last executing test programs: 3m22.858931758s ago: executing program 2 (id=1419): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.000991381s ago: executing program 2 (id=1421): socket$inet_icmp(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/7, &(0x7f0000000500)="009ea08f5fcedf5b802da89b010354498b8f118d233d6e235038ee90b259d2d92d14f1c676c553476371338707ac2d65e8a9c9617e15f8695c888172f73ee8cd3647a613fe583370b38b4747324f278e937f9f11c5ae742fe59734d4c560bd572caaa38f52807d17b7b510785f", &(0x7f00000005c0)="1c0f4c2d9e466f707ad2aa6c44e3778bb62e2d77a78b3ff5824686b6455aebca6a84e7c401d6514a0f56a3365b96a14b6da2f52d8faef3b0dbad602fca11a27a4b274dc4135dd023fc121f326ecf7657cc3cfcad218554bf3dc658ca3a6f430be33e61ff73d9db823c2e5fc3952996c6e030c65380671355313f02ce5902ad7fd2a9335f56c63a7846355b2ff616aec5b2bbc40f3eb9b4b2de3f6e85037aae4666dce71e9c7069e536c632f34e87540b3bfbb3fb44892a79d596c35be91d3763e938aa8225bb187c0e106cba48cb9a830229befcc1fcb643cb823f9ffac2b4eae12918f797", 0x81}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) socket$nl_generic(0x10, 0x3, 0x10) 3m18.911350418s ago: executing program 2 (id=1424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211d", 0x2c}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3m17.963731331s ago: executing program 2 (id=1427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x42080, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 3m16.611026459s ago: executing program 2 (id=1431): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3m15.103231778s ago: executing program 2 (id=1435): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008804}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x4000000) 2m59.010646883s ago: executing program 32 (id=1435): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008804}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x4000000) 1m40.299861186s ago: executing program 3 (id=1581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x5c, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf00}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffffffffffe9e, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0xa}, {0x72, 0x8, 0x10, 0x80}}}, @TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xffff}, {0x10, 0x0, 0x1, "f18d"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 1m38.228303039s ago: executing program 3 (id=1588): fallocate(0xffffffffffffffff, 0x27, 0x2000000f2, 0x4) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0xc880}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0xf) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x202599ca) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) chdir(0x0) read(0xffffffffffffffff, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) 1m36.425045333s ago: executing program 3 (id=1593): fallocate(0xffffffffffffffff, 0x27, 0x2000000f2, 0x4) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0xc880}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0xf) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x202599ca) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) chdir(0x0) read(0xffffffffffffffff, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) 1m34.837980141s ago: executing program 3 (id=1597): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0), &(0x7f0000000140)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) 1m32.947611796s ago: executing program 3 (id=1601): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0), &(0x7f0000000140)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m31.006334881s ago: executing program 3 (id=1606): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r1, &(0x7f0000000180)=""/161, 0xa1) keyctl$set_timeout(0xf, r1, 0x6) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x800101b, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 1m13.289466967s ago: executing program 33 (id=1606): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r1, &(0x7f0000000180)=""/161, 0xa1) keyctl$set_timeout(0xf, r1, 0x6) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x800101b, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 28.803132188s ago: executing program 1 (id=1706): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731ccc"], 0x1c}}, 0x8000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc0a00002300010324bd7002fadbdf2501"], 0xafc}}, 0xc004) 25.397821371s ago: executing program 1 (id=1714): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r0, 0x0, r1, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 23.785945721s ago: executing program 1 (id=1719): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$caif_stream(0x25, 0x1, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x1000, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000380)="9edf501bc6d15467219e497b4e55296fade91e463ea550f9dd46a9bdd5753a612c27bbcb6998b86bff037fd33986e93ab278b21a3b68b629f92def081f992c6c2cbb4649fb0766948d1920a6db2a5157f6834755e183db91650c69cbd6aa279ce7d6ce9a065c6b4219b2d99ffdc19b512406610bcd8edbf5751fbd9bc741b176e2a9d157555a8b115457e10262be84437343df114dea7b12124c09b75cc280fd6dcd86b9a562780dcd8dcd", 0xab) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0xf44, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x3, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x407}}}, 0x7) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "9d89e4ed39038bdf", "d1db203dc6bc5d46c8faefefa3fdad51", "286d07e1", "a23e58b8e00e26b5"}, 0x28) syz_usb_connect(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x1, 0x62, 0x44, 0xff, 0xc52, 0x2872, 0x6261, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x6, 0x39, 0x10, 0x2, [{{0x9, 0x4, 0x3b, 0x4, 0x0, 0x89, 0xf4, 0xd, 0x9, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffc, 0x8, 0xc7}, {0x6, 0x24, 0x1a, 0x6, 0x20}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x9}, @obex={0x5, 0x24, 0x15, 0x100}]}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9e, &(0x7f0000000280)=@string={0x9e, 0x3, "aeef5117f683a44e549dd50e4af177611a0ca9cc4dc248bf85a9e3d041d066a5397ce1042d11071c7313c00737462272c011231ed1e737517d80a1e4d66a201ccb3d35dfa08c55ff20ab3b66e853dc4dd0c72c0cb7e89ce5ae800f797fbffc0031332fd01466edd63b8276f69bcdf77c5314b464f1c97d3d47d1186d7c220bab12370c4525e4d1f6810757f5e4be2abff48e5b16f46f20650c3e9574"}}]}) 12.42783146s ago: executing program 4 (id=1725): syz_extract_tcp_res(&(0x7f00000000c0), 0xd7, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000001280)={{0x1, 0x1, 0x0, 0x4, 'syz1\x00', 0x6}, 0x1, [0x9, 0x8000000000000001, 0x1ff, 0x4, 0xa, 0x85, 0x2, 0x5, 0x6, 0x4, 0x9, 0x10000, 0xb, 0x3, 0x4, 0xb221, 0xfff, 0x3, 0xb8a1, 0x6, 0xcf0, 0x3, 0x1000, 0x7, 0x9, 0x101, 0x1, 0x40, 0x6, 0x9, 0x100000001, 0x5, 0xfffffffffffffff7, 0x8, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x9, 0xffffffffffffff80, 0x7f, 0x3, 0x200, 0x9, 0x5, 0x82c2, 0x7, 0x4, 0xfd, 0x4, 0xa, 0x7, 0x2, 0x10000, 0x9, 0x0, 0x0, 0x1, 0x10, 0x4, 0x3, 0x9, 0x80000000, 0x8, 0x7, 0x1ff, 0xffffffffffffff01, 0x9, 0x3399, 0x7, 0x87, 0x8, 0x12d2, 0x10, 0x8000, 0x8, 0x2, 0xa1, 0x3f800000000000, 0x1, 0x4, 0x3, 0x3, 0x3, 0x8000, 0x8000000000000000, 0x9, 0xfffffffffffffffd, 0x8, 0x8000000000005, 0x9, 0x0, 0xfffffffffffff1c3, 0x0, 0x3, 0x9, 0x407ff, 0xa24, 0x80000001, 0x7, 0xbf6, 0xc000000001, 0x4000000000006, 0x80, 0x7fb, 0x101, 0x9, 0x400, 0x7f, 0x1, 0x2, 0x0, 0x100, 0x3, 0x8, 0x2e, 0x10, 0x3, 0x1000000000005, 0x1, 0x1, 0x8000000000000005, 0x1, 0x770ea051, 0x7f, 0x6, 0x800]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x52, &(0x7f0000000840)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x62001, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc8b5}, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) 11.717918641s ago: executing program 0 (id=1726): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200900) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 11.506642976s ago: executing program 4 (id=1727): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) sendmmsg$inet(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="e8", 0x1}], 0x1}}], 0x1, 0x20004050) 10.477548769s ago: executing program 1 (id=1728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x774a953b, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff1b, 0x0, 0x0, 0x0, 0x1}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r0, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 10.47615267s ago: executing program 4 (id=1729): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731ccc"], 0x1c}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc0a00002300010324bd7002fadbdf2501"], 0xafc}}, 0xc004) 8.611766996s ago: executing program 1 (id=1730): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406d049cc200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="2012"], 0x0, 0x0, 0x0}, 0x0) 8.224503006s ago: executing program 4 (id=1731): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000100)=0x32) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000000c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 8.145326307s ago: executing program 0 (id=1732): r0 = dup(0xffffffffffffffff) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)) read$FUSE(r0, 0x0, 0x0) 6.9680708s ago: executing program 4 (id=1733): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731ccc"], 0x1c}}, 0x8000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc0a00002300010324bd7002fadbdf2501"], 0xafc}}, 0xc004) 6.743310001s ago: executing program 0 (id=1734): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x25dfdc01, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x7, 0x2, 0x5, 0x10, 0xff, 0xd, 0x9, 0xa, 0xc, 0x5, 0xc, 0xd, 0x9, 0xa, 0x3, 0xc], 0x1, [0x1ff, 0xc, 0x101, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x927, 0x2e, 0x5, 0x3, 0xfffc, 0x6, 0x6, 0xb], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0x614, 0x3, 0x3, 0xe3, 0x9, 0x7, 0x5, 0x1, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 5.610377733s ago: executing program 0 (id=1735): syz_extract_tcp_res(&(0x7f00000000c0), 0xd7, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000001280)={{0x1, 0x1, 0x0, 0x4, 'syz1\x00', 0x6}, 0x1, [0x9, 0x8000000000000001, 0x1ff, 0x4, 0xa, 0x85, 0x2, 0x5, 0x6, 0x4, 0x9, 0x10000, 0xb, 0x3, 0x4, 0xb221, 0xfff, 0x3, 0xb8a1, 0x6, 0xcf0, 0x3, 0x1000, 0x7, 0x9, 0x101, 0x1, 0x40, 0x6, 0x9, 0x100000001, 0x5, 0xfffffffffffffff7, 0x8, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x9, 0xffffffffffffff80, 0x7f, 0x3, 0x200, 0x9, 0x5, 0x82c2, 0x7, 0x4, 0xfd, 0x4, 0xa, 0x7, 0x2, 0x10000, 0x9, 0x0, 0x0, 0x1, 0x10, 0x4, 0x3, 0x9, 0x80000000, 0x8, 0x7, 0x1ff, 0xffffffffffffff01, 0x9, 0x3399, 0x7, 0x87, 0x8, 0x12d2, 0x10, 0x8000, 0x8, 0x2, 0xa1, 0x3f800000000000, 0x1, 0x4, 0x3, 0x3, 0x3, 0x8000, 0x8000000000000000, 0x9, 0xfffffffffffffffd, 0x8, 0x8000000000005, 0x9, 0x0, 0xfffffffffffff1c3, 0x0, 0x3, 0x9, 0x407ff, 0xa24, 0x80000001, 0x7, 0xbf6, 0xc000000001, 0x4000000000006, 0x80, 0x7fb, 0x101, 0x9, 0x400, 0x7f, 0x1, 0x2, 0x0, 0x100, 0x3, 0x8, 0x2e, 0x10, 0x3, 0x1000000000005, 0x1, 0x1, 0x8000000000000005, 0x1, 0x770ea051, 0x7f, 0x6, 0x800]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x52, &(0x7f0000000840)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x62001, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc8b5}, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) 4.888498491s ago: executing program 4 (id=1736): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$caif_stream(0x25, 0x1, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x1000, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000380)="9edf501bc6d15467219e497b4e55296fade91e463ea550f9dd46a9bdd5753a612c27bbcb6998b86bff037fd33986e93ab278b21a3b68b629f92def081f992c6c2cbb4649fb0766948d1920a6db2a5157f6834755e183db91650c69cbd6aa279ce7d6ce9a065c6b4219b2d99ffdc19b512406610bcd8edbf5751fbd9bc741b176e2a9d157555a8b115457e10262be84437343df114dea7b12124c09b75cc280fd6dcd86b9a562780dcd8dcd", 0xab) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0xf44, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x3, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x407}}}, 0x7) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "9d89e4ed39038bdf", "d1db203dc6bc5d46c8faefefa3fdad51", "286d07e1", "a23e58b8e00e26b5"}, 0x28) syz_usb_connect(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x1, 0x62, 0x44, 0xff, 0xc52, 0x2872, 0x6261, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x6, 0x39, 0x10, 0x2, [{{0x9, 0x4, 0x3b, 0x4, 0x0, 0x89, 0xf4, 0xd, 0x9, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffc, 0x8, 0xc7}, {0x6, 0x24, 0x1a, 0x6, 0x20}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x9}, @obex={0x5, 0x24, 0x15, 0x100}]}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9e, &(0x7f0000000280)=@string={0x9e, 0x3, "aeef5117f683a44e549dd50e4af177611a0ca9cc4dc248bf85a9e3d041d066a5397ce1042d11071c7313c00737462272c011231ed1e737517d80a1e4d66a201ccb3d35dfa08c55ff20ab3b66e853dc4dd0c72c0cb7e89ce5ae800f797fbffc0031332fd01466edd63b8276f69bcdf77c5314b464f1c97d3d47d1186d7c220bab12370c4525e4d1f6810757f5e4be2abff48e5b16f46f20650c3e9574"}}]}) 4.618449596s ago: executing program 0 (id=1737): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200900) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 1.592667894s ago: executing program 1 (id=1738): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="9ad70b5517fc2e43c16f16fb78e6e628b0c03870769a7930716849b340c10f512992ff746923606780d8eff0ddc2f67fc53a7e9515cea457ae10eb6c3b1f78d50dc0", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)="4450b1", 0x3}], 0x1, &(0x7f0000000980)=ANY=[], 0x178}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 0s ago: executing program 0 (id=1739): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 291.288623][ T6720] usb 2-1: device descriptor read/64, error -71 [ 291.459982][ T6720] usb usb2-port1: attempt power cycle [ 292.258274][ T6720] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 292.281310][ T6720] usb 2-1: device descriptor read/8, error -71 [ 292.568419][ T6720] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 294.058276][ T5802] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 294.366118][ T6720] usb 2-1: device descriptor read/8, error -71 [ 294.405898][ T5802] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 294.405926][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.434632][ T5802] usb 4-1: config 0 descriptor?? [ 294.466271][ T5802] cp210x 4-1:0.0: cp210x converter detected [ 294.468641][ T6720] usb usb2-port1: unable to enumerate USB device [ 294.558435][ T8427] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 294.723332][ T8427] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 294.723570][ T8427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.761963][ T8427] usb 3-1: config 0 descriptor?? [ 294.784324][ T8427] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 294.977562][ T5802] usb 4-1: cp210x converter now attached to ttyUSB0 [ 294.998798][ T5939] usb 3-1: USB disconnect, device number 12 [ 295.118640][ T5802] usb 4-1: USB disconnect, device number 21 [ 295.125977][ T5802] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.262148][ T5802] cp210x 4-1:0.0: device disconnected [ 295.478974][ T5939] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 295.630016][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 295.647636][ T5939] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 295.647666][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.685468][ T5939] usb 3-1: config 0 descriptor?? [ 295.703558][ T5939] ldusb 3-1:0.0: Interrupt in endpoint not found [ 295.716154][ T5939] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 