaction={0x48, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x48}}, 0x4000) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) r7 = accept(r1, &(0x7f0000000200)=@tipc=@name, &(0x7f0000000040)=0x80) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7a}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000094}, 0x4008094) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x1) 109.583337ms ago: executing program 3 (id=686): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create1(0x0) 0s ago: executing program 0 (id=687): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x0, 0x0, 0x100000000000000, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x5, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) kernel console output (not intermixed with test programs): 033][ T2082] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 144.789848][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'. [ 145.731004][ T2082] usb 4-1: USB disconnect, device number 4 [ 146.360517][ T6219] 9pnet_virtio: no channels available for device syz [ 147.468660][ T6230] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 147.731704][ T2082] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 147.933252][ T2082] usb 1-1: Using ep0 maxpacket: 8 [ 147.961728][ T2082] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 147.990198][ T2082] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.030909][ T2082] usb 1-1: config 0 has no interface number 0 [ 148.040483][ T2082] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.061087][ T2082] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 148.133976][ T2082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.269728][ T2082] usb 1-1: config 0 descriptor?? [ 149.217099][ T6249] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.49'. [ 149.256364][ T2082] ldusb 1-1:0.55: Interrupt in endpoint not found [ 149.314307][ T6249] netlink: zone id is out of range [ 149.329449][ T6249] netlink: zone id is out of range [ 149.899632][ T6254] 9pnet_virtio: no channels available for device syz [ 150.221487][ T24] usb 1-1: USB disconnect, device number 2 [ 150.899296][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 151.566990][ T6267] debugfs: 'ttyS3' already exists in 'caif_serial' [ 153.370159][ T6268] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.377653][ T6268] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.498755][ T6268] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.701516][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.772446][ T6268] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.012078][ T6268] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.230452][ T6289] tipc: Enabling of bearer rejected, failed to enable media [ 154.255836][ T6293] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 154.270362][ T6268] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.404489][ T6268] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.426536][ T6268] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.695165][ T6268] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.733407][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 154.943251][ T6268] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 154.970251][ T6268] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 155.136426][ T6268] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 155.230670][ T6268] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.379721][ T6268] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.456858][ T6268] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.764207][ T6268] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.771806][ T6268] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.787955][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.794102][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.860418][ T6268] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 156.424888][ T5877] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.918229][ T2082] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 156.991729][ T5877] Bluetooth: hci5: command 0x0c1a tx timeout [ 157.267692][ T2082] usb 2-1: Using ep0 maxpacket: 8 [ 157.301938][ T5877] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.417757][ T2082] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 157.459604][ T2082] usb 2-1: config 0 has no interface number 0 [ 157.858746][ T5877] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.871744][ T5877] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.871741][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.932115][ T2082] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 158.322700][ T2082] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 158.371435][ T2082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.389685][ T2082] usb 2-1: Product: syz [ 158.409946][ T2082] usb 2-1: Manufacturer: syz [ 158.420055][ T2082] usb 2-1: SerialNumber: syz [ 158.468361][ T2082] usb 2-1: config 0 descriptor?? [ 158.661501][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.061457][ T5870] Bluetooth: hci5: command 0x0c1a tx timeout [ 159.397807][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.733778][ T5956] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.741797][ T6357] binder: BINDER_SET_CONTEXT_MGR already set [ 159.761725][ T6357] binder: 6353:6357 ioctl 4018620d 200000004a80 returned -16 [ 159.918484][ T6352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.944809][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.950889][ T5881] Bluetooth: hci4: command 0x0c1a tx timeout [ 160.113279][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 160.419313][ T2082] msi2500 2-1:0.246: Registered as swradio24 [ 160.518047][ T5956] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 160.560008][ T5956] usb 1-1: config 0 has no interface number 0 [ 160.717163][ T6367] 9pnet_virtio: no channels available for device syz [ 160.742669][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.749256][ T2082] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 161.091953][ T5956] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 161.141513][ T5870] Bluetooth: hci5: command 0x0c1a tx timeout [ 161.194354][ T24] hid_parser_main: 43 callbacks suppressed [ 161.194392][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 161.417613][ T5956] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 161.468090][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.557345][ T6374] debugfs: 'ttyS3' already exists in 'caif_serial' [ 161.581491][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 161.604016][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.623269][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 161.631112][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 161.830906][ T5956] usb 1-1: Product: syz [ 161.897254][ T5956] usb 1-1: Manufacturer: syz [ 162.021677][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout [ 162.048422][ T5956] usb 1-1: SerialNumber: syz [ 162.053318][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 162.247526][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 162.266688][ T5956] usb 1-1: config 0 descriptor?? [ 162.341320][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 162.372979][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 162.431767][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 162.627039][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 163.113085][ T6389] Zero length message leads to an empty skb [ 163.161044][ T6389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.76'. [ 163.257637][ T24] hid-generic 0000:007F:FFFFFFFE.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.261136][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.76'. [ 163.982722][ T6396] netlink: 'syz.3.77': attribute type 10 has an invalid length. [ 164.445808][ T2082] usb 2-1: USB disconnect, device number 2 [ 164.643452][ T6396] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 165.919350][ T2082] hid-generic 0000:007F:FFFFFFFE.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 166.071246][ T5956] usb 1-1: can't set config #0, error -71 [ 166.302175][ T5956] usb 1-1: USB disconnect, device number 3 [ 167.835165][ T6415] fido_id[6415]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.101827][ T6426] tipc: Enabling of bearer rejected, failed to enable media [ 168.199842][ T6430] netlink: 'syz.4.85': attribute type 4 has an invalid length. [ 168.207590][ T6430] netlink: 17 bytes leftover after parsing attributes in process `syz.4.85'. [ 169.315114][ T6438] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 170.181659][ T6448] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.603691][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 170.857464][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.935881][ T6465] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 170.961539][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.005994][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.431562][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.449897][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.481058][ T43] usb 1-1: config 0 descriptor?? [ 172.068943][ T43] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 172.687698][ T5975] usb 1-1: USB disconnect, device number 4 [ 173.180516][ T6453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.212047][ T6453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.221715][ T6453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.230770][ T6453] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 173.239851][ T6453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.246583][ T6453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 173.631806][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.771454][ T2082] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 174.222184][ T2082] usb 5-1: Using ep0 maxpacket: 8 [ 174.245969][ T2082] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.265309][ T2082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.396617][ T2082] usb 5-1: config 0 has no interface number 0 [ 174.439537][ T2082] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.480646][ T2082] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.519879][ T2082] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.529458][ T5975] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 174.579827][ T2082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.700265][ T2082] usb 5-1: config 0 descriptor?? [ 174.705365][ T5975] usb 6-1: Using ep0 maxpacket: 8 [ 174.735744][ T2082] ldusb 5-1:0.55: Interrupt in endpoint not found [ 174.757261][ T5975] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 174.801158][ T5975] usb 6-1: config 0 has no interface number 0 [ 174.837781][ T5975] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 175.178574][ T5878] usb 5-1: USB disconnect, device number 3 [ 175.194196][ T5975] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 175.221900][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.231411][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.291585][ T5975] usb 6-1: Product: syz [ 175.295758][ T5975] usb 6-1: Manufacturer: syz [ 175.300348][ T5975] usb 6-1: SerialNumber: syz [ 175.305758][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.306042][ T5881] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.311926][ T5877] Bluetooth: hci5: command 0x0c1a tx timeout [ 175.317899][ T5879] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.430544][ T5975] usb 6-1: config 0 descriptor?? [ 175.494683][ T6497] binder: 6493:6497 ioctl c0306201 0 returned -14 [ 175.529974][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 176.135069][ T5975] msi2500 6-1:0.246: Registered as swradio24 [ 176.211439][ T5975] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 176.914260][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.109'. [ 176.939321][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 180.206876][ T6032] usb 6-1: USB disconnect, device number 3 [ 183.434196][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 184.629967][ T6572] netlink: 'syz.1.123': attribute type 4 has an invalid length. [ 184.638393][ T6572] netlink: 17 bytes leftover after parsing attributes in process `syz.1.123'. [ 186.034318][ T6576] binder: 6574:6576 ioctl c0306201 0 returned -14 [ 186.354581][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.126'. [ 186.436923][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 186.921197][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 187.170306][ T6600] debugfs: 'ttyS3' already exists in 'caif_serial' [ 190.020102][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.5.133'. [ 190.360081][ T5956] hid_parser_main: 96 callbacks suppressed [ 190.360107][ T5956] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 190.431634][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'. [ 190.445137][ T5878] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 190.530520][ T5956] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 190.571661][ T5975] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 190.580161][ T5878] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 190.667822][ T5956] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 190.688965][ T5878] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 190.796766][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 190.830161][ T5975] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 190.881983][ T5975] usb 1-1: config 0 has no interface number 0 [ 190.909030][ T5975] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 190.964149][ T5975] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 190.996513][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.041622][ T5975] usb 1-1: Product: syz [ 191.086448][ T5975] usb 1-1: Manufacturer: syz [ 191.086484][ T5956] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 191.091086][ T5975] usb 1-1: SerialNumber: syz [ 191.110856][ T5878] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 191.191736][ T5878] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 191.252388][ T5975] usb 1-1: config 0 descriptor?? [ 191.439183][ T5956] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 191.492972][ T5878] hid-generic 0000:007F:FFFFFFFE.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.528793][ T5956] hid-generic 0000:007F:FFFFFFFE.