last executing test programs: 12.509963055s ago: executing program 4 (id=1636): r0 = socket(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x693, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$UHID_INPUT(r5, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 11.456718674s ago: executing program 4 (id=1637): syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@my=0x0, 0x1}, @hyper, 0x0, 0x400, 0x40, 0x0, 0x7, 0x4, 0x80000003}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x0, 0x0, 0x2}) close_range(r4, r5, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000300)={0xc, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r7, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002032300"/19], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRESHEX=r7], &(0x7f00000006c0)=""/194, 0x68, 0xc2, 0x1, 0x0, 0x0, @void, @value}, 0x28) 11.296091104s ago: executing program 3 (id=1639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000000b0601020000000000000000030000000900020073797a30"], 0x74}}, 0x40800) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000180)={@private=0xa010100, @multicast2, r8}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000) 10.782373587s ago: executing program 4 (id=1641): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) 10.636151034s ago: executing program 2 (id=1642): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000300)="1860765114") 9.608214042s ago: executing program 2 (id=1643): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 9.476934288s ago: executing program 0 (id=1644): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 8.247651747s ago: executing program 2 (id=1646): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x1, 0x0, 0x3231564e, 0x4, 0x1, [{0x9, 0x80000001}, {0x10000, 0x10000}, {0xfffffff1, 0xe49}, {0x2, 0x100}, {0xd1a4, 0x6}, {0x18, 0x3}, {0x0, 0x8}, {0x2, 0x401}], 0x10, 0x10, 0x3b5d31d310848330, 0x0, 0x1}}) r3 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'hmac(sha1)\x00'}}) 8.228081791s ago: executing program 0 (id=1647): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f0000000100)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001580)=@nat={'nat\x00', 0x1b, 0x5, 0x4c0, 0x508, 0x160, 0xffffffff, 0x160, 0x288, 0x508, 0x508, 0xffffffff, 0x508, 0x508, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xb, @ipv6=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}, @port=0x4e20, @gre_key=0xc2}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xff], 'ip6_vti0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x3a, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}, @gre_key=0x8, @port=0x4e21}}}, {{@ipv6={@empty, @remote, [0xff000000, 0xff, 0xff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xff000000], 'pim6reg\x00', 'macvlan0\x00', {}, {0xff}, 0x87, 0x2, 0x7, 0x5c}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@loopback, @ipv6=@mcast1, @port=0x4e24, @gre_key=0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hl={{0x28}, {0x2, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.451573728s ago: executing program 1 (id=1649): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYBLOB, @ANYBLOB="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"]) 6.423243997s ago: executing program 2 (id=1650): socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000002000000040000000b00000000000000", @ANYRES32=r1], 0x48) 5.364637032s ago: executing program 3 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x6}]}, 0x38}}, 0xc000) 4.903754118s ago: executing program 0 (id=1652): syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@my=0x0, 0x1}, @hyper, 0x0, 0x400, 0x40, 0x0, 0x7, 0x4, 0x80000003}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x0, 0x0, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000300)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002032300"/19], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRESHEX=r6], &(0x7f00000006c0)=""/194, 0x68, 0xc2, 0x1, 0x0, 0x0, @void, @value}, 0x28) 4.83092592s ago: executing program 4 (id=1653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000010000006801000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 4.765877524s ago: executing program 4 (id=1654): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f0000000080)=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, [@FRA_DST={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x1, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x6, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x10, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e5, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x6, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 4.258042216s ago: executing program 0 (id=1655): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) 3.924008286s ago: executing program 0 (id=1656): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.659841148s ago: executing program 3 (id=1657): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 3.491715663s ago: executing program 2 (id=1658): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 3.173690911s ago: executing program 1 (id=1659): syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) open$dir(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = dup2(r4, r3) syz_open_procfs$userns(r0, &(0x7f0000000100)) readv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.550096807s ago: executing program 3 (id=1660): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x1, 0x0, 0x3231564e, 0x4, 0x1, [{0x9, 0x80000001}, {0x10000, 0x10000}, {0xfffffff1, 0xe49}, {0x2, 0x100}, {0xd1a4, 0x6}, {0x18, 0x3}, {0x0, 0x8}, {0x2, 0x401}], 0x10, 0x10, 0x3b5d31d310848330, 0x0, 0x1}}) r3 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'hmac(sha1)\x00'}}) 2.527742078s ago: executing program 2 (id=1661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000000b0601020000000000000000030000000900020073797a30"], 0x74}}, 0x40800) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000180)={@private=0xa010100, @multicast2, r8}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000) 1.096071901s ago: executing program 3 (id=1662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0x1, 0x400000004, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x80000, 0x0, [0x80, 0x0, 0x8, 0x4, 0xee4a, 0x5, 0x400, 0x936b]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.027766444s ago: executing program 1 (id=1663): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) 576.832455ms ago: executing program 4 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000007c0)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, r4) poll(0x0, 0x0, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008014}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) sendfile(0xffffffffffffffff, r10, 0x0, 0x1000) 528.75964ms ago: executing program 1 (id=1665): syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@my=0x0, 0x1}, @hyper, 0x0, 0x400, 0x40, 0x0, 0x7, 0x4, 0x80000003}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x0, 0x0, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000300)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002032300"/19], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRESHEX=r6], &(0x7f00000006c0)=""/194, 0x68, 0xc2, 0x1, 0x0, 0x0, @void, @value}, 0x28) 518.297415ms ago: executing program 3 (id=1666): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) 172.000568ms ago: executing program 1 (id=1667): bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 112.3042ms ago: executing program 0 (id=1668): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa4e1daaaa86dd606410a600080000fe8000"/35], 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x10000000000, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1f9a, 0x9], 0xffff1000, 0x138812}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=1669): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x4, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x4000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r7, 0xa, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 256.649853][ T6482] usb 5-1: Manufacturer: syz [ 256.654888][ T6482] usb 5-1: SerialNumber: syz [ 256.684272][ T6482] usb 5-1: config 0 descriptor?? [ 256.703317][ T5838] pwc: send_video_command error -71 [ 256.734648][ T5838] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 256.743402][ T5838] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 256.758582][ T5838] usb 2-1: USB disconnect, device number 35 [ 256.774011][ T10] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 256.786317][ T10] cx231xx 3-1:0.1: Failed to read PCB config [ 256.793793][ T10] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -32 [ 256.807714][ T10] usb 3-1: USB disconnect, device number 38 [ 256.935302][ T6482] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 257.265777][ T5838] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 257.433111][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.443890][ T5838] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 257.453539][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.480797][ T5838] usb 2-1: config 0 descriptor?? [ 257.536308][ T5838] pwc: Askey VC010 type 2 USB webcam detected. [ 257.938569][ T5838] pwc: recv_control_msg error -32 req 02 val 2b00 [ 257.992026][ T5838] pwc: recv_control_msg error -32 req 02 val 2700 [ 258.016763][ T5838] pwc: recv_control_msg error -32 req 02 val 2c00 [ 258.032417][ T5838] pwc: recv_control_msg error -32 req 04 val 1000 [ 258.044399][ T5838] pwc: recv_control_msg error -32 req 04 val 1300 [ 258.059489][ T5838] pwc: recv_control_msg error -32 req 04 val 1400 [ 258.079424][ T5838] pwc: recv_control_msg error -32 req 02 val 2000 [ 258.094674][ T5838] pwc: recv_control_msg error -32 req 02 val 2100 [ 258.103851][ T5838] pwc: recv_control_msg error -32 req 04 val 1500 [ 258.113909][ T5838] pwc: recv_control_msg error -32 req 02 val 2500 [ 258.137645][ T5838] pwc: recv_control_msg error -32 req 02 val 2400 [ 258.147053][ T6482] gspca_sunplus: reg_w_riv err -71 [ 258.176239][ T7814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'. [ 258.186099][ T6482] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 258.239109][ T6482] usb 5-1: USB disconnect, device number 32 [ 258.369638][ T5838] pwc: recv_control_msg error -71 req 02 val 2900 [ 258.392106][ T5838] pwc: recv_control_msg error -71 req 02 val 2800 [ 258.410516][ T5838] pwc: recv_control_msg error -71 req 04 val 1100 [ 258.432808][ T5838] pwc: recv_control_msg error -71 req 04 val 1200 [ 258.480845][ T5838] pwc: Registered as video103. [ 258.749916][ T5838] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 258.805219][ T5838] usb 2-1: USB disconnect, device number 36 [ 259.768706][ T6482] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 259.955766][ T6482] usb 5-1: Using ep0 maxpacket: 32 [ 259.969936][ T6482] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.995983][ T6482] usb 5-1: config 0 has no interface number 0 [ 260.008482][ T6482] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 260.055955][ T6482] usb 5-1: config 0 interface 1 has no altsetting 0 [ 260.078443][ T6482] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 260.126120][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.173176][ T6482] usb 5-1: Product: syz [ 260.218062][ T6482] usb 5-1: Manufacturer: syz [ 260.228178][ T6482] usb 5-1: SerialNumber: syz [ 260.269382][ T6482] usb 5-1: config 0 descriptor?? [ 261.263386][ T6482] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 262.722216][ T6482] cx231xx 5-1:0.1: Failed to read PCB config [ 262.731303][ T6482] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 262.946235][ T7855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.033350][ T6482] usb 5-1: USB disconnect, device number 33 [ 267.367975][ T5882] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 267.607971][ T5882] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 267.732568][ T5882] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 267.753349][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 267.765570][ T5882] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 267.766160][ T5886] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 267.776640][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 267.794352][ T5882] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 267.818915][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.983677][ T5882] usb 5-1: Product: syz [ 267.990050][ T5882] usb 5-1: Manufacturer: syz [ 267.994998][ T5882] usb 5-1: SerialNumber: syz [ 268.006952][ T5882] usb 5-1: config 0 descriptor?? [ 268.012873][ T7900] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 268.757584][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.768184][ T5886] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 268.777350][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.788449][ T5886] usb 2-1: config 0 descriptor?? [ 268.797861][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 269.011818][ T5886] pwc: send_video_command error -71 [ 269.014856][ T5882] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 269.027419][ T5886] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 269.035020][ T5886] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 269.046281][ T5882] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 269.065828][ T5882] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 269.073662][ T5882] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 269.134112][ T5882] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 269.145189][ T5882] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 269.155819][ T5886] usb 2-1: USB disconnect, device number 37 [ 269.157110][ T5882] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 269.181941][ T5882] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 269.361496][ T7928] atomic_op ffff888026866198 conn xmit_atomic 0000000000000000 [ 269.666045][ T5886] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 270.114190][ T5882] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 270.127286][ T5882] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 270.203977][ T5882] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 