295.961246][ T5802] usb 3-1: USB disconnect, device number 13 [ 296.962738][ T5802] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 297.341240][ T5802] usb 2-1: Using ep0 maxpacket: 32 [ 297.356434][ T5802] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 297.356498][ T5802] usb 2-1: config 0 has no interface number 0 [ 297.356735][ T5802] usb 2-1: config 0 interface 184 has no altsetting 0 [ 297.592707][ T5802] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 297.592773][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.592823][ T5802] usb 2-1: Product: syz [ 297.592837][ T5802] usb 2-1: Manufacturer: syz [ 297.592881][ T5802] usb 2-1: SerialNumber: syz [ 297.920280][ T5802] usb 2-1: config 0 descriptor?? [ 298.157054][ T5802] smsc75xx v1.0.0 [ 298.157124][ T5802] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 298.178958][ T5802] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 299.938987][ T5802] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 300.068515][ T987] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 300.091893][ T5788] usb 2-1: USB disconnect, device number 18 [ 300.158506][ T5802] usb 3-1: Using ep0 maxpacket: 32 [ 300.209150][ T987] usb 4-1: device descriptor read/64, error -71 [ 300.469537][ T987] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 300.771610][ T987] usb 4-1: device descriptor read/64, error -71 [ 300.892491][ T987] usb usb4-port1: attempt power cycle [ 301.249742][ T5802] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.559694][ T987] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 301.587762][ T987] usb 4-1: device descriptor read/8, error -71 [ 301.978834][ T987] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 302.023901][ T987] usb 4-1: device descriptor read/8, error -71 [ 302.154670][ T987] usb usb4-port1: unable to enumerate USB device [ 302.711584][ T5802] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 302.711612][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.711630][ T5802] usb 3-1: Product: syz [ 302.716328][ T5802] usb 3-1: config 0 descriptor?? [ 302.754274][ T5802] usb 3-1: can't set config #0, error -71 [ 304.086876][ T5802] usb 3-1: USB disconnect, device number 14 [ 304.581627][ T5814] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 304.581872][ T5814] Bluetooth: hci3: Injecting HCI hardware error event [ 304.583743][ T5117] Bluetooth: hci3: hardware error 0x00 [ 304.815195][ T5953] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 305.781278][ T5953] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 305.781310][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.786049][ T5953] usb 3-1: config 0 descriptor?? [ 305.814043][ T5953] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 306.020927][ T5802] usb 3-1: USB disconnect, device number 15 [ 306.498297][ T5802] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 307.588257][ T5802] usb 3-1: Using ep0 maxpacket: 32 [ 307.600821][ T5802] usb 3-1: device descriptor read/all, error -71 [ 307.708263][ T5117] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 308.016213][ T987] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 309.459481][ T5991] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 309.488142][ T987] usb 1-1: Using ep0 maxpacket: 32 [ 309.489966][ T987] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 309.489991][ T987] usb 1-1: config 0 has no interface number 0 [ 309.490029][ T987] usb 1-1: config 0 interface 184 has no altsetting 0 [ 309.498252][ T987] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 309.498279][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.498297][ T987] usb 1-1: Product: syz [ 309.498310][ T987] usb 1-1: Manufacturer: syz [ 309.498323][ T987] usb 1-1: SerialNumber: syz [ 309.516339][ T987] usb 1-1: config 0 descriptor?? [ 309.551466][ T987] smsc75xx v1.0.0 [ 309.551483][ T987] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 309.551728][ T987] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 309.639054][ T5991] usb 2-1: Using ep0 maxpacket: 32 [ 309.653867][ T5991] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.656501][ T5991] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 309.656526][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.656536][ T5991] usb 2-1: Product: syz [ 309.656543][ T5991] usb 2-1: Manufacturer: syz [ 309.656550][ T5991] usb 2-1: SerialNumber: syz [ 309.700743][ T5991] usb 2-1: config 0 descriptor?? [ 310.273797][ T5991] gs_usb 2-1:0.0: Couldn't get device config: (err=-32) [ 310.273839][ T5991] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 311.902518][ T5991] usb 1-1: USB disconnect, device number 8 [ 312.150941][ T5802] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 312.308722][ T5802] usb 4-1: device descriptor read/64, error -71 [ 312.700919][ T5788] usb 2-1: USB disconnect, device number 19 [ 312.902715][ T5802] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 313.123698][ T5802] usb 4-1: device descriptor read/64, error -71 [ 313.231185][ T5802] usb usb4-port1: attempt power cycle [ 313.810893][ T5802] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 313.831223][ T5802] usb 4-1: device descriptor read/8, error -71 [ 314.762597][ T5802] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 314.835737][ T5802] usb 4-1: device descriptor read/8, error -71 [ 314.939369][ T5802] usb usb4-port1: unable to enumerate USB device [ 316.371275][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 317.264016][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.264443][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.499799][ T8586] tmpfs: Bad value for 'mpol' [ 322.708253][ T5953] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 322.883696][ T5953] usb 3-1: device descriptor read/64, error -71 [ 323.121294][ T5953] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 323.309385][ T5953] usb 3-1: device descriptor read/64, error -71 [ 323.420620][ T5953] usb usb3-port1: attempt power cycle [ 323.858803][ T5953] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 324.068232][ T5953] usb 3-1: device not accepting address 20, error -71 [ 326.999259][ T8630] syz.4.607 uses obsolete (PF_INET,SOCK_PACKET) [ 327.251070][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'. [ 327.270812][ T8633] tmpfs: Bad value for 'mpol' [ 332.048265][ T5968] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 332.199002][ T5968] usb 2-1: no configurations [ 332.199015][ T5968] usb 2-1: can't read configurations, error -22 [ 332.328234][ T5968] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 332.359082][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 332.479934][ T5968] usb 2-1: no configurations [ 332.479953][ T5968] usb 2-1: can't read configurations, error -22 [ 332.480453][ T5968] usb usb2-port1: attempt power cycle [ 332.508644][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 332.589688][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 332.589714][ T9] usb 3-1: config 0 has no interface number 0 [ 332.589761][ T9] usb 3-1: config 0 interface 2 has no altsetting 0 [ 332.594383][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 332.594410][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.594428][ T9] usb 3-1: Product: syz [ 332.594441][ T9] usb 3-1: Manufacturer: syz [ 332.594454][ T9] usb 3-1: SerialNumber: syz [ 332.616478][ T9] usb 3-1: config 0 descriptor?? [ 333.016172][ T8673] loop7: detected capacity change from 0 to 16384 [ 333.257583][ T5968] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 334.475481][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.522026][ T9] usb 3-1: USB disconnect, device number 22 [ 334.561874][ T5968] usb 2-1: no configurations [ 334.561892][ T5968] usb 2-1: can't read configurations, error -22 [ 334.691055][ T5968] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 334.713595][ T5968] usb 2-1: no configurations [ 334.713613][ T5968] usb 2-1: can't read configurations, error -22 [ 334.714105][ T5968] usb usb2-port1: unable to enumerate USB device [ 337.148203][ T6720] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 337.308338][ T6720] usb 5-1: Using ep0 maxpacket: 32 [ 337.311475][ T6720] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.452302][ T6720] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 337.452329][ T6720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.452348][ T6720] usb 5-1: Product: syz [ 337.452361][ T6720] usb 5-1: Manufacturer: syz [ 337.452374][ T6720] usb 5-1: SerialNumber: syz [ 337.472244][ T6720] usb 5-1: config 0 descriptor?? [ 337.894424][ T6720] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 337.894467][ T6720] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 338.109678][ T8726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.707073][ T9] usb 5-1: USB disconnect, device number 11 [ 345.248229][ T5968] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 345.254467][ T5958] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 345.428270][ T5968] usb 2-1: Using ep0 maxpacket: 16 [ 345.430849][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.430878][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.430899][ T5968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 345.430938][ T5968] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 345.430959][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.435736][ T5968] usb 2-1: config 0 descriptor?? [ 345.638506][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 345.662699][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.668048][ T5958] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 345.668076][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.668289][ T5958] usb 4-1: Product: syz [ 345.668305][ T5958] usb 4-1: Manufacturer: syz [ 345.668319][ T5958] usb 4-1: SerialNumber: syz [ 345.673486][ T5958] usb 4-1: config 0 descriptor?? [ 345.884433][ T8780] qnx6: unable to read the first superblock [ 345.949155][ T5968] usbhid 2-1:0.0: can't add hid device: -71 [ 345.949281][ T5968] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 345.952885][ T5968] usb 2-1: USB disconnect, device number 24 [ 346.128287][ T5958] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 346.128314][ T5958] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 348.870697][ T8118] usb 4-1: USB disconnect, device number 30 [ 356.695243][ T5968] IPVS: starting estimator thread 0... [ 356.778584][ T8870] IPVS: using max 16 ests per chain, 38400 per kthread [ 359.938436][ T5942] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 360.098781][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 360.101168][ T5942] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 360.101193][ T5942] usb 4-1: config 0 has no interface number 0 [ 360.101239][ T5942] usb 4-1: config 0 interface 2 has no altsetting 0 [ 360.103895][ T5942] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 360.103922][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.103941][ T5942] usb 4-1: Product: syz [ 360.103954][ T5942] usb 4-1: Manufacturer: syz [ 360.103968][ T5942] usb 4-1: SerialNumber: syz [ 360.190317][ T5942] usb 4-1: config 0 descriptor?? [ 360.396930][ T5942] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.546666][ T5942] usb 4-1: USB disconnect, device number 31 [ 366.847942][ T8959] qnx6: unable to read the first superblock [ 371.998886][ T8118] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 372.208342][ T8118] usb 1-1: Using ep0 maxpacket: 16 [ 372.210729][ T8118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.210767][ T8118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.210789][ T8118] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 372.210841][ T8118] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 372.210863][ T8118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.220482][ T8118] usb 1-1: config 0 descriptor?? [ 373.034936][ T8118] usbhid 1-1:0.0: can't add hid device: -71 [ 373.035006][ T8118] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 373.048716][ T8118] usb 1-1: USB disconnect, device number 9 [ 373.500704][ T5802] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 373.682269][ T5802] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.682293][ T5802] usb 3-1: config 0 has no interfaces? [ 373.682378][ T5802] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 373.682400][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.877194][ T5802] usb 3-1: config 0 descriptor?? [ 375.037636][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 376.777562][ T5939] usb 3-1: USB disconnect, device number 23 [ 379.400948][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.401018][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.692740][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 383.548286][ T6048] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 383.698258][ T6048] usb 4-1: Using ep0 maxpacket: 32 [ 383.700510][ T6048] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 383.700534][ T6048] usb 4-1: config 0 has no interface number 0 [ 383.700579][ T6048] usb 4-1: config 0 interface 184 has no altsetting 0 [ 383.741809][ T6048] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 383.741941][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.741960][ T6048] usb 4-1: Product: syz [ 383.741974][ T6048] usb 4-1: Manufacturer: syz [ 383.741987][ T6048] usb 4-1: SerialNumber: syz [ 383.818053][ T6048] usb 4-1: config 0 descriptor?? [ 383.835799][ T6048] smsc75xx v1.0.0 [ 384.300119][ T6048] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 384.300153][ T6048] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 384.300251][ T6048] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 384.300541][ T6048] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 385.440448][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 386.703065][ T6048] usb 4-1: USB disconnect, device number 32 [ 391.343529][ T9180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.766'. [ 393.473752][ T9195] overlayfs: overlapping lowerdir path [ 397.797770][ T9228] 9p: Bad value for 'rfdno' [ 398.498035][ T9230] netlink: 32 bytes leftover after parsing attributes in process `syz.4.781'. [ 400.101630][ T9243] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 400.193920][ T9245] overlayfs: overlapping lowerdir path [ 403.929591][ T5958] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 404.998196][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 405.008446][ T5958] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.008471][ T5958] usb 3-1: config 0 has no interface number 0 [ 405.008518][ T5958] usb 3-1: config 0 interface 2 has no altsetting 0 [ 405.011200][ T5958] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 405.011225][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.011243][ T5958] usb 3-1: Product: syz [ 405.011255][ T5958] usb 3-1: Manufacturer: syz [ 405.011268][ T5958] usb 3-1: SerialNumber: syz [ 405.016848][ T5958] usb 3-1: config 0 descriptor?? [ 405.172117][ T9272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.795'. [ 405.222816][ T5958] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.388446][ T5958] usb 3-1: USB disconnect, device number 24 [ 407.038207][ T37] audit: type=1326 audit(1766642629.665:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9288 comm="syz.3.798" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd52d65f749 code=0x0 [ 408.088367][ T9299] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 408.088384][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 