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 192.039080][ T5975] msi2500 1-1:0.246: Registered as swradio24 [ 192.121881][ T5975] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 195.302647][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 195.610644][ T24] usb 1-1: USB disconnect, device number 5 [ 195.711188][ T6672] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 195.764871][ T6673] Bluetooth: MGMT ver 1.23 [ 195.905632][ T6672] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 196.022526][ T6672] C: renamed from team_slave_0 (while UP) [ 196.084263][ T6672] netlink: 'syz.1.146': attribute type 3 has an invalid length. [ 196.122802][ T6672] netlink: 152 bytes leftover after parsing attributes in process `syz.1.146'. [ 196.193926][ T6672] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 196.559239][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'. [ 196.588748][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 196.704743][ T6693] 9pnet_virtio: no channels available for device syz [ 196.871670][ T6695] 9pnet_virtio: no channels available for device syz [ 198.901720][ T5878] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 199.019551][ T6711] tipc: Enabling of bearer rejected, failed to enable media [ 199.161554][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 199.371531][ T5878] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 199.415195][ T5878] usb 2-1: config 0 has no interface number 0 [ 199.440001][ T5878] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 199.937934][ T5878] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 200.472632][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.591127][ T5878] usb 2-1: Product: syz [ 200.702012][ T5878] usb 2-1: Manufacturer: syz [ 200.706653][ T5878] usb 2-1: SerialNumber: syz [ 200.876072][ T5878] usb 2-1: config 0 descriptor?? [ 201.491796][ T5878] msi2500 2-1:0.246: Registered as swradio24 [ 201.527386][ T5878] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 201.765844][ T6728] 9pnet_virtio: no channels available for device syz [ 203.872031][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.878395][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.150965][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.169'. [ 204.244960][ T6751] netlink: 'syz.2.168': attribute type 4 has an invalid length. [ 204.252757][ T6751] netlink: 17 bytes leftover after parsing attributes in process `syz.2.168'. [ 204.485571][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 205.255166][ T5976] usb 2-1: USB disconnect, device number 3 [ 205.800412][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 205.824978][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 206.692506][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 206.758456][ T6762] ceph: No mds server is up or the cluster is laggy [ 206.765455][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 207.215570][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 207.294893][ T6783] bpq0: entered promiscuous mode [ 207.436944][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.181'. [ 207.625813][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 207.909355][ T6799] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.183'. [ 207.951581][ T6799] netlink: zone id is out of range [ 207.954636][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'. [ 208.006897][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'. [ 208.383573][ T6805] netlink: 'syz.5.184': attribute type 4 has an invalid length. [ 208.391322][ T6805] netlink: 17 bytes leftover after parsing attributes in process `syz.5.184'. [ 209.794149][ T5937] hid_parser_main: 96 callbacks suppressed [ 209.794180][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 209.934103][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 210.114647][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 210.262492][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 210.402629][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 210.490318][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 210.587937][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 211.848618][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 211.915223][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 212.127964][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 212.136399][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 212.163467][ T5937] hid-generic 0000:007F:FFFFFFFE.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.293450][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.313404][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.379634][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.462758][ T5878] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.496348][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.504855][ T6829] fido_id[6829]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.550249][ T5878] usb 1-1: config 0 descriptor?? [ 213.146979][ T5878] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 213.201420][ T5937] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 213.445441][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 213.509514][ T5937] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 213.548251][ T5937] usb 3-1: config 0 has no interface number 0 [ 213.585803][ T5937] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 213.781591][ T5937] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 213.830157][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.917937][ T5937] usb 3-1: Product: syz [ 213.951447][ T5937] usb 3-1: Manufacturer: syz [ 213.956102][ T5937] usb 3-1: SerialNumber: syz [ 214.001816][ T5937] usb 3-1: config 0 descriptor?? [ 214.101701][ T6841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.195'. [ 214.625328][ T5937] msi2500 3-1:0.246: Registered as swradio24 [ 214.632897][ T5937] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 214.877597][ T5976] usb 1-1: USB disconnect, device number 6 [ 216.271449][ T6853] comedi comedi3: reset error (fatal) [ 217.268616][ T6861] netlink: 'syz.4.200': attribute type 4 has an invalid length. [ 217.276460][ T6861] netlink: 17 bytes leftover after parsing attributes in process `syz.4.200'. [ 218.287118][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.202'. [ 218.332036][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 222.049381][ T6891] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 222.055931][ T6891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.126535][ T6891] vhci_hcd vhci_hcd.0: Device attached [ 222.151469][ T5937] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 222.321558][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 222.362101][ T24] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 222.371740][ T5937] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 222.410406][ T5937] usb 5-1: config 0 has no interface number 0 [ 222.416758][ T5878] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 222.482166][ T5937] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.529122][ T5937] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 222.585795][ T5937] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.599525][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 222.666191][ T5878] usb 6-1: config 0 has no interfaces? [ 222.720586][ T6032] usb 3-1: USB disconnect, device number 6 [ 222.768882][ T5878] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 222.780201][ T5937] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 222.797665][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.806394][ T5937] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 222.819106][ T5878] usb 6-1: config 0 descriptor?? [ 222.824171][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.922287][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 222.960461][ T5937] usb 5-1: config 0 descriptor?? [ 223.017242][ T5937] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 223.062460][ T5937] usb 6-1: USB disconnect, device number 4 [ 223.069441][ T6892] vhci_hcd: connection closed [ 223.071058][ T61] vhci_hcd: stop threads [ 223.211670][ T24] usb 43-1: device descriptor read/64, error -1 [ 223.262903][ T61] vhci_hcd: release socket [ 223.410911][ T61] vhci_hcd: disconnect device [ 223.521541][ T24] vhci_hcd: vhci_device speed not set [ 223.609984][ T6895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.660231][ T6895] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.674998][ T6895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.684102][ T6895] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 223.713087][ T6895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.731725][ T6895] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.661684][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.895221][ T5881] Bluetooth: hci5: command 0x0c1a tx timeout [ 225.901293][ T5881] Bluetooth: hci3: command 0x0c1a tx timeout [ 225.901606][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout [ 225.909448][ T5881] Bluetooth: hci2: command 0x0c1a tx timeout [ 225.913391][ T5879] Bluetooth: hci1: command 0x0c1a tx timeout [ 225.946905][ T6914] comedi comedi3: reset error (fatal) [ 226.016670][ T5937] usb 5-1: USB disconnect, device number 4 [ 226.077459][ T5937] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 226.634217][ T6924] netlink: 'syz.0.215': attribute type 4 has an invalid length. [ 226.642040][ T6924] netlink: 17 bytes leftover after parsing attributes in process `syz.0.215'. [ 229.137112][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.5.218'. [ 229.226897][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.218'. [ 229.292604][ T6939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.220'. [ 229.541777][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 229.704480][ T5937] hid_parser_main: 43 callbacks suppressed [ 229.704512][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 229.841635][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 229.901749][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 229.911481][ T6032] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 229.941420][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 229.979472][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 230.004949][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 230.041428][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 230.069579][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 230.141484][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 230.149612][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 230.163366][ T6032] usb 6-1: Using ep0 maxpacket: 8 [ 230.205877][ T6032] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 230.221641][ T6032] usb 6-1: config 0 has no interface number 0 [ 230.238107][ T5937] hid-generic 0000:007F:FFFFFFFE.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 230.263111][ T6032] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.326754][ T6032] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.381426][ T6032] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.432477][ T6032] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 230.494859][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.537735][ T6032] usb 6-1: config 0 descriptor?? [ 230.547499][ T6952] fido_id[6952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 230.651566][ T6032] ldusb 6-1:0.55: Interrupt in endpoint not found [ 231.030789][ T6032] usb 6-1: USB disconnect, device number 5 [ 231.211737][ T5937] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 232.366520][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 232.421429][ T6959] comedi comedi3: reset error (fatal) [ 232.466887][ T5937] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 232.486967][ T5937] usb 3-1: config 0 has no interface number 0 [ 232.548675][ T5937] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.623522][ T5937] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 232.781624][ T5937] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.911299][ T5937] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 233.214467][ T5937] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 233.234381][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.316594][ T6966] netlink: 'syz.5.228': attribute type 4 has an invalid length. [ 233.332628][ T6966] netlink: 17 bytes leftover after parsing attributes in process `syz.5.228'. [ 234.153852][ T5937] usb 3-1: config 0 descriptor?? [ 234.192284][ T5937] usb 3-1: can't set config #0, error -71 [ 234.261834][ T5937] usb 3-1: USB disconnect, device number 7 [ 236.467526][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.234'. [ 236.511557][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.234'. [ 236.961579][ T5976] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 237.047181][ T5879] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 237.107357][ T5937] hid_parser_main: 43 callbacks suppressed [ 237.107382][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 237.121466][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 237.153444][ T5976] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 237.161998][ T5976] usb 5-1: config 0 has no interface number 0 [ 237.168125][ T5976] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.214896][ T5976] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 238.681634][ T5976] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.795061][ T5976] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.809649][ T5976] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 238.818998][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.830610][ T5976] usb 5-1: config 0 descriptor?? [ 238.831447][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 238.851789][ T5976] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 238.941660][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 239.032184][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 239.039983][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 239.136547][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 239.171522][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 239.205215][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 239.235538][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 239.252208][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 239.273665][ T5937] hid-generic 0000:007F:FFFFFFFE.