270.247597][ T5882] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 270.255374][ T5882] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 270.477635][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.518085][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.662'. [ 271.447318][ T7938] xt_bpf: check failed: parse error [ 271.486480][ T5886] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 271.495566][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.876934][ T5882] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 271.980755][ T5886] usb 2-1: config 0 descriptor?? [ 271.985853][ T5882] usb 5-1: USB disconnect, device number 34 [ 272.000797][ T5882] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 272.023907][ T5886] usb 2-1: can't set config #0, error -71 [ 272.067883][ T5886] usb 2-1: USB disconnect, device number 38 [ 272.241207][ T5882] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 272.698638][ T5835] Bluetooth: hci2: failed to read key size for handle 201 [ 272.706878][ T5835] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 272.977902][ T5882] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 273.033831][ T5882] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 273.391358][ T5882] keyspan 5-1:0.0: device disconnected [ 273.515906][ T5838] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 276.883499][ T7992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.281602][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 278.475693][ T5882] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 279.475816][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 279.986491][ T30] audit: type=1326 audit(1743484625.849:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d438d169 code=0x7ffc0000 [ 280.105019][ T30] audit: type=1326 audit(1743484625.869:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d438d169 code=0x7ffc0000 [ 280.257493][ T30] audit: type=1326 audit(1743484625.889:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f43d438d169 code=0x7ffc0000 [ 280.304323][ T30] audit: type=1326 audit(1743484625.889:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d438d169 code=0x7ffc0000 [ 280.327107][ T30] audit: type=1326 audit(1743484625.889:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d438d169 code=0x7ffc0000 [ 280.348434][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.355009][ T30] audit: type=1326 audit(1743484625.889:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f43d438d169 code=0x7ffc0000 [ 280.376803][ T30] audit: type=1326 audit(1743484625.889:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d438d169 code=0x7ffc0000 [ 280.398097][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.404223][ T30] audit: type=1326 audit(1743484625.889:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d438d169 code=0x7ffc0000 [ 280.545653][ T30] audit: type=1326 audit(1743484625.889:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d438d169 code=0x7ffc0000 [ 280.567055][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.582885][ T30] audit: type=1326 audit(1743484625.889:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d438d169 code=0x7ffc0000 [ 283.158118][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 283.352850][ T5882] usb 2-1: device descriptor read/all, error -71 [ 285.094765][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.102287][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.284072][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'. [ 286.036191][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.065405][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.342208][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 286.369363][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 286.518713][ T8049] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.532823][ T8076] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 286.543178][ T8049] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.555206][ T8049] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.564569][ T8049] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.702315][ T8075] warning: `syz.3.705' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 286.837791][ T5906] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 286.955761][ T5886] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 287.018525][ T5906] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 287.027283][ T5906] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 287.035404][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 287.045952][ T5906] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 287.061060][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 287.071021][ T5906] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 287.081042][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.089739][ T5906] usb 5-1: Product: syz [ 287.094008][ T5906] usb 5-1: Manufacturer: syz [ 287.099202][ T5906] usb 5-1: SerialNumber: syz [ 287.109931][ T5906] usb 5-1: config 0 descriptor?? [ 287.115732][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 287.121804][ T8091] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 287.135860][ T5886] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.144428][ T5886] usb 3-1: config 0 has no interface number 0 [ 287.154563][ T5886] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 287.171069][ T5886] usb 3-1: config 0 interface 1 has no altsetting 0 [ 287.181318][ T5886] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 287.196063][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.205709][ T5882] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 287.219301][ T5886] usb 3-1: Product: syz [ 287.230836][ T5886] usb 3-1: Manufacturer: syz [ 287.237248][ T5886] usb 3-1: SerialNumber: syz [ 287.254942][ T5886] usb 3-1: config 0 descriptor?? [ 287.339341][ T5906] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 287.355730][ T5882] usb 2-1: device descriptor read/64, error -71 [ 287.372145][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 287.422819][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 287.431023][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 287.447023][ T5906] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 287.481269][ T5886] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 287.494908][ T5886] cx231xx 3-1:0.1: Failed to read PCB config [ 287.504278][ T5886] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 287.519596][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 287.535451][ T5886] usb 3-1: USB disconnect, device number 39 [ 287.545213][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 287.578704][ T5906] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 287.596022][ T5882] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 287.598886][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 287.615823][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 287.640554][ T5906] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 287.663372][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 287.676813][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 287.697953][ T5906] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 287.730145][ T5906] usb 5-1: USB disconnect, device number 35 [ 287.735716][ T5882] usb 2-1: device descriptor read/64, error -71 [ 287.804251][ T5906] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 287.846081][ T5882] usb usb2-port1: attempt power cycle [ 287.912234][ T5906] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 287.974935][ T5906] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 287.990712][ T5906] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 288.002877][ T5906] keyspan 5-1:0.0: device disconnected [ 288.008984][ T5886] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 288.685683][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 288.703900][ T5886] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.717276][ T5886] usb 3-1: config 0 has no interface number 0 [ 288.723673][ T5886] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 288.735897][ T5882] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 288.744613][ T5886] usb 3-1: config 0 interface 1 has no altsetting 0 [ 288.756326][ T5886] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 288.774966][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.808839][ T5882] usb 2-1: device descriptor read/8, error -71 [ 288.828215][ T5886] usb 3-1: Product: syz [ 288.832397][ T5886] usb 3-1: Manufacturer: syz [ 288.846193][ T5886] usb 3-1: SerialNumber: syz [ 288.862929][ T5886] usb 3-1: config 0 descriptor?? [ 289.045812][ T5882] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 289.087556][ T5886] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 289.098936][ T5886] cx231xx 3-1:0.1: Failed to read PCB config [ 289.105009][ T5886] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -32 [ 289.108248][ T5882] usb 2-1: device descriptor read/8, error -71 [ 289.124218][ T5886] usb 3-1: USB disconnect, device number 40 [ 289.240667][ T5882] usb usb2-port1: unable to enumerate USB device [ 293.535664][ T5886] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 294.465694][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 294.477713][ T5886] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.512625][ T5886] usb 5-1: config 0 has no interface number 0 [ 294.525745][ T5886] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 294.565633][ T5886] usb 5-1: config 0 interface 1 has no altsetting 0 [ 294.588075][ T5886] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 294.615720][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.635662][ T5886] usb 5-1: Product: syz [ 294.644248][ T5886] usb 5-1: Manufacturer: syz [ 294.659549][ T5886] usb 5-1: SerialNumber: syz [ 294.719157][ T5886] usb 5-1: config 0 descriptor?? [ 295.452447][ T5886] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 295.466483][ T5886] cx231xx 5-1:0.1: Failed to read PCB config [ 295.487191][ T5886] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 295.534672][ T5886] usb 5-1: USB disconnect, device number 36 [ 296.745744][ T6482] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 296.907766][ T6482] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 296.917295][ T6482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.935102][ T6482] usb 3-1: config 0 descriptor?? [ 296.942393][ T6482] cp210x 3-1:0.0: cp210x converter detected [ 297.351946][ T6482] usb 3-1: cp210x converter now attached to ttyUSB0 [ 297.526485][ T5886] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 297.573044][ T6482] usb 3-1: USB disconnect, device number 41 [ 297.616823][ T6482] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 297.731341][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 297.756252][ T5886] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.769817][ T5886] usb 2-1: config 1 interface 0 has no altsetting 0 [ 297.782427][ T5886] usb 2-1: string descriptor 0 read error: -22 [ 297.790617][ T5886] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 297.813330][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.002642][ T6482] cp210x 3-1:0.0: device disconnected [ 298.035829][ T5884] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 298.199585][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 298.230883][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.269225][ T5884] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 298.302460][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.324359][ T5884] usb 5-1: config 0 descriptor?? [ 298.535874][ T6482] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 298.692415][ T6482] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.704430][ T6482] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.721813][ T6482] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 298.732681][ T6482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.744850][ T6482] usb 3-1: Product: syz [ 298.774217][ T5884] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 298.781539][ T6482] usb 3-1: Manufacturer: syz [ 298.791061][ T6482] usb 3-1: SerialNumber: syz [ 298.797430][ T5884] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 298.815239][ T5884] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 298.823880][ T6482] r8152-cfgselector 3-1: Unknown version 0x0000 [ 298.833801][ T5884] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 298.846822][ T6482] r8152-cfgselector 3-1: config 0 descriptor?? [ 298.961563][ C1] usb 5-1: input irq status -75 received [ 299.175941][ T5951] usb 5-1: USB disconnect, device number 37 [ 301.466149][ T5886] usbhid 2-1:1.0: can't add hid device: -71 [ 301.472485][ T5886] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 301.568837][ T5884] r8152-cfgselector 3-1: USB disconnect, device number 42 [ 301.735863][ T5886] usb 2-1: USB disconnect, device number 45 [ 303.195740][ T5882] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 303.340195][ T8275] xt_bpf: check failed: parse error [ 303.419132][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 303.429073][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.442049][ T5882] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 303.493324][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.556198][ T5882] usb 5-1: config 0 descriptor?? [ 304.022923][ T5882] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 304.068186][ T5882] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 304.086289][ T5882] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 304.100855][ T5882] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 304.135828][ T5886] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 304.217654][ C0] usb 5-1: input irq status -75 received [ 304.306546][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 304.319430][ T5886] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.328803][ T5838] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 304.332943][ T5886] usb 2-1: config 1 interface 0 has no altsetting 0 [ 304.399008][ T5886] usb 2-1: string descriptor 0 read error: -22 [ 304.407026][ T5886] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 