408.090616][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 408.315957][ T9300] vhci_hcd: connection closed [ 408.378928][ T13] vhci_hcd vhci_hcd.3: stop threads [ 408.379872][ T13] vhci_hcd vhci_hcd.3: release socket [ 408.384840][ T5802] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 408.386649][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 413.588268][ T5802] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 415.451829][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 415.451853][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 420.157453][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 420.157470][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 425.083996][ T9429] fuse: Bad value for 'group_id' [ 425.084008][ T9429] fuse: Bad value for 'group_id' [ 425.449557][ T987] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 425.600587][ T987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.600614][ T987] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 425.600648][ T987] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 425.600670][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.605542][ T987] usb 4-1: config 0 descriptor?? [ 426.971955][ T37] audit: type=1326 audit(1766642649.595:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9443 comm="syz.2.848" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7e290f749 code=0x0 [ 428.160868][ T9449] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 428.160885][ T9449] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 428.168872][ T9449] vhci_hcd vhci_hcd.0: Device attached [ 428.263562][ T5968] usb 4-1: USB disconnect, device number 33 [ 428.281597][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'. [ 428.281621][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'. [ 428.295240][ T9453] vhci_hcd: connection closed [ 428.309222][ T6422] vhci_hcd vhci_hcd.2: stop threads [ 428.309251][ T6422] vhci_hcd vhci_hcd.2: release socket [ 428.309289][ T6422] vhci_hcd vhci_hcd.2: disconnect device [ 430.535337][ T37] audit: type=1326 audit(1766642653.165:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9471 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 430.566242][ T37] audit: type=1326 audit(1766642653.195:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9471 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 430.566293][ T37] audit: type=1326 audit(1766642653.195:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9471 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 430.620877][ T37] audit: type=1326 audit(1766642653.205:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9471 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 430.621189][ T37] audit: type=1326 audit(1766642653.255:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9471 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 430.621460][ T37] audit: type=1326 audit(1766642653.255:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9471 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 430.621502][ T37] audit: type=1326 audit(1766642653.255:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9471 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 430.719265][ T37] audit: type=1326 audit(1766642653.255:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9471 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 430.719315][ T37] audit: type=1326 audit(1766642653.255:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9471 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 437.308240][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 437.461853][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.461897][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 437.461918][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.465909][ T9] usb 5-1: config 0 descriptor?? [ 438.226918][ T9525] overlayfs: missing 'lowerdir' [ 440.322650][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.322717][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.441649][ T5968] usb 5-1: USB disconnect, device number 12 [ 441.778675][ T37] kauditd_printk_skb: 50 callbacks suppressed [ 441.778692][ T37] audit: type=1326 audit(1766642664.415:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9549 comm="syz.4.876" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cebacf749 code=0x0 [ 442.057491][ T9555] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 442.057653][ T9555] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 442.060603][ T9555] vhci_hcd vhci_hcd.0: Device attached [ 442.528297][ T5968] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 442.818980][ T9556] vhci_hcd: connection closed [ 443.047033][ T6422] vhci_hcd vhci_hcd.4: stop threads [ 443.047063][ T6422] vhci_hcd vhci_hcd.4: release socket [ 443.047285][ T6422] vhci_hcd vhci_hcd.4: disconnect device [ 444.774698][ T9573] overlayfs: missing 'lowerdir' [ 448.829348][ T5968] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 451.148369][ T5953] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 451.300509][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.300564][ T5953] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 451.300585][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.363904][ T5953] usb 5-1: config 0 descriptor?? [ 451.375897][ T5953] pwc: Askey VC010 type 2 USB webcam detected. [ 451.820774][ T5953] pwc: recv_control_msg error -32 req 02 val 2b00 [ 451.838393][ T5953] pwc: recv_control_msg error -32 req 02 val 2700 [ 451.841169][ T5953] pwc: recv_control_msg error -32 req 02 val 2c00 [ 451.843612][ T5953] pwc: recv_control_msg error -32 req 04 val 1000 [ 451.846187][ T5953] pwc: recv_control_msg error -32 req 04 val 1300 [ 451.847029][ T5953] pwc: recv_control_msg error -32 req 04 val 1400 [ 451.848027][ T5953] pwc: recv_control_msg error -32 req 02 val 2000 [ 451.889320][ T5953] pwc: recv_control_msg error -71 req 02 val 2100 [ 451.889823][ T5953] pwc: recv_control_msg error -71 req 04 val 1500 [ 451.892944][ T5953] pwc: recv_control_msg error -71 req 02 val 2500 [ 451.894232][ T5953] pwc: recv_control_msg error -71 req 02 val 2400 [ 451.894705][ T5953] pwc: recv_control_msg error -71 req 02 val 2600 [ 451.895165][ T5953] pwc: recv_control_msg error -71 req 02 val 2900 [ 451.895616][ T5953] pwc: recv_control_msg error -71 req 02 val 2800 [ 451.896278][ T5953] pwc: recv_control_msg error -71 req 04 val 1100 [ 451.896726][ T5953] pwc: recv_control_msg error -71 req 04 val 1200 [ 452.068533][ T5953] pwc: Registered as video103. [ 452.789531][ T5953] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 453.667923][ T5953] usb 5-1: USB disconnect, device number 13 [ 455.910130][ T5958] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 456.328398][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 456.353782][ T5958] usb 1-1: config 0 interface 0 has no altsetting 0 [ 456.373251][ T5958] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 456.373279][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.373297][ T5958] usb 1-1: Product: syz [ 456.373310][ T5958] usb 1-1: Manufacturer: syz [ 456.373322][ T5958] usb 1-1: SerialNumber: syz [ 456.416604][ T5958] usb 1-1: config 0 descriptor?? [ 456.973266][ T5958] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 457.176730][ T5958] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 457.176783][ T5958] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 459.324203][ T5887] usb 1-1: USB disconnect, device number 10 [ 462.428221][ T56] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 462.917084][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.917134][ T56] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 462.917164][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.961927][ T56] usb 4-1: config 0 descriptor?? [ 463.199916][ T56] usbhid 4-1:0.0: can't add hid device: -71 [ 463.200042][ T56] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 463.228755][ T56] usb 4-1: USB disconnect, device number 34 [ 463.906184][ T56] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 464.588229][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 464.679750][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.679797][ T56] usb 4-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 464.679820][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.687532][ T56] usb 4-1: config 0 descriptor?? [ 465.077625][ T56] usbhid 4-1:0.0: can't add hid device: -71 [ 465.077753][ T56] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 465.194307][ T56] usb 4-1: USB disconnect, device number 35 [ 467.649389][ T9737] binder_alloc: 9728: binder_alloc_buf, no vma [ 469.469025][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 471.415338][ T987] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 471.764612][ T987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.764661][ T987] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 471.764683][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.777222][ T987] usb 4-1: config 0 descriptor?? [ 472.058421][ T987] usbhid 4-1:0.0: can't add hid device: -71 [ 472.058548][ T987] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 472.089629][ T987] usb 4-1: USB disconnect, device number 36 [ 473.378636][ T987] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 473.408236][ T6048] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 474.613890][ T6048] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 474.613920][ T6048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.649833][ T6048] usb 2-1: config 0 descriptor?? [ 474.709507][ T6048] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 475.714564][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 475.714979][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 475.834172][ T6048] usb 2-1: USB disconnect, device number 25 [ 477.825614][ T37] audit: type=1326 audit(1766642700.455:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.1.943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56b1caf749 code=0x0 [ 477.829079][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'. [ 478.092280][ T9808] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 478.092298][ T9808] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 478.092379][ T9808] vhci_hcd vhci_hcd.0: Device attached [ 478.998256][ T56] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 479.974295][ T9810] vhci_hcd: connection reset by peer [ 479.985681][ T1060] vhci_hcd vhci_hcd.1: stop threads [ 479.985710][ T1060] vhci_hcd vhci_hcd.1: release socket [ 479.985780][ T1060] vhci_hcd vhci_hcd.1: disconnect device [ 482.088262][ T5880] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 482.989107][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.989136][ T5880] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 482.989148][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.016980][ T5880] usb 3-1: config 0 descriptor?? [ 483.386568][ T5880] usbhid 3-1:0.0: can't add hid device: -71 [ 483.386681][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 483.413268][ T5880] usb 3-1: USB disconnect, device number 25 [ 484.368371][ T56] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 485.757682][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'. [ 494.689939][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.970'. [ 500.772188][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 501.523018][T10000] binder: BINDER_SET_CONTEXT_MGR already set [ 501.523055][T10000] binder: 9994:10000 ioctl 4018620d 2000000002c0 returned -16 [ 502.308064][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.308260][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.476081][T10050] binder: BINDER_SET_CONTEXT_MGR already set [ 507.476097][T10050] binder: 10040:10050 ioctl 4018620d 2000000002c0 returned -16 [ 513.599843][T10094] binder: BINDER_SET_CONTEXT_MGR already set [ 513.599859][T10094] binder: 10091:10094 ioctl 4018620d 2000000002c0 returned -16 [ 514.807311][ T37] audit: type=1326 audit(1766642737.435:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52d65f749 code=0x7ffc0000 [ 514.835955][ T37] audit: type=1326 audit(1766642737.445:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52d65f749 code=0x7ffc0000 [ 514.839473][ T37] audit: type=1326 audit(1766642737.475:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52d65f749 code=0x7ffc0000 [ 514.839887][ T37] audit: type=1326 audit(1766642737.475:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd52d65f749 code=0x7ffc0000 [ 514.839930][ T37] audit: type=1326 audit(1766642737.475:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52d65f749 code=0x7ffc0000 [ 514.862373][ T37] audit: type=1326 audit(1766642737.475:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52d65f749 code=0x7ffc0000 [ 514.862429][ T37] audit: type=1326 audit(1766642737.495:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52d65f749 code=0x7ffc0000 [ 514.862468][ T37] audit: type=1326 audit(1766642737.495:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52d65f749 code=0x7ffc0000 [ 514.862505][ T37] audit: type=1326 audit(1766642737.495:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52d65f749 code=0x7ffc0000 [ 514.862542][ T37] audit: type=1326 audit(1766642737.495:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd52d65f749 code=0x7ffc0000 [ 515.792925][T10116] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 515.792942][T10116] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 515.793004][T10116] vhci_hcd vhci_hcd.0: Device attached [ 516.768268][ T5953] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 516.771889][T10119] vhci_hcd: connection reset by peer [ 516.772278][ T7880] vhci_hcd vhci_hcd.2: stop threads [ 516.772300][ T7880] vhci_hcd vhci_hcd.2: release socket [ 516.775060][ T7880] vhci_hcd vhci_hcd.2: disconnect device [ 518.181736][ T56] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 518.458236][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 518.495163][ T56] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 518.495188][ T56] usb 5-1: config 0 has no interface number 0 [ 518.495234][ T56] usb 5-1: config 0 interface 2 has no altsetting 0 [ 518.497930][ T56] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 518.497956][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.497966][ T56] usb 5-1: Product: syz [ 518.497973][ T56] usb 5-1: Manufacturer: syz [ 518.497980][ T56] usb 5-1: SerialNumber: syz [ 518.523332][ T56] usb 5-1: config 0 descriptor?? [ 520.115565][ C0] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 520.115585][T10150] loop7: detected capacity change from 16384 to 0 [ 520.117278][ C0] I/O error, dev loop7, sector 1000 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 520.315294][ T56] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.473014][ T56] usb 5-1: USB disconnect, device number 14 [ 521.496635][ T56] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 521.668218][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 521.671281][ T56] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 521.671349][ T56] usb 4-1: config 0 has no interface number 0 [ 521.671512][ T56] usb 4-1: config 0 interface 184 has no altsetting 0 [ 521.675365][ T56] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 521.675393][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.675411][ T56] usb 4-1: Product: syz [ 521.675424][ T56] usb 4-1: Manufacturer: syz [ 521.675438][ T56] usb 4-1: SerialNumber: syz [ 521.764659][ T56] usb 4-1: config 0 