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 240.561568][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 240.740611][ T6032] usb 5-1: USB disconnect, device number 5 [ 240.782863][ T6032] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 241.031479][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 241.069810][ T24] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 241.250865][ T24] usb 2-1: config 0 has no interface number 0 [ 241.290826][ T24] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 241.458986][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 241.471512][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.497319][ T24] usb 2-1: Product: syz [ 241.518089][ T24] usb 2-1: Manufacturer: syz [ 241.548580][ T24] usb 2-1: SerialNumber: syz [ 241.589891][ T24] usb 2-1: config 0 descriptor?? [ 241.852788][ T7023] bpq0: left promiscuous mode [ 242.055986][ T24] msi2500 2-1:0.246: Registered as swradio24 [ 242.108880][ T24] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 242.207669][ T7023] netlink: 56 bytes leftover after parsing attributes in process `syz.4.244'. [ 243.400183][ T7036] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 243.524937][ T7034] bpq0: entered promiscuous mode [ 244.553320][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.249'. [ 244.600703][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 247.042795][ T5969] usb 2-1: USB disconnect, device number 4 [ 247.312013][ T7052] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 247.352978][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.502583][ T7052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.145743][ T7052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.176947][ T7072] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 248.183504][ T7072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.212875][ T7072] vhci_hcd vhci_hcd.0: Device attached [ 248.235159][ T7052] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 248.276705][ T7052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.438101][ T7076] Bluetooth: MGMT ver 1.23 [ 248.452054][ T7052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.468909][ T6032] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 248.704340][ T7070] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 248.714044][ T7070] netlink: 236 bytes leftover after parsing attributes in process `syz.0.254'. [ 248.781921][ T5937] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 249.132084][ T7083] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.258'. [ 249.161433][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 249.184550][ T7083] netlink: zone id is out of range [ 249.197621][ T7083] netlink: get zone limit has 8 unknown bytes [ 249.214943][ T5937] usb 2-1: config 0 has no interfaces? [ 249.311425][ T5937] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 249.407428][ T5879] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.490995][ T7086] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 249.645275][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.816499][ T5937] usb 2-1: config 0 descriptor?? [ 250.139036][ T24] hid_parser_main: 43 callbacks suppressed [ 250.139061][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 250.160892][ T7084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 250.170776][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 250.191031][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 250.199000][ T5879] Bluetooth: hci3: command 0x0c1a tx timeout [ 250.213018][ T5937] usb 2-1: USB disconnect, device number 5 [ 250.218065][ T7073] vhci_hcd: connection closed [ 250.220705][ T6001] vhci_hcd: stop threads [ 250.233519][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'. [ 250.246682][ T6001] vhci_hcd: release socket [ 250.277760][ T5879] Bluetooth: hci5: command 0x0c1a tx timeout [ 250.341647][ T5879] Bluetooth: hci2: command 0x0c1a tx timeout [ 250.373535][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 250.373740][ T6001] vhci_hcd: disconnect device [ 250.463654][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 250.498704][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 250.512839][ T5879] Bluetooth: hci4: command 0x0c1a tx timeout [ 250.628029][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 250.804261][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 251.067298][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 251.071167][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.264'. [ 251.111752][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 251.390748][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 251.473088][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 251.486280][ T6032] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 251.681482][ T6032] usb 1-1: Using ep0 maxpacket: 8 [ 252.132549][ T6032] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 253.237544][ T6032] usb 1-1: config 0 has no interface number 0 [ 253.252967][ T6032] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 253.271073][ T6032] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 253.285702][ T6032] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.297633][ T6032] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 253.315384][ T6032] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 253.329252][ T6032] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 253.338637][ T6032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.360178][ T24] hid-generic 0000:007F:FFFFFFFE.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.381710][ T5976] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 253.405694][ T6032] usb 1-1: config 0 descriptor?? [ 253.510472][ T6032] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 254.358742][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 254.379408][ T5976] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 254.387958][ T6032] usb 1-1: USB disconnect, device number 7 [ 254.393960][ T5976] usb 5-1: config 0 has no interface number 0 [ 254.401616][ T5976] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.415061][ T6032] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 254.422282][ T5976] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 254.434934][ T5976] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.451847][ T5976] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.465128][ T5976] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 254.474363][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.485927][ T5976] usb 5-1: config 0 descriptor?? [ 254.498899][ T5976] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 254.672448][ T7114] fido_id[7114]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.862655][ T6032] usb 5-1: USB disconnect, device number 6 [ 254.873445][ T6032] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 256.121726][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 256.577397][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 256.644401][ T24] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 256.922754][ T24] usb 5-1: config 0 has no interface number 0 [ 257.227014][ T24] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 258.028276][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 258.257945][ T7149] netlink: 'syz.0.274': attribute type 4 has an invalid length. [ 258.266147][ T7149] netlink: 17 bytes leftover after parsing attributes in process `syz.0.274'. [ 258.472824][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.649700][ T24] usb 5-1: Product: syz [ 258.685032][ T24] usb 5-1: Manufacturer: syz [ 258.866501][ T24] usb 5-1: SerialNumber: syz [ 259.020647][ T24] usb 5-1: config 0 descriptor?? [ 260.519369][ T24] usb 5-1: can't set config #0, error -71 [ 260.600568][ T24] usb 5-1: USB disconnect, device number 7 [ 261.681825][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.280'. [ 261.741570][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 263.498448][ T7175] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 264.059564][ T7175] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 264.136827][ T7175] netlink: 'syz.1.283': attribute type 3 has an invalid length. [ 264.187036][ T7175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.283'. [ 264.276735][ T7175] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 264.300712][ T7178] ceph: No mds server is up or the cluster is laggy [ 264.314490][ T24] libceph: connect (1)[c::]:6789 error -101 [ 264.329479][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 265.364739][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.371135][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.826394][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.289'. [ 265.863257][ T43] hid_parser_main: 43 callbacks suppressed [ 265.863284][ T43] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 266.362251][ T43] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 266.583383][ T43] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 266.591172][ T43] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 266.711907][ T43] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 266.720126][ T43] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 266.734180][ T43] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 266.743798][ T43] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 266.753565][ T43] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 267.041294][ T43] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 267.080532][ T43] hid-generic 0000:007F:FFFFFFFE.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 267.334351][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 267.471794][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 267.532356][ T7220] fido_id[7220]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 267.749625][ T5976] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 267.761327][ T7217] ceph: No mds server is up or the cluster is laggy [ 268.023980][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 268.049698][ T5976] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 268.108974][ T5976] usb 5-1: config 0 has no interface number 0 [ 268.231585][ T5976] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 268.283195][ T5976] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 268.292946][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.300973][ T5976] usb 5-1: Product: syz [ 268.337782][ T5976] usb 5-1: Manufacturer: syz [ 268.350558][ T5976] usb 5-1: SerialNumber: syz [ 268.352552][ T5937] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 268.374441][ T5976] usb 5-1: config 0 descriptor?? [ 268.561469][ T5973] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 268.799633][ T5976] msi2500 5-1:0.246: Registered as swradio24 [ 268.814100][ T5973] usb 2-1: Using ep0 maxpacket: 8 [ 268.827934][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 268.844952][ T5973] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 268.868876][ T5976] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 268.888249][ T5973] usb 2-1: config 0 has no interface number 0 [ 268.896195][ T5937] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 268.922150][ T5937] usb 1-1: config 0 has no interface number 0 [ 268.938667][ T5937] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 268.960264][ T5937] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 268.997221][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.044603][ T5937] usb 1-1: Product: syz [ 269.119179][ T5937] usb 1-1: Manufacturer: syz [ 269.131459][ T5937] usb 1-1: SerialNumber: syz [ 269.192529][ T5937] usb 1-1: config 0 descriptor?? [ 269.208787][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.296'. [ 269.222204][ T5973] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.270927][ T5973] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 269.282357][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 269.462151][ T5973] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.507059][ T5937] videodev: could not get a free minor [ 269.543097][ T5973] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 269.548534][ T5937] msi2500 1-1:0.246: Failed to register as video device (-23) [ 269.629574][ T5937] msi2500 1-1:0.246: probe with driver msi2500 failed with error -23 [ 269.660369][ T5973] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 269.837409][ T5973] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 269.847598][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.874725][ T5973] usb 2-1: config 0 descriptor?? [ 269.885331][ T5973] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 271.173921][ T7229] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 271.280894][ T7229] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 271.341864][ T7250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.298'. [ 271.392935][ T6032] usb 2-1: USB disconnect, device number 6 [ 271.402062][ T6032] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 271.644420][ T24] usb 5-1: USB disconnect, device number 8 [ 271.677146][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 271.713815][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 271.732711][ T7251] ceph: No mds server is up or the cluster is laggy [ 272.068964][ T6032] libceph: connect (1)[c::]:6789 error -101 [ 272.187396][ T6032] libceph: mon0 (1)[c::]:6789 connect error [ 272.514669][ T7268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.302'. [ 272.906414][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 272.950984][ T7273] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.304'. [ 272.960513][ T7273] netlink: zone id is out of range [ 272.999248][ T7273] netlink: zone id is out of range [ 273.264207][ T7273] netlink: get zone limit has 8 unknown bytes [ 273.636599][ T6032] usb 1-1: USB disconnect, device number 8 [ 273.881098][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.5.306'. [ 273.945432][ T24] hid_parser_main: 43 callbacks suppressed [ 273.945463][ T24] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 274.047324][ T24] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 274.063950][ T24] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 274.085869][ T7286] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 274.092412][ T7286] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.103342][ T7286] vhci_hcd vhci_hcd.0: Device attached [ 274.113970][ T24] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 274.160023][ T24] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 274.202963][ T24] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 274.281068][ T24] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 274.329227][ T24] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 274.347537][ T5973] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 274.361673][ T5937] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 274.613859][ T5973] usb 3-1: Using ep0 maxpacket: 16 [ 274.637682][ T5973] usb 3-1: config 0 has no interfaces? [ 274.644536][ T24] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 274.669485][ T24] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 274.690275][ T5973] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 274.729589][ T24] hid-generic 0000:007F:FFFFFFFE.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.456172][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.563237][ T5973] usb 3-1: config 0 descriptor?? [ 275.902218][ T7289] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 275.931015][ T24] usb 3-1: USB disconnect, device number 8 [ 276.101195][ T36] vhci_hcd: stop threads [ 276.205586][ T36] vhci_hcd: release socket [ 276.257020][ T36] vhci_hcd: disconnect device [ 276.262910][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.311'. [ 276.318878][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.311'. [ 276.331955][ T6032] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 276.671470][ T6032] usb 4-1: Using ep0 maxpacket: 8 [ 276.814869][ T6032] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 276.834487][ T7315] bpq0: left promiscuous mode [ 276.891430][ T6032] usb 4-1: config 0 has no interface number 0 [ 276.922404][ T6032] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 276.993948][ T6032] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 277.061397][ T6032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.201950][ T6032] usb 4-1: Product: syz [ 277.206185][ T6032] usb 4-1: Manufacturer: syz [ 277.274157][ T6032] usb 4-1: SerialNumber: syz [ 277.354019][ T6032] usb 4-1: config 0 descriptor?? [ 277.654466][ T7326] binder: 7322:7326 ioctl c0306201 0 returned -14 [ 277.897391][ T7325] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.914045][ T6032] msi2500 4-1:0.246: Registered as swradio24 [ 277.931071][ T6032] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 278.101265][ T7325] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 279.481670][ T5975] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 279.691716][ T5937] vhci_hcd: vhci_device speed not set [ 279.792806][ T5975] usb 2-1: Using ep0 maxpacket: 8 [ 279.855194][ T5975] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 279.904002][ T5975] usb 2-1: config 0 has no interface number 0 [ 279.923880][ T5975] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.938077][ T5976] usb 4-1: USB disconnect, device number 5 [ 280.118899][ T5975] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 280.554235][ T5975] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.568791][ T5975] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.582429][ T5975] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 280.591698][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.656932][ T5975] usb 2-1: config 0 descriptor?? [ 280.711196][ T5975] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 280.997928][ T5937] hid_parser_main: 43 callbacks suppressed [ 280.997960][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 281.026538][ T7350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.319'. [ 281.114972][ T5976] usb 2-1: USB disconnect, device number 7 [ 281.187263][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 281.198145][ T5976] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 282.481519][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.5.324'. [ 282.872439][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 282.880262][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 283.549457][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 283.590466][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.5.327'. [ 283.651547][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.327'. [ 284.056377][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 284.262260][ T6032] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 284.378758][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 284.420434][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 284.461546][ T6032] usb 6-1: Using ep0 maxpacket: 8 [ 284.486755][ T6032] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 284.502317][ T6032] usb 6-1: config 0 has no interface number 0 [ 284.537212][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 284.551855][ T6032] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.592023][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 284.602816][ T6032] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 284.629988][ T6032] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 284.664280][ T6032] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 284.689223][ T7378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'. [ 284.712924][ T5937] hid-generic 0000:007F:FFFFFFFE.