304.419445][ T5882] usb 5-1: USB disconnect, device number 38 [ 304.427753][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.529506][ T5838] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 304.548587][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.558488][ T5838] usb 4-1: Product: syz [ 304.563158][ T5838] usb 4-1: Manufacturer: syz [ 304.574135][ T5838] usb 4-1: SerialNumber: syz [ 305.033006][ T5838] r8152-cfgselector 4-1: Unknown version 0x0000 [ 305.125039][ T5838] r8152-cfgselector 4-1: config 0 descriptor?? [ 306.658387][ T5886] usbhid 2-1:1.0: can't add hid device: -71 [ 306.678419][ T5886] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 306.696778][ T5886] usb 2-1: USB disconnect, device number 46 [ 307.069263][ T5886] r8152-cfgselector 4-1: USB disconnect, device number 36 [ 307.549769][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 308.406447][ T8314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.165788][ T6482] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 309.326160][ T6482] usb 4-1: Using ep0 maxpacket: 8 [ 309.356016][ T6482] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 309.387000][ T6482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.395187][ T6482] usb 4-1: Product: syz [ 309.439944][ T6482] usb 4-1: Manufacturer: syz [ 309.468235][ T6482] usb 4-1: SerialNumber: syz [ 309.596004][ T6482] usb 4-1: config 0 descriptor?? [ 309.769382][ T8331] fuse: Bad value for 'fd' [ 309.999802][ T6482] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 310.222251][ T6482] gspca_sunplus: reg_w_riv err -71 [ 310.236590][ T6482] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 310.263053][ T6482] usb 4-1: USB disconnect, device number 37 [ 310.782327][ T8254] Set syz1 is full, maxelem 65536 reached [ 311.586731][ T8349] xt_bpf: check failed: parse error [ 313.315799][ T5882] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 313.423845][ T8374] fuse: Bad value for 'fd' [ 313.516947][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 313.540052][ T5882] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 313.548432][ T5882] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.565996][ T5882] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.576124][ T5882] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.586145][ T5882] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.599370][ T5882] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.608519][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.733887][ T8385] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 316.240898][ T6482] usb 4-1: USB disconnect, device number 38 [ 317.030053][ T8414] fuse: Bad value for 'fd' [ 317.090950][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.106977][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.677068][ T5884] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 319.905742][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 319.934465][ T5884] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.972393][ T5884] usb 2-1: config 0 has no interface number 0 [ 320.767797][ T5884] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 320.825974][ T5884] usb 2-1: config 0 interface 1 has no altsetting 0 [ 320.836432][ T5884] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 320.845975][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.861029][ T5884] usb 2-1: Product: syz [ 320.995691][ T5884] usb 2-1: Manufacturer: syz [ 321.000849][ T5884] usb 2-1: SerialNumber: syz [ 321.007921][ T5884] usb 2-1: config 0 descriptor?? [ 321.668233][ T5884] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 321.681824][ T5884] cx231xx 2-1:0.1: Failed to read PCB config [ 321.798686][ T5884] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 321.813958][ T5884] usb 2-1: USB disconnect, device number 47 [ 325.092561][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 326.564773][ T5886] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 326.572579][ T5884] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 326.645786][ T6482] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 326.735767][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 326.741026][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 326.754880][ T5884] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 326.764292][ T5886] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.777292][ T5884] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 326.787646][ T5886] usb 3-1: config 0 has no interface number 0 [ 326.794287][ T5886] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 326.808794][ T6482] usb 5-1: Using ep0 maxpacket: 8 [ 326.814334][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.830198][ T5886] usb 3-1: config 0 interface 1 has no altsetting 0 [ 326.830823][ T6482] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 326.847460][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 326.866095][ T5886] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 326.874059][ T5882] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 326.876847][ T6482] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.901603][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 326.915020][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.923349][ T5886] usb 3-1: Product: syz [ 326.927767][ T5884] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 326.936987][ T5886] usb 3-1: Manufacturer: syz [ 326.941593][ T5886] usb 3-1: SerialNumber: syz [ 326.946276][ T6482] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.677524][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.687982][ T5886] usb 3-1: config 0 descriptor?? [ 327.693798][ T6482] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.705442][ T6482] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.725418][ T5884] usb 2-1: config 0 descriptor?? [ 327.730712][ T6482] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.755708][ T6482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.766899][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 327.782693][ T5882] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.799201][ T5882] usb 4-1: config 1 interface 0 has no altsetting 0 [ 327.809315][ T5882] usb 4-1: string descriptor 0 read error: -22 [ 327.816886][ T5882] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 327.826157][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.912120][ T5886] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 327.924994][ T5886] cx231xx 3-1:0.1: Failed to read PCB config [ 327.931164][ T5886] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 327.942024][ T5886] usb 3-1: USB disconnect, device number 43 [ 328.050808][ T5951] usb 2-1: USB disconnect, device number 49 [ 328.415721][ T5886] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 328.575865][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 328.588762][ T5886] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 328.607293][ T5886] usb 3-1: config 0 has no interface number 0 [ 328.624085][ T5886] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 328.641870][ T5886] usb 3-1: config 0 interface 1 has no altsetting 0 [ 328.661496][ T5886] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 328.689959][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.722674][ T5886] usb 3-1: Product: syz [ 328.735653][ T5886] usb 3-1: Manufacturer: syz [ 328.740294][ T5886] usb 3-1: SerialNumber: syz [ 328.763464][ T5886] usb 3-1: config 0 descriptor?? [ 328.965139][ T8549] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 329.249499][ T5882] usbhid 4-1:1.0: can't add hid device: -71 [ 329.272868][ T5886] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 329.918555][ T5882] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 329.930177][ T5882] usb 4-1: USB disconnect, device number 39 [ 329.966122][ T5886] cx231xx 3-1:0.1: Failed to read PCB config [ 329.987072][ T5886] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -32 [ 330.228613][ T8556] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 330.288651][ T5886] usb 3-1: USB disconnect, device number 44 [ 330.343627][ T5884] usb 5-1: USB disconnect, device number 39 [ 332.295759][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 338.037867][ T6482] libceph: connect (1)[c::]:6789 error -101 [ 338.050686][ T6482] libceph: mon0 (1)[c::]:6789 connect error [ 338.063609][ T8653] ceph: No mds server is up or the cluster is laggy [ 338.346189][ T6482] libceph: connect (1)[c::]:6789 error -101 [ 338.352351][ T6482] libceph: mon0 (1)[c::]:6789 connect error [ 338.625033][ T6482] libceph: connect (1)[c::]:6789 error -101 [ 339.015941][ T6482] libceph: mon0 (1)[c::]:6789 connect error [ 339.255356][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.890'. [ 339.295694][ T6482] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 339.476658][ T6482] usb 4-1: Using ep0 maxpacket: 16 [ 339.516777][ T6482] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.605064][ T8680] netlink: 'syz.0.891': attribute type 9 has an invalid length. [ 339.651044][ T6482] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.668809][ T6482] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 339.681898][ T6482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.691959][ T6482] usb 4-1: Product: syz [ 339.701345][ T6482] usb 4-1: Manufacturer: syz [ 339.719002][ T6482] usb 4-1: SerialNumber: syz [ 339.748706][ T6482] usb 4-1: config 0 descriptor?? [ 339.777873][ T6482] appledisplay 4-1:0.0: Could not find int-in endpoint [ 339.806753][ T6482] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 340.003113][ T6482] usb 4-1: USB disconnect, device number 40 [ 342.232710][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 343.414523][ T8707] Trying to write to read-only block-device nullb0 [ 344.835761][ T6482] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 345.016050][ T5884] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 345.055628][ T6482] usb 3-1: Using ep0 maxpacket: 16 [ 345.101474][ T6482] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.134579][ T6482] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.154860][ T6482] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 345.174177][ T6482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.204788][ T6482] usb 3-1: Product: syz [ 345.215334][ T6482] usb 3-1: Manufacturer: syz [ 345.232401][ T6482] usb 3-1: SerialNumber: syz [ 345.260048][ T6482] usb 3-1: config 0 descriptor?? [ 345.265658][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 345.283004][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.305096][ T6482] appledisplay 3-1:0.0: Could not find int-in endpoint [ 345.316769][ T5884] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 345.343389][ T6482] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 345.373824][ T5884] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 345.398206][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.422520][ T5884] usb 5-1: Product: syz [ 345.436877][ T5884] usb 5-1: Manufacturer: syz [ 345.455797][ T5884] usb 5-1: SerialNumber: syz [ 345.494093][ T6482] usb 3-1: USB disconnect, device number 45 [ 345.512545][ T5884] usb 5-1: config 0 descriptor?? [ 346.221068][ T8734] random: crng reseeded on system resumption [ 347.265317][ T8742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.684878][ T5882] usb 5-1: USB disconnect, device number 40 [ 347.977000][ T5884] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 348.302242][ T5884] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 348.311036][ T5884] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 348.321384][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 348.409977][ T5882] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 348.414223][ T5884] usb 2-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 348.473843][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.526256][ T5884] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 348.546342][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.578374][ T5884] usb 2-1: Product: syz [ 348.582836][ T5884] usb 2-1: Manufacturer: syz [ 348.611960][ T5884] usb 2-1: SerialNumber: syz [ 348.655134][ T5882] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.663745][ T5884] usb 2-1: config 0 descriptor?? [ 348.664422][ T5882] usb 4-1: config 0 has no interface number 0 [ 348.675700][ T5882] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 348.684967][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.124472][ T5884] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 349.153028][ T5882] usb 4-1: config 0 descriptor?? [ 349.158352][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 349.177216][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 349.188571][ T5882] usb 4-1: selecting invalid altsetting 1 [ 349.195418][ T5882] dvb_ttusb_budget: ttusb_init_controller: error [ 349.201283][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 349.214848][ T5882] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 349.219509][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 349.422778][ T5882] DVB: Unable to find symbol cx22700_attach() [ 349.431986][ T5884] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 349.447015][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 349.454866][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 349.468638][ T5884] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 349.479685][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 349.480151][ T5882] DVB: Unable to find symbol tda10046_attach() [ 349.487535][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 349.495447][ T5882] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 349.530134][ T5884] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 350.043851][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 350.157141][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 350.178500][ T5884] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 350.241461][ T5884] usb 2-1: USB disconnect, device number 50 [ 350.281423][ T5884] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 350.310388][ T5882] usb 4-1: USB disconnect, device number 41 [ 350.402386][ T5884] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 350.436021][ T5838] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 350.472725][ T5884] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 350.523930][ T5884] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 350.601389][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 350.613835][ T5838] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.613910][ T5884] keyspan 2-1:0.0: device disconnected [ 350.682814][ T5838] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 350.743559][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.906603][ T5838] usb 5-1: Product: syz [ 351.027142][ T5838] usb 5-1: Manufacturer: syz [ 351.072234][ T5838] usb 5-1: SerialNumber: syz [ 351.130479][ T5838] usb 5-1: config 0 descriptor?? [ 352.770064][ T5838] usb 5-1: USB disconnect, device number 41 [ 352.889201][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.940'. [ 354.185660][ T5884] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 354.407383][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 354.415311][ T5884] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 354.435646][ T5884] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 354.444466][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 354.506377][ T5884] usb 3-1: config 1 has no interface number 0 [ 354.563441][ T5884] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.625372][ T5884] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 354.698676][ T5884] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 354.747770][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.955679][ T5838] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 355.059354][ T5884] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 355.279076][ T5884] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 355.377367][ T5838] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 355.387634][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.402979][ T5838] usb 2-1: config 0 descriptor?? [ 355.422993][ T5838] cp210x 2-1:0.0: cp210x converter detected [ 355.722220][ T5884] usb 3-1: USB disconnect, device number 46 [ 355.742008][ T5884] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 355.743010][ T5838] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 355.757854][ T5838] cp210x 2-1:0.0: querying part number failed [ 355.777349][ T5838] usb 2-1: cp210x converter now attached to ttyUSB0 [ 356.883515][ T8864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.955'. [ 357.652459][ T6482] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 357.935210][ T5884] usb 2-1: USB disconnect, device number 51 [ 358.137025][ T6482] usb 3-1: Using ep0 maxpacket: 16 [ 358.143172][ T5884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 358.159195][ T5884] cp210x 2-1:0.0: device disconnected [ 358.172743][ T6482] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.203528][ T6482] usb 3-1: config 1 interface 0 has no altsetting 0 [ 358.263133][ T6482] usb 3-1: string descriptor 0 read error: -22 [ 358.364447][ T6482] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 358.375907][ T6482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.495733][ T5906] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 358.667774][ T5906] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 358.719216][ T5906] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 358.766032][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 358.788544][ T5906] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 359.587564][ T5906] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0 [ 359.598272][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 359.678661][ T5906] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 359.726026][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.761807][ T5906] usb 5-1: Product: syz [ 359.766406][ T5906] usb 5-1: Manufacturer: syz [ 359.771296][ T5906] usb 5-1: SerialNumber: syz [ 359.776180][ T6482] usbhid 3-1:1.0: can't add hid device: -71 [ 359.783033][ T6482] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 359.794302][ T5906] usb 5-1: config 0 descriptor?? [ 359.865832][ T6482] usb 3-1: USB disconnect, device number 47 [ 360.294311][ T5906] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 360.305283][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 360.319863][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 360.330316][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 360.343069][ T5906] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 360.491762][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 360.505754][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 360.524454][ T5906] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 360.543848][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 360.552813][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 360.626763][ T8897] overlayfs: failed to resolve './file1': -2 [ 360.633631][ T6482] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 361.256290][ T5906] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 361.268372][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 361.279725][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 361.297691][ T5906] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 361.317821][ T5906] usb 5-1: USB disconnect, device number 42 [ 361.334120][ T5906] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 361.350729][ T5906] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 361.378375][ T5906] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 361.393898][ T5906] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 361.403615][ T6482] usb 3-1: Using ep0 maxpacket: 32 [ 361.416306][ T6482] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 361.424823][ T6482] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 361.434299][ T5906] keyspan 5-1:0.0: device disconnected [ 361.451169][ T6482] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 361.463240][ T6482] usb 3-1: config 1 has no interface number 0 [ 361.469805][ T6482] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.497890][ T6482] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 361.515442][ T6482] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 361.527653][ T6482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.550842][ T6482] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 361.819492][ T6482] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 362.662776][ T6482] usb 3-1: USB disconnect, device number 48 [ 362.682310][ T6482] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 362.722350][ T8907] netlink: 40 bytes leftover after parsing attributes in process `syz.4.966'. [ 364.200509][ T2908] Bluetooth: hci5: Frame reassembly failed (-84) [ 364.239195][ T8916] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 364.565940][ T5886] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 364.685895][ T6482] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 364.735738][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 364.754227][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.810065][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.852009][ T5886] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 364.870967][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.925828][ T6482] usb 5-1: Using ep0 maxpacket: 16 [ 364.948275][ T5886] usb 3-1: Product: syz [ 364.964726][ T5886] usb 3-1: Manufacturer: syz [ 364.980993][ T6482] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.013411][ T5886] usb 3-1: SerialNumber: syz [ 365.150716][ T5886] usb 3-1: config 0 descriptor?? [ 365.165338][ T6482] usb 5-1: config 1 interface 0 has no altsetting 0 [ 365.203605][ T5886] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 365.370742][ T6482] usb 5-1: string descriptor 0 read error: -22 [ 365.405670][ T5886] imon 3-1:0.0: unable to initialize intf0, err -19 [ 365.463529][ T6482] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 365.485901][ T5886] imon:imon_probe: failed to initialize context! [ 365.510534][ T5886] imon 3-1:0.0: unable to register, err -19 [ 365.516732][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.101383][ T8941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.978'. [ 366.181544][ T8943] Zero length message leads to an empty skb [ 366.205898][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 366.215513][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 367.381254][ T5886] usb 3-1: USB disconnect, device number 49 [ 367.448432][ T6482] usbhid 5-1:1.0: can't add hid device: -71 [ 367.481637][ T6482] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 367.522415][ T6482] usb 5-1: USB disconnect, device number 43 [ 367.729693][ T8968] netlink: 'syz.4.986': attribute type 9 has an invalid length. [ 367.929097][ T5886] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 368.215675][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 368.223435][ T5886] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 368.232085][ T5886] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 368.241085][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 368.250220][ T5886] usb 3-1: config 1 has no interface number 0 [ 368.266105][ T5886] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.356410][ T5886] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 368.369804][ T5886] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 368.379113][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.868902][ T5886] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 369.136481][ T5886] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 369.544792][ T5838] usb 3-1: USB disconnect, device number 50 [ 369.552015][ T5838] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 371.746571][ T9001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.998'. [ 374.097519][ T5838] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 374.315646][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 374.331873][ T5838] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.354862][ T5838] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 374.393497][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.550964][ T5838] usb 5-1: Product: syz [ 374.865765][ T5838] usb 5-1: Manufacturer: syz [ 374.883971][ T5838] usb 5-1: SerialNumber: syz [ 375.290930][ T5838] usb 5-1: config 0 descriptor?? [ 375.864140][ T5838] usb 5-1: USB disconnect, device number 44 [ 377.602152][ T9059] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 378.685941][ T9070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.704500][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.711158][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.294619][ T9083] fuse: Bad value for 'group_id' [ 380.302730][ T9083] fuse: Bad value for 'group_id' [ 380.304084][ T6482] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 380.499888][ T6482] usb 5-1: Using ep0 maxpacket: 8 [ 380.527611][ T6482] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.702248][ T6482] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 380.711583][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.719939][ T6482] usb 5-1: Product: syz [ 380.724133][ T6482] usb 5-1: Manufacturer: syz [ 380.728830][ T6482] usb 5-1: SerialNumber: syz [ 380.738427][ T6482] usb 5-1: config 0 descriptor?? [ 380.843675][ T5886] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 381.165921][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 381.175338][ T5886] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 381.188356][ T5886] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 381.197516][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.208869][ T5886] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 381.218132][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 381.231454][ T5886] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 381.240812][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.262062][ T5886] usb 2-1: config 0 descriptor?? [ 382.223878][ T5886] usb 2-1: USB disconnect, device number 52 [ 382.575078][ T9115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.272904][ T5882] usb 5-1: USB disconnect, device number 45 [ 383.575648][ T5838] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 383.935641][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 384.107180][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 384.168722][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 384.204781][ T5838] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 384.218915][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.241621][ T5838] usb 3-1: config 0 descriptor?? [ 385.885405][ T9140] bridge: RTM_NEWNEIGH with invalid ether address [ 386.241742][ T9147] syz.3.1041 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 386.446552][ T9149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.977418][ T5838] usbhid 3-1:0.0: can't add hid device: -71 [ 387.005787][ T5838] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 387.086016][ T5838] usb 3-1: USB disconnect, device number 51 [ 387.136008][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 388.762598][ T9171] cgroup: Unknown subsys name 'cpuset' [ 392.166467][ T9195] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 393.517850][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 393.582324][ T9203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1062'. [ 395.850334][ T9232] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 395.883747][ T9232] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 396.369303][ T9236] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 397.265953][ T6482] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 397.476863][ T6482] usb 4-1: Using ep0 maxpacket: 16 [ 397.629797][ T6482] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 397.645982][ T6482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.654115][ T6482] usb 4-1: Product: syz [ 397.675474][ T6482] usb 4-1: Manufacturer: syz [ 398.408165][ T6482] usb 4-1: SerialNumber: syz [ 398.421469][ T6482] usb 4-1: config 0 descriptor?? [ 398.442047][ T6482] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 398.456433][ T6482] usb 