descriptor?? [ 521.796335][ T56] smsc75xx v1.0.0 [ 521.848731][ T5953] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 522.187096][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 522.187114][ T37] audit: type=1326 audit(1766642744.815:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.1.1033" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56b1caf749 code=0x0 [ 522.250815][T10173] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 522.250837][T10173] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 522.250915][T10173] vhci_hcd vhci_hcd.0: Device attached [ 522.412770][ T56] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 522.412800][ T56] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 522.413772][ T56] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 522.413788][ T56] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 522.413798][ T56] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 522.413810][ T56] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 522.413974][ T56] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 522.499579][ T6818] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 523.354958][T10174] vhci_hcd: connection reset by peer [ 523.358914][ T57] vhci_hcd vhci_hcd.1: stop threads [ 523.358939][ T57] vhci_hcd vhci_hcd.1: release socket [ 523.359227][ T57] vhci_hcd vhci_hcd.1: disconnect device [ 524.967198][ T5788] usb 4-1: USB disconnect, device number 38 [ 527.165625][ T37] audit: type=1326 audit(1766642749.795:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10220 comm="syz.2.1046" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7e290f749 code=0x0 [ 527.225487][T10223] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 527.225506][T10223] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 527.225587][T10223] vhci_hcd vhci_hcd.0: Device attached [ 527.588260][ T5953] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 527.608343][ T6818] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 529.049609][T10224] vhci_hcd: connection reset by peer [ 529.096858][ T1487] vhci_hcd vhci_hcd.2: stop threads [ 529.097038][ T1487] vhci_hcd vhci_hcd.2: release socket [ 529.116751][ T1487] vhci_hcd vhci_hcd.2: disconnect device [ 532.090053][ T37] audit: type=1326 audit(1766642754.595:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10264 comm="syz.1.1060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56b1caf749 code=0x0 [ 532.154566][T10276] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 532.154585][T10276] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 532.154674][T10276] vhci_hcd vhci_hcd.0: Device attached [ 532.315550][ T6818] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 532.950563][ T5802] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 533.048322][ T5953] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 533.134372][ T6818] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 533.134402][ T6818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.139810][ T6818] usb 3-1: config 0 descriptor?? [ 533.154064][ T6818] cp210x 3-1:0.0: cp210x converter detected [ 533.367798][ T6818] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 533.367826][ T6818] cp210x 3-1:0.0: querying part number failed [ 533.388789][ T6818] usb 3-1: cp210x converter now attached to ttyUSB0 [ 533.560004][T10278] vhci_hcd: connection reset by peer [ 533.560914][ T57] vhci_hcd vhci_hcd.1: stop threads [ 533.560939][ T57] vhci_hcd vhci_hcd.1: release socket [ 533.561158][ T57] vhci_hcd vhci_hcd.1: disconnect device [ 535.035493][ T5788] usb 3-1: USB disconnect, device number 26 [ 536.000789][ T5788] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 536.001254][ T5788] cp210x 3-1:0.0: device disconnected [ 538.892004][ T5802] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 539.788223][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1074'. [ 539.998366][T10320] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1075'. [ 544.419088][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 547.450695][T10370] fuse: Bad value for 'rootmode' [ 547.536952][T10371] fuse: Bad value for 'rootmode' [ 552.671979][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1100'. [ 552.740726][ T8118] IPVS: starting estimator thread 0... [ 553.112613][T10406] IPVS: using max 16 ests per chain, 38400 per kthread [ 553.404480][T10413] fuse: Unknown parameter 'use00000000000000000000' [ 554.423025][T10421] fuse: Bad value for 'rootmode' [ 554.489044][T10426] fuse: Bad value for 'rootmode' [ 561.769698][T10458] IPVS: starting estimator thread 0... [ 561.918345][T10466] IPVS: using max 16 ests per chain, 38400 per kthread [ 562.032870][T10468] fuse: Bad value for 'rootmode' [ 562.149863][T10469] fuse: Bad value for 'rootmode' [ 562.984829][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.984870][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.256869][T10507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.298677][ T5966] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 578.605512][ T5966] usb 2-1: device descriptor read/64, error -71 [ 579.038552][ T5966] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 579.181147][ T5966] usb 2-1: device descriptor read/64, error -71 [ 579.326363][ T5966] usb usb2-port1: attempt power cycle [ 579.950486][ T5966] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 579.971737][ T5966] usb 2-1: device descriptor read/8, error -71 [ 580.220091][ T5966] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 580.358289][ T5966] usb 2-1: device descriptor read/8, error -71 [ 580.468762][ T5966] usb usb2-port1: unable to enumerate USB device [ 582.130481][T10555] bond1: option mode: unable to set because the bond device is up [ 582.142976][T10555] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1144'. [ 582.283811][ T5117] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 582.451570][ T5117] Bluetooth: hci1: Injecting HCI hardware error event [ 582.550324][ T5117] Bluetooth: hci1: hardware error 0x00 [ 585.786746][ T5117] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 588.739739][T10586] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 588.739798][T10586] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 592.886769][ T37] audit: type=1326 audit(1766642815.515:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10614 comm="syz.3.1163" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd52d65f749 code=0x0 [ 593.056216][T10621] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 593.056235][T10621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 593.062033][T10621] vhci_hcd vhci_hcd.0: Device attached [ 593.598594][T10458] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 593.729290][T10622] vhci_hcd: connection reset by peer [ 593.730692][ T13] vhci_hcd vhci_hcd.3: stop threads [ 593.730716][ T13] vhci_hcd vhci_hcd.3: release socket [ 593.730780][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 594.968191][T10633] bond1: option mode: unable to set because the bond device is up [ 594.969409][T10633] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1156'. [ 596.787121][T10651] dlm: no local IP address has been set [ 596.787146][T10651] dlm: cannot start dlm midcomms -107 [ 596.898660][T10647] overlayfs: missing 'lowerdir' [ 597.231443][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 597.368434][T10660] binder: 10657:10660 ioctl 4018620d 0 returned -22 [ 599.245460][T10458] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 599.844185][T10680] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1177'. [ 599.926918][T10678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.869589][T10668] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 601.000049][T10668] VFS: Can't find a romfs filesystem on dev nullb0. [ 601.000049][T10668] [ 602.952075][T10689] overlayfs: missing 'lowerdir' [ 603.315082][T10693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1181'. [ 606.678586][T10709] binder: 10708:10709 ioctl 4018620d 0 returned -22 [ 609.161165][T10697] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 609.898618][T10730] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 609.898975][T10730] VFS: Can't find a romfs filesystem on dev nullb0. [ 609.898975][T10730] [ 610.228208][T10697] usb 4-1: Using ep0 maxpacket: 32 [ 610.230949][T10697] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 610.230973][T10697] usb 4-1: config 0 has no interface number 0 [ 610.231019][T10697] usb 4-1: config 0 interface 2 has no altsetting 0 [ 610.236474][T10697] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 610.236503][T10697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.236521][T10697] usb 4-1: Product: syz [ 610.236533][T10697] usb 4-1: Manufacturer: syz [ 610.236546][T10697] usb 4-1: SerialNumber: syz [ 610.241775][T10697] usb 4-1: config 0 descriptor?? [ 610.288271][ T5958] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 610.448267][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 610.450631][ T5958] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 610.450657][ T5958] usb 1-1: config 0 has no interface number 0 [ 610.450706][ T5958] usb 1-1: config 0 interface 184 has no altsetting 0 [ 610.453644][ T5958] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 610.453670][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.453688][ T5958] usb 1-1: Product: syz [ 610.453700][ T5958] usb 1-1: Manufacturer: syz [ 610.453713][ T5958] usb 1-1: SerialNumber: syz [ 610.519257][ T5958] usb 1-1: config 0 descriptor?? [ 610.523394][ T5958] smsc75xx v1.0.0 [ 610.561580][T10697] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 610.659733][T10697] usb 4-1: USB disconnect, device number 39 [ 610.916286][T10739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1192'. [ 613.247341][ T5958] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 613.247371][ T5958] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 613.269327][ T5958] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 613.269355][ T5958] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 613.269371][ T5958] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 613.269386][ T5958] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 613.269662][ T5958] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 613.338558][ T5958] usb 1-1: USB disconnect, device number 11 [ 613.708388][ T37] audit: type=1326 audit(1766642836.125:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10752 comm="syz.0.1197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3fd33f749 code=0x0 [ 614.125086][T10757] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 614.125113][T10757] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 614.125224][T10757] vhci_hcd vhci_hcd.0: Device attached [ 614.203357][T10764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.215464][T10764] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1191'. [ 614.279059][T10761] vhci_hcd: connection closed [ 614.279351][ T6408] vhci_hcd vhci_hcd.0: stop threads [ 614.279374][ T6408] vhci_hcd vhci_hcd.0: release socket [ 614.279406][ T6408] vhci_hcd vhci_hcd.0: disconnect device [ 614.926496][T10776] dlm: no local IP address has been set [ 614.926511][T10776] dlm: cannot start dlm midcomms -107 [ 618.953041][T10786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1204'. [ 620.193725][T10800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.208743][T10800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1209'. [ 620.328301][ T5887] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 620.588260][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 620.619903][ T5887] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 620.619930][ T5887] usb 5-1: config 0 has no interface number 0 [ 620.619975][ T5887] usb 5-1: config 0 interface 184 has no altsetting 0 [ 620.630359][ T5887] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 620.630387][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.630404][ T5887] usb 5-1: Product: syz [ 620.630417][ T5887] usb 5-1: Manufacturer: syz [ 620.630430][ T5887] usb 5-1: SerialNumber: syz [ 620.647381][ T5887] usb 5-1: config 0 descriptor?? [ 620.652176][ T5887] smsc75xx v1.0.0 [ 621.773785][ T5887] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 621.773816][ T5887] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 622.011708][ T37] audit: type=1326 audit(1766642844.645:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.1.1213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56b1caf749 code=0x0 [ 622.040595][ T5887] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 622.040626][ T5887] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 622.040644][ T5887] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 622.040932][ T5887] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 622.948441][T10819] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 622.948580][T10819] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 622.950089][T10819] vhci_hcd vhci_hcd.0: Device attached [ 623.279760][T10820] vhci_hcd: connection closed [ 623.282520][ T5968] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 623.285715][T10821] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 623.385048][ T6070] vhci_hcd vhci_hcd.1: stop threads [ 623.385136][ T6070] vhci_hcd vhci_hcd.1: release socket [ 623.412157][ T6070] vhci_hcd vhci_hcd.1: disconnect device [ 623.997230][T10697] usb 5-1: USB disconnect, device number 15 [ 624.558885][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.560331][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.671869][T10842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1217'. [ 627.724838][T10858] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1223'. [ 628.467145][ T5968] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 629.629617][ T5953] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 629.891682][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 630.031753][ T5953] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 630.031818][ T5953] usb 3-1: config 0 has no interface number 0 [ 630.041599][ T5953] usb 3-1: config 0 interface 184 has no altsetting 0 [ 630.398943][ T5953] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 630.398969][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.398985][ T5953] usb 3-1: Product: syz [ 630.398996][ T5953] usb 3-1: Manufacturer: syz [ 630.399007][ T5953] usb 3-1: SerialNumber: syz [ 630.554128][ T5953] usb 3-1: config 0 descriptor?? [ 630.863719][ T5953] smsc75xx v1.0.0 [ 632.523588][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 632.523750][ T5953] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 632.548543][ T5953] usb 3-1: USB disconnect, device number 27 [ 634.806775][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 635.638950][ T6048] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 635.948231][ T6048] usb 4-1: Using ep0 maxpacket: 32 [ 635.950647][ T6048] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 635.950672][ T6048] usb 4-1: config 0 has no interface number 0 [ 635.950721][ T6048] usb 4-1: config 0 interface 2 has no altsetting 0 [ 635.954387][ T6048] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 635.954413][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.954432][ T6048] usb 4-1: Product: syz [ 635.954446][ T6048] usb 4-1: Manufacturer: syz [ 635.954459][ T6048] usb 4-1: SerialNumber: syz [ 636.033391][ T6048] usb 4-1: config 0 descriptor?? [ 636.336099][ T6048] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 636.420697][ T6048] usb 