last executing test programs: 20.646392467s ago: executing program 1 (id=2622): r0 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5605, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20160) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000840)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4af9da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41ff000000000000008897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f33b01e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb689c9ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b12547ebe12c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c061617ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b4562201000100d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f9400"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) socket$l2tp(0x2, 0x2, 0x73) 19.07276793s ago: executing program 1 (id=2627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) open_tree(r2, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) 16.692813925s ago: executing program 3 (id=2631): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 16.318675596s ago: executing program 0 (id=2632): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff10000040"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x9, 0x61659570, 0x22, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1, 0x10, 0x8000, 0x4, 0xfffff94c}}) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80800) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000080)={0x0, 0x9, 0x8, 0xe2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8", 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xcc, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x16, 0xff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x16, 0x1ff}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000004}, 0x44880) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f00000007c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 15.942268803s ago: executing program 0 (id=2633): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r3 = syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) r4 = dup(r3) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x7401) 14.132800362s ago: executing program 1 (id=2635): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r3 = syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) r4 = dup(r3) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1, 0x0, r5}) 14.113135969s ago: executing program 3 (id=2636): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r3 = syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) r4 = dup(r3) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1, 0x0, r5}) 13.701423116s ago: executing program 2 (id=2637): r0 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5605, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20160) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) socket$l2tp(0x2, 0x2, 0x73) 12.41245799s ago: executing program 2 (id=2638): socket$inet(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000380)=0xffffffff, 0x4) 12.322138509s ago: executing program 2 (id=2639): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) open_tree(r2, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) 11.397770596s ago: executing program 0 (id=2641): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10.964283416s ago: executing program 3 (id=2642): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000085311fc3c9f492b1418b2461fee0df0434efc163e572f620492fd93ba1067c9aac638a842bfb72a1e707c400ed9fbeaaa5f84aa32fbf3d35e091"], 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r4, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) 9.259104012s ago: executing program 3 (id=2643): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=@newchain={0xf54, 0x64, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xffe0}, {0xf, 0xa}, {0x5, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_u32={{0x8}, {0xf08, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x79a}, @TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_ACT={0xecc, 0x7, [@m_tunnel_key={0x58, 0x12, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x15, 0x6, "709356f008579d6ecf32e23529ca2e510c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xe70, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x8, 0x3, 0xfffffffa, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100, 0xffff, 0x7, 0xa, 0xfffffffc}}]}, {0xe04, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_macvtap\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'pimreg\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x8f, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x40}}]}, 0xf54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r6 = socket(0xa, 0x5, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000340)={r8, 0x81}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r8, 0xffff}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000001c0)={[0x78, 0x6, 0x0, 0x0, 0x10003, 0x3ff, 0x400200cc4, 0x1a1b, 0x4, 0x5be8, 0x0, 0x0, 0xfffffffffffffff9, 0x4000, 0x6a, 0x8b], 0xeeee8000, 0x201145}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 9.148322798s ago: executing program 1 (id=2644): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r3 = syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) r4 = dup(r3) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1, 0x0, r5}) 8.816264844s ago: executing program 0 (id=2646): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 7.011930863s ago: executing program 2 (id=2647): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) 6.762421165s ago: executing program 4 (id=2648): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000085311fc3c9f492b1418b2461fee0df0434efc163e572f620492fd93ba1067c9aac638a842bfb72a1e707c400ed9fbeaaa5f84aa32fbf3d35e091"], 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r4, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0xa) 6.659797817s ago: executing program 3 (id=2649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) open_tree(r2, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) 6.072996399s ago: executing program 0 (id=2650): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) open_tree(r2, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) 4.765368599s ago: executing program 4 (id=2651): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000085311fc3c9f492b1418b2461fee0df0434efc163e572f620492fd93ba1067c9aac638a842bfb72a1e707c400ed9fbeaaa5f84aa32fbf3d35e091"], 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r4, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f00000000c0)=0x58, 0xa) 4.278605284s ago: executing program 2 (id=2653): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff10000040"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x9, 0x61659570, 0x22, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1, 0x10, 0x8000, 0x4, 0xfffff94c}}) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80800) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000080)={0x0, 0x9, 0x8, 0xe2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8", 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xcc, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x16, 0xff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x16, 0x1ff}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000004}, 0x44880) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f00000007c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 4.222467132s ago: executing program 1 (id=2654): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 3.029256864s ago: executing program 3 (id=2655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r3 = syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) r4 = dup(r3) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x7401) 2.987232584s ago: executing program 0 (id=2656): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r3 = syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) r4 = dup(r3) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1, 0x0, r5}) 2.430341415s ago: executing program 4 (id=2657): listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000000c0)={0xffffffff, 0x0, 0x300a, 0x4, 0x2, 0x8}) close_range(r2, 0xffffffffffffffff, 0x0) 2.321561658s ago: executing program 4 (id=2658): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000085311fc3c9f492b1418b2461fee0df0434efc163e572f620492fd93ba1067c9aac638a842bfb72a1e707c400ed9fbeaaa5f84aa32fbf3d35e091"], 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r4, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) 2.15620775s ago: executing program 2 (id=2659): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40008d4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x34, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) sendmmsg$unix(r6, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r7, r5]}}, @rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [r5]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r5, r6, r5, r5]}}], 0x64, 0x4}}, {{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x4008840}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x2, 0x81, 0x2, 0x2400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r8 = openat$sysfs(0xffffff9c, &(0x7f0000001380)='/sys/kernel/softlockup_count', 0x200000, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x15, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2bee}]}, 0x0, 0x1, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0x4, '\x00', r4, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xb, 0x0, 0x5}, 0x10, 0xffffffffffffffff, r7, 0x3, &(0x7f00000013c0)=[r8], &(0x7f0000001400)=[{0x2, 0x3, 0xd, 0x4}, {0x3, 0x5, 0x8, 0xc}, {0x4, 0x2, 0xf, 0xa}], 0x10, 0x8}, 0x94) 479.540666ms ago: executing program 1 (id=2660): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000085311fc3c9f492b1418b2461fee0df0434efc163e572f620492fd93ba1067c9aac638a842bfb72a1e707c400ed9fbeaaa5f84aa32fbf3d35e091"], 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r4, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0xa) 0s ago: executing program 4 (id=2661): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r3 = syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) r4 = dup(r3) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x7401) kernel console output (not intermixed with test programs): port adapter converter now disconnected from ttyUSB0 [ 496.182233][ T5921] keyspan 5-1:0.133: device disconnected [ 496.800739][ T5921] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 497.827418][ T5921] usb 2-1: config 0 has no interfaces? [ 497.838240][ T5921] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 497.851515][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.966204][ T5921] usb 2-1: config 0 descriptor?? [ 498.193845][ T5921] usb 2-1: USB disconnect, device number 25 [ 498.827524][ T30] kauditd_printk_skb: 335 callbacks suppressed [ 498.827560][ T30] audit: type=1326 audit(1757380921.148:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 499.097489][ T30] audit: type=1326 audit(1757380921.148:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 499.128772][ T30] audit: type=1326 audit(1757380921.148:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 499.567633][ T30] audit: type=1326 audit(1757380921.148:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 499.646583][ T30] audit: type=1326 audit(1757380921.148:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 500.067991][ T30] audit: type=1326 audit(1757380921.148:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 500.343588][ T30] audit: type=1326 audit(1757380921.148:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 500.422012][ T30] audit: type=1326 audit(1757380921.148:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 500.590013][ T30] audit: type=1326 audit(1757380921.148:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 500.822546][ T30] audit: type=1326 audit(1757380921.148:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 500.934713][T11324] usb usb8: usbfs: process 11324 (syz.2.1467) did not claim interface 0 before use [ 501.448136][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.455030][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.556408][T11335] block nbd0: Attempted send on invalid socket [ 501.688111][T11335] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 502.219227][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 503.814569][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 503.832135][T11367] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 504.018154][T11371] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1477'. [ 504.039987][T11371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.050802][T11371] batadv_slave_0: entered promiscuous mode [ 504.058820][T11371] batadv_slave_0: entered allmulticast mode [ 504.075916][T11371] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 504.253259][T11371] netlink: 'syz.0.1477': attribute type 8 has an invalid length. [ 504.634892][T11366] usb usb8: usbfs: process 11366 (syz.3.1473) did not claim interface 0 before use [ 504.677720][T11339] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 504.690186][ T5872] Bluetooth: hci4: command 0x0406 tx timeout [ 506.247400][ T6021] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 506.269329][T11398] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1481'. [ 506.287476][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'. [ 506.638315][ T6021] usb 1-1: config 0 has no interfaces? [ 506.645014][ T6021] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 506.757412][ T6021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.940044][ T6021] usb 1-1: config 0 descriptor?? [ 507.348431][T11394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1479'. [ 507.792048][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 507.792065][ T30] audit: type=1326 