4-1: Detected FT232H [ 398.663771][ T6482] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 399.158542][ T6482] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 399.363578][ T5951] usb 4-1: USB disconnect, device number 42 [ 399.536733][ T5951] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 399.602897][ T5951] ftdi_sio 4-1:0.0: device disconnected [ 401.511451][ T9282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 402.895861][ T5951] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 403.121009][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 403.128597][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 403.141600][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 403.152666][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.367707][ T5951] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 403.377286][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.386870][ T5951] usb 4-1: Product: syz [ 403.391604][ T5951] usb 4-1: Manufacturer: syz [ 403.396742][ T5951] usb 4-1: SerialNumber: syz [ 403.545344][ T5951] usb 4-1: config 0 descriptor?? [ 403.575640][ T5951] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 403.761095][ T5951] imon 4-1:0.0: unable to initialize intf0, err -19 [ 403.770742][ T5951] imon:imon_probe: failed to initialize context! [ 403.778488][ T5951] imon 4-1:0.0: unable to register, err -19 [ 404.145322][ T9313] pim6reg1: entered promiscuous mode [ 404.231872][ T9313] pim6reg1: entered allmulticast mode [ 405.836927][ T5884] usb 4-1: USB disconnect, device number 43 [ 408.356082][ T9349] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 409.871916][ T5906] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 409.898780][ T5838] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 409.996083][ T5884] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 410.019111][ T9371] process 'syz.3.1116' launched './file1' with NULL argv: empty string added [ 410.375857][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 410.383308][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 410.566728][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 410.574344][ T5906] usb 5-1: can't read configurations, error -61 [ 410.692917][ T5838] usb 2-1: Using ep0 maxpacket: 8 [ 410.801100][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 410.803086][ T5838] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.832359][ T5838] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.848793][ T5906] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 411.354959][ T5838] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.355171][ T5884] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.393278][ T5884] usb 3-1: config 1 interface 0 has no altsetting 0 [ 411.397405][ T5838] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 411.409443][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.410109][ T5884] usb 3-1: string descriptor 0 read error: -22 [ 411.417572][ T5838] usb 2-1: Product: syz [ 411.417593][ T5838] usb 2-1: Manufacturer: syz [ 411.417610][ T5838] usb 2-1: SerialNumber: syz [ 411.429118][ T5838] usb 2-1: config 0 descriptor?? [ 411.442458][ T5884] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 411.442488][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.459260][ T5838] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 411.472586][ T5838] imon 2-1:0.0: unable to initialize intf0, err -19 [ 411.479492][ T5838] imon:imon_probe: failed to initialize context! [ 411.487423][ T5838] imon 2-1:0.0: unable to register, err -19 [ 411.648475][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 411.656503][ T5906] usb 5-1: can't read configurations, error -61 [ 411.663500][ T5906] usb usb5-port1: attempt power cycle [ 412.012370][ T5884] usbhid 3-1:1.0: can't add hid device: -71 [ 412.021020][ T5884] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 412.034620][ T5884] usb 3-1: USB disconnect, device number 52 [ 412.239452][ T9387] wg2: entered promiscuous mode [ 412.244327][ T9387] wg2: entered allmulticast mode [ 412.365808][ T5906] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 412.399700][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 412.416815][ T5906] usb 5-1: can't read configurations, error -61 [ 412.578202][ T5906] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 412.815636][ T5906] usb 5-1: device not accepting address 49, error -71 [ 412.833410][ T5906] usb usb5-port1: unable to enumerate USB device [ 413.496065][ T5838] usb 2-1: USB disconnect, device number 53 [ 413.788023][ T9409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1127'. [ 413.867263][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 414.270896][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 420.356300][ T9460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.535069][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'. [ 420.880460][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 421.533788][ T9483] pim6reg1: entered promiscuous mode [ 421.542487][ T9483] pim6reg1: entered allmulticast mode [ 421.765931][ T5838] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 421.948015][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 421.955828][ T5838] usb 4-1: can't read configurations, error -61 [ 422.105688][ T5838] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 422.291219][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 422.329383][ T5838] usb 4-1: can't read configurations, error -61 [ 422.353323][ T5838] usb usb4-port1: attempt power cycle [ 422.895800][ T5838] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 422.934745][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 422.945829][ T5838] usb 4-1: can't read configurations, error -61 [ 423.105638][ T5838] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 423.138278][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 423.146110][ T5838] usb 4-1: can't read configurations, error -61 [ 423.160740][ T5838] usb usb4-port1: unable to enumerate USB device [ 424.315775][ T5886] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 424.488599][ T5886] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 424.523089][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.556619][ T5886] usb 5-1: config 0 descriptor?? [ 424.573637][ T5886] cp210x 5-1:0.0: cp210x converter detected [ 424.647601][ T9520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.792405][ T5886] usb 5-1: cp210x converter now attached to ttyUSB0 [ 424.909891][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'. [ 425.646689][ T5886] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 425.736177][ T9541] xt_bpf: check failed: parse error [ 425.855799][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 425.873405][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.314143][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 426.340058][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.383312][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 426.439580][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.478043][ T5886] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 426.497172][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.515613][ T5886] usb 3-1: Product: syz [ 426.519987][ T5886] usb 3-1: Manufacturer: syz [ 426.524613][ T5886] usb 3-1: SerialNumber: syz [ 426.550431][ T5886] usb 3-1: config 0 descriptor?? [ 426.560500][ T5886] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 426.573115][ T5886] imon 3-1:0.0: unable to initialize intf0, err -90 [ 426.582619][ T5886] imon:imon_probe: failed to initialize context! [ 426.605658][ T5886] imon 3-1:0.0: unable to register, err -19 [ 426.999936][ T9555] fuse: Unknown parameter 'grou00000000000000000000' [ 427.090440][ T5951] usb 5-1: USB disconnect, device number 50 [ 427.099185][ T5951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 427.122748][ T5951] cp210x 5-1:0.0: device disconnected [ 428.319218][ T9568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.040512][ T5886] usb 3-1: USB disconnect, device number 53 [ 429.397139][ T9578] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 430.629408][ T5838] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 430.830851][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 430.853762][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.897117][ T5838] usb 2-1: config 0 has no interfaces? [ 430.930055][ T5838] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 430.976819][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.002151][ T5838] usb 2-1: config 0 descriptor?? [ 431.115984][ T9604] xt_bpf: check failed: parse error [ 431.365589][ T9606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.923362][ T5886] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 433.321049][ T9621] syz.2.1189 (9621): drop_caches: 2 [ 433.420923][ T5882] usb 2-1: USB disconnect, device number 54 [ 433.727081][ T5886] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 433.748260][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.765646][ T5886] usb 4-1: Product: syz [ 433.770107][ T5886] usb 4-1: Manufacturer: syz [ 434.497223][ T5886] usb 4-1: SerialNumber: syz [ 434.520005][ T5886] r8152-cfgselector 4-1: Unknown version 0x0000 [ 434.545635][ T5886] r8152-cfgselector 4-1: config 0 descriptor?? [ 436.255948][ T5886] r8152-cfgselector 4-1: Unknown version 0x0000 [ 436.276571][ T5886] r8152-cfgselector 4-1: bad CDC descriptors [ 436.330736][ T5886] r8152-cfgselector 4-1: USB disconnect, device number 48 [ 439.506963][ T6482] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 439.669940][ T9670] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.713108][ T9670] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.747381][ T6482] usb 4-1: Using ep0 maxpacket: 8 [ 439.770845][ T6482] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 439.782593][ T9670] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.795622][ T9670] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.808922][ T6482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.837757][ T6482] usb 4-1: Product: syz [ 439.854245][ T6482] usb 4-1: Manufacturer: syz [ 439.861074][ T6482] usb 4-1: SerialNumber: syz [ 439.872652][ T6482] usb 4-1: config 0 descriptor?? [ 439.970840][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.978737][ T5884] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 439.986602][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.171536][ T6482] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 440.211163][ T5884] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 440.225780][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.233882][ T5884] usb 5-1: Product: syz [ 440.239364][ T5884] usb 5-1: Manufacturer: syz [ 440.244083][ T5884] usb 5-1: SerialNumber: syz [ 440.258660][ T5884] r8152-cfgselector 5-1: Unknown version 0x0000 [ 440.269981][ T5884] r8152-cfgselector 5-1: config 0 descriptor?? [ 440.395011][ T6482] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 440.428860][ T6482] usb 4-1: USB disconnect, device number 49 [ 440.483285][ T5884] r8152-cfgselector 5-1: Unknown version 0x0000 [ 441.115770][ T5884] r8152-cfgselector 5-1: bad CDC descriptors [ 441.572791][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 443.135956][ T5882] r8152-cfgselector 5-1: USB disconnect, device number 51 [ 443.215616][ T5951] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 443.375736][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 443.394483][ T5951] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 443.419982][ T5951] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 443.450000][ T5951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 443.512054][ T5951] usb 3-1: config 1 has no interface number 0 [ 443.549283][ T5951] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.606895][ T5951] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 443.674035][ T9711] syz.1.1215 (9711): drop_caches: 2 [ 443.682609][ T5951] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 443.709233][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.798791][ T5951] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 444.015446][ T5951] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 444.175207][ T9732] xt_bpf: check failed: parse error [ 444.305639][ T5884] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 444.470368][ T5951] usb 3-1: USB disconnect, device number 54 [ 444.494202][ T5951] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 444.509261][ T5884] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 444.538306][ T5884] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 444.560818][ T5884] usb 2-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 444.672959][ T9738] xt_TPROXY: Can be used only with -p tcp or -p udp [ 444.882321][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 444.922745][ T5884] usb 2-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.976934][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 445.038459][ T5884] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 445.099994][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.116658][ T5884] usb 2-1: Product: syz [ 445.120864][ T5884] usb 2-1: Manufacturer: syz [ 445.125487][ T5884] usb 2-1: SerialNumber: syz [ 445.146518][ T5884] usb 2-1: config 0 descriptor?? [ 445.360691][ T5884] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 445.386105][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 445.393853][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 445.420993][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 445.435809][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 445.455968][ T5884] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 445.465951][ T6482] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 445.476825][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 445.484587][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 445.517200][ T5884] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 445.537728][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 445.545450][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 445.579436][ T5884] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 