4-1: USB disconnect, device number 40 [ 640.692150][ T5991] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 640.898711][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 640.936938][ T5991] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 640.936965][ T5991] usb 5-1: config 0 has no interface number 0 [ 640.956359][ T5991] usb 5-1: config 0 interface 2 has no altsetting 0 [ 641.001818][ T5991] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 641.001846][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.001863][ T5991] usb 5-1: Product: syz [ 641.001876][ T5991] usb 5-1: Manufacturer: syz [ 641.001888][ T5991] usb 5-1: SerialNumber: syz [ 641.019783][ T5991] usb 5-1: config 0 descriptor?? [ 642.510457][ T5991] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 642.556205][ T5991] usb 5-1: USB disconnect, device number 16 [ 644.472716][ T5968] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 644.631770][ T5968] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 644.631802][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.657705][ T5968] usb 5-1: config 0 descriptor?? [ 644.682553][ T5968] cp210x 5-1:0.0: cp210x converter detected [ 645.398276][ T5968] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 645.398302][ T5968] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 645.407542][ T5968] usb 5-1: cp210x converter now attached to ttyUSB0 [ 645.431444][ T5968] usb 5-1: USB disconnect, device number 17 [ 645.447148][ T5968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 645.447636][ T5968] cp210x 5-1:0.0: device disconnected [ 648.528825][T10989] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 648.529416][T10989] VFS: Can't find a romfs filesystem on dev nullb0. [ 648.529416][T10989] [ 651.872464][T10823] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 652.018801][T10823] usb 4-1: Using ep0 maxpacket: 32 [ 652.027410][T10823] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 652.027436][T10823] usb 4-1: config 0 has no interface number 0 [ 652.027481][T10823] usb 4-1: config 0 interface 2 has no altsetting 0 [ 652.644434][T10823] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 652.644464][T10823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.644483][T10823] usb 4-1: Product: syz [ 652.644497][T10823] usb 4-1: Manufacturer: syz [ 652.644510][T10823] usb 4-1: SerialNumber: syz [ 652.723581][T10823] usb 4-1: config 0 descriptor?? [ 653.104085][T10823] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 653.166990][T10823] usb 4-1: USB disconnect, device number 41 [ 654.191883][T11028] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 654.195229][T11028] VFS: Can't find a romfs filesystem on dev nullb0. [ 654.195229][T11028] [ 658.898365][T10458] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 659.088312][T10458] usb 1-1: Using ep0 maxpacket: 32 [ 659.090673][T10458] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 659.090697][T10458] usb 1-1: config 0 has no interface number 0 [ 659.090747][T10458] usb 1-1: config 0 interface 2 has no altsetting 0 [ 659.095092][T10458] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 659.095221][T10458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.095241][T10458] usb 1-1: Product: syz [ 659.095255][T10458] usb 1-1: Manufacturer: syz [ 659.095268][T10458] usb 1-1: SerialNumber: syz [ 659.162275][T10458] usb 1-1: config 0 descriptor?? [ 659.470265][T10458] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.471044][T10458] usb 1-1: invalid MIDI out EP 0 [ 659.591776][T10458] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 659.595824][T10458] usb 1-1: USB disconnect, device number 12 [ 663.493674][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'. [ 670.025245][ T37] audit: type=1326 audit(1766642892.625:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11114 comm="syz.4.1287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cebacf749 code=0x0 [ 670.207984][T11124] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 670.208315][T11124] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 670.208695][T11124] vhci_hcd vhci_hcd.0: Device attached [ 671.289563][T11125] vhci_hcd: connection closed [ 671.338490][ T7992] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 671.339088][T11126] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 671.460788][ T1125] vhci_hcd vhci_hcd.4: stop threads [ 671.460815][ T1125] vhci_hcd vhci_hcd.4: release socket [ 671.460881][ T1125] vhci_hcd vhci_hcd.4: disconnect device [ 673.079873][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 676.686687][ T7992] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 677.824350][T11165] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 677.825436][T11165] VFS: Can't find a romfs filesystem on dev nullb0. [ 677.825436][T11165] [ 679.194954][ T37] audit: type=1326 audit(1766642901.825:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 679.195009][ T37] audit: type=1326 audit(1766642901.825:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 679.195052][ T37] audit: type=1326 audit(1766642901.825:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 679.226871][ T37] audit: type=1326 audit(1766642901.835:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 679.226926][ T37] audit: type=1326 audit(1766642901.845:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 679.230197][ T37] audit: type=1326 audit(1766642901.865:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 679.230248][ T37] audit: type=1326 audit(1766642901.865:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 679.237498][ T37] audit: type=1326 audit(1766642901.865:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 679.268582][ T37] audit: type=1326 audit(1766642901.905:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 679.274080][ T37] audit: type=1326 audit(1766642901.905:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.2.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 679.868408][ T5965] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 680.018266][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 680.020736][ T5965] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 680.020763][ T5965] usb 4-1: config 0 has no interface number 0 [ 680.020823][ T5965] usb 4-1: config 0 interface 2 has no altsetting 0 [ 680.023897][ T5965] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 680.023925][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.023945][ T5965] usb 4-1: Product: syz [ 680.023959][ T5965] usb 4-1: Manufacturer: syz [ 680.023972][ T5965] usb 4-1: SerialNumber: syz [ 680.380537][ T5965] usb 4-1: config 0 descriptor?? [ 682.253610][ T5965] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 682.598299][ T5965] usb 4-1: USB disconnect, device number 42 [ 685.258193][T11229] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 685.260279][T11229] VFS: Can't find a romfs filesystem on dev nullb0. [ 685.260279][T11229] [ 686.042837][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.042904][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.198360][ T5965] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 686.348246][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 686.380368][ T5965] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 686.386053][ T5965] usb 3-1: config 0 has no interface number 0 [ 686.386108][ T5965] usb 3-1: config 0 interface 2 has no altsetting 0 [ 686.632285][ T5965] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 686.632307][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.632318][ T5965] usb 3-1: Product: syz [ 686.632325][ T5965] usb 3-1: Manufacturer: syz [ 686.632332][ T5965] usb 3-1: SerialNumber: syz [ 687.214597][ T5965] usb 3-1: config 0 descriptor?? [ 687.565962][ T5965] usb 3-1: can't set config #0, error -71 [ 687.585733][ T5965] usb 3-1: USB disconnect, device number 28 [ 687.957258][T11246] 9p: Bad value for 'rfdno' [ 688.648321][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 688.648349][ T37] audit: type=1326 audit(1766642911.275:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 688.648395][ T37] audit: type=1326 audit(1766642911.275:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 688.648435][ T37] audit: type=1326 audit(1766642911.275:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 688.648474][ T37] audit: type=1326 audit(1766642911.275:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 688.759414][ T37] audit: type=1326 audit(1766642911.395:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 688.759731][ T37] audit: type=1326 audit(1766642911.395:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7e290f783 code=0x7ffc0000 [ 688.760113][ T37] audit: type=1326 audit(1766642911.395:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe7e290f807 code=0x7ffc0000 [ 688.760903][ T37] audit: type=1326 audit(1766642911.395:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe7e28c6bdd code=0x7ffc0000 [ 688.761163][ T37] audit: type=1326 audit(1766642911.395:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe7e2943e89 code=0x7ffc0000 [ 688.761723][ T37] audit: type=1326 audit(1766642911.395:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe7e28c6c47 code=0x7ffc0000 [ 688.888322][ T6048] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 689.778760][ T6048] usb 2-1: Using ep0 maxpacket: 32 [ 689.841839][ T6048] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 689.841868][ T6048] usb 2-1: config 0 has no interface number 0 [ 689.841921][ T6048] usb 2-1: config 0 interface 184 has no altsetting 0 [ 689.923442][ T6048] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 689.923480][ T6048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.923498][ T6048] usb 2-1: Product: syz [ 689.923511][ T6048] usb 2-1: Manufacturer: syz [ 689.923524][ T6048] usb 2-1: SerialNumber: syz [ 690.109622][ T6048] usb 2-1: config 0 descriptor?? [ 690.185828][ T6048] smsc75xx v1.0.0 [ 690.922929][ T6048] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 690.922960][ T6048] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 691.658496][ T6048] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 691.658528][ T6048] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 691.658548][ T6048] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 691.658837][ T6048] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 692.894040][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 692.984199][ T5942] usb 2-1: USB disconnect, device number 30 [ 694.108873][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.108900][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.110139][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 694.110165][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 694.110185][ T10] usb 5-1: SerialNumber: syz [ 694.385576][ T10] usb 5-1: 0:2 : does not exist [ 694.393503][ T10] usb 5-1: 0:0: failed to get current value for ch 0 (-22) [ 695.246304][ T10] usb 5-1: USB disconnect, device number 18 [ 696.318571][ T5887] IPVS: starting estimator thread 0... [ 696.458360][T11301] IPVS: using max 9 ests per chain, 21600 per kthread [ 697.046549][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 697.228296][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 697.230612][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 697.230637][ T10] usb 2-1: config 0 has no interface number 0 [ 697.230703][ T10] usb 2-1: config 0 interface 2 has no altsetting 0 [ 697.233019][ T10] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 697.233046][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.233066][ T10] usb 2-1: Product: syz [ 697.233080][ T10] usb 2-1: Manufacturer: syz [ 697.233094][ T10] usb 2-1: SerialNumber: syz [ 697.250091][ T10] usb 2-1: config 0 descriptor?? [ 697.521631][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 697.638721][ T10] usb 2-1: USB disconnect, device number 31 [ 700.588268][ T5965] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 700.720100][ T37] kauditd_printk_skb: 62 callbacks suppressed [ 700.720118][ T37] audit: type=1326 audit(1766642923.355:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 700.720340][ T37] audit: type=1326 audit(1766642923.355:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 700.720477][ T37] audit: type=1326 audit(1766642923.355:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 700.720640][ T37] audit: type=1326 audit(1766642923.355:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 700.724982][ T37] audit: type=1326 audit(1766642923.355:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 700.738339][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 700.745155][ T5965] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 700.745181][ T5965] usb 2-1: config 0 has no interface number 0 [ 700.745230][ T5965] usb 2-1: config 0 interface 184 has no altsetting 0 [ 700.760648][ T37] audit: type=1326 audit(1766642923.395:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 700.761003][ T37] audit: type=1326 audit(1766642923.395:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 700.761558][ T37] audit: type=1326 audit(1766642923.395:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 700.810915][ T5965] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 700.810946][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.810965][ T5965] usb 2-1: Product: syz [ 700.810978][ T5965] usb 2-1: Manufacturer: syz [ 700.810990][ T5965] usb 2-1: SerialNumber: syz [ 700.814482][ T37] audit: type=1326 audit(1766642923.445:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 700.814795][ T37] audit: type=1326 audit(1766642923.445:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7e290f783 code=0x7ffc0000 [ 700.831853][ T5965] usb 2-1: config 0 descriptor?? [ 700.853722][ T5965] smsc75xx v1.0.0 [ 701.271345][T11340] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1345'. [ 701.503312][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 701.503387][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 702.316491][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 702.316521][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 702.316539][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 702.317485][ T5965] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 703.564607][ T5887] usb 2-1: USB disconnect, device number 32 [ 705.508085][T11383] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1356'. [ 705.633354][T11385] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1355'. [ 706.854846][ T37] kauditd_printk_skb: 214 callbacks suppressed [ 706.854888][ T37] audit: type=1326 audit(1766642929.485:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11388 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 706.900510][ T37] audit: type=1326 audit(1766642929.525:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11388 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 706.962474][ T37] audit: type=1326 audit(1766642929.535:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11388 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 707.019433][ T37] audit: type=1326 audit(1766642929.645:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11388 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 707.371338][ T37] audit: type=1326 audit(1766642930.005:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11388 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 707.371616][ T37] audit: type=1326 audit(1766642930.005:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11388 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7e290f783 code=0x7ffc0000 [ 707.372009][ T37] audit: type=1326 audit(1766642930.005:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11388 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe7e290f807 code=0x7ffc0000 [ 707.388321][ T37] audit: type=1326 audit(1766642930.005:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11388 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe7e28c6bdd code=0x7ffc0000 [ 707.388384][ T37] audit: type=1326 audit(1766642930.005:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11388 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e290f749 code=0x7ffc0000 [ 707.388425][ T37] audit: type=1326 audit(1766642930.005:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11388 comm="syz.2.