audit(1757380930.178:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 507.827412][T11408] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1483'. [ 508.077479][ T6021] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 508.095418][ T30] audit: type=1326 audit(1757380930.178:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 508.216846][ T30] audit: type=1326 audit(1757380930.178:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 508.457440][ T6021] usb 5-1: Using ep0 maxpacket: 16 [ 508.470161][ T30] audit: type=1326 audit(1757380930.178:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 508.512048][ T6021] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 508.532208][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 508.545387][ T30] audit: type=1326 audit(1757380930.188:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 508.577458][ T6021] usb 5-1: Product: syz [ 508.589945][ T6021] usb 5-1: Manufacturer: syz [ 508.697129][ T6021] usb 5-1: SerialNumber: syz [ 508.732833][ T6021] usb 5-1: config 0 descriptor?? [ 508.967084][ T30] audit: type=1326 audit(1757380930.188:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 508.995237][ T30] audit: type=1326 audit(1757380930.188:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 509.136163][ T30] audit: type=1326 audit(1757380930.188:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 509.209398][ T30] audit: type=1326 audit(1757380930.298:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 509.234215][ T30] audit: type=1326 audit(1757380930.368:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f08539 code=0x7ffc0000 [ 509.266684][T11407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.278359][T11407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.306480][T11407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.321508][T11407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.342676][ T43] usb 5-1: USB disconnect, device number 31 [ 510.489691][ T43] usb 1-1: USB disconnect, device number 31 [ 510.887383][ T5921] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 511.186423][T11428] block nbd0: Attempted send on invalid socket [ 511.193201][T11428] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 511.204438][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.236184][ T5921] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 511.252794][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.262219][ T5921] usb 2-1: Product: syz [ 511.273421][ T5921] usb 2-1: Manufacturer: syz [ 511.296316][ T5921] usb 2-1: SerialNumber: syz [ 511.334730][ T5921] usb 2-1: config 0 descriptor?? [ 511.356438][ T5921] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 511.366214][ T5921] usb 2-1: selecting invalid altsetting 1 [ 511.556380][ T5921] gspca_stk014: reg_r err -71 [ 511.574687][ T5921] stk014 2-1:0.0: probe with driver stk014 failed with error -71 [ 511.575918][T11432] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 511.600764][ T5921] usb 2-1: USB disconnect, device number 26 [ 511.606127][T11432] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 511.645950][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1488'. [ 511.961575][T11443] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1490'. [ 513.097757][T11457] hub 9-0:1.0: USB hub found [ 513.104310][T11457] hub 9-0:1.0: 1 port detected [ 513.184880][T11440] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 513.387439][ T5921] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 513.552706][ T5921] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 513.584910][ T5921] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 513.627412][ T980] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 513.666350][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 513.747051][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 513.783988][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 513.855310][ T5921] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 513.857646][ T43] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 513.894288][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 513.913688][ T5921] usb 2-1: Product: syz [ 513.923600][ T980] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 513.941235][ T5921] usb 2-1: Manufacturer: syz [ 513.948930][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.970413][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 513.986851][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 514.006071][ T980] usb 1-1: config 0 descriptor?? [ 514.034821][ T5921] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 514.037741][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 514.050419][ T43] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 514.063560][ T43] usb 4-1: config 0 has no interface number 0 [ 514.067881][ T980] bfusb 1-1:0.0: probe with driver bfusb failed with error -5 [ 514.084051][ T5921] cdc_wdm 2-1:1.0: Unknown control protocol [ 514.094202][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 514.104765][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.151949][ T43] usb 4-1: Product: syz [ 514.156979][ T43] usb 4-1: Manufacturer: syz [ 514.162352][ T43] usb 4-1: SerialNumber: syz [ 514.201734][ T43] usb 4-1: config 0 descriptor?? [ 514.221267][ T43] smsc95xx v2.0.0 [ 514.224915][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 514.236426][ T43] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 514.742454][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 514.754167][T11467] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 514.766863][T11467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.033257][ T980] usb 1-1: USB disconnect, device number 32 [ 516.268113][ T980] usb 2-1: USB disconnect, device number 27 [ 517.509384][T11502] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 517.521275][T11502] block device autoloading is deprecated and will be removed. [ 517.546208][ T6021] usb 4-1: USB disconnect, device number 32 [ 517.598156][T11505] misc userio: Invalid payload size [ 519.631555][ T5872] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 520.753159][T11533] C: renamed from team_slave_0 (while UP) [ 520.769536][T11533] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 520.784507][T11533] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1510'. [ 520.917836][T11533] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 521.010458][T11535] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 521.409036][T11540] netlink: 'syz.3.1511': attribute type 27 has an invalid length. [ 521.461379][T11541] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 521.710017][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 521.902321][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 521.902335][ T30] audit: type=1400 audit(1757380944.278:759): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620AAC1FB2051D4F401A532E24447D4BD7B9FA9979B40DB pid=11545 comm="syz.2.1513" [ 524.055170][T11540] ip6gre1: left promiscuous mode [ 524.081855][T11562] ip6erspan0: entered promiscuous mode [ 524.122126][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.133499][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.279648][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.293953][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.328719][T11574] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1517'. [ 525.944495][T11588] netlink: 'syz.4.1520': attribute type 33 has an invalid length. [ 525.952523][T11588] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1520'. [ 529.277651][T11621] block nbd0: Attempted send on invalid socket [ 529.284034][T11621] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 530.128620][T11639] loop6: detected capacity change from 0 to 524287999 [ 530.332402][T11642] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1532'. [ 530.415428][ T6090] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 534.593709][T11689] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 535.423692][T11697] misc userio: Invalid payload size [ 536.751578][T11712] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1553'. [ 536.874771][T11712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.884402][T11712] batadv_slave_0: entered promiscuous mode [ 536.890946][T11712] batadv_slave_0: entered allmulticast mode [ 536.900606][T11712] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 536.941480][T11712] netlink: 'syz.2.1553': attribute type 8 has an invalid length. [ 537.675418][T11723] usb usb1: usbfs: process 11723 (syz.0.1557) did not claim interface 0 before use [ 538.567513][ T6021] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 538.998565][ T6021] usb 1-1: config 0 has no interfaces? [ 539.004136][ T6021] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.315582][ T6021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.541944][ T6021] usb 1-1: config 0 descriptor?? [ 539.711444][T11756] hub 9-0:1.0: USB hub found [ 539.716366][T11756] hub 9-0:1.0: 1 port detected [ 539.924347][T11768] random: crng reseeded on system resumption [ 540.390222][ T6021] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 540.568991][ T6021] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 540.580752][ T6021] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.716848][ T6021] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 540.743700][T11778] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 540.789576][ T6021] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 540.802427][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 540.852606][ T6021] usb 2-1: SerialNumber: syz [ 540.893914][ T6021] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 541.124736][ T6021] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 541.169956][ T6021] usb 2-1: USB disconnect, device number 28 [ 542.065978][ T6021] usb 1-1: USB disconnect, device number 33 [ 542.221569][T11798] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 542.233564][T11798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1583'. [ 542.244629][T11798] dummy0: entered promiscuous mode [ 542.253601][T11798] batman_adv: batadv0: Interface deactivated: dummy0 [ 542.260367][T11798] batman_adv: batadv0: Removing interface: dummy0 [ 542.268235][T11798] bridge0: port 3(dummy0) entered blocking state [ 542.274945][T11798] bridge0: port 3(dummy0) entered disabled state [ 542.281704][T11798] dummy0: entered allmulticast mode [ 542.290151][T11798] bridge0: port 3(dummy0) entered blocking state [ 542.296651][T11798] bridge0: port 3(dummy0) entered forwarding state [ 542.909764][T11819] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 544.096025][T11866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1613'. [ 544.160534][T11866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1613'. [ 547.191930][T11922] tipc: New replicast peer: 10.1.1.2 [ 547.204653][T11922] tipc: Enabled bearer , priority 10 [ 547.384660][T11932] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1639'. [ 547.393948][T11932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1639'. [ 547.412845][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 547.437185][ T24] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 547.446564][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 547.489329][ T24] usb 3-1: USB disconnect, device number 32 [ 547.597485][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 547.617590][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 547.626048][ T10] usb 1-1: config 0 has no interface number 0 [ 547.642897][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 547.652798][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.664897][ T10] usb 1-1: Product: syz [ 547.671664][ T10] usb 1-1: Manufacturer: syz [ 547.681837][ T10] usb 1-1: SerialNumber: syz [ 547.699479][ T10] usb 1-1: config 0 descriptor?? [ 547.715824][ T10] smsc95xx v2.0.0 [ 547.735688][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 547.790257][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 548.318851][ T980] tipc: Node number set to 3577109011 [ 549.062259][T11970] hub 9-0:1.0: USB hub found [ 549.077896][T11970] hub 9-0:1.0: 1 port detected [ 549.397376][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 549.999361][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.020064][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 550.049647][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.172112][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 550.233972][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 550.315610][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1656'. [ 550.339532][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.436852][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.507983][ T24] usb 5-1: Product: syz [ 550.512187][ T24] usb 5-1: Manufacturer: syz [ 550.591685][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 550.604913][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 550.665795][ T10] usb 1-1: USB disconnect, device number 34 [ 550.691502][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 550.736452][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 551.703470][T12019] bridge_slave_0: default FDB implementation only supports local addresses [ 551.966677][ T10] usb 5-1: USB disconnect, device number 32 [ 552.079575][T12024] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 552.725981][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1680'. [ 554.257422][T12071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1691'. [ 554.899809][T12096] netlink: 'syz.2.1702': attribute type 39 has an invalid length. [ 555.439826][T12104] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1705'. [ 555.454078][T12104] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 556.023897][T12125] netlink: 'syz.0.1716': attribute type 39 has an invalid length. [ 556.295336][T12135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 