445.620470][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 445.640239][ T5884] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 445.654055][ T6482] usb 5-1: Using ep0 maxpacket: 16 [ 445.670543][ T6482] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.683964][ T5884] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 445.700774][ T6482] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.715734][ T5884] usb 2-1: USB disconnect, device number 55 [ 445.732120][ T6482] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 445.742212][ T5884] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 445.761376][ T6482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.783150][ T5884] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 445.802676][ T6482] usb 5-1: config 0 descriptor?? [ 445.824672][ T5884] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 445.854543][ T5884] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 445.876713][ T5884] keyspan 2-1:0.0: device disconnected [ 446.523918][ T6482] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 446.547505][ T9757] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 446.740810][ T6482] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 446.749985][ T6482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.758339][ T6482] usb 3-1: Product: syz [ 446.762685][ T6482] usb 3-1: Manufacturer: syz [ 446.771684][ T6482] usb 3-1: SerialNumber: syz [ 446.925724][ T6482] r8152-cfgselector 3-1: Unknown version 0x0000 [ 446.949630][ T6482] r8152-cfgselector 3-1: config 0 descriptor?? [ 447.293934][ T6482] r8152-cfgselector 3-1: Unknown version 0x0000 [ 447.310771][ T6482] r8152-cfgselector 3-1: bad CDC descriptors [ 447.683889][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 448.089387][ T9781] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 448.605992][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 448.762420][ T10] usb 5-1: USB disconnect, device number 52 [ 449.135745][ T5951] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 449.194567][ T5882] r8152-cfgselector 3-1: USB disconnect, device number 55 [ 449.299512][ T5951] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 449.322218][ T5951] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 449.343101][ T5951] usb 4-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 449.357721][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 449.368377][ T5951] usb 4-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.383929][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 449.395256][ T5951] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 449.410506][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.418744][ T5951] usb 4-1: Product: syz [ 449.423008][ T5951] usb 4-1: Manufacturer: syz [ 449.438976][ T5951] usb 4-1: SerialNumber: syz [ 449.456591][ T5951] usb 4-1: config 0 descriptor?? [ 449.615658][ T5882] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 449.632237][ T9791] hsr_slave_0: left promiscuous mode [ 449.651449][ T9791] hsr_slave_1: left promiscuous mode [ 449.679864][ T5951] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 449.705454][ T5951] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 449.728432][ T5951] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 449.747059][ T5951] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 449.755217][ T5882] usb 3-1: device descriptor read/64, error -71 [ 449.765425][ T5951] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 449.786508][ T5951] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 449.821622][ T5951] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 449.832699][ T5951] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 449.843479][ T5951] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 449.860184][ T5951] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 449.871139][ T5951] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 449.883302][ T5951] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 449.895291][ T5951] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 449.907366][ T5951] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 449.918850][ T5951] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 449.939090][ T5951] usb 4-1: USB disconnect, device number 50 [ 449.950820][ T5951] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 449.970206][ T5951] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 449.989456][ T5951] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 449.999618][ T5882] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 450.015434][ T5951] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 450.032689][ T5951] keyspan 4-1:0.0: device disconnected [ 450.183732][ T5882] usb 3-1: device descriptor read/64, error -71 [ 450.627730][ T5882] usb usb3-port1: attempt power cycle [ 452.305594][ T5882] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 452.387097][ T5882] usb 3-1: device descriptor read/8, error -71 [ 452.395904][ T9820] cgroup: Unknown subsys name 'cpuset' [ 452.713230][ T9828] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 454.315626][ T5882] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 454.467708][ T5882] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 454.492324][ T5882] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 454.528661][ T5882] usb 4-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 454.568185][ T5882] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 454.601325][ T5882] usb 4-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.742274][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0 [ 454.793917][ T5882] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 455.026256][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.034322][ T5882] usb 4-1: Product: syz [ 455.038678][ T5882] usb 4-1: Manufacturer: syz [ 455.043306][ T5882] usb 4-1: SerialNumber: syz [ 455.055436][ T5882] usb 4-1: config 0 descriptor?? [ 455.059593][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 456.037920][ T5882] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 456.051247][ T5882] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 456.059534][ T5882] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 456.348622][ T6482] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 456.448563][ T55] Bluetooth: hci1: failed to read key size for handle 201 [ 456.457470][ T55] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 456.645768][ T6482] usb 5-1: Using ep0 maxpacket: 32 [ 456.762959][ T6482] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 456.816364][ T5882] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 456.824126][ T5882] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 456.853563][ T5882] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 456.857849][ T6482] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 456.890153][ T5882] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 456.897999][ T6482] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 456.928556][ T5882] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 456.929818][ T6482] usb 5-1: config 1 has no interface number 0 [ 456.950276][ T5882] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 456.957331][ T6482] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.990252][ T5882] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 456.993857][ T6482] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 457.036437][ T5882] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 457.040836][ T6482] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 457.051596][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 457.072326][ T6482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.080065][ T5882] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 457.142363][ T6482] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 457.151118][ T5882] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 457.165941][ T5884] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 457.176231][ T5882] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 457.221165][ T5882] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 457.259239][ T5882] usb 4-1: USB disconnect, device number 51 [ 457.306902][ T5882] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 457.316396][ T5884] usb 2-1: device descriptor read/64, error -71 [ 457.334006][ T5882] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 457.353714][ T5882] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 457.378559][ T5882] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 457.394181][ T5882] keyspan 4-1:0.0: device disconnected [ 457.538660][ T6482] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 457.658361][ T9874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.805687][ T5884] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 457.916390][ T5882] usb 5-1: USB disconnect, device number 53 [ 457.938998][ T5882] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 457.993239][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 458.011520][ T5884] usb 2-1: device descriptor read/64, error -71 [ 458.199910][ T5884] usb usb2-port1: attempt power cycle [ 458.735874][ T5884] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 458.779703][ T5884] usb 2-1: device descriptor read/8, error -71 [ 459.056035][ T5884] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 459.087289][ T5884] usb 2-1: device descriptor read/8, error -71 [ 459.216540][ T5884] usb usb2-port1: unable to enumerate USB device [ 459.248645][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 460.971161][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 461.151466][ T9923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.046777][ T9929] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 462.768817][ T9939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.018579][ T9964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.636935][ T9967] syz.1.1292 (9967): drop_caches: 2 [ 465.013870][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1294'. [ 466.271378][ T9983] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 470.027186][T10007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.654706][T10006] xt_bpf: check failed: parse error [ 470.865642][ T5884] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 471.015620][ T5884] usb 3-1: device descriptor read/64, error -71 [ 471.285623][ T5884] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 471.415791][ T5884] usb 3-1: device descriptor read/64, error -71 [ 471.526044][ T5884] usb usb3-port1: attempt power cycle [ 472.060018][ T5884] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 472.806287][ T5884] usb 3-1: device descriptor read/8, error -71 [ 473.222679][ T5884] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 473.256392][ T5884] usb 3-1: device descriptor read/8, error -71 [ 473.287279][T10047] cgroup: Unknown subsys name 'cpuset' [ 473.437634][ T5884] usb usb3-port1: unable to enumerate USB device [ 474.870000][T10060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.130834][T10071] fuse: Bad value for 'user_id' [ 475.152228][T10071] fuse: Bad value for 'user_id' [ 475.464840][ T5882] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 475.647586][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 475.675760][ T5882] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 475.715568][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.730645][ T5882] usb 5-1: config 0 descriptor?? [ 475.766457][T10069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 476.221750][ T5882] a4tech 0003:09DA:022B.0007: unknown main item tag 0x5 [ 476.233862][T10079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.327592][ T5882] a4tech 0003:09DA:022B.0007: hidraw0: USB HID vd0.17 Device [HID 09da:022b] on usb-dummy_hcd.4-1/input0 [ 476.485097][ T5882] usb 5-1: USB disconnect, device number 54 [ 477.335740][ T5882] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 477.515736][ T5882] usb 2-1: device descriptor read/64, error -71 [ 478.365689][ T5882] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 478.505713][ T5882] usb 2-1: device descriptor read/64, error -71 [ 478.899004][ T5882] usb usb2-port1: attempt power cycle [ 479.262811][ T5882] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 479.326455][ T5882] usb 2-1: device descriptor read/8, error -71 [ 480.195792][ T5882] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 480.375796][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 480.469021][ T5882] usb 2-1: device not accepting address 63, error -71 [ 480.477276][ T5882] usb usb2-port1: unable to enumerate USB device [ 480.625820][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 480.634316][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.673756][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 7 [ 480.685610][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 9272, setting to 1024 [ 480.755622][ T5884] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 481.483721][ T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 481.537826][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.594168][ T10] usb 5-1: Product: syz [ 481.628411][ T10] usb 5-1: Manufacturer: syz [ 481.662562][ T10] usb 5-1: SerialNumber: syz [ 481.738609][ T10] usb 5-1: config 0 descriptor?? [ 481.884802][ T10] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 481.995156][ T12] usb 5-1: Failed to submit usb control message: -71 [ 481.999238][ T6482] usb 5-1: USB disconnect, device number 55 [ 482.008195][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 482.010424][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 482.017343][ T5884] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 482.021446][ T12] usb 5-1: unable to get target info from device [ 482.038062][ T12] usb 5-1: could not get target info (-71) [ 482.043984][ T12] usb 5-1: could not probe fw (-71) [ 482.082578][ T5884] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 482.104791][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.116069][ T5884] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 482.127756][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 