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.819517][ T7388] netlink: 'syz.1.326': attribute type 4 has an invalid length. [ 284.827336][ T7388] netlink: 17 bytes leftover after parsing attributes in process `syz.1.326'. [ 284.874249][ T6032] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 285.007893][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.077111][ T6032] usb 6-1: config 0 descriptor?? [ 285.171845][ T6032] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 285.442968][ T6032] usb 6-1: USB disconnect, device number 6 [ 285.490730][ T6032] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 285.643769][ T7389] fido_id[7389]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 286.601548][ T5976] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 286.694746][ T7406] binder: 7404:7406 ioctl c0306201 0 returned -14 [ 286.952711][ T5976] usb 1-1: Using ep0 maxpacket: 8 [ 287.254364][ T5976] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 287.291463][ T5976] usb 1-1: config 0 has no interface number 0 [ 287.308590][ T5976] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.325094][ T5976] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 287.375380][ T5976] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.404784][ T5976] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.512573][ T5976] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 287.585944][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.660726][ T5976] usb 1-1: config 0 descriptor?? [ 287.710628][ T5976] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 290.606436][ T5973] usb 1-1: USB disconnect, device number 9 [ 290.692226][ T5973] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 290.950157][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'. [ 292.090896][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 292.142120][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 294.965730][ T7463] bpq0: entered promiscuous mode [ 295.010663][ T5969] libceph: connect (1)[c::]:6789 error -101 [ 295.021297][ T5969] libceph: mon0 (1)[c::]:6789 connect error [ 295.050680][ T7460] ceph: No mds server is up or the cluster is laggy [ 295.515301][ T7470] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.348'. [ 295.581528][ T7470] netlink: zone id is out of range [ 295.603971][ T7470] netlink: zone id is out of range [ 295.623896][ T7470] netlink: get zone limit has 8 unknown bytes [ 295.719419][ T7475] binder: 7474:7475 ioctl c0306201 0 returned -14 [ 297.291518][ T6032] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 297.851493][ T6032] usb 4-1: Using ep0 maxpacket: 8 [ 297.915378][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.355'. [ 297.971680][ T6032] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 297.991446][ T6032] usb 4-1: config 0 has no interface number 0 [ 297.998341][ T6032] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 298.061017][ T6032] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 298.074016][ T6032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.084178][ T7494] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 298.108152][ T6032] usb 4-1: Product: syz [ 298.135047][ T6032] usb 4-1: Manufacturer: syz [ 298.155244][ T6032] usb 4-1: SerialNumber: syz [ 298.202662][ T6032] usb 4-1: config 0 descriptor?? [ 298.221434][ T7494] netlink: 'syz.5.354': attribute type 1 has an invalid length. [ 298.555055][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.357'. [ 298.647303][ T7499] C: renamed from team_slave_0 (while UP) [ 299.093691][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 299.737962][ T7499] netlink: 'syz.5.354': attribute type 3 has an invalid length. [ 299.808886][ T7499] netlink: 152 bytes leftover after parsing attributes in process `syz.5.354'. [ 299.893475][ T7499] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 299.939704][ T6032] msi2500 4-1:0.246: Registered as swradio24 [ 299.951491][ T6032] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 300.369729][ T7520] bpq0: left promiscuous mode [ 300.835665][ T6032] usb 4-1: USB disconnect, device number 6 [ 300.877175][ T7528] bpq0: entered promiscuous mode [ 301.779492][ T5969] hid_parser_main: 43 callbacks suppressed [ 301.779526][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 301.810652][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.5.363'. [ 304.364427][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 304.481741][ T7532] debugfs: 'ttyS3' already exists in 'caif_serial' [ 304.503706][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 304.736034][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 304.868900][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 305.053438][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 305.061226][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 305.501477][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 305.544333][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 305.637201][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 305.831017][ T5969] hid-generic 0000:007F:FFFFFFFE.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.404922][ T7570] 9pnet_virtio: no channels available for device syz [ 307.948376][ T7567] debugfs: 'ttyS3' already exists in 'caif_serial' [ 308.281755][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 308.351628][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 309.297440][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 309.365085][ T7584] bpq0: left promiscuous mode [ 311.260070][ T7603] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.380'. [ 311.362650][ T7603] netlink: zone id is out of range [ 311.407093][ T7603] netlink: zone id is out of range [ 311.413711][ T7603] netlink: get zone limit has 8 unknown bytes [ 313.073010][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.389'. [ 313.107391][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 313.335071][ T7635] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 313.921884][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.393'. [ 314.348949][ T7655] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 314.690216][ T7655] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 315.351168][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 315.381850][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 315.562930][ T7663] ceph: No mds server is up or the cluster is laggy [ 315.652162][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 315.669104][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 315.926449][ T7676] debugfs: 'ttyS3' already exists in 'caif_serial' [ 321.743210][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.405'. [ 321.811626][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 321.890741][ T7715] debugfs: 'ttyS3' already exists in 'caif_serial' [ 322.701127][ T7723] netlink: 'syz.1.406': attribute type 4 has an invalid length. [ 322.708977][ T7723] netlink: 17 bytes leftover after parsing attributes in process `syz.1.406'. [ 325.697000][ T7746] debugfs: 'ttyS3' already exists in 'caif_serial' [ 326.747189][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.758290][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.814531][ T5969] hid_parser_main: 43 callbacks suppressed [ 328.814563][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 329.083827][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 329.125262][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 329.186471][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 329.231522][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 329.282624][ T6032] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 329.321041][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 329.385352][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 329.427103][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 329.480298][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 329.559621][ T6032] usb 5-1: Using ep0 maxpacket: 8 [ 329.600101][ T6032] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 329.640525][ T6032] usb 5-1: config 0 has no interface number 0 [ 329.687153][ T6032] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.735213][ T6032] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 329.759367][ T6032] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.791011][ T6032] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 329.844829][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 329.876810][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 329.897232][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 329.920266][ T6032] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 330.011440][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.041264][ T6032] usb 5-1: config 0 descriptor?? [ 330.088078][ T6032] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 330.209038][ T5969] hid-generic 0000:007F:FFFFFFFE.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.624767][ T7789] netlink: 'syz.5.421': attribute type 4 has an invalid length. [ 330.632615][ T7789] netlink: 17 bytes leftover after parsing attributes in process `syz.5.421'. [ 332.703505][ T5937] usb 5-1: USB disconnect, device number 9 [ 332.711455][ T6032] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 333.030096][ T7793] fido_id[7793]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 333.111693][ T6032] usb 2-1: Using ep0 maxpacket: 8 [ 333.163257][ T5937] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 333.198792][ T5976] libceph: connect (1)[c::]:6789 error -101 [ 333.211410][ T5976] libceph: mon0 (1)[c::]:6789 connect error [ 333.379106][ T7803] ceph: No mds server is up or the cluster is laggy [ 333.854128][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.5.424'. [ 334.345814][ T7819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.428'. [ 334.847491][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 334.962711][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 335.766481][ T5976] libceph: connect (1)[c::]:6789 error -101 [ 335.781652][ T5976] libceph: mon0 (1)[c::]:6789 connect error [ 336.052033][ T5976] libceph: connect (1)[c::]:6789 error -101 [ 336.093181][ T5976] libceph: mon0 (1)[c::]:6789 connect error [ 336.346691][ T7829] ceph: No mds server is up or the cluster is laggy [ 337.022567][ T5973] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 337.163435][ T7844] fuse: Invalid rootmode [ 337.233925][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.281527][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.350707][ T5973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.441197][ T5973] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.499545][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.560149][ T5973] usb 4-1: config 0 descriptor?? [ 337.734364][ T6032] usb 2-1: device descriptor read/all, error -71 [ 337.974460][ T7850] debugfs: 'ttyS3' already exists in 'caif_serial' [ 338.113713][ T5973] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 340.071716][ T6032] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 340.913514][ T7889] overlayfs: failed to resolve './file0': -2 [ 341.081579][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'. [ 341.211557][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 341.282149][ T5973] usb 4-1: USB disconnect, device number 7 [ 341.710477][ T6032] libceph: connect (1)[c::]:6789 error -101 [ 341.726772][ T6032] libceph: mon0 (1)[c::]:6789 connect error [ 342.009286][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 342.330598][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 342.426417][ T7895] ceph: No mds server is up or the cluster is laggy [ 342.456762][ T24] libceph: connect (1)[c::]:6789 error -101 [ 342.463014][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 342.746132][ T24] libceph: connect (1)[c::]:6789 error -101 [ 342.862759][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 343.231434][ T7913] ceph: No mds server is up or the cluster is laggy [ 343.683583][ T5937] hid_parser_main: 43 callbacks suppressed [ 343.683616][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: unknown main item tag 0x0 [ 343.951433][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: unknown main item tag 0x0 [ 344.043879][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: unknown main item tag 0x0 [ 344.082229][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: unknown main item tag 0x0 [ 344.090043][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: unknown main item tag 0x0 [ 344.238318][ T7932] bpq0: entered promiscuous mode [ 344.324650][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: unknown main item tag 0x0 [ 344.871696][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: unknown main item tag 0x0 [ 344.941495][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: unknown main item tag 0x0 [ 345.125333][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: unknown main item tag 0x0 [ 345.190474][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: unknown main item tag 0x0 [ 345.268707][ T5937] hid-generic 0000:007F:FFFFFFFE.