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe7e2943e89 code=0x7ffc0000 [ 708.683853][ T8523] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 708.848591][ T8523] usb 2-1: Using ep0 maxpacket: 32 [ 708.855349][ T8523] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 708.855377][ T8523] usb 2-1: config 0 has no interface number 0 [ 708.855495][ T8523] usb 2-1: config 0 interface 184 has no altsetting 0 [ 709.478645][ T8523] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 709.478701][ T8523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.478763][ T8523] usb 2-1: Product: syz [ 709.478813][ T8523] usb 2-1: Manufacturer: syz [ 709.478861][ T8523] usb 2-1: SerialNumber: syz [ 709.573176][ T8523] usb 2-1: config 0 descriptor?? [ 709.665354][ T8523] smsc75xx v1.0.0 [ 711.048296][ T8523] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 711.048326][ T8523] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 711.275519][T11429] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1367'. [ 711.358287][ T6048] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 711.886731][ T8523] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 711.886762][ T8523] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 711.886781][ T8523] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 711.887069][ T8523] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 712.015151][ T6048] usb 3-1: Using ep0 maxpacket: 32 [ 712.017441][ T6048] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 712.017466][ T6048] usb 3-1: config 0 has no interface number 0 [ 712.017511][ T6048] usb 3-1: config 0 interface 2 has no altsetting 0 [ 712.020650][ T6048] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 712.020678][ T6048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.020697][ T6048] usb 3-1: Product: syz [ 712.020711][ T6048] usb 3-1: Manufacturer: syz [ 712.020725][ T6048] usb 3-1: SerialNumber: syz [ 712.208546][ T6048] usb 3-1: config 0 descriptor?? [ 712.480858][T11440] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1369'. [ 712.495300][ T8523] usb 2-1: USB disconnect, device number 33 [ 712.539720][ T6048] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 712.622485][ T6048] usb 3-1: USB disconnect, device number 29 [ 713.759478][T11445] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 713.759814][T11445] VFS: Can't find a romfs filesystem on dev nullb0. [ 713.759814][T11445] [ 714.398406][ T6479] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 714.461159][T11450] dlm: no local IP address has been set [ 714.461173][T11450] dlm: cannot start dlm midcomms -107 [ 714.550988][ T6479] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.551013][ T6479] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 714.552398][ T6479] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 714.552434][ T6479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 714.552455][ T6479] usb 3-1: SerialNumber: syz [ 714.782219][ T6479] usb 3-1: 0:2 : does not exist [ 714.782299][ T6479] usb 3-1: unit 5 not found! [ 714.832706][ T6479] usb 3-1: USB disconnect, device number 30 [ 717.123179][ T6479] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 717.348996][T11468] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1378'. [ 717.358294][ T6479] usb 5-1: Using ep0 maxpacket: 32 [ 717.360530][ T6479] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 717.360554][ T6479] usb 5-1: config 0 has no interface number 0 [ 717.360600][ T6479] usb 5-1: config 0 interface 2 has no altsetting 0 [ 717.362810][ T6479] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 717.362835][ T6479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.362852][ T6479] usb 5-1: Product: syz [ 717.362865][ T6479] usb 5-1: Manufacturer: syz [ 717.362878][ T6479] usb 5-1: SerialNumber: syz [ 717.370092][ T6479] usb 5-1: config 0 descriptor?? [ 718.429446][ T6479] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 718.740857][ T6479] usb 5-1: USB disconnect, device number 19 [ 721.615077][T11485] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 721.617222][T11485] VFS: Can't find a romfs filesystem on dev nullb0. [ 721.617222][T11485] [ 721.683004][ T37] kauditd_printk_skb: 124 callbacks suppressed [ 721.683022][ T37] audit: type=1326 audit(1766642944.315:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11494 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebacf749 code=0x7ffc0000 [ 721.688007][ T37] audit: type=1326 audit(1766642944.315:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11494 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebacf749 code=0x7ffc0000 [ 721.746545][ T37] audit: type=1326 audit(1766642944.315:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11494 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebacf749 code=0x7ffc0000 [ 721.746599][ T37] audit: type=1326 audit(1766642944.345:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11494 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5cebacf749 code=0x7ffc0000 [ 721.746643][ T37] audit: type=1326 audit(1766642944.345:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11494 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebacf749 code=0x7ffc0000 [ 721.746682][ T37] audit: type=1326 audit(1766642944.345:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11494 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebacf749 code=0x7ffc0000 [ 721.873326][ T37] audit: type=1326 audit(1766642944.505:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11494 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebacf749 code=0x7ffc0000 [ 721.873655][ T37] audit: type=1326 audit(1766642944.505:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11494 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebacf749 code=0x7ffc0000 [ 721.874060][ T37] audit: type=1326 audit(1766642944.505:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11494 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5cebacf749 code=0x7ffc0000 [ 722.064118][ T37] audit: type=1326 audit(1766642944.695:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11494 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebacf749 code=0x7ffc0000 [ 723.529733][T11510] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1390'. [ 727.558313][ T5880] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 727.820142][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.820159][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.821171][ T5880] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 727.821187][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 727.821197][ T5880] usb 3-1: SerialNumber: syz [ 728.042417][ T5880] usb 3-1: 0:2 : does not exist [ 728.047249][ T5880] usb 3-1: 0:0: failed to get current value for ch 0 (-22) [ 728.099933][ T5880] usb 3-1: USB disconnect, device number 31 [ 728.111426][ T37] kauditd_printk_skb: 63 callbacks suppressed [ 728.111444][ T37] audit: type=1326 audit(1766642950.745:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11531 comm="syz.4.1398" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cebacf749 code=0x0 [ 728.229896][T11536] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 728.229932][T11536] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 728.230356][T11536] vhci_hcd vhci_hcd.0: Device attached [ 728.538284][ T5880] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 730.378893][T11537] vhci_hcd: connection reset by peer [ 730.381381][ T3506] vhci_hcd vhci_hcd.4: stop threads [ 730.383183][ T3506] vhci_hcd vhci_hcd.4: release socket [ 730.417813][ T3506] vhci_hcd vhci_hcd.4: disconnect device [ 730.808836][T11556] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1401'. [ 734.182778][ T5880] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 734.328363][ T6479] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 734.481595][ T6479] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.481612][ T6479] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.482717][ T6479] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 734.482732][ T6479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 734.482743][ T6479] usb 5-1: SerialNumber: syz [ 734.787640][ T6479] usb 5-1: 0:2 : does not exist [ 734.787702][ T6479] usb 5-1: unit 5: unexpected type 0x03 [ 734.823422][ T6479] usb 5-1: 0:0: failed to get current value for ch 0 (-22) [ 735.234629][ T6479] usb 5-1: USB disconnect, device number 20 [ 735.844280][T11588] 9p: Bad value for 'rfdno' [ 737.374989][T11595] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1413'. [ 737.509907][ T37] audit: type=1326 audit(1766642960.145:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.3.1412" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd52d65f749 code=0x0 [ 737.871026][T11601] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 737.871078][T11601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 737.875237][T11601] vhci_hcd vhci_hcd.0: Device attached [ 738.286016][ T7992] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 739.501091][ T37] audit: type=1326 audit(1766642962.135:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b1caf749 code=0x7ffc0000 [ 739.511067][ T37] audit: type=1326 audit(1766642962.135:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b1caf749 code=0x7ffc0000 [ 739.561804][ T37] audit: type=1326 audit(1766642962.175:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b1caf749 code=0x7ffc0000 [ 739.561899][ T37] audit: type=1326 audit(1766642962.175:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b1caf749 code=0x7ffc0000 [ 739.562017][ T37] audit: type=1326 audit(1766642962.175:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56b1caf749 code=0x7ffc0000 [ 739.562139][ T37] audit: type=1326 audit(1766642962.195:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b1caf749 code=0x7ffc0000 [ 739.693261][T11603] vhci_hcd: connection reset by peer [ 739.780873][ T37] audit: type=1326 audit(1766642962.395:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b1caf749 code=0x7ffc0000 [ 739.781047][ T37] audit: type=1326 audit(1766642962.395:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b1caf749 code=0x7ffc0000 [ 739.842726][ T1487] vhci_hcd vhci_hcd.3: stop threads [ 739.842784][ T1487] vhci_hcd vhci_hcd.3: release socket [ 739.842941][ T1487] vhci_hcd vhci_hcd.3: disconnect device [ 739.881043][ T37] audit: type=1326 audit(1766642962.475:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b1caf749 code=0x7ffc0000 [ 740.740209][T11632] 9p: Bad value for 'rfdno' [ 742.815189][ T37] kauditd_printk_skb: 78 callbacks suppressed [ 742.815212][ T37] audit: type=1326 audit(1766642965.445:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11606 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f56b1caf749 code=0x7ffc0000 [ 743.389451][ T7992] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 743.679854][T11653] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1424'. [ 743.704017][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 743.704063][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 747.317698][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.317764][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.077746][T11701] 9p: Bad value for 'rfdno' [ 754.538291][ T7992] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 754.703460][ T7992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.703488][ T7992] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 754.704760][ T7992] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 754.704787][ T7992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 754.704805][ T7992] usb 4-1: SerialNumber: syz [ 754.999407][ T7992] usb 4-1: 0:2 : does not exist [ 755.019549][ T7992] usb 4-1: 0:0: failed to get current value for ch 0 (-22) [ 755.045922][ T7992] usb 4-1: USB disconnect, device number 43 [ 755.590652][T10458] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 756.898295][T10458] usb 5-1: Using ep0 maxpacket: 32 [ 756.902740][T10458] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 756.902765][T10458] usb 5-1: config 0 has no interface number 0 [ 756.902792][T10458] usb 5-1: config 0 interface 2 has no altsetting 0 [ 756.958642][T10458] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 756.958671][T10458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.958690][T10458] usb 5-1: Product: syz [ 756.958703][T10458] usb 5-1: Manufacturer: syz [ 756.958717][T10458] usb 5-1: SerialNumber: syz [ 757.010777][T10458] usb 5-1: config 0 descriptor?? [ 758.138447][T10458] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 761.663074][T11779] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 761.663590][T11779] VFS: Can't find a romfs filesystem on dev nullb0. [ 761.663590][T11779] [ 763.291591][T10458] usb 5-1: USB disconnect, device number 21 [ 766.204604][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 766.248601][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 766.266402][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 766.268032][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 766.288895][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 769.246572][ T5814] Bluetooth: hci5: command tx timeout [ 771.299036][ T5814] Bluetooth: hci5: command tx timeout [ 772.417741][T11799] chnl_net:caif_netlink_parms(): no params data found [ 773.380654][ T5814] Bluetooth: hci5: command tx timeout [ 774.837249][T11848] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1464'. [ 775.344966][ T2200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.358475][ T803] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 775.532143][ T5814] Bluetooth: hci5: command tx timeout [ 775.549280][ T803] usb 2-1: Using ep0 maxpacket: 32 [ 775.552193][ T803] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 775.552218][ T803] usb 2-1: config 0 has no interface number 0 [ 775.552257][ T803] usb 2-1: config 0 interface 2 has no altsetting 0 [ 775.554563][ T803] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 775.554589][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.554652][ T803] usb 2-1: Product: syz [ 775.554665][ T803] usb 2-1: Manufacturer: syz [ 775.554678][ T803] usb 2-1: SerialNumber: syz [ 775.580476][ T803] usb 2-1: config 0 descriptor?? [ 775.774792][T11859] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 775.774852][T11859] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 775.775254][T11859] vhci_hcd vhci_hcd.0: Device attached [ 776.028496][ T10] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 776.607701][T11860] vhci_hcd: connection reset by peer [ 776.623884][T10589] vhci_hcd vhci_hcd.4: stop threads [ 776.623913][T10589] vhci_hcd vhci_hcd.4: release socket [ 776.624010][T10589] vhci_hcd vhci_hcd.4: disconnect device [ 777.328552][ T803] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 778.431521][ T803] usb 2-1: USB disconnect, device number 34 [ 778.598498][ T6479] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 778.792862][ T6479] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.793098][ T6479] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 778.859072][ T6479] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 778.859101][ T6479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 778.859119][ T6479] usb 5-1: SerialNumber: syz [ 779.027809][ T2200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.028885][ T803] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 779.147042][ T6479] usb 5-1: 0:2 : does not exist [ 779.147492][ T6479] usb 5-1: unit 5 not found! [ 779.180264][ T803] usb 1-1: Using ep0 maxpacket: 32 [ 779.183521][ T803] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 779.183545][ T803] usb 1-1: config 0 has no interface number 0 [ 779.183589][ T803] usb 1-1: config 0 interface 2 has no altsetting 0 [ 779.189442][ T803] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 779.189468][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.189479][ T803] usb 1-1: Product: syz [ 779.189486][ T803] usb 1-1: Manufacturer: syz [ 779.189493][ T803] usb 1-1: SerialNumber: syz [ 779.261635][ T803] usb 1-1: config 0 descriptor?? [ 779.478955][ T6479] usb 5-1: USB disconnect, device number 22 [ 780.141447][T11884] 9p: Bad value for 'rfdno' [ 780.383886][ T803] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 780.449573][ T803] usb 1-1: USB disconnect, device number 13 [ 780.634419][ T2200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.962511][T11896] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1483'. [ 782.225387][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 782.970980][ T2200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.438503][T11919] 9p: Bad value for 'rfdno' [ 783.674667][T11799] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.675038][T11799] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.675203][T11799] bridge_slave_0: entered allmulticast mode [ 783.676692][T11799] bridge_slave_0: entered promiscuous mode [ 783.754182][T11799] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.768690][T11799] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.793130][T11799] bridge_slave_1: entered allmulticast mode [ 783.881940][T11799] bridge_slave_1: entered promiscuous mode [ 786.110592][T11940] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1497'. [ 787.877182][T11799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.898348][ T803] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 787.906799][T11799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.178887][ T803] usb 5-1: Using ep0 maxpacket: 32 [ 788.204807][ T803] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 788.204836][ T803] usb 5-1: config 0 has no interface number 0 [ 788.204896][ T803] usb 5-1: config 0 interface 2 has no altsetting 0 [ 788.327588][ T803] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 788.327608][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.327618][ T803] usb 5-1: Product: syz [ 788.327626][ T803] usb 5-1: Manufacturer: syz [ 788.327633][ T803] usb 5-1: SerialNumber: syz [ 788.356029][ T803] usb 5-1: config 0 descriptor?? [ 791.110781][ T803] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 791.182976][ T803] usb 5-1: USB disconnect, device number 23 [ 791.320513][T11799] team0: Port device team_slave_0 added [ 792.692586][T11799] team0: Port device team_slave_1 added [ 793.100198][T11982] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1508'. [ 796.002411][T11996] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 796.002441][T11996] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 796.003304][T11996] vhci_hcd vhci_hcd.0: Device attached [ 796.420482][ T5968] usb 35-1: new high-speed USB device number 6 using vhci_hcd [ 796.498078][T11799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.498097][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.499499][T11799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.606690][T12001] vhci_hcd: connection reset by peer [ 797.027284][T10589] vhci_hcd vhci_hcd.1: stop threads [ 797.027311][T10589] vhci_hcd vhci_hcd.1: release socket [ 797.030965][T11799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.030981][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.031014][T11799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.098721][T10589] vhci_hcd vhci_hcd.1: disconnect device [ 798.463967][ T2200] bridge_slave_1: left allmulticast mode [ 798.481730][ T2200] bridge_slave_1: left promiscuous mode [ 798.642302][ T2200] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.494615][ T2200] bridge_slave_0: left allmulticast mode [ 799.494646][ T2200] bridge_slave_0: left promiscuous mode [ 799.494898][ T2200] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.809628][T12027] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 800.810216][T12027] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 800.813235][T12027] vhci_hcd vhci_hcd.0: Device attached [ 801.309773][T10458] usb 41-1: new high-speed USB device number 6 using vhci_hcd [ 801.528432][ T5968] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 802.436795][T12028] vhci_hcd: connection reset by peer [ 802.443880][ T1487] vhci_hcd vhci_hcd.4: stop threads [ 802.443906][ T1487] vhci_hcd vhci_hcd.4: release socket [ 802.446789][ T1487] vhci_hcd vhci_hcd.4: disconnect device [ 803.993245][T12046] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1519'. [ 805.487384][T12056] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 805.487932][T12056] VFS: Can't find a romfs filesystem on dev nullb0. [ 805.487932][T12056] [ 806.431531][T10458] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 808.769782][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.769846][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.855247][T12071] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 808.855685][T12071] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 808.859630][T12071] vhci_hcd vhci_hcd.0: Device attached [ 809.249592][ T5806] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 810.029054][T12072] vhci_hcd: connection reset by peer [ 810.124616][T10589] vhci_hcd vhci_hcd.3: stop threads [ 810.124644][T10589] vhci_hcd vhci_hcd.3: release socket [ 810.125149][T10589] vhci_hcd vhci_hcd.3: disconnect device [ 812.179351][T12079] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 812.179380][T12079] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 812.183237][T12081] vhci_hcd: connection closed [ 812.183528][T12079] vhci_hcd vhci_hcd.0: Device attached [ 812.195831][ T1000] vhci_hcd vhci_hcd.3: stop threads [ 812.195857][ T1000] vhci_hcd vhci_hcd.3: release socket [ 812.195923][ T1000] vhci_hcd vhci_hcd.3: disconnect device [ 813.832013][T12099] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1532'. [ 814.340449][ T5806] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 815.558449][ T2200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.781447][T12108] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 815.781999][T12108] VFS: Can't find a romfs filesystem on dev nullb0. [ 815.781999][T12108] [ 816.787272][ T2200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.813395][ T2200] bond0 (unregistering): Released all slaves [ 817.842113][ T2200] bond1 (unregistering): Released all slaves [ 818.182151][T11799] hsr_slave_0: entered promiscuous mode [ 818.196245][T11799] hsr_slave_1: entered promiscuous mode [ 818.210683][T11799] debugfs: 'hsr0' already exists in 'hsr' [ 818.210711][T11799] Cannot create hsr debugfs directory [ 822.800535][T12161] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1546'. [ 827.000707][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 827.014129][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 827.024495][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 827.031310][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 827.034593][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 827.688472][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 827.873988][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.874015][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 827.905900][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 827.905929][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 827.905949][ T10] usb 4-1: SerialNumber: syz [ 828.123533][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 828.123561][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 828.816516][ T10] usb 4-1: 0:2 : does not exist [ 828.843760][ T10] usb 4-1: USB disconnect, device number 44 [ 829.685427][T12211] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 829.685796][T12211] VFS: Can't find a romfs filesystem on dev nullb0. [ 829.685796][T12211] [ 830.079025][ T5117] Bluetooth: hci4: command tx timeout [ 832.099480][ T5117] Bluetooth: hci4: command tx timeout [ 834.142782][ T2200] hsr_slave_0: left promiscuous mode [ 834.178785][ T5117] Bluetooth: hci4: command tx timeout [ 834.259289][ T2200] hsr_slave_1: left promiscuous mode [ 834.260523][ T2200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.260715][ T2200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.294262][ T2200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.294281][ T2200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.363431][ T2200] veth1_macvtap: left promiscuous mode [ 834.363773][ T2200] veth0_macvtap: left promiscuous mode [ 834.364573][ T2200] veth1_vlan: left promiscuous mode [ 834.364925][ T2200] veth0_vlan: left promiscuous mode [ 836.258871][ T5814] Bluetooth: hci4: command tx timeout [ 839.008618][ T5887] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 839.140179][ T2200] team0 (unregistering): Port device team_slave_1 removed [ 839.198764][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 839.241239][ T5887] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 839.241264][ T5887] usb 1-1: config 0 has no interface number 0 [ 839.241311][ T5887] usb 1-1: config 0 interface 2 has no altsetting 0 [ 839.270716][ T5887] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 839.270734][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.270744][ T5887] usb 1-1: Product: syz [ 839.270751][ T5887] usb 1-1: Manufacturer: syz [ 839.270758][ T5887] usb 1-1: SerialNumber: syz [ 839.274512][ T5887] usb 1-1: config 0 descriptor?? [ 839.434471][ T2200] team0 (unregistering): Port device team_slave_0 removed [ 839.659183][ T5887] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 839.732906][ T5887] usb 1-1: USB disconnect, device number 14 [ 843.166769][T12191] chnl_net:caif_netlink_parms(): no params data found [ 845.910088][T12191] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.910213][T12191] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.910449][T12191] bridge_slave_0: entered allmulticast mode [ 845.921165][T12191] bridge_slave_0: entered promiscuous mode [ 846.147781][T12191] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.147903][T12191] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.149561][T12191] bridge_slave_1: entered allmulticast mode [ 846.251747][T12191] bridge_slave_1: entered promiscuous mode [ 847.440913][T12191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.482674][T12191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.893688][ T2200] IPVS: stop unused estimator thread 0... [ 849.067146][T12191] team0: Port device team_slave_0 added [ 849.085425][T12191] team0: Port device team_slave_1 added [ 850.571838][T12191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.571857][T12191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.571883][T12191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.600321][T12191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.600340][T12191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.600366][T12191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.701499][T12360] dlm: no local IP address has been set [ 850.701513][T12360] dlm: cannot start dlm midcomms -107 [ 853.033726][ T2200] bridge_slave_1: left allmulticast mode [ 853.033756][ T2200] bridge_slave_1: left promiscuous mode [ 853.034002][ T2200] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.614319][ T2200] bridge_slave_0: left allmulticast mode [ 853.614348][ T2200] bridge_slave_0: left promiscuous mode [ 853.614617][ T2200] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.035656][ T2200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.994668][ T2200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.131308][ T2200] bond0 (unregistering): Released all slaves [ 857.453947][T12191] hsr_slave_0: entered promiscuous mode [ 857.476591][T12191] hsr_slave_1: entered promiscuous mode [ 857.477442][T12191] debugfs: 'hsr0' already exists in 'hsr' [ 857.477459][T12191] Cannot create hsr debugfs directory [ 857.847711][ T2200] hsr_slave_0: left promiscuous mode [ 857.910231][ T2200] hsr_slave_1: left promiscuous mode [ 857.912076][ T2200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.960228][ T2200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.047737][T12408] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 859.047765][T12408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 859.067381][T12408] vhci_hcd vhci_hcd.0: Device attached [ 859.817402][ T8523] usb 41-1: new high-speed USB device number 7 using vhci_hcd [ 859.837300][T12410] vhci_hcd: connection reset by peer [ 859.864336][ T6853] vhci_hcd vhci_hcd.4: stop threads [ 859.864370][ T6853] vhci_hcd vhci_hcd.4: release socket [ 859.864437][ T6853] vhci_hcd vhci_hcd.4: disconnect device [ 860.431342][ T2200] team0 (unregistering): Port device team_slave_1 removed [ 860.715517][ T2200] team0 (unregistering): Port device team_slave_0 removed [ 862.011107][T12424] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 862.011137][T12424] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 862.019292][T12424] vhci_hcd vhci_hcd.0: Device attached [ 862.442521][ T5887] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 863.078050][T12425] vhci_hcd: connection reset by peer [ 863.135655][ T1166] vhci_hcd vhci_hcd.0: stop threads [ 863.135684][ T1166] vhci_hcd vhci_hcd.0: release socket [ 863.135747][ T1166] vhci_hcd vhci_hcd.0: disconnect device [ 864.239808][T12435] dlm: no local IP address has been set [ 864.239823][T12435] dlm: cannot start dlm midcomms -107 [ 865.473115][ T8523] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 865.549937][ T7992] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 867.531231][ T5887] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 869.074325][ T7992] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 869.074366][ T7992] usb 1-1: can't read configurations, error -71 [ 869.500338][T12413] bridge1: entered promiscuous mode [ 869.697804][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 869.726367][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 869.766671][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 869.833282][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 869.835306][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 869.919732][ T7992] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 870.116857][ T7992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.116907][ T7992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 870.174499][ T7992] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 