557.737984][T12165] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1730'. [ 558.011601][T12166] team0: left promiscuous mode [ 558.278214][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 559.165812][ T24] usb 2-1: config 0 has no interfaces? [ 559.182863][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 559.247047][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.344079][ T24] usb 2-1: config 0 descriptor?? [ 560.484076][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 561.347194][ T10] usb 2-1: USB disconnect, device number 29 [ 561.777120][T12233] loop2: detected capacity change from 0 to 7 [ 561.793407][T12233] Dev loop2: unable to read RDB block 7 [ 561.811579][T12233] loop2: unable to read partition table [ 561.821106][T12233] loop2: partition table beyond EOD, truncated [ 561.837796][T12233] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 562.760412][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.766841][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.351641][T12306] tipc: Enabling of bearer rejected, failed to enable media [ 564.816938][T12319] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 564.823735][T12319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 564.874143][T12319] vhci_hcd vhci_hcd.0: Device attached [ 565.110517][ T24] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 565.190183][ T5961] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 565.397600][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 565.406123][ T5961] usb 1-1: config 0 has no interfaces? [ 565.411713][ T5961] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 565.425732][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.470935][ T5961] usb 1-1: config 0 descriptor?? [ 565.693444][ T10] usb 1-1: USB disconnect, device number 35 [ 565.704460][T12320] vhci_hcd: connection closed [ 565.715253][ T49] vhci_hcd: stop threads [ 565.760059][ T49] vhci_hcd: release socket [ 565.790615][ T49] vhci_hcd: disconnect device [ 565.857449][ T24] usb 33-1: device descriptor read/64, error -1 [ 566.047396][ T24] vhci_hcd: vhci_device speed not set [ 567.133993][T12398] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1827'. [ 567.311805][T12405] loop2: detected capacity change from 0 to 7 [ 567.327111][T12405] Dev loop2: unable to read RDB block 7 [ 567.348593][T12405] loop2: unable to read partition table [ 567.364779][T12405] loop2: partition table beyond EOD, truncated [ 567.380006][T12405] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 567.443144][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 569.097378][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 569.280863][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.293333][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.319847][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 569.371797][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.413344][ T10] usb 3-1: config 0 descriptor?? [ 569.872230][ T10] cm6533_jd 0003:0D8C:0022.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 570.272461][T12496] loop4: detected capacity change from 0 to 7 [ 570.301340][T12496] Dev loop4: unable to read RDB block 7 [ 570.311448][T12496] loop4: unable to read partition table [ 570.319598][T12496] loop4: partition table beyond EOD, truncated [ 570.325884][T12496] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 570.342584][ T5233] Dev loop4: unable to read RDB block 7 [ 570.348914][ T5233] loop4: unable to read partition table [ 570.354827][ T5233] loop4: partition table beyond EOD, truncated [ 571.303452][T12525] vivid-000: disconnect [ 571.311805][T12524] vivid-000: reconnect [ 571.833662][ T980] usb 3-1: USB disconnect, device number 33 [ 573.130707][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 574.000607][T12603] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1910'. [ 574.227889][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 574.241958][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 574.257719][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 574.399307][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.420890][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.436681][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.451534][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.469742][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.483983][ T24] usb 3-1: config 0 descriptor?? [ 574.625038][T12626] netlink: 'syz.1.1919': attribute type 10 has an invalid length. [ 574.634195][T12623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.926974][ T24] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 575.629876][T12650] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 576.645429][T12670] kernel read not supported for file / -Ö9÷mZr†œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ² (pid: 12670 comm: syz.0.1937) [ 576.700585][ T30] audit: type=1800 audit(1757380999.078:760): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1937" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=44632 res=0 errno=0 [ 577.033765][ T10] usb 3-1: USB disconnect, device number 34 [ 577.951746][T12692] cgroup: fork rejected by pids controller in /syz0 [ 578.847855][T12705] netlink: 'syz.1.1947': attribute type 12 has an invalid length. [ 578.861018][T12705] netlink: 'syz.1.1947': attribute type 29 has an invalid length. [ 578.877172][T12705] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1947'. [ 578.997450][T12705] netlink: 'syz.1.1947': attribute type 1 has an invalid length. [ 579.024655][T12705] netlink: 'syz.1.1947': attribute type 2 has an invalid length. [ 579.059131][T12705] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1947'. [ 579.628695][T12709] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 579.797312][T12718] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1951'. [ 579.817485][T12718] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1951'. [ 581.024269][T10823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 581.043268][T10823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 581.055952][T10823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 581.073161][T10823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 581.081083][T10823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 581.782677][T12742] chnl_net:caif_netlink_parms(): no params data found [ 582.439040][T12742] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.494081][T12742] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.512776][T12742] bridge_slave_0: entered allmulticast mode [ 582.530347][T12742] bridge_slave_0: entered promiscuous mode [ 582.555302][T12742] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.613819][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.644366][T12742] bridge_slave_1: entered allmulticast mode [ 582.713343][T12742] bridge_slave_1: entered promiscuous mode [ 582.832397][T12742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.871512][T12742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.992175][T12742] team0: Port device team_slave_0 added [ 583.035420][T12742] team0: Port device team_slave_1 added [ 583.165182][ T5872] Bluetooth: hci3: command tx timeout [ 583.380239][T12742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.391503][T12742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.440120][T12742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.485087][T12742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.492289][T12742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.598459][T12742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.063942][T12742] hsr_slave_0: entered promiscuous mode [ 584.081662][T12742] hsr_slave_1: entered promiscuous mode [ 584.108300][T12742] debugfs: 'hsr0' already exists in 'hsr' [ 584.114066][T12742] Cannot create hsr debugfs directory [ 584.358538][T12818] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 584.677550][ T5868] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 584.701607][T12742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.830816][T12742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.842909][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.885549][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.955465][ T5868] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 584.970385][T12742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.984369][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.032650][ T5868] usb 5-1: config 0 descriptor?? [ 585.166291][T12742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.206124][T12833] syz_tun: entered allmulticast mode [ 585.218990][ T30] audit: type=1326 audit(1757381007.608:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12831 comm="syz.1.1990" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x0 [ 585.242659][ T5872] Bluetooth: hci3: command tx timeout [ 585.323194][T12840] syz_tun: left allmulticast mode [ 585.376810][T12742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 585.392744][T12742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 585.419345][T12742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 585.430778][T12742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 585.493547][ T5868] hid-steam 0003:28DE:1142.0016: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 585.587360][ T5868] hid-steam 0003:28DE:1142.0016: Steam wireless receiver connected [ 585.599030][ T5868] hid-steam 0003:28DE:1142.0016: No HID_FEATURE_REPORT submitted - nothing to read [ 585.645319][ T5868] hid-steam 0003:28DE:1142.0017: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 585.670947][T12742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.718286][T12742] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.759553][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.766744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.771084][ T980] usb 5-1: USB disconnect, device number 33 [ 585.812314][T12852] fido_id[12852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 585.834616][ T980] hid-steam 0003:28DE:1142.0016: Steam wireless receiver disconnected [ 585.865604][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.872830][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.186088][T12742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.294131][T12742] veth0_vlan: entered promiscuous mode [ 586.324267][T12742] veth1_vlan: entered promiscuous mode [ 586.420696][T12742] veth0_macvtap: entered promiscuous mode [ 586.494365][T12742] veth1_macvtap: entered promiscuous mode [ 586.571320][T12742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.626965][T12742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.688433][T12872] syzkaller0: entered promiscuous mode [ 586.694156][T12872] syzkaller0: entered allmulticast mode [ 586.873327][T12881] netlink: set zone limit has 4 unknown bytes [ 587.319810][ T5872] Bluetooth: hci3: command tx timeout [ 589.408246][ T5872] Bluetooth: hci3: command tx timeout [ 590.896953][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.911991][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.935419][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.967413][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.123527][T12908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2010'. [ 591.246045][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.275169][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.333748][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.342329][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.388956][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 591.650237][T12921] loop2: detected capacity change from 0 to 7 [ 591.663253][ T6087] loop2: [ 591.666265][ T6087] loop2: partition table partially beyond EOD, truncated [ 591.676212][T12921] loop2: [ 591.684595][T12921] loop2: partition table partially beyond EOD, truncated [ 592.318261][T12940] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 592.507092][T12942] gretap1: entered promiscuous mode [ 592.862425][T12949] sctp: [Deprecated]: syz.0.2025 (pid 12949) Use of int in max_burst socket option. [ 592.862425][T12949] Use struct sctp_assoc_value instead [ 593.547550][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 593.852506][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 593.863268][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.882534][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.941165][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 593.997385][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.006786][T12963] syz_tun: entered allmulticast mode [ 594.057005][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.065221][T12962] syz_tun: left allmulticast mode [ 594.097310][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 594.159659][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.196166][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.247325][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 594.291523][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.351601][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.406384][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 594.428382][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.460695][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.544582][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 594.578314][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.600634][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.651287][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 594.670011][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.694716][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.713948][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 594.721918][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.727445][ T980] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 594.731695][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 