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 345.522017][ T5976] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 345.889195][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.920597][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.233549][ T5976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.391850][ T5976] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.504065][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.556494][ T5976] usb 6-1: config 0 descriptor?? [ 347.693991][ T5976] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 348.361507][ T5937] usb 6-1: USB disconnect, device number 7 [ 348.701465][ T6032] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 349.101453][ T6032] usb 4-1: Using ep0 maxpacket: 8 [ 349.163889][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 349.907094][ T6032] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 349.927472][ T6032] usb 4-1: config 0 has no interface number 0 [ 349.935313][ T6032] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 350.114006][ T6032] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 350.328316][ T6032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.397576][ T6032] usb 4-1: Product: syz [ 350.444082][ T6032] usb 4-1: Manufacturer: syz [ 350.448748][ T6032] usb 4-1: SerialNumber: syz [ 350.826717][ T6032] usb 4-1: config 0 descriptor?? [ 350.942343][ T2082] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 351.062483][ T5969] hid_parser_main: 43 callbacks suppressed [ 351.062518][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 351.144325][ T2082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.201670][ T2082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.218847][ T2082] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.224145][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 351.232103][ T2082] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.253424][ T2082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.272444][ T2082] usb 5-1: config 0 descriptor?? [ 351.379203][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 351.541550][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 351.871530][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 351.898004][ T2082] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 352.017078][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 352.232011][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 352.440535][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 352.449718][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 352.701549][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 352.861491][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 352.957275][ T5969] hid-generic 0000:007F:FFFFFFFE.0018: hidraw1: HID v0.00 Device [syz1] on syz0 [ 353.094755][ T5969] libceph: connect (1)[c::]:6789 error -101 [ 353.155447][ T5969] libceph: mon0 (1)[c::]:6789 connect error [ 353.568411][ T5969] libceph: connect (1)[c::]:6789 error -101 [ 353.601191][ T5969] libceph: mon0 (1)[c::]:6789 connect error [ 353.841828][ T5976] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 353.844452][ T7994] ceph: No mds server is up or the cluster is laggy [ 353.851911][ T8006] sctp: Trying to GSO but underlying device doesn't support it. [ 353.972989][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 354.138245][ T6032] usb 4-1: can't set config #0, error -71 [ 354.250801][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 354.298282][ T6032] usb 4-1: USB disconnect, device number 8 [ 354.307482][ T24] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 354.349354][ T24] usb 1-1: config 0 has no interface number 0 [ 354.400785][ T24] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 354.436616][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 354.472009][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.496263][ T8008] bpq0: left promiscuous mode [ 354.515727][ T24] usb 1-1: Product: syz [ 354.566615][ T24] usb 1-1: Manufacturer: syz [ 354.599006][ T24] usb 1-1: SerialNumber: syz [ 354.619929][ T8011] bpq0: entered promiscuous mode [ 354.657836][ T24] usb 1-1: config 0 descriptor?? [ 354.872670][ T24] msi2500 1-1:0.246: Registered as swradio24 [ 355.066668][ T24] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 355.168335][ T2082] usb 5-1: USB disconnect, device number 10 [ 356.538720][ T24] hid_parser_main: 43 callbacks suppressed [ 356.538744][ T24] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 356.869458][ T24] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 357.108035][ T24] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 357.350799][ T24] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 357.571754][ T24] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 357.705286][ T24] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 357.850889][ T5973] usb 1-1: USB disconnect, device number 10 [ 357.940808][ T24] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 358.142821][ T24] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 358.150657][ T24] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 358.267769][ T24] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 358.301876][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.474'. [ 358.332262][ T5937] hid-generic 0000:007F:FFFFFFFE.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 358.374855][ T24] hid-generic 0000:007F:FFFFFFFE.001A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 358.619540][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.5.471'. [ 359.007699][ T8041] debugfs: 'ttyS3' already exists in 'caif_serial' [ 359.963204][ T8052] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 360.041592][ T8052] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 360.049440][ T8040] fido_id[8040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.294464][ T8052] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 360.367555][ T8052] overlayfs: failed to look up (tracing) for ino (-66) [ 361.604089][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 361.610155][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 361.731658][ T5976] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 361.874644][ T8065] ceph: No mds server is up or the cluster is laggy [ 361.906677][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 361.916460][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 361.964120][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 361.981527][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 362.289259][ T5976] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 362.349534][ T5976] usb 3-1: config 0 has no interface number 0 [ 362.371494][ T5976] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 362.463146][ T5976] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 362.510376][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.551228][ T5976] usb 3-1: Product: syz [ 362.594191][ T5976] usb 3-1: Manufacturer: syz [ 362.598821][ T5976] usb 3-1: SerialNumber: syz [ 362.629300][ T5976] usb 3-1: config 0 descriptor?? [ 363.202866][ T8085] debugfs: 'ttyS3' already exists in 'caif_serial' [ 363.459663][ T5976] msi2500 3-1:0.246: Registered as swradio24 [ 363.478561][ T5976] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 365.759163][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.484'. [ 366.241292][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 367.360809][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.485'. [ 367.392968][ T24] hid_parser_main: 96 callbacks suppressed [ 367.392999][ T24] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 367.427788][ T24] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 367.436362][ T24] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 367.444662][ T24] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 367.453979][ T24] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 367.462096][ T24] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 367.469980][ T24] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 367.478315][ T24] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 367.511189][ T24] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 367.592496][ T5973] usb 3-1: USB disconnect, device number 9 [ 367.745952][ T8119] debugfs: 'ttyS3' already exists in 'caif_serial' [ 367.967431][ T24] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 367.988611][ T24] hid-generic 0000:007F:FFFFFFFE.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 368.568548][ T2082] hid-generic 0000:007F:FFFFFFFE.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 368.896131][ T8136] fido_id[8136]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 368.991830][ T5937] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 369.551431][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 369.640700][ T5937] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 369.690181][ T5937] usb 2-1: config 0 has no interface number 0 [ 369.771036][ T5937] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 369.964676][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.493'. [ 370.103294][ T5937] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 370.118958][ T8144] fido_id[8144]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 370.146786][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.262296][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 370.615380][ T5937] usb 2-1: Product: syz [ 370.691517][ T5937] usb 2-1: Manufacturer: syz [ 370.696175][ T5937] usb 2-1: SerialNumber: syz [ 370.857692][ T5937] usb 2-1: config 0 descriptor?? [ 371.931833][ T2082] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 372.152583][ T2082] usb 6-1: Using ep0 maxpacket: 8 [ 372.190154][ T2082] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 372.242061][ T2082] usb 6-1: config 0 has no interface number 0 [ 372.278461][ T2082] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 372.333967][ T5969] hid-generic 0000:007F:FFFFFFFE.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.348357][ T2082] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 372.456346][ T2082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.501658][ T2082] usb 6-1: Product: syz [ 372.534413][ T2082] usb 6-1: Manufacturer: syz [ 372.582371][ T2082] usb 6-1: SerialNumber: syz [ 372.622751][ T2082] usb 6-1: config 0 descriptor?? [ 373.058795][ T2082] msi2500 6-1:0.246: Registered as swradio24 [ 373.133804][ T2082] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 374.534580][ T5937] usb 2-1: can't set config #0, error -71 [ 374.604395][ T5937] usb 2-1: USB disconnect, device number 10 [ 376.460808][ T2082] usb 6-1: USB disconnect, device number 8 [ 377.184019][ T8195] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 377.297497][ T8195] netlink: 'syz.5.503': attribute type 1 has an invalid length. [ 377.464794][ T8195] netlink: 'syz.5.503': attribute type 3 has an invalid length. [ 377.552108][ T8195] netlink: 152 bytes leftover after parsing attributes in process `syz.5.503'. [ 377.753115][ T8195] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 378.259901][ T24] hid_parser_main: 149 callbacks suppressed [ 378.259926][ T24] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 378.292985][ T24] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 378.312437][ T24] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 378.320839][ T24] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 378.334544][ T24] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 378.348334][ T24] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 378.358056][ T24] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 378.366354][ T24] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 378.375379][ T24] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 378.397912][ T24] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 378.398453][ T5976] libceph: connect (1)[c::]:6789 error -101 [ 378.434235][ T24] hid-generic 0000:007F:FFFFFFFE.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.445444][ T5976] libceph: mon0 (1)[c::]:6789 connect error [ 378.587559][ T8210] ceph: No mds server is up or the cluster is laggy [ 378.606681][ T8214] fido_id[8214]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 378.721974][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 378.729396][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 378.961674][ T5976] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 379.171817][ T5976] usb 6-1: Using ep0 maxpacket: 8 [ 379.290303][ T5976] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 379.480771][ T5976] usb 6-1: config 0 has no interface number 0 [ 379.577427][ T5976] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 379.776014][ T5976] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 380.196420][ T5976] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 380.292025][ T5976] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.559506][ T5976] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 380.648024][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.702082][ T5976] usb 6-1: config 0 descriptor?? [ 380.737903][ T5976] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 380.866934][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.512'. [ 380.932461][ T24] hid-generic 0000:007F:FFFFFFFE.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 381.182917][ T5976] usb 6-1: USB disconnect, device number 9 [ 381.252987][ T5976] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 381.451489][ T5975] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 381.985934][ T5975] usb 4-1: Using ep0 maxpacket: 8 [ 382.022696][ T5975] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 382.196748][ T5975] usb 4-1: config 0 has no interface number 0 [ 382.217489][ T5975] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 382.244888][ T8249] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 382.267013][ T8249] netlink: 236 bytes leftover after parsing attributes in process `syz.4.514'. [ 382.315570][ T5975] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 382.350457][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.371681][ T5975] usb 4-1: Product: syz [ 382.391892][ T5975] usb 4-1: Manufacturer: syz [ 382.410935][ T5975] usb 4-1: SerialNumber: syz [ 382.481176][ T5975] usb 4-1: config 0 descriptor?? [ 382.584457][ T8240] fido_id[8240]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 383.520222][ T5975] msi2500 4-1:0.246: Registered as swradio24 [ 383.567099][ T5975] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 384.908109][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 385.311052][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 386.490219][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.524'. [ 386.502096][ T8267] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 386.512661][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 386.867764][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.524'. [ 387.095954][ T8267] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.465149][ T8267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 387.478161][ T8267] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 387.656103][ T8267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.681680][ T8267] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 387.721475][ T5969] usb 4-1: USB disconnect, device number 9 [ 388.195948][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.211714][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.315895][ T5975] hid_parser_main: 96 callbacks suppressed [ 388.315928][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 388.366677][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 388.442741][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 388.492854][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 388.581578][ T5879] Bluetooth: hci1: command 0x0c1a tx timeout [ 388.591714][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 388.619379][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 388.631876][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 388.639666][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 388.647834][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 388.659277][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 388.675834][ T5975] hid-generic 0000:007F:FFFFFFFE.