870.174529][ T7992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 870.174562][ T7992] usb 1-1: SerialNumber: syz [ 870.194223][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.194288][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.269152][ T5887] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 870.570723][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 870.600941][ T5887] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 870.600967][ T5887] usb 2-1: config 0 has no interface number 0 [ 870.601012][ T5887] usb 2-1: config 0 interface 2 has no altsetting 0 [ 870.800668][ T5887] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 870.800697][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.800717][ T5887] usb 2-1: Product: syz [ 870.800730][ T5887] usb 2-1: Manufacturer: syz [ 870.800743][ T5887] usb 2-1: SerialNumber: syz [ 870.874023][ T5887] usb 2-1: config 0 descriptor?? [ 871.016035][ T7992] usb 1-1: 0:2 : does not exist [ 871.181505][ T7992] usb 1-1: USB disconnect, device number 16 [ 871.432235][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 871.704774][ T5887] usb 2-1: USB disconnect, device number 35 [ 871.938712][ T5814] Bluetooth: hci5: command tx timeout [ 874.018649][ T5814] Bluetooth: hci5: command tx timeout [ 874.354929][T12191] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 876.118947][ T5814] Bluetooth: hci5: command tx timeout [ 876.520669][T12191] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 876.775364][T12191] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 877.381041][T12191] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 878.122301][T12455] chnl_net:caif_netlink_parms(): no params data found [ 878.235208][ T5814] Bluetooth: hci5: command tx timeout [ 881.761718][T12519] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 881.804245][T12519] /dev/nullb0: Can't open blockdev [ 882.314529][T12455] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.315367][T12455] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.315533][T12455] bridge_slave_0: entered allmulticast mode [ 882.317069][T12455] bridge_slave_0: entered promiscuous mode [ 882.422480][T12455] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.422611][T12455] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.422817][T12455] bridge_slave_1: entered allmulticast mode [ 882.424963][T12455] bridge_slave_1: entered promiscuous mode [ 883.302316][T12455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.317751][T12455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.626709][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 884.645032][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 884.674890][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 884.677374][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 884.704666][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 885.177466][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 885.210166][T12455] team0: Port device team_slave_0 added [ 885.227514][T12455] team0: Port device team_slave_1 added [ 885.989589][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 887.231977][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.231996][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.236651][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 887.236674][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 887.236686][ T10] usb 2-1: SerialNumber: syz [ 887.249501][ T5814] Bluetooth: hci3: command tx timeout [ 887.698684][T12455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.698703][T12455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.698729][T12455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.739872][T12455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.739889][T12455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.739915][T12455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.882434][ T10] usb 2-1: 0:2 : does not exist [ 887.962281][ T10] usb 2-1: USB disconnect, device number 36 [ 889.299564][ T5814] Bluetooth: hci3: command tx timeout [ 890.701972][ T57] kworker/u8:3 (57) used greatest stack depth: 14304 bytes left [ 891.081369][T12455] hsr_slave_0: entered promiscuous mode [ 891.082690][T12455] hsr_slave_1: entered promiscuous mode [ 891.083572][T12455] debugfs: 'hsr0' already exists in 'hsr' [ 891.083595][T12455] Cannot create hsr debugfs directory [ 892.058835][T12589] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 892.059189][T12589] VFS: Can't find a romfs filesystem on dev nullb0. [ 892.059189][T12589] [ 892.168629][ T5814] Bluetooth: hci3: command tx timeout [ 894.190618][ T5814] Bluetooth: hci3: command tx timeout [ 896.489454][ T5942] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 896.696707][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.696740][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.696777][ T5942] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 896.696798][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.731592][ T5942] usb 5-1: config 0 descriptor?? [ 896.817266][T12626] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1666'. [ 897.379739][ T5942] usbhid 5-1:0.0: can't add hid device: -71 [ 897.379863][ T5942] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 897.387703][ T5942] usb 5-1: USB disconnect, device number 24 [ 900.083701][T12551] chnl_net:caif_netlink_parms(): no params data found [ 901.154783][ T6853] bridge_slave_1: left allmulticast mode [ 901.155236][ T6853] bridge_slave_1: left promiscuous mode [ 901.155505][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.312871][ T6853] bridge_slave_0: left allmulticast mode [ 901.312899][ T6853] bridge_slave_0: left promiscuous mode [ 901.313887][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.268788][T10458] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 902.833607][T10458] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.833641][T10458] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.833677][T10458] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 902.833699][T10458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.842394][T10458] usb 1-1: config 0 descriptor?? [ 904.782622][T10458] usbhid 1-1:0.0: can't add hid device: -71 [ 904.782751][T10458] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 904.803940][T10458] usb 1-1: USB disconnect, device number 17 [ 904.968631][ T6192] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 905.021250][ T6853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.079293][ T6853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.098641][ T6192] usb 5-1: device descriptor read/64, error -71 [ 905.123767][ T6853] bond0 (unregistering): Released all slaves [ 905.379475][ T6192] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 905.765671][ T6192] usb 5-1: device descriptor read/64, error -71 [ 906.334216][ T6192] usb usb5-port1: attempt power cycle [ 907.299178][ T6853] hsr_slave_0: left promiscuous mode [ 907.328591][ T6192] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 907.358756][ T6853] hsr_slave_1: left promiscuous mode [ 907.359904][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.549467][ T6192] usb 5-1: device descriptor read/8, error -71 [ 907.566046][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.429241][ T6853] team0 (unregistering): Port device team_slave_1 removed [ 915.159597][ T6853] team0 (unregistering): Port device team_slave_0 removed [ 916.734562][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.735112][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.735614][T12551] bridge_slave_0: entered allmulticast mode [ 916.737351][T12551] bridge_slave_0: entered promiscuous mode [ 916.771975][T12455] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 916.813056][T12551] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.813134][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.813287][T12551] bridge_slave_1: entered allmulticast mode [ 916.815049][T12551] bridge_slave_1: entered promiscuous mode [ 916.825282][T12455] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 917.685654][T12455] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 917.923780][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 919.378555][T12455] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 921.281372][ T5887] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 921.453560][ T5887] usb 2-1: device descriptor read/64, error -71 [ 921.867670][ T5887] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 922.356954][ T5887] usb 2-1: device descriptor read/64, error -71 [ 922.619420][ T5887] usb usb2-port1: attempt power cycle [ 923.213220][T12551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.380607][T12551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.853244][ T5887] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 928.899313][ T5887] usb 2-1: device descriptor read/8, error -110 [ 930.217829][T12864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 930.237468][T12864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 930.243152][T12864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 930.252203][T12864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 930.264549][T12864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 930.642235][T12551] team0: Port device team_slave_0 added [ 930.674333][T12551] team0: Port device team_slave_1 added [ 931.864143][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.864210][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.430205][ T5814] Bluetooth: hci4: command tx timeout [ 934.199458][ T5968] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 934.229725][T12551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.229744][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.229771][T12551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.275598][T12551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.275617][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.275644][T12551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.380364][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.380408][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.380447][ T5968] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 934.380469][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.386062][ T5968] usb 2-1: config 0 descriptor?? [ 934.919165][ T5814] Bluetooth: hci4: command tx timeout [ 936.551496][T12897] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1734'. [ 936.551519][T12897] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 936.622272][ T5968] usbhid 2-1:0.0: can't add hid device: -71 [ 936.622389][ T5968] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 936.654896][ T5968] usb 2-1: USB disconnect, device number 41 [ 936.951497][T12551] hsr_slave_0: entered promiscuous mode [ 936.953060][T12551] hsr_slave_1: entered promiscuous mode [ 936.969929][T12551] debugfs: 'hsr0' already exists in 'hsr' [ 936.969959][T12551] Cannot create hsr debugfs directory [ 937.094148][ T5814] Bluetooth: hci4: command tx timeout [ 939.138787][ T5814] Bluetooth: hci4: command tx timeout [ 941.870906][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 942.260064][ T10] usb 5-1: device descriptor read/64, error -71 [ 942.775997][ T10] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 948.206213][ T10] usb 5-1: device descriptor read/64, error -110 [ 948.337894][ T10] usb usb5-port1: attempt power cycle [ 948.617712][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 948.617739][ T10] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 948.617775][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 948.617799][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 948.617813][ T10] Workqueue: usb_hub_wq hub_event [ 948.617846][ T10] RIP: 0010:set_link_state+0xbe4/0x1220 [ 948.617882][ T10] Code: 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 64 03 53 fb 4d 8b 26 49 83 c4 28 4c 89 e0 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df <42> 80 3c 30 00 74 08 4c 89 e7 e8 3d 03 53 fb 4d 8b 1c 24 4c 8b 64 [ 948.617901][ T10] RSP: 0018:ffffc900000f7460 EFLAGS: 00010206 [ 948.617919][ T10] RAX: 0000000000000005 RBX: ffff888145310c3c RCX: dffffc0000000000 [ 948.617934][ T10] RDX: ffffc9001a365000 RSI: 000000000007a3ad RDI: 000000000007a3ae [ 948.617949][ T10] RBP: ffff88805a240f6c R08: ffffffff8edb3477 R09: 1ffffffff1db668e [ 948.617965][ T10] R10: dffffc0000000000 R11: fffffbfff1db668f R12: 0000000000000028 [ 948.617980][ T10] R13: 1ffff11028a67ea1 R14: dffffc0000000000 R15: 1ffff11028a62187 [ 948.617996][ T10] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 948.618014][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.618028][ T10] CR2: 00007fa3d2dde856 CR3: 0000000038270000 CR4: 00000000003526f0 [ 948.618046][ T10] Call Trace: [ 948.618059][ T10] [ 948.618073][ T10] dummy_hub_control+0xafc/0x1a30 [ 948.618105][ T10] ? usb_hcd_submit_urb+0x786/0x1b60 [ 948.618138][ T10] usb_hcd_submit_urb+0xdbe/0x1b60 [ 948.618167][ T10] usb_start_wait_urb+0x115/0x4f0 [ 948.618191][ T10] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 948.618223][ T10] usb_control_msg+0x232/0x3e0 [ 948.618246][ T10] hub_event+0x2d55/0x4f30 [ 948.618267][ T10] ? __perf_event_task_sched_in+0xec/0x17e0 [ 948.618319][ T10] ? __pfx_hub_event+0x10/0x10 [ 948.618344][ T10] ? process_scheduled_works+0x9ef/0x1770 [ 948.618371][ T10] ? process_scheduled_works+0x9ef/0x1770 [ 948.618392][ T10] ? process_scheduled_works+0x9ef/0x1770 [ 948.618416][ T10] process_scheduled_works+0xad1/0x1770 [ 948.618450][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 948.618471][ T10] ? do_raw_spin_lock+0x121/0x290 [ 948.618500][ T10] worker_thread+0x8a0/0xda0 [ 948.618533][ T10] kthread+0x711/0x8a0 [ 948.618561][ T10] ? __pfx_worker_thread+0x10/0x10 [ 948.618583][ T10] ? __pfx_kthread+0x10/0x10 [ 948.618607][ T10] ? rt_spin_unlock+0x150/0x200 [ 948.618637][ T10] ? rt_spin_unlock+0x161/0x200 [ 948.618661][ T10] ? __pfx_kthread+0x10/0x10 [ 948.618688][ T10] ret_from_fork+0x510/0xa50 [ 948.618711][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 948.618730][ T10] ? __switch_to+0xc9e/0x1480 [ 948.618760][ T10] ? __pfx_kthread+0x10/0x10 [ 948.618787][ T10] ret_from_fork_asm+0x1a/0x30 [ 948.618822][ T10] [ 948.618836][ T10] Modules linked in: [ 948.618917][ T10] ---[ end trace 0000000000000000 ]--- [ 948.618917][ T10] ---[ end trace 0000000000000000 ]--- [ 948.967904][ T10] RIP: 0010:set_link_state+0xbe4/0x1220 [ 948.968479][ T10] Code: 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 64 03 53 fb 4d 8b 26 49 83 c4 28 4c 89 e0 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df <42> 80 3c 30 00 74 08 4c 89 e7 e8 3d 03 53 fb 4d 8b 1c 24 4c 8b 64 [ 948.968533][ T10] RSP: 0018:ffffc900000f7460 EFLAGS: 00010206 [ 948.969575][ T10] RAX: 0000000000000005 RBX: ffff888145310c3c RCX: dffffc0000000000 [ 948.969615][ T10] RDX: ffffc9001a365000 RSI: 000000000007a3ad RDI: 000000000007a3ae [ 948.969631][ T10] RBP: ffff88805a240f6c R08: ffffffff8edb3477 R09: 1ffffffff1db668e [ 948.969664][ T10] R10: dffffc0000000000 R11: fffffbfff1db668f R12: 0000000000000028 [ 948.969680][ T10] R13: 1ffff11028a67ea1 R14: dffffc0000000000 R15: 1ffff11028a62187 [ 948.969712][ T10] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 948.969730][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.971513][ T10] CR2: 00007fa3d2dde856 CR3: 0000000036030000 CR4: 00000000003526f0 [ 948.972149][ T10] Kernel panic - not syncing: Fatal exception [ 948.972511][ T10] Kernel Offset: disabled