594.751664][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.776641][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 594.785733][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 594.799963][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 594.812093][ T24] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 594.822806][ T24] usb 3-1: Product: syz [ 594.827180][ T24] usb 3-1: Manufacturer: syz [ 594.829723][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 594.835433][ T24] usb 3-1: SerialNumber: syz [ 594.853344][ T24] usb 3-1: config 0 descriptor?? [ 594.863005][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 594.881618][ T24] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 594.887475][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 594.910565][ T980] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 594.937585][ T980] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 594.967123][ T980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 595.000179][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 595.022053][ T980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 595.043761][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 595.068256][ T980] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 595.079040][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.212326][ T980] usb 5-1: config 0 descriptor?? [ 595.435376][ T980] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 595.476762][ T980] usb 5-1: USB disconnect, device number 34 [ 595.526637][ T980] usblp1: removed [ 595.569161][T12987] tipc: Cannot configure node identity twice [ 595.575685][ T10] usb 3-1: USB disconnect, device number 35 [ 596.197848][ T980] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 596.347484][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 596.412513][ T980] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 596.434941][ T980] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 596.490542][ T980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 596.521325][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 596.566696][ T980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 596.626042][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 596.716378][ T980] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 596.774531][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.813629][ T980] usb 5-1: config 0 descriptor?? [ 596.815705][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2040'. [ 597.004971][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 597.048055][ T980] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 597.246910][ T6021] usb 5-1: USB disconnect, device number 35 [ 597.261947][ T6021] usblp0: removed [ 597.850272][ T30] audit: type=1326 audit(1757381020.238:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.3.2046" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x0 [ 601.810409][T13077] tipc: Enabled bearer , priority 0 [ 601.845561][T13078] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 601.858134][T13078] bond0: (slave lo): Error: Device can not be enslaved while up [ 601.871134][T13077] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 601.889027][T13077] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 601.904728][T13077] tipc: Resetting bearer [ 602.098802][T13077] tipc: Resetting bearer [ 603.716421][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'. [ 603.832053][T13110] ptrace attach of "./syz-executor exec"[5884] was attempted by "./syz-executor exec"[13110] [ 604.635358][T13118] netlink: 'syz.2.2075': attribute type 8 has an invalid length. [ 604.987534][ T5961] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 605.142236][T13130] netlink: set zone limit has 4 unknown bytes [ 605.208790][ T5961] usb 5-1: config 0 has no interfaces? [ 605.214485][ T5961] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 605.232005][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.262918][ T5961] usb 5-1: config 0 descriptor?? [ 605.273907][T13132] lo: entered allmulticast mode [ 605.346411][ T30] audit: type=1326 audit(1757381027.728:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.2079" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 605.433255][T13134] tipc: Enabling of bearer rejected, already enabled [ 605.452321][T13137] lo: left allmulticast mode [ 606.027377][ T980] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 606.218489][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.248138][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.277409][ T980] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 606.293980][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.314184][ T980] usb 4-1: config 0 descriptor?? [ 607.049475][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2082'. [ 607.272443][T13143] team0: entered promiscuous mode [ 607.301606][T13143] team_slave_0: entered promiscuous mode [ 607.357629][T13143] team_slave_1: entered promiscuous mode [ 607.367536][T13143] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 607.401960][T13143] team0: left promiscuous mode [ 607.417878][T13143] team_slave_0: left promiscuous mode [ 607.436438][T13143] team_slave_1: left promiscuous mode [ 607.743031][ T10] usb 5-1: USB disconnect, device number 36 [ 607.862418][T13153] F2FS-fs: Conflicting test_dummy_encryption options [ 607.994445][ T980] usbhid 4-1:0.0: can't add hid device: -71 [ 608.003578][ T980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 608.036298][ T980] usb 4-1: USB disconnect, device number 33 [ 608.715684][T13164] sit0: Caught tx_queue_len zero misconfig [ 613.009794][ T30] audit: type=1326 audit(1757381035.368:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.1.2097" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x0 [ 613.057373][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 613.245658][ T24] usb 3-1: config 0 has no interfaces? [ 613.275999][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 613.357612][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.428363][ T24] usb 3-1: config 0 descriptor?? [ 613.694966][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 613.742795][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 613.851054][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 613.895476][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 614.645962][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 614.656591][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 615.287384][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 615.302468][ T24] usb 3-1: USB disconnect, device number 36 [ 615.572111][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 615.585941][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 615.642846][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.652290][ T10] usb 1-1: Product: syz [ 615.659453][ T10] usb 1-1: Manufacturer: syz [ 615.664482][ T10] usb 1-1: SerialNumber: syz [ 615.692588][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 615.699916][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 615.877516][ T6021] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 616.194301][ T6021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 616.220474][ T6021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 616.265244][ T6021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 616.305387][ T6021] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 616.321325][ T6021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.337371][ T6021] usb 3-1: Product: syz [ 616.391474][ T6021] usb 3-1: Manufacturer: syz [ 616.419488][ T6021] usb 3-1: SerialNumber: syz [ 616.520407][ T6021] usb 3-1: config 0 descriptor?? [ 616.745151][ T6021] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 617.017505][ T6021] usb 3-1: USB disconnect, device number 37 [ 618.427615][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 618.622900][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'. [ 618.657202][T13269] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 618.748657][T13269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.847569][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 618.864289][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.878896][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 618.902559][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 618.929716][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 618.953819][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 619.057485][ T24] usb 3-1: Manufacturer: syz [ 619.073543][ T24] usb 3-1: config 0 descriptor?? [ 619.437992][T13265] syz.2.2110: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 619.468025][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 619.478004][T13265] CPU: 0 UID: 0 PID: 13265 Comm: syz.2.2110 Not tainted syzkaller #0 PREEMPT(full) [ 619.478029][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.478045][T13265] Call Trace: [ 619.478053][T13265] [ 619.478061][T13265] dump_stack_lvl+0x189/0x250 [ 619.478102][T13265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.478126][T13265] ? __pfx__printk+0x10/0x10 [ 619.478152][T13265] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 619.478175][T13265] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 619.478200][T13265] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 619.478225][T13265] warn_alloc+0x214/0x310 [ 619.478255][T13265] ? stack_depot_save_flags+0x40/0x860 [ 619.478286][T13265] ? __pfx_warn_alloc+0x10/0x10 [ 619.478317][T13265] ? kasan_save_track+0x4f/0x80 [ 619.478343][T13265] ? xskq_create+0x56/0x170 [ 619.478360][T13265] ? xsk_init_queue+0xb0/0x110 [ 619.478385][T13265] ? xsk_setsockopt+0x4dc/0x8d0 [ 619.478410][T13265] ? do_sock_setsockopt+0x17c/0x1b0 [ 619.478431][T13265] ? __ia32_sys_setsockopt+0x13f/0x1b0 [ 619.478451][T13265] ? __do_fast_syscall_32+0xb6/0x2b0 [ 619.478471][T13265] ? do_fast_syscall_32+0x34/0x80 [ 619.478499][T13265] __vmalloc_node_range_noprof+0x125/0x12f0 [ 619.478556][T13265] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 619.478591][T13265] ? __kasan_kmalloc+0x93/0xb0 [ 619.478620][T13265] vmalloc_user_noprof+0xad/0xf0 [ 619.478646][T13265] ? xskq_create+0xbf/0x170 [ 619.478665][T13265] xskq_create+0xbf/0x170 [ 619.478685][T13265] xsk_init_queue+0xb0/0x110 [ 619.478716][T13265] xsk_setsockopt+0x4dc/0x8d0 [ 619.478765][T13265] ? __pfx_xsk_setsockopt+0x10/0x10 [ 619.478797][T13265] ? __pfx_aa_sk_perm+0x10/0x10 [ 619.478830][T13265] ? aa_sock_opt_perm+0xff/0x1b0 [ 619.478854][T13265] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 619.478876][T13265] ? __pfx_xsk_setsockopt+0x10/0x10 [ 619.478906][T13265] do_sock_setsockopt+0x17c/0x1b0 [ 619.478935][T13265] __ia32_sys_setsockopt+0x13f/0x1b0 [ 619.478966][T13265] __do_fast_syscall_32+0xb6/0x2b0 [ 619.478996][T13265] do_fast_syscall_32+0x34/0x80 [ 619.479018][T13265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 619.479048][T13265] RIP: 0023:0xf710e539 [ 619.479070][T13265] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 619.479094][T13265] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 619.479115][T13265] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 619.479129][T13265] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000052 [ 619.479142][T13265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 619.479153][T13265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 619.479165][T13265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 619.479195][T13265] [ 619.479206][T13265] Mem-Info: [ 619.773356][ T10] r8152-cfgselector 1-1: bad CDC descriptors [ 619.793633][ T10] r8152-cfgselector 1-1: USB disconnect, device number 36 [ 619.811616][T13265] active_anon:10769 inactive_anon:0 isolated_anon:0 [ 619.811616][T13265] active_file:13639 inactive_file:40063 isolated_file:0 [ 619.811616][T13265] unevictable:768 dirty:200 writeback:0 [ 619.811616][T13265] slab_reclaimable:8969 slab_unreclaimable:101190 [ 619.811616][T13265] mapped:33561 shmem:3409 pagetables:1360 [ 619.811616][T13265] sec_pagetables:0 bounce:0 [ 619.811616][T13265] kernel_misc_reclaimable:0 [ 619.811616][T13265] free:1301878 free_pcp:13342 free_cma:0 [ 619.879294][T13265] Node 0 active_anon:43076kB inactive_anon:0kB active_file:54556kB inactive_file:160048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134244kB dirty:796kB writeback:0kB shmem:12100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12520kB pagetables:5312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 619.997442][T13265] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 620.236338][T13265] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 620.837824][T13265] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 620.857508][T13265] Node 0 DMA32 free:1301164kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34232kB inactive_anon:0kB active_file:54556kB inactive_file:158476kB unevictable:1536kB writepending:812kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:40984kB local_pcp:19336kB free_cma:0kB [ 620.981823][T13265] lowmem_reserve[]: 0 0 1 1 1 [ 620.996951][T13265] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 621.067871][T13265] lowmem_reserve[]: 0 0 0 0 0 [ 621.077349][ T5921] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 621.109018][T13265] Node 1 Normal free:3893932kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16608kB local_pcp:7104kB free_cma:0kB [ 621.257378][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 621.281538][T13265] lowmem_reserve[]: 0 0 0 0 0 [ 621.286377][T13265] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 621.294692][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.322396][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 621.336484][T13289] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2115'. [ 621.352135][ T5921] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 621.366441][T13265] Node 0 DMA32: 489*4kB (UME) 880*8kB (UME) 626*16kB (UME) 293*32kB (UME) 192*64kB (UME) 100*128kB (UME) 69*256kB (UME) 38*512kB (UM) 18*1024kB (UME) 7*2048kB (UME) 288*4096kB (UM) = 1303012kB [ 621.366849][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.503000][ T5921] usb 2-1: Product: syz [ 621.507810][ T5921] usb 2-1: Manufacturer: syz [ 621.507983][T13265] Node 0 [ 621.512488][ T5921] usb 2-1: SerialNumber: syz [ 621.531820][T13265] Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 621.557090][T13265] Node 1 Normal: 219*4kB (UME) 46*8kB (UME) 41*16kB (UME) 190*32kB (UME) 50*64kB (UME) 10*128kB (UME) 2*256kB (M) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3893932kB [ 621.589221][T13265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.872823][T13265] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 621.887774][T13265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.913973][T13265] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 622.158284][T13265] 57105 total pagecache pages [ 622.163252][T13265] 0 pages in swap cache [ 622.167686][T13265] Free swap = 124996kB [ 622.172060][T13265] Total swap = 124996kB [ 622.176462][T13265] 2097051 pages RAM [ 622.180643][T13265] 0 pages HighMem/MovableOnly [ 622.185517][T13265] 425669 pages reserved [ 622.189995][T13265] 0 pages cma reserved [ 622.212651][ T10] usb 3-1: USB disconnect, device number 38 [ 622.533398][ T5921] usb 2-1: 0:2 : does not exist [ 623.202041][T13310] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 624.073688][ T5921] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 624.226690][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.233658][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.454414][ T5921] usb 2-1: USB disconnect, device number 30 [ 624.944621][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.839142][T13328] lo: Caught tx_queue_len zero misconfig [ 627.152510][ T30] audit: type=1326 audit(1757381049.448:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 627.217522][ T30] audit: type=1326 audit(1757381049.448:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 627.253356][ T30] audit: type=1326 audit(1757381049.448:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 627.310612][ T6021] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 627.340853][ T30] audit: type=1326 audit(1757381049.448:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 627.477309][ T30] audit: type=1326 audit(1757381049.768:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 627.519136][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.547489][T13339] pim6reg: entered allmulticast mode [ 627.568272][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.600276][T13338] pim6reg: left allmulticast mode [ 627.624370][ T6021] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 627.638790][ T30] audit: type=1326 audit(1757381049.988:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 627.676325][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.727312][ T30] audit: type=1326 audit(1757381049.988:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 627.873178][ T6021] usb 5-1: config 0 descriptor?? [ 628.169663][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 628.861314][T13350] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 629.828088][ T6021] usbhid 5-1:0.0: can't add hid device: -71 [ 629.848112][ T6021] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 630.000282][ T6021] usb 5-1: USB disconnect, device number 37 [ 630.678271][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 630.911821][ T24] usb 2-1: config 0 has no interfaces? [ 630.927532][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 630.936569][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.001792][ T24] usb 2-1: config 0 descriptor?? [ 633.106324][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'. [ 633.115574][T13388] bridge_slave_1: left allmulticast mode [ 633.121411][T13388] bridge_slave_1: left promiscuous mode [ 633.127424][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.250453][T13388] bridge_slave_0: left allmulticast mode [ 633.256358][T13388] bridge_slave_0: left promiscuous mode [ 633.270096][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.489747][ T5868] usb 2-1: USB disconnect, device number 31 [ 636.463739][T13424] ptrace attach of "./syz-executor exec"[12742] was attempted by "./syz-executor exec"[13424] [ 636.982723][ T980] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 637.169666][ T980] usb 4-1: config 0 has no interfaces? [ 637.189601][ T980] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 637.372072][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.380348][ T980] usb 4-1: Product: syz [ 637.384526][ T980] usb 4-1: Manufacturer: syz [ 637.468293][ T980] usb 4-1: SerialNumber: syz [ 637.538727][ T980] usb 4-1: config 0 descriptor?? [ 638.163813][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 639.130070][ T980] usb 4-1: USB disconnect, device number 34 [ 639.977052][T13453] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.2146'. [ 640.477398][ T6021] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 641.038901][ T6021] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 641.087462][ T6021] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.130114][ T6021] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 641.187324][ T6021] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 641.270687][ T6021] usb 4-1: Manufacturer: syz [ 641.299159][ T6021] usb 4-1: config 0 descriptor?? [ 641.417373][ T6021] rc_core: IR keymap rc-hauppauge not found [ 641.423318][ T6021] Registered IR keymap rc-empty [ 641.472574][ T6021] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 641.505515][ T6021] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 641.527233][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 644.027452][ T980] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 644.070167][ T5921] usb 4-1: USB disconnect, device number 35 [ 644.426493][ T980] usb 5-1: config 0 has no interfaces? [ 644.439146][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 644.458762][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.466983][ T980] usb 5-1: Product: syz [ 644.478550][ T980] usb 5-1: Manufacturer: syz [ 644.487296][ T980] usb 5-1: SerialNumber: syz [ 644.514213][ T980] usb 5-1: config 0 descriptor?? [ 644.673737][T13500] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2157'. [ 645.174017][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.247978][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.299046][T13508] binder: 13504:13508 ioctl c0306201 80000240 returned -11 [ 646.959376][ T24] usb 5-1: USB disconnect, device number 38 [ 647.311568][T13522] VFS: Mount too revealing [ 647.587405][ T5961] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 647.892345][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 647.924194][ T5961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.941977][ T5961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 647.970281][ T5961] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.985634][ T5961] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 648.269041][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.349741][ T5961] hub 5-1:1.0: bad descriptor, ignoring hub [ 648.597482][ T5961] hub 5-1:1.0: probe with driver hub failed with error -5 [ 648.619331][ T5961] cdc_wdm 5-1:1.0: skipping garbage [ 648.657280][ T5961] cdc_wdm 5-1:1.0: skipping garbage [ 648.667733][ T5961] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 648.877328][ T5961] usb 5-1: USB disconnect, device number 39 [ 649.807992][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 649.846149][T13552] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2168'. [ 649.859465][T13552] netlink: 'syz.4.2168': attribute type 4 has an invalid length. [ 651.387410][ T5868] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 651.862761][ T5868] usb 3-1: config 0 has no interfaces? [ 652.239962][ T5868] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 652.249249][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.297423][ T5868] usb 3-1: Product: syz [ 652.311885][ T5868] usb 3-1: Manufacturer: syz [ 652.324392][ T5868] usb 3-1: SerialNumber: syz [ 652.358385][ T5868] usb 3-1: config 0 descriptor?? [ 652.814181][T13573] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 652.820829][T13573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 652.912154][T13573] vhci_hcd vhci_hcd.0: Device attached [ 652.968853][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2175'. [ 653.397992][ T5961] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 653.457534][ T6021] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 653.575780][ T5961] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 653.585500][ T5961] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 653.596585][ T5961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 653.635836][ T5961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 653.867597][ T5921] usb 3-1: USB disconnect, device number 39 [ 653.996810][ T5961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 654.019400][ T5961] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 654.029259][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 654.038241][ T5961] usb 2-1: Product: syz [ 654.045949][ T5961] usb 2-1: Manufacturer: syz [ 654.084776][ T5961] cdc_wdm 2-1:1.0: skipping garbage [ 654.107802][ T5961] cdc_wdm 2-1:1.0: skipping garbage [ 654.150587][ T5961] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 654.302491][ T5961] cdc_wdm 2-1:1.0: Unknown control protocol [ 654.592657][T13575] vhci_hcd: connection reset by peer [ 654.689623][ T1168] vhci_hcd: stop threads [ 654.694033][ T1168] vhci_hcd: release socket [ 654.694092][ T5961] usb 2-1: USB disconnect, device number 32 [ 654.734235][ T1168] vhci_hcd: disconnect device [ 655.315927][T13591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.327776][ T5868] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 656.861483][ T5868] usb 1-1: config 0 has no interfaces? [ 656.868770][ T5961] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 656.868773][ T5868] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 656.868798][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.050243][ T5961] usb 5-1: config 0 has no interfaces? [ 657.062741][ T5961] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 657.072646][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.101314][ T5961] usb 5-1: Product: syz [ 657.112701][ T5961] usb 5-1: Manufacturer: syz [ 657.126049][ T5961] usb 5-1: SerialNumber: syz [ 657.154197][ T5961] usb 5-1: config 0 descriptor?? [ 657.167077][ T5868] usb 1-1: config 0 descriptor?? [ 657.177717][ T982] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 657.780979][ T982] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 657.790426][ T982] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 657.815556][ T982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 657.916168][T13620] lo: left promiscuous mode [ 657.924431][T13620] tunl0: left promiscuous mode [ 657.932221][T13620] gre0: left promiscuous mode [ 658.005317][T13620] gretap0: left promiscuous mode [ 658.012590][ T982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 658.026107][ T982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 658.039757][T13620] erspan0: left promiscuous mode [ 658.047476][ T982] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.056617][ T982] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.069061][T13620] ip_vti0: left promiscuous mode [ 658.069127][ T982] usb 3-1: Product: syz [ 658.110554][T13620] ip6_vti0: left promiscuous mode [ 658.120569][T13620] sit0: left promiscuous mode [ 658.127984][ T982] usb 3-1: Manufacturer: syz [ 658.160902][T13620] ip6tnl0: left promiscuous mode [ 658.170893][ T982] cdc_wdm 3-1:1.0: skipping garbage [ 658.176106][ T982] cdc_wdm 3-1:1.0: skipping garbage [ 658.205097][ T982] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 658.216434][ T982] cdc_wdm 3-1:1.0: Unknown control protocol [ 658.246757][T13620] ip6gre0: left promiscuous mode [ 658.263500][T13620] syz_tun: left promiscuous mode [ 658.271828][T13620] ip6gretap0: left promiscuous mode [ 658.283020][T13620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.294039][T13620] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.312621][T13620] nlmon0: left promiscuous mode [ 658.325152][T13620] caif0: left promiscuous mode [ 658.335470][T13620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.397432][ T982] usb 3-1: USB disconnect, device number 40 [ 658.588327][ T6021] vhci_hcd: vhci_device speed not set [ 659.167317][ T5868] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 659.257363][ T43] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 659.317318][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 659.324385][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 659.338749][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 659.353098][ T5868] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 659.363808][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.373425][ T5868] usb 2-1: Product: syz [ 659.481857][ T5868] usb 2-1: Manufacturer: syz [ 659.486627][ T5868] usb 2-1: SerialNumber: syz [ 659.491089][ T43] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 659.511753][ T43] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 659.569141][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 659.578292][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 659.598484][ T5921] usb 5-1: USB disconnect, device number 40 [ 659.616962][ T6021] usb 1-1: USB disconnect, device number 37 [ 659.654224][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 659.668600][ T5868] usb 2-1: config 0 descriptor?? [ 659.681343][ T5868] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 659.713273][ T5868] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 659.725422][ T43] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 659.751756][ T43] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 659.768194][ T43] usb 3-1: Product: syz [ 659.772510][ T43] usb 3-1: Manufacturer: syz [ 659.782618][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 659.970926][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 659.978407][ T43] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 659.999445][ T43] cdc_wdm 3-1:1.0: Unknown control protocol [ 660.010406][ T43] usb 3-1: USB disconnect, device number 41 [ 660.268780][ T6021] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 660.380655][ T5868] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 660.387431][ T5868] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 660.431117][ T6021] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 660.443701][ T6021] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 660.462572][ T6021] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 660.493237][ T6021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 660.705956][ T6021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 660.719586][ T6021] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 660.736927][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 661.067336][ T6021] usb 1-1: Product: syz [ 661.071558][ T6021] usb 1-1: Manufacturer: syz [ 661.108965][ T6021] cdc_wdm 1-1:1.0: skipping garbage [ 661.114556][ T6021] cdc_wdm 1-1:1.0: skipping garbage [ 661.251961][ T5868] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 661.269193][ T6021] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 661.271081][ T5868] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 661.278624][ T6021] cdc_wdm 1-1:1.0: Unknown control protocol [ 661.287836][ T5868] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 661.391547][ T5921] usb 1-1: USB disconnect, device number 38 [ 661.567421][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 661.749763][ T10] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 661.764492][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 661.806974][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 661.820518][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 661.840195][ T10] usb 4-1: Product: syz [ 661.848863][ T10] usb 4-1: Manufacturer: syz [ 661.856147][T13653] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 661.879078][ T10] usb 4-1: SerialNumber: syz [ 661.889346][ T10] usb 4-1: config 0 descriptor?? [ 661.939566][ T5868] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 662.008024][ T5868] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 662.137294][ T6021] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 662.199053][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2192'. [ 662.232161][ T5868] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 662.507313][ T6021] usb 1-1: Using ep0 maxpacket: 16 [ 662.515698][ T6021] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 662.527955][ T6021] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 662.552533][ T5868] usb 2-1: USB disconnect, device number 33 [ 662.562594][ T6021] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 662.575856][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.737273][ T6021] usb 1-1: Product: syz [ 662.751770][ T6021] usb 1-1: Manufacturer: syz [ 662.756400][ T6021] usb 1-1: SerialNumber: syz [ 662.788406][ T6021] usb 1-1: config 0 descriptor?? [ 662.816578][ T6021] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 662.853020][ T6021] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 663.561314][ T6021] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 663.568342][ T6021] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 664.445882][ T980] usb 4-1: USB disconnect, device number 36 [ 664.752434][T13668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.795204][ T6021] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 664.821071][ T6021] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 665.127928][T13684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 665.727655][ T6021] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 665.740979][ T6021] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 666.107066][ T6021] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 666.138200][ T6021] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 666.207445][ T6021] usb 1-1: USB disconnect, device number 39 [ 667.037357][ T6021] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 667.251622][ T6021] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 667.270568][ T6021] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 667.290773][ T6021] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 667.310333][ T6021] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 667.380697][ T6021] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 667.435467][ T6021] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 667.464674][ T6021] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 667.604759][ T6021] usb 2-1: Product: syz [ 667.610400][ T6021] usb 2-1: Manufacturer: syz [ 667.631791][ T6021] cdc_wdm 2-1:1.0: skipping garbage [ 667.656440][ T6021] cdc_wdm 2-1:1.0: skipping garbage [ 667.724142][ T6021] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 667.733054][ T6021] cdc_wdm 2-1:1.0: Unknown control protocol [ 667.911558][T13717] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2205'. [ 667.945782][ T6021] usb 2-1: USB disconnect, device number 34 [ 668.320355][T13717] netlink: 'syz.3.2205': attribute type 4 has an invalid length. [ 668.734825][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2208'. [ 670.005071][ T980] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 670.685911][ T980] usb 1-1: config 0 has no interfaces? [ 670.732183][ T980] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 670.768621][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.857441][ T982] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 670.943883][ T980] usb 1-1: config 0 descriptor?? [ 671.056118][ T982] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 671.066307][ T982] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 671.338896][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 671.414221][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 671.459918][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 671.488325][ T982] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 671.511250][ T982] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 671.527791][ T982] usb 4-1: Product: syz [ 671.534417][ T982] usb 4-1: Manufacturer: syz [ 671.548062][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 671.553311][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 671.560641][ T982] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 671.566553][ T982] cdc_wdm 4-1:1.0: Unknown control protocol [ 672.285093][ T5868] usb 4-1: USB disconnect, device number 37 [ 672.694215][T13755] binder_alloc: 13753: binder_alloc_buf, no vma [ 673.292256][ T5868] usb 1-1: USB disconnect, device number 40 [ 673.442055][T13762] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 674.003910][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 674.497014][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 674.507401][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 674.529167][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 674.541611][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 674.689227][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 674.849098][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 674.863622][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 674.874264][ T10] usb 1-1: Product: syz [ 674.945535][ T10] usb 1-1: Manufacturer: syz [ 674.965131][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 674.985969][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 675.008862][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 675.019615][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 675.245913][ T982] usb 1-1: USB disconnect, device number 41 [ 676.137389][ T5868] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 676.311026][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 676.335318][ T5868] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 676.374244][ T5868] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 676.405398][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 676.439828][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 676.462171][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 676.479554][ T5868] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 676.492401][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 676.502325][ T5868] usb 3-1: Product: syz [ 676.510701][ T5868] usb 3-1: Manufacturer: syz [ 676.516039][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 676.524696][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 676.557253][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 676.574359][ T5868] cdc_wdm 3-1:1.0: skipping garbage [ 676.647482][ T5868] cdc_wdm 3-1:1.0: skipping garbage [ 676.653673][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 676.666962][ T5868] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 676.682236][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 676.697521][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 676.700933][ T5868] cdc_wdm 3-1:1.0: Unknown control protocol [ 676.743383][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 676.752965][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 676.787444][ T6021] usb 3-1: USB disconnect, device number 42 [ 676.815161][ T10] usb 4-1: Product: syz [ 676.839062][ T10] usb 4-1: Manufacturer: syz [ 676.849020][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 676.877669][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 676.906900][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 676.909345][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 676.933617][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 676.992650][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 676.998249][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 677.016090][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 677.034229][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 677.036476][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 677.056054][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 677.064296][ T24] usb 1-1: Product: syz [ 677.070898][ T24] usb 1-1: Manufacturer: syz [ 677.083253][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 677.096329][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 677.166609][ T24] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 677.173810][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 677.243405][ T10] usb 4-1: USB disconnect, device number 38 [ 677.385347][ T6021] usb 1-1: USB disconnect, device number 42 [ 678.038335][T13826] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 681.387314][ T5921] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 681.550184][ T5921] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 681.559157][ T5921] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 681.620222][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 681.895981][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 681.927288][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 681.943377][ T5921] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 681.952568][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 681.960742][ T5921] usb 4-1: Product: syz [ 681.964905][ T5921] usb 4-1: Manufacturer: syz [ 681.984204][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 681.989493][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 682.031326][ T5921] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 682.037374][ T5921] cdc_wdm 4-1:1.0: Unknown control protocol [ 682.229558][ T5921] usb 4-1: USB disconnect, device number 39 [ 683.177630][ T6021] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 683.869505][ T6021] usb 1-1: Using ep0 maxpacket: 16 [ 683.888447][ T6021] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 683.964357][ T6021] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 684.005560][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.170076][ T6021] usb 1-1: Product: syz [ 684.212791][ T6021] usb 1-1: Manufacturer: syz [ 684.252751][ T6021] usb 1-1: SerialNumber: syz [ 684.304920][ T6021] usb 1-1: config 0 descriptor?? [ 684.490133][T13893] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 685.643401][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.650162][ T6021] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 685.658403][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.075907][ T5921] usb 1-1: USB disconnect, device number 43 [ 686.101183][ T6021] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 686.117287][ T6021] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 686.150998][ T6021] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 686.312630][ T6021] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 686.324599][ T6021] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 686.342044][ T6021] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 686.358126][ T6021] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 686.376347][ T6021] usb 3-1: Product: syz [ 686.386107][ T6021] usb 3-1: Manufacturer: syz [ 686.417965][ T6021] cdc_wdm 3-1:1.0: skipping garbage [ 686.437842][ T6021] cdc_wdm 3-1:1.0: skipping garbage [ 686.476388][ T6021] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 686.530274][ T6021] cdc_wdm 3-1:1.0: Unknown control protocol [ 686.668797][ T6021] usb 3-1: USB disconnect, device number 43 [ 686.783767][ T5868] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 686.964182][ T5868] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 686.975475][ T5868] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 686.987126][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 687.004332][ T5868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 687.058064][ T5868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 687.075380][ T5868] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 687.085176][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 687.099496][ T5868] usb 4-1: Product: syz [ 687.105578][ T5868] usb 4-1: Manufacturer: syz [ 687.131067][ T5868] cdc_wdm 4-1:1.0: skipping garbage [ 687.144284][ T5868] cdc_wdm 4-1:1.0: skipping garbage [ 687.166727][ T5868] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 687.184711][ T5868] cdc_wdm 4-1:1.0: Unknown control protocol [ 687.445646][ T5868] usb 4-1: USB disconnect, device number 40 [ 688.177365][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 688.347456][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 688.355529][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.379257][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 688.388604][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.396581][ T10] usb 1-1: Product: syz [ 688.643442][ T10] usb 1-1: Manufacturer: syz [ 688.659392][ T5868] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 688.667098][ T10] usb 1-1: SerialNumber: syz [ 688.686654][ T10] usb 1-1: config 0 descriptor?? [ 688.818066][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 688.832661][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.876313][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 688.924656][ T5868] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 688.936921][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.953076][ T5868] usb 4-1: Product: syz [ 688.960550][ T5868] usb 4-1: Manufacturer: syz [ 688.965153][ T5868] usb 4-1: SerialNumber: syz [ 688.985341][ T5868] usb 4-1: config 0 descriptor?? [ 689.217357][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 689.393461][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 689.402804][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 689.407547][ T6021] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 689.423105][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 689.432446][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 689.457690][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 689.476285][T13952] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 689.502142][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.511895][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.520371][ T10] usb 5-1: Product: syz [ 689.524630][ T10] usb 5-1: Manufacturer: syz [ 689.547992][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 689.554898][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 689.576118][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 689.582864][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 689.599799][ T6021] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 689.610939][ T6021] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 689.626357][ T6021] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 689.655999][ T6021] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 689.667361][ T6021] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 689.681054][ T6021] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.692185][ T6021] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.702043][ T6021] usb 3-1: Product: syz [ 689.706344][ T6021] usb 3-1: Manufacturer: syz [ 689.735168][ T6021] cdc_wdm 3-1:1.0: skipping garbage [ 689.740547][ T6021] cdc_wdm 3-1:1.0: skipping garbage [ 689.756274][ T6021] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 689.762363][ T6021] cdc_wdm 3-1:1.0: Unknown control protocol [ 689.795990][ T10] usb 5-1: USB disconnect, device number 41 [ 689.950825][ T5868] usb 3-1: USB disconnect, device number 44 [ 690.616026][ T24] usb 1-1: USB disconnect, device number 44 [ 691.312155][T13978] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 691.526270][ T6021] usb 4-1: USB disconnect, device number 41 [ 693.119289][T14007] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 697.612025][T14050] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 700.906650][ T980] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 701.131385][ T980] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 701.140348][ T980] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 701.217843][ T980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 701.305166][ T980] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 701.527582][ T980] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 701.572317][ T980] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 701.585039][ T980] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 701.641159][ T980] usb 3-1: Product: syz [ 701.661018][ T980] usb 3-1: Manufacturer: syz [ 701.758562][ T980] cdc_wdm 3-1:1.0: skipping garbage [ 701.763805][ T980] cdc_wdm 3-1:1.0: skipping garbage [ 701.802653][ T980] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 701.819599][ T980] cdc_wdm 3-1:1.0: Unknown control protocol [ 701.983997][ T980] usb 3-1: USB disconnect, device number 45 [ 703.437290][ T982] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 703.624484][ T982] usb 3-1: config 0 has no interfaces? [ 703.630216][ T982] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 703.708075][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.816252][ T982] usb 3-1: config 0 descriptor?? [ 704.525839][T14120] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 707.161010][ T5868] usb 3-1: USB disconnect, device number 46 [ 707.187516][ T5921] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 707.410849][ T5921] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 707.422239][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.451911][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 707.493581][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.549139][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9065, setting to 1024 [ 707.609758][ T5921] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 707.634571][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 707.663441][ T5921] usb 2-1: Product: syz [ 707.671277][ T5921] usb 2-1: Manufacturer: syz [ 707.723189][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 707.859759][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 708.197421][T10823] Bluetooth: hci3: command 0x0406 tx timeout [ 708.258306][ T5921] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 708.264348][ T5921] cdc_wdm 2-1:1.0: Unknown control protocol [ 708.284267][ T5921] usb 2-1: USB disconnect, device number 35 [ 709.461115][T14175] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 709.651295][T14178] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 710.897328][ T6021] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 711.059828][ T6021] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 711.086924][ T6021] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 711.111408][ T6021] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 711.143529][ T6021] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 711.164891][ T6021] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 711.190594][ T6021] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 711.208367][ T6021] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 711.226594][ T6021] usb 3-1: Product: syz [ 711.241716][ T6021] usb 3-1: Manufacturer: syz [ 711.282814][ T6021] cdc_wdm 3-1:1.0: skipping garbage [ 711.302764][ T6021] cdc_wdm 3-1:1.0: skipping garbage [ 711.339343][ T6021] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 711.345284][ T6021] cdc_wdm 3-1:1.0: Unknown control protocol [ 711.492647][ T6021] usb 3-1: USB disconnect, device number 47 [ 714.826635][ T50] bond1 (unregistering): (slave geneve2): Releasing active interface [ 714.846681][ T50] geneve2 (unregistering): left promiscuous mode [ 716.994178][T14247] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 717.545244][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.563626][ T50] bond_slave_0: left promiscuous mode [ 717.580299][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.961505][ T50] bond_slave_1: left promiscuous mode [ 718.074858][ T50] bond0 (unregistering): Released all slaves [ 720.318234][ T50] bond1 (unregistering): Released all slaves [ 721.019035][ T50] tipc: Left network mode [ 722.353211][ T50] hsr_slave_0: left promiscuous mode [ 722.407516][ T50] hsr_slave_1: left promiscuous mode [ 722.418587][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.464007][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.504475][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.743798][ T50] veth1_macvtap: left promiscuous mode [ 723.397877][ T50] veth0_macvtap: left promiscuous mode [ 723.500905][ T50] veth1_vlan: left promiscuous mode [ 723.631833][ T50] veth0_vlan: left promiscuous mode [ 725.264649][ T50] team0 (unregistering): Port device team_slave_1 removed [ 725.495283][ T50] team0 (unregistering): Port device C removed [ 729.586647][ T5921] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 729.752310][ T5921] usb 4-1: config 0 has no interfaces? [ 729.847271][ T5921] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 729.872116][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.016297][ T5921] usb 4-1: config 0 descriptor?? [ 733.019329][ T982] usb 4-1: USB disconnect, device number 42 [ 733.798045][T14415] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 747.170082][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.176451][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.122918][T14561] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 753.671831][T14613] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 760.763291][T14690] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 767.081900][T14765] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 772.667530][ T5868] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 772.837601][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 772.844841][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.032039][ T5868] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 773.043245][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.058178][ T5868] usb 2-1: Product: syz [ 773.377730][ T5868] usb 2-1: Manufacturer: syz [ 773.382587][ T5868] usb 2-1: SerialNumber: syz [ 773.402002][ T5868] usb 2-1: config 0 descriptor?? [ 775.419267][ T982] usb 2-1: USB disconnect, device number 36 [ 777.479502][ T982] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 777.649518][ T982] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 777.668522][ T982] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 777.696315][ T982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 777.722230][ T982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 778.074153][ T982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 778.106617][ T982] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 778.134282][ T982] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 778.156774][ T982] usb 5-1: Product: syz [ 778.164673][ T982] usb 5-1: Manufacturer: syz [ 778.194095][ T982] cdc_wdm 5-1:1.0: skipping garbage [ 778.211517][ T982] cdc_wdm 5-1:1.0: skipping garbage [ 778.496412][ T982] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 778.506268][ T982] cdc_wdm 5-1:1.0: Unknown control protocol [ 778.619311][ T982] usb 5-1: USB disconnect, device number 42 [ 781.670754][T14914] binder: BINDER_SET_CONTEXT_MGR already set [ 781.676905][T14914] binder: 14913:14914 ioctl 4018620d 80000ac0 returned -16 [ 781.719235][T14914] binder: 14913:14914 ioctl c0306201 800003c0 returned -14 [ 782.710472][T14914] syz.0.2471 (14914): drop_caches: 2 [ 782.852940][T14927] binder: BINDER_SET_CONTEXT_MGR already set [ 782.859090][T14927] binder: 14926:14927 ioctl 4018620d 80000ac0 returned -16 [ 782.867545][T14927] binder: 14926:14927 ioctl c0306201 800003c0 returned -14 [ 783.390590][T14927] syz.2.2474 (14927): drop_caches: 2 [ 786.237350][ T5921] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 786.397680][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 786.404684][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.427214][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 786.446463][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.464968][ T5921] usb 1-1: Product: syz [ 786.491493][ T5921] usb 1-1: Manufacturer: syz [ 786.496729][ T5921] usb 1-1: SerialNumber: syz [ 786.563273][ T5921] usb 1-1: config 0 descriptor?? [ 788.835155][ T980] usb 1-1: USB disconnect, device number 45 [ 792.523547][T15028] binder: BINDER_SET_CONTEXT_MGR already set [ 792.530135][T15028] binder: 15027:15028 ioctl 4018620d 80000ac0 returned -16 [ 792.550157][T15028] binder: 15027:15028 ioctl c0306201 800003c0 returned -14 [ 792.715469][T15028] syz.3.2496 (15028): drop_caches: 2 [ 793.934943][T15046] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 795.697048][T15057] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 798.707350][ T982] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 798.880696][ T982] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 798.889604][ T982] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 798.932204][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 798.989766][ T982] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 799.026836][ T982] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 799.046690][ T982] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 799.127199][ T982] usb 4-1: Product: syz [ 799.131424][ T982] usb 4-1: Manufacturer: syz [ 799.163478][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 799.176203][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 