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 389.458522][ T8323] fido_id[8323]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 389.542814][ T5877] Bluetooth: hci3: command 0x0c1a tx timeout [ 389.549002][ T5879] Bluetooth: hci5: command 0x0c1a tx timeout [ 389.711423][ T5879] Bluetooth: hci4: command 0x0c1a tx timeout [ 389.717488][ T5879] Bluetooth: hci2: command 0x0c1a tx timeout [ 391.255721][ T5975] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 391.432462][ T5975] usb 4-1: Using ep0 maxpacket: 8 [ 391.480829][ T5975] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 391.621914][ T5975] usb 4-1: config 0 has no interface number 0 [ 391.719776][ T5975] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 391.942088][ T5975] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 392.029146][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.304453][ T5975] usb 4-1: Product: syz [ 392.405308][ T5975] usb 4-1: Manufacturer: syz [ 392.433174][ T8349] bpq0: left promiscuous mode [ 392.447122][ T8350] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 392.475818][ T5975] usb 4-1: SerialNumber: syz [ 392.548022][ T8350] netlink: 'syz.4.536': attribute type 1 has an invalid length. [ 392.552691][ T5975] usb 4-1: config 0 descriptor?? [ 392.673571][ T8354] netlink: 56 bytes leftover after parsing attributes in process `syz.1.535'. [ 392.711669][ T8350] C: renamed from team_slave_0 (while UP) [ 392.900541][ T8350] netlink: 'syz.4.536': attribute type 3 has an invalid length. [ 392.928308][ T8350] netlink: 152 bytes leftover after parsing attributes in process `syz.4.536'. [ 392.968924][ T8350] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 393.089228][ T5879] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 393.203135][ T5975] msi2500 4-1:0.246: Registered as swradio24 [ 393.855584][ T5975] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 394.288229][ T24] hid_parser_main: 43 callbacks suppressed [ 394.288254][ T24] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 394.307584][ T24] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 394.317127][ T24] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 394.409923][ T24] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 394.472073][ T24] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 394.479952][ T24] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 394.861637][ T24] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 394.988867][ T24] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 395.082639][ T24] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 395.159725][ T5976] usb 4-1: USB disconnect, device number 10 [ 395.279499][ T24] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 395.588626][ T24] hid-generic 0000:007F:FFFFFFFE.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 397.841143][ T5937] hid-generic 0000:007F:FFFFFFFE.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 399.376718][ T8410] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.545'. [ 399.461572][ T8410] netlink: zone id is out of range [ 399.472935][ T8410] netlink: zone id is out of range [ 400.205216][ T8418] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 400.522671][ T8422] bpq0: entered promiscuous mode [ 403.141622][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.257274][ T8427] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 403.274679][ T8427] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.280887][ T8427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.376007][ T8427] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 404.079816][ T8427] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.154804][ T8427] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 405.303590][ T5879] Bluetooth: hci3: command 0x0c1a tx timeout [ 405.310548][ T5879] Bluetooth: hci1: command 0x0c1a tx timeout [ 405.391588][ T5879] Bluetooth: hci5: command 0x0c1a tx timeout [ 406.103124][ T5879] Bluetooth: hci2: command 0x0c1a tx timeout [ 406.331468][ T5877] Bluetooth: hci4: command 0x0c1a tx timeout [ 406.622089][ T5937] hid_parser_main: 96 callbacks suppressed [ 406.622115][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: unknown main item tag 0x0 [ 406.699486][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: unknown main item tag 0x0 [ 406.852154][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: unknown main item tag 0x0 [ 407.121460][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: unknown main item tag 0x0 [ 407.236184][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: unknown main item tag 0x0 [ 407.441527][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: unknown main item tag 0x0 [ 407.449319][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: unknown main item tag 0x0 [ 407.558798][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: unknown main item tag 0x0 [ 407.614731][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: unknown main item tag 0x0 [ 407.696399][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: unknown main item tag 0x0 [ 407.721069][ T5937] hid-generic 0000:007F:FFFFFFFE.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.194628][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.560'. [ 408.305002][ T8475] fido_id[8475]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 408.391659][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.560'. [ 409.402500][ T5976] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 409.691489][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 409.712468][ T5976] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 409.825224][ T5976] usb 5-1: config 0 has no interface number 0 [ 410.051550][ T5976] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 410.063716][ T5969] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 410.190366][ T5976] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 410.210070][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.238503][ T5976] usb 5-1: Product: syz [ 410.311876][ T5976] usb 5-1: Manufacturer: syz [ 410.316527][ T5976] usb 5-1: SerialNumber: syz [ 410.839068][ T5976] usb 5-1: config 0 descriptor?? [ 410.856132][ T8504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.867835][ T8504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.876836][ T8504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.894190][ T8504] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 410.910113][ T8504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 410.921027][ T8504] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 411.166342][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.177410][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.221295][ T5969] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.235987][ T5969] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.259669][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.414226][ T5976] msi2500 5-1:0.246: Registered as swradio24 [ 411.470064][ T5976] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 411.502095][ T5969] usb 6-1: config 0 descriptor?? [ 412.565928][ T5969] usbhid 6-1:0.0: can't add hid device: -71 [ 412.731638][ T5969] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 412.825680][ T5969] usb 6-1: USB disconnect, device number 10 [ 412.901512][ T5879] Bluetooth: hci3: command 0x0c1a tx timeout [ 412.901799][ T5877] Bluetooth: hci1: command 0x0c1a tx timeout [ 412.907575][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 412.996524][ T5879] Bluetooth: hci5: command 0x0c1a tx timeout [ 412.996523][ T5877] Bluetooth: hci2: command 0x0c1a tx timeout [ 413.061751][ T5877] Bluetooth: hci4: command 0x0c1a tx timeout [ 414.729029][ T5969] usb 5-1: USB disconnect, device number 11 [ 414.911833][ T5937] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 415.071988][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 415.086468][ T5937] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 415.099333][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.246277][ T5937] usb 2-1: config 0 has no interface number 0 [ 415.282327][ T5937] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 415.329335][ T5937] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.360490][ T5937] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 415.371810][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.447407][ T5937] usb 2-1: config 0 descriptor?? [ 415.521167][ T5937] ldusb 2-1:0.55: Interrupt in endpoint not found [ 415.821566][ T5937] usb 2-1: USB disconnect, device number 11 [ 417.496958][ T6032] hid_parser_main: 43 callbacks suppressed [ 417.496983][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: unknown main item tag 0x0 [ 417.534465][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: unknown main item tag 0x0 [ 417.578375][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: unknown main item tag 0x0 [ 417.590293][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: unknown main item tag 0x0 [ 417.601649][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: unknown main item tag 0x0 [ 417.611111][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: unknown main item tag 0x0 [ 417.619721][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: unknown main item tag 0x0 [ 417.643268][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: unknown main item tag 0x0 [ 417.686408][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: unknown main item tag 0x0 [ 417.718742][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: unknown main item tag 0x0 [ 417.743741][ T6032] hid-generic 0000:007F:FFFFFFFE.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 418.137799][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 418.303066][ T8554] fido_id[8554]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 419.233248][ T5975] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 419.503035][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 419.805804][ T8565] tipc: Enabling of bearer rejected, failed to enable media [ 419.870608][ T5975] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 420.191675][ T5975] usb 1-1: config 0 has no interface number 0 [ 420.198318][ T43] hid-generic 0000:007F:FFFFFFFE.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 420.251593][ T5975] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 420.374720][ T5975] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 420.430631][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.541790][ T5975] usb 1-1: Product: syz [ 420.546009][ T5975] usb 1-1: Manufacturer: syz [ 420.550620][ T5975] usb 1-1: SerialNumber: syz [ 420.853766][ T5975] usb 1-1: config 0 descriptor?? [ 421.029749][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.583'. [ 421.216164][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 421.308366][ T8576] fido_id[8576]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 421.783623][ T5975] msi2500 1-1:0.246: Registered as swradio24 [ 421.811319][ T5975] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 421.981503][ T5976] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 422.220984][ T5976] usb 4-1: Using ep0 maxpacket: 8 [ 422.249685][ T5976] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 422.298950][ T5976] usb 4-1: config 0 has no interface number 0 [ 422.506741][ T5976] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 422.560242][ T5976] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 422.671275][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.799715][ T5976] usb 4-1: Product: syz [ 422.921598][ T5976] usb 4-1: Manufacturer: syz [ 422.926245][ T5976] usb 4-1: SerialNumber: syz [ 422.939391][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 422.993830][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 423.110206][ T5976] usb 4-1: config 0 descriptor?? [ 423.380337][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 423.418463][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 423.566908][ T8606] debugfs: 'ttyS3' already exists in 'caif_serial' [ 423.599287][ T8593] ceph: No mds server is up or the cluster is laggy [ 424.635646][ T6032] libceph: connect (1)[c::]:6789 error -101 [ 424.751688][ T6032] libceph: mon0 (1)[c::]:6789 connect error [ 424.793565][ T5976] videodev: could not get a free minor [ 424.811468][ T5976] msi2500 4-1:0.246: Failed to register as video device (-23) [ 424.840899][ T5976] msi2500 4-1:0.246: probe with driver msi2500 failed with error -23 [ 425.086208][ T43] usb 1-1: USB disconnect, device number 11 [ 425.184566][ T8594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 425.193773][ T8594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 425.203981][ T8594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 425.211618][ T8594] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 425.217935][ T8594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 425.226662][ T8594] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 426.390143][ T5975] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 426.399779][ T43] hid_parser_main: 96 callbacks suppressed [ 426.399801][ T43] hid-generic 0000:007F:FFFFFFFE.0027: unknown main item tag 0x0 [ 426.420884][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.589'. [ 426.503521][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 426.521908][ T43] hid-generic 0000:007F:FFFFFFFE.0027: unknown main item tag 0x0 [ 426.629983][ T43] hid-generic 0000:007F:FFFFFFFE.0027: unknown main item tag 0x0 [ 426.664807][ T5975] usb 5-1: Using ep0 maxpacket: 8 [ 426.693083][ T5975] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 426.704916][ T5975] usb 5-1: config 0 has no interface number 0 [ 426.711013][ T5975] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 426.731108][ T43] hid-generic 0000:007F:FFFFFFFE.0027: unknown main item tag 0x0 [ 426.832710][ T5975] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 426.847015][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.856035][ T2082] usb 4-1: USB disconnect, device number 11 [ 426.876499][ T5975] usb 5-1: Product: syz [ 426.898268][ T5975] usb 5-1: Manufacturer: syz [ 426.917508][ T5975] usb 5-1: SerialNumber: syz [ 426.936605][ T43] hid-generic 0000:007F:FFFFFFFE.0027: unknown main item tag 0x0 [ 426.946872][ T5975] usb 5-1: config 0 descriptor?? [ 427.218218][ T43] hid-generic 0000:007F:FFFFFFFE.0027: unknown main item tag 0x0 [ 427.264914][ T43] hid-generic 0000:007F:FFFFFFFE.0027: unknown main item tag 0x0 [ 427.279678][ T43] hid-generic 0000:007F:FFFFFFFE.0027: unknown main item tag 0x0 [ 427.315103][ T5879] Bluetooth: hci1: command 0x0c1a tx timeout [ 427.321324][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 427.327655][ T5879] Bluetooth: hci4: command 0x0c1a tx timeout [ 427.333954][ T5879] Bluetooth: hci2: command 0x0c1a tx timeout [ 427.341524][ T5879] Bluetooth: hci5: command 0x0c1a tx timeout [ 427.347602][ T5879] Bluetooth: hci3: command 0x0c1a tx timeout [ 427.481909][ T5975] msi2500 5-1:0.246: Registered as swradio24 [ 427.498158][ T5975] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 427.711632][ T43] hid-generic 0000:007F:FFFFFFFE.0027: unknown main item tag 0x0 [ 427.860470][ T43] hid-generic 0000:007F:FFFFFFFE.0027: unknown main item tag 0x0 [ 428.000607][ T43] hid-generic 0000:007F:FFFFFFFE.