799.196153][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 799.285552][ T982] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 799.391724][ T982] usb 4-1: USB disconnect, device number 43 [ 799.397819][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 799.571358][ T24] usb 5-1: config 0 has no interfaces? [ 799.577115][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 799.590895][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.655039][ T24] usb 5-1: config 0 descriptor?? [ 799.770947][T15107] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 802.652488][ T5868] usb 5-1: USB disconnect, device number 43 [ 804.742565][T15151] binder: BINDER_SET_CONTEXT_MGR already set [ 804.753348][T15151] binder: 15149:15151 ioctl 4018620d 80000ac0 returned -16 [ 804.761909][T15151] binder: 15149:15151 ioctl c0306201 800003c0 returned -14 [ 804.785925][T15151] syz.2.2522 (15151): drop_caches: 2 [ 806.477492][T15169] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 806.802336][T15178] syz.4.2530 (15178): drop_caches: 2 [ 807.150237][T15182] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 808.522271][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.528721][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.026192][T15206] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 814.847261][ T6021] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 815.245031][ T6021] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 815.253774][ T6021] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 815.296061][ T6021] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 815.429861][ T6021] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 815.452280][ T6021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 815.468120][ T6021] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 815.477667][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 815.485674][ T6021] usb 1-1: Product: syz [ 815.490449][ T6021] usb 1-1: Manufacturer: syz [ 815.511958][ T6021] cdc_wdm 1-1:1.0: skipping garbage [ 815.517783][ T6021] cdc_wdm 1-1:1.0: skipping garbage [ 815.524348][ T6021] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 815.872424][ T6021] usb 1-1: USB disconnect, device number 46 [ 817.089217][ T6021] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 817.514895][ T6021] usb 2-1: config 0 has no interfaces? [ 817.531234][ T6021] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 817.567297][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.635020][ T6021] usb 2-1: config 0 descriptor?? [ 817.644537][T15296] binder: BINDER_SET_CONTEXT_MGR already set [ 817.706442][T15296] binder: 15294:15296 ioctl 4018620d 80000ac0 returned -16 [ 817.785578][T15296] syz.3.2557 (15296): drop_caches: 2 [ 819.590446][ T980] usb 2-1: USB disconnect, device number 37 [ 820.217296][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 820.625987][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 820.638427][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 820.707233][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 820.747016][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 820.827283][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 821.020486][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 821.237267][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 821.257570][ T24] usb 3-1: Product: syz [ 821.265612][ T24] usb 3-1: Manufacturer: syz [ 821.290925][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 821.350291][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 821.387857][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 821.412954][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 821.495415][ T24] usb 3-1: USB disconnect, device number 48 [ 825.810560][ T5868] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 826.632623][ T5868] usb 1-1: config 0 has no interfaces? [ 826.640179][ T5868] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 826.781247][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.165551][ T5868] usb 1-1: config 0 descriptor?? [ 828.197447][ T6021] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 828.776286][T15397] binder: 15396:15397 ioctl c0306201 800003c0 returned -14 [ 828.793047][ T6021] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 828.806364][ T6021] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 828.829783][T15397] syz.3.2578 (15397): drop_caches: 2 [ 828.973526][ T6021] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 828.987088][ T6021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 829.004431][ T6021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 829.020989][ T6021] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 829.034338][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 829.103293][ T6021] usb 5-1: Product: syz [ 829.121382][ T6021] usb 5-1: Manufacturer: syz [ 829.149918][ T6021] cdc_wdm 5-1:1.0: skipping garbage [ 829.167178][ T6021] cdc_wdm 5-1:1.0: skipping garbage [ 829.182738][ T6021] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 829.200075][ T6021] cdc_wdm 5-1:1.0: Unknown control protocol [ 829.253640][ T6021] usb 1-1: USB disconnect, device number 47 [ 829.351863][ T24] usb 5-1: USB disconnect, device number 44 [ 835.804833][T15465] binder: 15463:15465 ioctl c0306201 800003c0 returned -14 [ 835.892836][T15466] syz.0.2592 (15466): drop_caches: 2 [ 835.937299][ T5921] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 836.113008][ T5921] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 836.131881][ T5921] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 836.180053][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 836.207990][ T5921] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 836.245218][T15473] binder: BINDER_SET_CONTEXT_MGR already set [ 836.251453][T15473] binder: 15472:15473 ioctl 4018620d 80000ac0 returned -16 [ 836.260210][T15473] binder: 15472:15473 ioctl c0306201 800003c0 returned -14 [ 836.273812][T15473] syz.0.2596 (15473): drop_caches: 2 [ 836.331312][ T5921] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 836.362799][ T5921] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 836.376135][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 836.384501][ T5921] usb 5-1: Product: syz [ 836.389073][ T5921] usb 5-1: Manufacturer: syz [ 836.417213][ T5921] cdc_wdm 5-1:1.0: skipping garbage [ 836.436329][ T5921] cdc_wdm 5-1:1.0: skipping garbage [ 836.452855][ T5921] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 836.467847][ T5921] cdc_wdm 5-1:1.0: Unknown control protocol [ 836.641952][ T6021] usb 5-1: USB disconnect, device number 45 [ 842.496042][T15533] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 842.590848][ T6021] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 842.770057][ T6021] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 842.840322][ T5921] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 842.881023][ T6021] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 842.924989][ T6021] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 842.954984][ T6021] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 843.035153][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.085945][ T5921] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 843.355547][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.369803][ T5921] usb 5-1: Product: syz [ 843.374591][ T5921] usb 5-1: Manufacturer: syz [ 843.379981][ T5921] usb 5-1: SerialNumber: syz [ 843.402697][ T5921] usb 5-1: config 0 descriptor?? [ 843.427464][ T6021] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 843.520310][ T6021] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 843.588584][ T6021] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 843.690380][ T6021] usb 4-1: Product: syz [ 843.700320][ T6021] usb 4-1: Manufacturer: syz [ 843.721619][ T6021] cdc_wdm 4-1:1.0: skipping garbage [ 843.726998][ T6021] cdc_wdm 4-1:1.0: skipping garbage [ 843.737658][ T6021] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 843.744789][ T6021] cdc_wdm 4-1:1.0: Unknown control protocol [ 843.923144][ T980] usb 4-1: USB disconnect, device number 44 [ 845.296028][ T980] usb 5-1: USB disconnect, device number 46 [ 850.411074][T15609] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 851.374502][T15626] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 855.857376][ T5868] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 856.307443][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.337458][ T5868] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 856.367016][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.387394][ T5868] usb 1-1: Product: syz [ 856.409309][ T5868] usb 1-1: Manufacturer: syz [ 856.446611][ T5868] usb 1-1: SerialNumber: syz [ 856.502022][ T5868] usb 1-1: config 0 descriptor?? [ 857.442418][T15692] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 857.447305][ T982] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 857.557402][ T5921] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 857.886853][ T982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.914210][ T982] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 857.923877][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.932391][ T982] usb 2-1: Product: syz [ 857.938710][ T982] usb 2-1: Manufacturer: syz [ 857.958361][ T982] usb 2-1: SerialNumber: syz [ 857.981462][ T982] usb 2-1: config 0 descriptor?? [ 858.908805][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.943166][ T5921] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 858.953899][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.964148][ T5921] usb 4-1: Product: syz [ 858.968515][ T5921] usb 4-1: Manufacturer: syz [ 858.974103][ T5921] usb 4-1: SerialNumber: syz [ 858.987664][ T6021] usb 1-1: USB disconnect, device number 48 [ 859.079742][ T5921] usb 4-1: config 0 descriptor?? [ 859.576221][ T5868] usb 4-1: USB disconnect, device number 45 [ 861.345757][ T5868] usb 2-1: USB disconnect, device number 38 [ 863.177217][ T980] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 863.587853][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.037813][ T980] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 864.046887][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.124314][ T980] usb 2-1: Product: syz [ 864.421602][ T980] usb 2-1: Manufacturer: syz [ 864.432439][ T980] usb 2-1: SerialNumber: syz [ 864.454715][ T980] usb 2-1: config 0 descriptor?? [ 866.289995][ T982] usb 2-1: USB disconnect, device number 39 [ 867.010292][ T982] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 867.267232][ T982] usb 2-1: device descriptor read/64, error -71 [ 867.517734][ T982] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 867.667261][ T982] usb 2-1: device descriptor read/64, error -71 [ 867.777499][ T982] usb usb2-port1: attempt power cycle [ 868.217251][ T5868] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 868.225599][ T5921] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 868.227439][ T982] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 868.379019][ T982] usb 2-1: device descriptor read/8, error -71 [ 868.410889][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.454297][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.627245][ T982] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 868.767977][ T982] usb 2-1: device descriptor read/8, error -71 [ 868.812266][ T5921] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 868.841197][ T5868] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 868.855752][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.874180][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.889955][ T982] usb usb2-port1: unable to enumerate USB device [ 868.902581][ T5921] usb 4-1: Product: syz [ 868.999241][ T5868] usb 1-1: Product: syz [ 869.003440][ T5868] usb 1-1: Manufacturer: syz [ 869.008115][ T5921] usb 4-1: Manufacturer: syz [ 869.012806][ T5921] usb 4-1: SerialNumber: syz [ 869.017754][ T5868] usb 1-1: SerialNumber: syz [ 869.031292][ T5921] usb 4-1: config 0 descriptor?? [ 869.972145][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.012913][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.139356][ T5868] usb 1-1: config 0 descriptor?? [ 870.837684][ T50] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 870.849153][ T50] ref_tracker: netdev@ffff888024836610 has 1/1 users at [ 870.849153][ T50] batadv_hard_if_event+0xf0f/0x1730 [ 870.849153][ T50] notifier_call_chain+0x1b3/0x3e0 [ 870.849153][ T50] register_netdevice+0x1608/0x1ae0 [ 870.849153][ T50] veth_newlink+0x5cc/0xa50 [ 870.849153][ T50] rtnl_newlink_create+0x310/0xb00 [ 870.849153][ T50] rtnl_newlink+0x16d6/0x1c70 [ 870.849153][ T50] rtnetlink_rcv_msg+0x7cf/0xb70 [ 870.849153][ T50] netlink_rcv_skb+0x205/0x470 [ 870.849153][ T50] netlink_unicast+0x82c/0x9e0 [ 870.849153][ T50] netlink_sendmsg+0x805/0xb30 [ 870.849153][ T50] __sock_sendmsg+0x21c/0x270 [ 870.849153][ T50] __sys_sendto+0x3bd/0x520 [ 870.849153][ T50] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 870.849153][ T50] __do_fast_syscall_32+0xb6/0x2b0 [ 870.849153][ T50] do_fast_syscall_32+0x34/0x80 [ 870.849153][ T50] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 870.849153][ T50] [ 870.942359][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.181470][ T982] usb 4-1: USB disconnect, device number 46 [ 872.091381][ T5868] usb 1-1: USB disconnect, device number 49 [ 872.117343][ T10] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 872.313033][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.391476][ T10] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 872.406426][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.414634][ T10] usb 5-1: Product: syz [ 872.419111][ T10] usb 5-1: Manufacturer: syz [ 872.423949][ T10] usb 5-1: SerialNumber: syz [ 872.436938][ T10] usb 5-1: config 0 descriptor?? [ 873.994023][ T43] usb 5-1: USB disconnect, device number 47