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 428.463967][ T2082] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 428.763141][ T2082] usb 4-1: Using ep0 maxpacket: 8 [ 428.830185][ T2082] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 428.852713][ T2082] usb 4-1: config 0 has no interface number 0 [ 428.899440][ T2082] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 428.979990][ T2082] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 429.032293][ T2082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.106915][ T2082] usb 4-1: Product: syz [ 429.122138][ T2082] usb 4-1: Manufacturer: syz [ 429.911310][ T2082] usb 4-1: SerialNumber: syz [ 431.001264][ T2082] usb 4-1: config 0 descriptor?? [ 431.007016][ T5969] hid-generic 0000:007F:FFFFFFFE.0028: hidraw1: HID v0.00 Device [syz1] on syz0 [ 434.155328][ T5975] usb 5-1: USB disconnect, device number 12 [ 434.273813][ T2082] usb 4-1: can't set config #0, error -71 [ 434.371549][ T2082] usb 4-1: USB disconnect, device number 12 [ 434.709406][ T8675] 9pnet_virtio: no channels available for device syz [ 435.474791][ T5969] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 435.653819][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.679517][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.709202][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.744675][ T5969] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.818753][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.129551][ T5969] usb 4-1: config 0 descriptor?? [ 437.021788][ T8669] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.028014][ T8669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.091673][ T8669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.147081][ T8669] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 437.259412][ T8669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 437.287996][ T8669] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 437.641587][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 437.650109][ T5969] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 437.651419][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 437.811441][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 438.279773][ T5937] usb 4-1: USB disconnect, device number 13 [ 438.947041][ T8709] fido_id[8709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 439.092717][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.145706][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.221462][ T5870] Bluetooth: hci5: command 0x0c1a tx timeout [ 439.301670][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout [ 439.301682][ T5879] Bluetooth: hci2: command 0x0c1a tx timeout [ 440.921621][ T43] usb 2-1: unable to read config index 0 descriptor/all [ 441.009758][ T43] usb 2-1: can't read configurations, error -71 [ 442.743011][ T43] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 443.001497][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 443.414379][ T43] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 443.461439][ T43] usb 2-1: config 0 has no interface number 0 [ 443.541789][ T43] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 443.697053][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 443.879026][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.021233][ T5937] hid_parser_main: 96 callbacks suppressed [ 444.021269][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 444.042430][ T43] usb 2-1: Product: syz [ 444.389884][ T43] usb 2-1: Manufacturer: syz [ 444.503520][ T43] usb 2-1: SerialNumber: syz [ 444.557787][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 444.693243][ T43] usb 2-1: config 0 descriptor?? [ 444.700765][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 444.847098][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 444.921890][ T6032] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 445.081232][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 445.111153][ T6032] usb 5-1: Using ep0 maxpacket: 8 [ 445.166718][ T6032] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 445.228186][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 445.270318][ T6032] usb 5-1: config 0 has no interface number 0 [ 445.318145][ T6032] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 445.341694][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 445.422457][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 445.433430][ T6032] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 445.482068][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 445.551471][ T2082] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 445.562168][ T6032] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 445.604945][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: unknown main item tag 0x0 [ 445.635130][ T6032] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 445.717725][ T6032] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 445.761880][ T2082] usb 3-1: Using ep0 maxpacket: 8 [ 445.795036][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.824650][ T2082] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 445.877044][ T2082] usb 3-1: config 0 has no interface number 0 [ 445.911661][ T2082] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 445.912567][ T5937] hid-generic 0000:007F:FFFFFFFE.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 445.930294][ T6032] usb 5-1: config 0 descriptor?? [ 446.000454][ T2082] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 446.010139][ T2082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.050868][ T2082] usb 3-1: Product: syz [ 446.099003][ T6032] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 446.123502][ T2082] usb 3-1: Manufacturer: syz [ 446.149342][ T2082] usb 3-1: SerialNumber: syz [ 446.216362][ T2082] usb 3-1: config 0 descriptor?? [ 446.240379][ T6032] usb 5-1: USB disconnect, device number 13 [ 446.329534][ T6032] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 447.215350][ T2082] msi2500 3-1:0.246: Registered as swradio24 [ 447.228315][ T2082] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 447.907979][ T43] usb 2-1: can't set config #0, error -71 [ 447.949390][ T43] usb 2-1: USB disconnect, device number 13 [ 448.914028][ T8770] 9pnet_virtio: no channels available for device syz [ 449.384820][ T6032] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 449.631461][ T6032] usb 5-1: Using ep0 maxpacket: 8 [ 449.632277][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.671414][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.710859][ T6032] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 449.772178][ T6032] usb 5-1: config 0 has no interface number 0 [ 449.800918][ T6032] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 449.855823][ T6032] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 449.866777][ T6032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.906935][ T6032] usb 5-1: Product: syz [ 449.918819][ T6032] usb 5-1: Manufacturer: syz [ 449.923650][ T6032] usb 5-1: SerialNumber: syz [ 449.962818][ T6032] usb 5-1: config 0 descriptor?? [ 450.064050][ T8776] debugfs: 'ttyS3' already exists in 'caif_serial' [ 450.562139][ T6032] videodev: could not get a free minor [ 450.568866][ T6032] msi2500 5-1:0.246: Failed to register as video device (-23) [ 450.607607][ T6032] msi2500 5-1:0.246: probe with driver msi2500 failed with error -23 [ 451.788437][ T5969] usb 3-1: USB disconnect, device number 10 [ 452.765478][ T43] usb 5-1: USB disconnect, device number 14 [ 452.856912][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'. [ 453.981493][ T2082] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 454.132294][ T2082] usb 5-1: Using ep0 maxpacket: 8 [ 454.153711][ T2082] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 454.175224][ T2082] usb 5-1: config 0 has no interface number 0 [ 454.188581][ T2082] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 454.277400][ T2082] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 454.348255][ T2082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.488100][ T2082] usb 5-1: Product: syz [ 454.503434][ T2082] usb 5-1: Manufacturer: syz [ 454.572749][ T2082] usb 5-1: SerialNumber: syz [ 455.094985][ T2082] usb 5-1: config 0 descriptor?? [ 455.472389][ T8822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 455.543419][ T8822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 455.561639][ T8822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.770019][ T2082] msi2500 5-1:0.246: Registered as swradio24 [ 455.824586][ T8822] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 455.843355][ T2082] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 455.862067][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.629'. [ 455.873271][ T8822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 456.117381][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 456.285131][ T8822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 456.314933][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.629'. [ 456.612237][ T5969] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 456.848596][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 457.127232][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.628'. [ 457.626803][ T5879] Bluetooth: hci3: command 0x0c1a tx timeout [ 457.634461][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 457.872490][ T5879] Bluetooth: hci5: command 0x0c1a tx timeout [ 457.941771][ T5879] Bluetooth: hci2: command 0x0c1a tx timeout [ 458.471428][ T5879] Bluetooth: hci4: command 0x0c1a tx timeout [ 459.552067][ T5976] usb 5-1: USB disconnect, device number 15 [ 459.605525][ T5969] usb 3-1: device descriptor read/all, error -71 [ 460.103007][ T8872] tipc: Enabling of bearer rejected, failed to enable media [ 462.053901][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 462.060275][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 462.268685][ T8893] ceph: No mds server is up or the cluster is laggy [ 462.331972][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 462.350475][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 463.466928][ T8917] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 463.553064][ T8917] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 463.651487][ T5937] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 464.037722][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 464.071493][ T5937] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 464.091623][ T5937] usb 5-1: config 0 has no interface number 0 [ 464.128839][ T5937] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 464.167377][ T5937] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 464.186834][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.291712][ T5937] usb 5-1: Product: syz [ 464.295906][ T5937] usb 5-1: Manufacturer: syz [ 464.300496][ T5937] usb 5-1: SerialNumber: syz [ 464.529393][ T5937] usb 5-1: config 0 descriptor?? [ 464.535807][ T8924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.644'. [ 465.604604][ T5937] msi2500 5-1:0.246: Registered as swradio24 [ 465.842990][ T5937] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 466.256717][ T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 466.441446][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 466.761458][ T43] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 466.950537][ T43] usb 6-1: config 0 has no interface number 0 [ 467.052831][ T43] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 467.245768][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 467.344649][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.391681][ T43] usb 6-1: Product: syz [ 467.400334][ T43] usb 6-1: Manufacturer: syz [ 467.435634][ T43] usb 6-1: SerialNumber: syz [ 467.450982][ T5937] usb 5-1: USB disconnect, device number 16 [ 467.500995][ T43] usb 6-1: config 0 descriptor?? [ 468.039964][ T43] msi2500 6-1:0.246: Registered as swradio24 [ 468.072626][ T43] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 469.262672][ T8971] 9pnet_virtio: no channels available for device syz [ 470.399177][ T43] usb 6-1: USB disconnect, device number 11 [ 470.790662][ T8982] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 470.797202][ T8982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 470.812058][ T8982] vhci_hcd vhci_hcd.0: Device attached [ 470.850935][ T5976] libceph: connect (1)[c::]:6789 error -101 [ 470.986366][ T5976] libceph: mon0 (1)[c::]:6789 connect error [ 471.082567][ T5937] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 471.091580][ T8984] ceph: No mds server is up or the cluster is laggy [ 471.241508][ T2082] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 472.132017][ T2082] usb 4-1: Using ep0 maxpacket: 16 [ 472.166540][ T2082] usb 4-1: config 0 has no interfaces? [ 472.172203][ T2082] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 472.181290][ T2082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.196835][ T2082] usb 4-1: config 0 descriptor?? [ 472.442843][ T5879] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 472.455164][ T9008] debugfs: 'ttyS3' already exists in 'caif_serial' [ 472.503058][ T5969] usb 4-1: USB disconnect, device number 14 [ 472.509914][ T8985] vhci_hcd: connection closed [ 472.525850][ T59] vhci_hcd: stop threads [ 472.584331][ T59] vhci_hcd: release socket [ 472.596723][ T59] vhci_hcd: disconnect device [ 472.651804][ T5937] usb 39-1: device descriptor read/64, error -1 [ 472.832386][ T5937] vhci_hcd: vhci_device speed not set [ 473.961773][ T9022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 473.972208][ T9022] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.978446][ T9022] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 473.985722][ T9022] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 473.992663][ T9022] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 474.014525][ T9022] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 474.551523][ T5937] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 474.763934][ T5937] usb 6-1: Using ep0 maxpacket: 8 [ 474.790140][ T5937] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 474.854698][ T5937] usb 6-1: config 0 has no interface number 0 [ 474.925340][ T5937] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 475.061061][ T5937] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 475.281635][ T5937] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 475.452401][ T5937] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 475.801475][ T5937] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 475.841112][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.855458][ T5937] usb 6-1: config 0 descriptor?? [ 475.866153][ T5937] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 475.892436][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.674'. [ 476.024508][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 476.031952][ T5870] Bluetooth: hci5: command 0x0c1a tx timeout [ 476.038074][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 476.044609][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 476.050694][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 476.118131][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout [ 476.151235][ T5973] usb 6-1: USB disconnect, device number 12 [ 476.222397][ T5973] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 477.631594][ T2082] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 477.896458][ T2082] usb 6-1: Using ep0 maxpacket: 8 [ 477.915322][ T2082] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 477.942085][ T2082] usb 6-1: config 0 has no interface number 0 [ 478.001565][ T2082] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 478.233273][ T2082] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 478.254851][ T9073] bpq0: left promiscuous mode [ 478.335793][ T2082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.483240][ T5879] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 478.511427][ T2082] usb 6-1: Product: syz [ 478.761484][ T2082] usb 6-1: Manufacturer: syz [ 478.766155][ T2082] usb 6-1: SerialNumber: syz [ 478.952424][ T2082] usb 6-1: config 0 descriptor?? [ 479.378135][ T9084] 9pnet_virtio: no channels available for device syz [ 479.672958][ T2082] msi2500 6-1:0.246: Registered as swradio24 [ 479.695038][ T2082] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 480.341572][ C0] ------------[ cut here ]------------ [ 480.347438][ C0] ODEBUG: free active (active state 0) object: ffff8880563f6890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 480.361479][ C0] WARNING: CPU: 0 PID: 9100 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 480.370977][ C0] Modules linked in: [ 480.375117][ C0] CPU: 0 UID: 0 PID: 9100 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 480.384084][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.394181][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 480.400030][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 42 16 8c 4c 89 e6 48 c7 c7 e0 36 16 8c e8 7f 3a 91 fc 90 <0f> 0b 90 90 58 83 05 c6 ce c2 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 480.419728][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010286 [ 480.425834][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3388 [ 480.433858][ C0] RDX: ffff88802be49e00 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 480.441905][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 480.449880][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163d80 [ 480.457916][ C0] R13: ffffffff8bafedc0 R14: ffffffff8a7fb5d0 R15: ffffc90000007b28 [ 480.465960][ C0] FS: 00007f961b579880(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 480.474946][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.481562][ C0] CR2: 00007f961b02546e CR3: 0000000030ccf000 CR4: 0000000000350ef0 [ 480.489540][ C0] Call Trace: [ 480.492836][ C0] [ 480.495700][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 480.501396][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 480.507245][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.512944][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 480.518506][ C0] ? look_up_lock_class+0x59/0x150 [ 480.523671][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 480.529772][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.535466][ C0] kfree+0x28f/0x4d0 [ 480.539406][ C0] ? lock_acquire+0x179/0x350 [ 480.544133][ C0] ? rose_timer_expiry+0x53f/0x630 [ 480.549271][ C0] rose_timer_expiry+0x53f/0x630 [ 480.554289][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 480.559758][ C0] call_timer_fn+0x19a/0x620 [ 480.564392][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 480.569535][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.575215][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.580861][ C0] ? mark_held_locks+0x49/0x80 [ 480.585694][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 480.591179][ C0] __run_timers+0x6ef/0x960 [ 480.595764][ C0] ? __pfx___run_timers+0x10/0x10 [ 480.600843][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.606534][ C0] run_timer_base+0x114/0x190 [ 480.611273][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 480.616560][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.622253][ C0] run_timer_softirq+0x1a/0x40 [ 480.627041][ C0] handle_softirqs+0x219/0x8e0 [ 480.631850][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 480.637162][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.642855][ C0] __irq_exit_rcu+0x109/0x170 [ 480.647572][ C0] irq_exit_rcu+0x9/0x30 [ 480.651844][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 480.657493][ C0] [ 480.660414][ C0] [ 480.663376][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.669390][ C0] RIP: 0010:check_preemption_disabled+0x24/0xe0 [ 480.675693][ C0] Code: 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 75 3c 44 08 65 8b 05 6a 3c 44 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b <5d> 41 5c e9 2f 0d 7e f5 9c 58 f6 c4 02 74 ea 48 89 fd 65 48 8b 05 [ 480.695328][ C0] RSP: 0018:ffffc9001f69f368 EFLAGS: 00000296 [ 480.701433][ C0] RAX: 0000000000000000 RBX: ffffc9001f69f4f8 RCX: ffffc9001f6a0001 [ 480.709418][ C0] RDX: ffffc9001f69f500 RSI: ffffffff8c163100 RDI: ffffffff8c163140 [ 480.717430][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 480.725426][ C0] R10: 0000000000000001 R11: 00000000000061ee R12: ffffc9001f69f4a8 [ 480.733422][ C0] R13: ffffc9001f69f458 R14: ffffc9001f69f4f8 R15: ffffc9001f69f48c [ 480.741466][ C0] rcu_is_watching+0x12/0xc0 [ 480.746093][ C0] unwind_next_frame+0xa86/0x20a0 [ 480.751128][ C0] ? arch_stack_walk+0x73/0x100 [ 480.756026][ C0] __unwind_start+0x45f/0x7f0 [ 480.760716][ C0] ? mas_preallocate+0x7e0/0xde0 [ 480.765708][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 480.771911][ C0] arch_stack_walk+0x73/0x100 [ 480.776889][ C0] ? stack_trace_save+0x8e/0xc0 [ 480.781790][ C0] stack_trace_save+0x8e/0xc0 [ 480.786486][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 480.791910][ C0] kasan_save_stack+0x33/0x60 [ 480.796667][ C0] kasan_save_track+0x14/0x30 [ 480.801444][ C0] __kasan_slab_alloc+0x89/0x90 [ 480.806343][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 480.811863][ C0] ? anon_vma_clone+0xd8/0x5c0 [ 480.816658][ C0] anon_vma_clone+0xd8/0x5c0 [ 480.821267][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.826957][ C0] __split_vma+0x65e/0x1070 [ 480.831528][ C0] ? __pfx___split_vma+0x10/0x10 [ 480.836524][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.842216][ C0] vma_modify+0xee1/0x2030 [ 480.846721][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.852416][ C0] ? __pfx_vma_modify+0x10/0x10 [ 480.857291][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.862985][ C0] vma_modify_flags+0x212/0x2d0 [ 480.867870][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 480.873319][ C0] mprotect_fixup+0x1df/0xb40 [ 480.878030][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 480.883308][ C0] do_mprotect_pkey+0x9ca/0xd50 [ 480.888218][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 480.893631][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 480.899126][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.904815][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.910463][ C0] ? do_user_addr_fault+0x843/0x1370 [ 480.915799][ C0] __x64_sys_mprotect+0x78/0xc0 [ 480.920668][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 480.925914][ C0] do_syscall_64+0xcd/0x4c0 [ 480.930446][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.936407][ C0] RIP: 0033:0x7f961b6cd2c7 [ 480.940823][ C0] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 480.960471][ C0] RSP: 002b:00007fff0407bec8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 480.968923][ C0] RAX: ffffffffffffffda RBX: 00007f961b6a1b20 RCX: 00007f961b6cd2c7 [ 480.976938][ C0] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f961b612000 [ 480.984936][ C0] RBP: 00007fff0407c190 R08: 0000000000000000 R09: 00007f961ae6beb0 [ 480.992929][ C0] R10: 00007f961b6a1b20 R11: 0000000000000206 R12: 0000000000000018 [ 481.000899][ C0] R13: 00000114177aca47 R14: 0000000000000000 R15: 00007f961b6e1310 [ 481.008920][ C0] [ 481.011956][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 481.019228][ C0] CPU: 0 UID: 0 PID: 9100 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 481.028162][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 481.038215][ C0] Call Trace: [ 481.041498][ C0] [ 481.044346][ C0] dump_stack_lvl+0x3d/0x1f0 [ 481.048961][ C0] vpanic+0x6e8/0x7a0 [ 481.052970][ C0] ? __pfx_vpanic+0x10/0x10 [ 481.057503][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.063153][ C0] ? debug_print_object+0x1a2/0x2b0 [ 481.068361][ C0] panic+0xca/0xd0 [ 481.072108][ C0] ? __pfx_panic+0x10/0x10 [ 481.076559][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 481.081704][ C0] check_panic_on_warn+0xab/0xb0 [ 481.086684][ C0] __warn+0xf6/0x3c0 [ 481.090577][ C0] ? debug_print_object+0x1a2/0x2b0 [ 481.095780][ C0] report_bug+0x3c3/0x580 [ 481.100128][ C0] ? debug_print_object+0x1a2/0x2b0 [ 481.105333][ C0] handle_bug+0x184/0x210 [ 481.109692][ C0] exc_invalid_op+0x17/0x50 [ 481.114223][ C0] asm_exc_invalid_op+0x1a/0x20 [ 481.119196][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 481.125014][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 42 16 8c 4c 89 e6 48 c7 c7 e0 36 16 8c e8 7f 3a 91 fc 90 <0f> 0b 90 90 58 83 05 c6 ce c2 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 481.144661][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010286 [ 481.150764][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3388 [ 481.158750][ C0] RDX: ffff88802be49e00 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 481.166725][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 481.174707][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163d80 [ 481.182673][ C0] R13: ffffffff8bafedc0 R14: ffffffff8a7fb5d0 R15: ffffc90000007b28 [ 481.190640][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 481.196301][ C0] ? __warn_printk+0x198/0x350 [ 481.201125][ C0] ? __warn_printk+0x1a5/0x350 [ 481.205915][ C0] ? debug_print_object+0x1a1/0x2b0 [ 481.211112][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 481.216762][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 481.222576][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.228222][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 481.233777][ C0] ? look_up_lock_class+0x59/0x150 [ 481.238935][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 481.245020][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.250666][ C0] kfree+0x28f/0x4d0 [ 481.254571][ C0] ? lock_acquire+0x179/0x350 [ 481.259269][ C0] ? rose_timer_expiry+0x53f/0x630 [ 481.264414][ C0] rose_timer_expiry+0x53f/0x630 [ 481.269366][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 481.274831][ C0] call_timer_fn+0x19a/0x620 [ 481.279445][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 481.284578][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.290231][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.295868][ C0] ? mark_held_locks+0x49/0x80 [ 481.300655][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 481.306123][ C0] __run_timers+0x6ef/0x960 [ 481.310659][ C0] ? __pfx___run_timers+0x10/0x10 [ 481.315710][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.321379][ C0] run_timer_base+0x114/0x190 [ 481.326107][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 481.331321][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.336983][ C0] run_timer_softirq+0x1a/0x40 [ 481.341768][ C0] handle_softirqs+0x219/0x8e0 [ 481.346548][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 481.351843][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.357515][ C0] __irq_exit_rcu+0x109/0x170 [ 481.362201][ C0] irq_exit_rcu+0x9/0x30 [ 481.366450][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 481.372095][ C0] [ 481.375015][ C0] [ 481.377933][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.383917][ C0] RIP: 0010:check_preemption_disabled+0x24/0xe0 [ 481.390178][ C0] Code: 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 75 3c 44 08 65 8b 05 6a 3c 44 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b <5d> 41 5c e9 2f 0d 7e f5 9c 58 f6 c4 02 74 ea 48 89 fd 65 48 8b 05 [ 481.409789][ C0] RSP: 0018:ffffc9001f69f368 EFLAGS: 00000296 [ 481.415856][ C0] RAX: 0000000000000000 RBX: ffffc9001f69f4f8 RCX: ffffc9001f6a0001 [ 481.423822][ C0] RDX: ffffc9001f69f500 RSI: ffffffff8c163100 RDI: ffffffff8c163140 [ 481.431790][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 481.439752][ C0] R10: 0000000000000001 R11: 00000000000061ee R12: ffffc9001f69f4a8 [ 481.447716][ C0] R13: ffffc9001f69f458 R14: ffffc9001f69f4f8 R15: ffffc9001f69f48c [ 481.455706][ C0] rcu_is_watching+0x12/0xc0 [ 481.460309][ C0] unwind_next_frame+0xa86/0x20a0 [ 481.465431][ C0] ? arch_stack_walk+0x73/0x100 [ 481.470293][ C0] __unwind_start+0x45f/0x7f0 [ 481.474974][ C0] ? mas_preallocate+0x7e0/0xde0 [ 481.479945][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 481.486131][ C0] arch_stack_walk+0x73/0x100 [ 481.490832][ C0] ? stack_trace_save+0x8e/0xc0 [ 481.495699][ C0] stack_trace_save+0x8e/0xc0 [ 481.500389][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 481.505786][ C0] kasan_save_stack+0x33/0x60 [ 481.510542][ C0] kasan_save_track+0x14/0x30 [ 481.515233][ C0] __kasan_slab_alloc+0x89/0x90 [ 481.520104][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 481.525580][ C0] ? anon_vma_clone+0xd8/0x5c0 [ 481.530379][ C0] anon_vma_clone+0xd8/0x5c0 [ 481.534982][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.540630][ C0] __split_vma+0x65e/0x1070 [ 481.545153][ C0] ? __pfx___split_vma+0x10/0x10 [ 481.550119][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.555766][ C0] vma_modify+0xee1/0x2030 [ 481.560230][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.565892][ C0] ? __pfx_vma_modify+0x10/0x10 [ 481.570752][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.576402][ C0] vma_modify_flags+0x212/0x2d0 [ 481.581290][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 481.586718][ C0] mprotect_fixup+0x1df/0xb40 [ 481.591426][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 481.596647][ C0] do_mprotect_pkey+0x9ca/0xd50 [ 481.601523][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 481.606908][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 481.612415][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.618098][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.623737][ C0] ? do_user_addr_fault+0x843/0x1370 [ 481.629028][ C0] __x64_sys_mprotect+0x78/0xc0 [ 481.633888][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 481.639096][ C0] do_syscall_64+0xcd/0x4c0 [ 481.643621][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.649516][ C0] RIP: 0033:0x7f961b6cd2c7 [ 481.653926][ C0] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 481.673537][ C0] RSP: 002b:00007fff0407bec8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 481.681958][ C0] RAX: ffffffffffffffda RBX: 00007f961b6a1b20 RCX: 00007f961b6cd2c7 [ 481.689940][ C0] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f961b612000 [ 481.697904][ C0] RBP: 00007fff0407c190 R08: 0000000000000000 R09: 00007f961ae6beb0 [ 481.705890][ C0] R10: 00007f961b6a1b20 R11: 0000000000000206 R12: 0000000000000018 [ 481.713871][ C0] R13: 00000114177aca47 R14: 0000000000000000 R15: 00007f961b6e1310 [ 481.721855][ C0] [ 481.725094][ C0] Kernel Offset: disabled [ 481.729413][ C0] Rebooting in 86400 seconds..