482.141503][ T5884] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 482.151807][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.179175][ T5884] usb 3-1: config 0 descriptor?? [ 483.658952][ T10] usb 3-1: USB disconnect, device number 65 [ 484.209676][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'. [ 485.617429][T10173] xt_bpf: check failed: parse error [ 487.637041][T10190] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 488.695893][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 488.885821][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 488.901295][ T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 488.921558][ T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 488.941922][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 488.956964][ T10] usb 3-1: config 1 has no interface number 0 [ 489.125474][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 489.154616][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 489.188209][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 489.207590][T10204] cgroup: Unknown subsys name 'cpuset' [ 489.232635][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.285032][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 489.481297][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 489.903995][ T10] usb 3-1: USB disconnect, device number 66 [ 489.941458][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 490.785620][ T5884] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 491.175833][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 491.195422][ T5884] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 491.203920][ T5884] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 493.115860][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.192004][ T5884] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 493.192835][T10233] syz.2.1366 (10233): drop_caches: 2 [ 493.274294][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 493.331590][ T5884] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 493.381403][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.434520][ T5884] usb 5-1: config 0 descriptor?? [ 493.540051][ T5884] usb 5-1: USB disconnect, device number 56 [ 494.538235][ T5951] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 495.095602][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 495.298609][ T5951] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.869410][ T5951] usb 2-1: config 1 interface 0 has no altsetting 0 [ 495.924431][ T5951] usb 2-1: string descriptor 0 read error: -22 [ 495.930919][ T5951] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 495.947891][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.576722][ T5951] usbhid 2-1:1.0: can't add hid device: -71 [ 498.613382][ T5951] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 498.671906][ T5951] usb 2-1: USB disconnect, device number 64 [ 500.151778][T10287] syz.1.1382 (10287): drop_caches: 2 [ 500.846445][T10292] xt_bpf: check failed: parse error [ 501.417029][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.423475][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.642055][T10305] Set syz1 is full, maxelem 65536 reached [ 503.350464][ T5884] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 503.513372][ T5884] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 503.522821][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.535680][T10324] cgroup: Unknown subsys name 'cpuset' [ 503.735440][ T5884] usb 2-1: Product: syz [ 503.790550][ T5884] usb 2-1: Manufacturer: syz [ 503.900013][ T5884] usb 2-1: SerialNumber: syz [ 504.194642][ T5884] r8152-cfgselector 2-1: Unknown version 0x0000 [ 504.211622][ T5884] r8152-cfgselector 2-1: config 0 descriptor?? [ 506.358347][T10348] netlink: 'syz.4.1397': attribute type 9 has an invalid length. [ 506.468298][T10350] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 506.588137][ T5951] r8152-cfgselector 2-1: USB disconnect, device number 65 [ 506.676756][T10351] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 510.649566][T10390] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 511.928297][T10410] cgroup: Unknown subsys name 'cpuset' [ 511.955765][ T5951] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 512.127380][ T5951] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 512.138778][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.154391][ T5951] usb 2-1: config 0 descriptor?? [ 512.165161][ T5951] cp210x 2-1:0.0: cp210x converter detected [ 512.576002][ T5951] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 512.607731][ T5951] usb 2-1: cp210x converter now attached to ttyUSB0 [ 512.819637][ T5951] usb 2-1: USB disconnect, device number 66 [ 512.999062][ T5951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 513.109144][ T5951] cp210x 2-1:0.0: device disconnected [ 513.154685][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 513.185285][T10423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 513.596716][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 515.282144][T10438] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 519.057819][ T5884] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 519.101992][T10477] netlink: 'syz.3.1439': attribute type 9 has an invalid length. [ 519.365560][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 519.377075][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.395779][ T5884] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 520.489176][ T5884] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 520.528853][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.606687][ T5884] usb 5-1: Product: syz [ 520.610901][ T5884] usb 5-1: Manufacturer: syz [ 520.663794][ T5884] usb 5-1: SerialNumber: syz [ 520.768548][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 520.782774][T10488] xt_TPROXY: Can be used only with -p tcp or -p udp [ 520.956863][ T5884] usb 5-1: config 0 descriptor?? [ 521.413101][ T5884] usb 5-1: USB disconnect, device number 57 [ 521.818026][ T6482] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 522.635582][ T5884] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 522.643390][ T6482] usb 2-1: Using ep0 maxpacket: 32 [ 522.694387][ T6482] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 522.732757][ T6482] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 522.770196][ T6482] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 522.859441][ T6482] usb 2-1: config 1 has no interface number 0 [ 522.873625][ T6482] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.087448][ T5884] usb 5-1: device not accepting address 58, error -71 [ 523.104078][ T6482] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 523.125248][ T6482] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 523.801639][ T6482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.970356][ T6482] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 524.342264][ T6482] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 524.655814][ T6482] usb 2-1: USB disconnect, device number 67 [ 524.672112][ T6482] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 524.697294][T10524] netlink: 'syz.4.1452': attribute type 9 has an invalid length. [ 525.175561][ T6482] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 525.463010][ T6482] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.485590][ T6482] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 525.494684][ T6482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.535537][ T6482] usb 4-1: config 0 descriptor?? [ 525.547586][ T6482] pwc: Askey VC010 type 2 USB webcam detected. [ 525.754250][T10532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.782211][T10532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.020289][ T6482] pwc: recv_control_msg error -32 req 02 val 2b00 [ 526.041220][ T6482] pwc: recv_control_msg error -32 req 02 val 2700 [ 526.058989][ T6482] pwc: recv_control_msg error -32 req 02 val 2c00 [ 526.237520][ T6482] pwc: recv_control_msg error -32 req 04 val 1000 [ 526.254797][ T6482] pwc: recv_control_msg error -32 req 04 val 1300 [ 526.279315][ T6482] pwc: recv_control_msg error -32 req 04 val 1400 [ 526.298851][ T6482] pwc: recv_control_msg error -32 req 02 val 2000 [ 526.322161][ T6482] pwc: recv_control_msg error -71 req 02 val 2100 [ 526.444731][ T6482] pwc: recv_control_msg error -71 req 04 val 1500 [ 526.541044][ T6482] pwc: recv_control_msg error -71 req 02 val 2500 [ 526.643228][ T6482] pwc: recv_control_msg error -71 req 02 val 2400 [ 526.747882][ T6482] pwc: recv_control_msg error -71 req 02 val 2600 [ 526.989178][ T6482] pwc: recv_control_msg error -71 req 02 val 2900 [ 527.016627][ T6482] pwc: recv_control_msg error -71 req 02 val 2800 [ 527.045807][ T6482] pwc: recv_control_msg error -71 req 04 val 1100 [ 527.052753][ T6482] pwc: recv_control_msg error -71 req 04 val 1200 [ 527.096883][ T6482] pwc: Registered as video103. [ 527.103503][ T6482] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 527.177356][ T6482] usb 4-1: USB disconnect, device number 52 [ 527.365616][ T5882] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 527.545716][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 527.559980][ T5882] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 527.570961][ T5882] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 527.583221][ T5882] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.633367][ T5882] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 527.664154][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.688764][ T5882] usbtmc 2-1:16.0: bulk endpoints not found [ 528.061982][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 528.076299][T10568] xt_TPROXY: Can be used only with -p tcp or -p udp [ 530.210973][ T6482] usb 2-1: USB disconnect, device number 68 [ 530.914482][ T6482] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 531.092207][ T6482] usb 2-1: device descriptor read/64, error -71 [ 531.355723][ T6482] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 531.505796][ T6482] usb 2-1: device descriptor read/64, error -71 [ 531.535877][ T5886] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 531.641641][ T6482] usb usb2-port1: attempt power cycle [ 531.721810][ T5886] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 531.742678][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.761349][ T5886] usb 5-1: Product: syz [ 531.789154][ T5886] usb 5-1: Manufacturer: syz [ 531.793786][ T5886] usb 5-1: SerialNumber: syz [ 531.814303][ T5886] r8152-cfgselector 5-1: Unknown version 0x0000 [ 531.824589][ T5886] r8152-cfgselector 5-1: config 0 descriptor?? [ 532.080201][T10616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.091141][ T6482] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 532.156384][ T6482] usb 2-1: device descriptor read/8, error -71 [ 532.405588][ T6482] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 532.436711][ T6482] usb 2-1: device descriptor read/8, error -71 [ 532.559041][ T6482] usb usb2-port1: unable to enumerate USB device [ 534.121911][ T5882] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 534.423259][ T5951] r8152-cfgselector 5-1: USB disconnect, device number 60 [ 534.755567][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 534.762435][ T5882] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 534.774733][ T5882] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 534.801684][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 534.824539][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 534.864095][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 534.895784][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 534.904874][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.953494][ T5882] usbtmc 3-1:16.0: bulk endpoints not found [ 535.577270][T10649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.239807][ T6482] usb 3-1: USB disconnect, device number 67 [ 536.393114][T10671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.468341][T10672] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 537.516031][ T5882] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 537.763441][ T5882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 537.803008][ T5882] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.865594][ T5882] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 537.884947][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.900470][ T5882] usb 3-1: Product: syz [ 537.904760][ T5882] usb 3-1: Manufacturer: syz [ 537.919606][ T5882] usb 3-1: SerialNumber: syz [ 538.875358][ T55] Bluetooth: hci1: failed to read key size for handle 201 [ 538.904096][ T55] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 539.853286][T10715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.862430][ T5882] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 540.058060][ T10] usb 3-1: USB disconnect, device number 68 [ 540.158431][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 540.168397][ T5882] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 540.177659][ T5882] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 540.189876][ T5882] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.200489][ T5882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.210908][ T5882] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 540.225046][ T5882] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 540.234597][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.258893][ T5882] usbtmc 2-1:16.0: bulk endpoints not found [ 542.695595][ T5882] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 543.075663][ T5886] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 543.289075][ T5886] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 543.321018][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.416378][ T6482] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 543.455796][ T5886] usb 3-1: config 0 descriptor?? [ 543.479724][ T5886] cp210x 3-1:0.0: cp210x converter detected [ 543.485613][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 543.497381][ T5882] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.508480][ T5882] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.509214][ T5884] usb 2-1: USB disconnect, device number 73 [ 543.518305][ T5882] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.518338][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 543.518377][ T5882] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 543.518400][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.528912][ T5882] usb 5-1: config 0 descriptor?? [ 543.617905][ T6482] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 543.628088][ T6482] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.651916][ T6482] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 543.674157][ T6482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.691615][ T6482] usb 4-1: Product: syz [ 543.696249][ T6482] usb 4-1: Manufacturer: syz [ 543.700966][ T6482] usb 4-1: SerialNumber: syz [ 543.890985][ T5886] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 543.911124][ T5886] usb 3-1: cp210x converter now attached to ttyUSB0 [ 544.025347][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.033789][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.044612][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.057174][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.064988][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.074550][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.084938][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.094413][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.104644][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.124655][ T10] usb 3-1: USB disconnect, device number 69 [ 544.137448][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.173778][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 544.181839][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.191533][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.200403][ T10] cp210x 3-1:0.0: device disconnected [ 544.206888][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.214509][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.989423][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 544.997180][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 545.004764][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 545.014683][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 545.022654][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 545.030697][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 545.047955][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 545.055983][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 545.063390][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 545.071804][ T5882] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 545.080038][ T5882] hid-generic 0003:045E:05DA.0008: unbalanced collection at end of report description [ 545.090588][ T5882] hid-generic 0003:045E:05DA.0008: probe with driver hid-generic failed with error -22 [ 545.107585][ T5882] usb 5-1: USB disconnect, device number 61 [ 545.240870][ T55] Bluetooth: hci2: failed to read key size for handle 201 [ 545.249413][ T55] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 546.443258][ T10] usb 4-1: USB disconnect, device number 53 [ 549.515772][ T5886] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 549.605607][ T5884] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 549.733044][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 549.822272][ T5886] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 549.838492][ T5884] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 549.889205][ T5886] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 549.907201][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.931328][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.978095][ T5884] usb 4-1: config 0 descriptor?? [ 549.984292][ T5886] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 550.027254][ T5884] cp210x 4-1:0.0: cp210x converter detected [ 550.033685][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 550.054353][ T5886] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 550.065964][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.084971][ T5886] usb 2-1: config 0 descriptor?? [ 550.432342][ T5884] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 550.440659][ T5884] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 550.490715][ T5884] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 550.746020][ T5884] usb 4-1: cp210x converter now attached to ttyUSB0 [ 550.992579][ T5884] usb 4-1: USB disconnect, device number 54 [ 551.191063][ T5884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 551.201285][ T5884] cp210x 4-1:0.0: device disconnected [ 551.240613][ T5882] usb 2-1: USB disconnect, device number 74 [ 552.541410][T10873] fuse: Unknown parameter 'user_i00000000000000000000' [ 554.574890][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 554.596909][T10895] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 554.606557][T10895] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 555.560288][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'. [ 555.572978][T10899] xt_TPROXY: Can be used only with -p tcp or -p udp [ 556.650291][T10915] fuse: Unknown parameter 'user_i00000000000000000000' [ 556.950767][T10918] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 559.308154][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 559.321965][T10941] xt_TPROXY: Can be used only with -p tcp or -p udp [ 560.325567][ T5882] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 560.607600][ T5882] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 560.623122][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.820944][ T5882] usb 4-1: config 0 descriptor?? [ 560.860131][ T5882] cp210x 4-1:0.0: cp210x converter detected [ 561.189196][T10956] fuse: Unknown parameter 'user_i00000000000000000000' [ 561.255262][ T5882] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 561.363759][ T5882] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 562.171839][ T5882] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 562.182233][ T5882] usb 4-1: cp210x converter now attached to ttyUSB0 [ 562.308831][ T5882] usb 4-1: USB disconnect, device number 55 [ 562.320430][ T5882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 562.328902][ T5882] cp210x 4-1:0.0: device disconnected [ 562.850270][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.856960][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.884089][T10972] tipc: Enabled bearer , priority 0 [ 562.911744][T10966] tipc: Resetting bearer [ 566.197151][ T5882] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 566.357633][ T5882] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 566.367245][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.384224][ T5882] usb 5-1: config 0 descriptor?? [ 566.406092][ T5882] cp210x 5-1:0.0: cp210x converter detected [ 566.816883][ T5882] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 566.825380][ T5882] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 566.842778][ T5882] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 566.854790][ T5882] usb 5-1: cp210x converter now attached to ttyUSB0 [ 566.867396][ T5882] usb 5-1: USB disconnect, device number 62 [ 566.887768][ T5882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 566.908904][ T5882] cp210x 5-1:0.0: device disconnected [ 567.618088][T10966] tipc: Disabling bearer [ 567.760061][T11016] cgroup: Unknown subsys name 'cpuset' [ 568.825571][ T5884] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 569.975615][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 570.120487][ T5884] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 570.157470][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.227426][ T5884] usb 3-1: config 0 has no interface number 0 [ 570.261018][ T5884] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 570.324677][ T5884] usb 3-1: config 0 interface 1 has no altsetting 0 [ 570.493598][ T5884] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 570.505989][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.527017][ T5884] usb 3-1: Product: syz [ 570.537345][ T5884] usb 3-1: Manufacturer: syz [ 570.572148][ T5884] usb 3-1: SerialNumber: syz [ 570.593157][ T5884] usb 3-1: config 0 descriptor?? [ 571.564398][ T5884] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 571.578678][ T5884] cx231xx 3-1:0.1: Not found matching IAD interface [ 571.596049][ T5884] usb 3-1: USB disconnect, device number 70 [ 572.454104][ T5886] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 572.727783][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 572.757980][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.775685][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.795908][ T5886] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 572.804977][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.819891][ T5886] usb 2-1: config 0 descriptor?? [ 572.923388][ T6482] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 573.427796][ T5886] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 573.435169][ T5886] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 573.443866][ T5886] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 573.451602][ T6482] usb 4-1: Using ep0 maxpacket: 8 [ 573.456724][ T5886] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 573.464051][ T5886] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0 [ 573.473781][ T6482] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 574.227667][ T6482] usb 4-1: config 0 has no interface number 0 [ 574.283910][ T6482] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 574.293338][ T5886] gt683r_led 0003:1770:FF00.0009: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 574.312266][ T6482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.541479][ T6482] usb 4-1: Product: syz [ 574.545848][ T6482] usb 4-1: Manufacturer: syz [ 574.550471][ T6482] usb 4-1: SerialNumber: syz [ 574.555992][ T5886] usb 2-1: USB disconnect, device number 75 [ 574.570219][ T5906] gt683r_led 0003:1770:FF00.0009: failed to send set report request: -19 [ 574.581067][ T6482] usb 4-1: config 0 descriptor?? [ 575.001468][ T6482] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 575.157194][ T6482] usb 4-1: No valid video chain found. [ 575.666575][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1605'. [ 575.700178][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'. [ 575.786674][T11085] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1605'. [ 575.842463][ T10] usb 4-1: USB disconnect, device number 56 [ 576.535424][ T5886] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 576.915566][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 576.923219][ T5886] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.663946][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.675756][ T5886] usb 2-1: config 0 has no interface number 0 [ 577.681959][ T5886] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 577.692741][ T5886] usb 2-1: config 0 interface 1 has no altsetting 0 [ 577.704847][ T5886] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 577.724189][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.740763][ T5886] usb 2-1: Product: syz [ 577.755521][ T5886] usb 2-1: Manufacturer: syz [ 577.760154][ T5886] usb 2-1: SerialNumber: syz [ 577.781166][ T5886] usb 2-1: config 0 descriptor?? [ 578.067652][ T5886] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 578.094548][ T5886] cx231xx 2-1:0.1: Not found matching IAD interface [ 578.130699][ T5886] usb 2-1: USB disconnect, device number 76 [ 578.287223][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 578.299637][T11113] xt_TPROXY: Can be used only with -p tcp or -p udp [ 578.765563][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 578.925534][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 578.936181][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 578.951091][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.984510][ T10] usb 2-1: config 0 has no interface number 0 [ 579.022739][ T10] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 579.054068][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 579.088373][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 579.101545][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.112518][ T10] usb 2-1: Product: syz [ 579.122515][ T10] usb 2-1: Manufacturer: syz [ 579.146113][ T10] usb 2-1: SerialNumber: syz [ 579.160388][ T10] usb 2-1: config 0 descriptor?? [ 579.387135][ T10] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 579.401929][ T10] cx231xx 2-1:0.1: Not found matching IAD interface [ 580.102651][T11126] netlink: 'syz.4.1616': attribute type 9 has an invalid length. [ 580.487480][ T10] usb 2-1: USB disconnect, device number 77 [ 582.563631][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 582.573773][T11150] xt_TPROXY: Can be used only with -p tcp or -p udp [ 582.981902][T11165] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 585.905569][ T6482] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 586.125834][ T6482] usb 4-1: Using ep0 maxpacket: 32 [ 586.146052][ T6482] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 586.169248][ T6482] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 586.192733][ T6482] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 586.219616][ T6482] usb 4-1: config 1 has no interface number 0 [ 586.235890][ T6482] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.265498][ T6482] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 586.295284][ T6482] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 586.318505][ T6482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.358865][ T6482] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 586.613250][ T6482] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 587.296626][ T6482] usb 4-1: USB disconnect, device number 57 [ 587.416208][ T6482] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 587.624042][T11193] netlink: 'syz.0.1635': attribute type 9 has an invalid length. [ 588.748349][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'. [ 588.763011][T11200] xt_TPROXY: Can be used only with -p tcp or -p udp [ 594.476920][ T6482] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 594.666397][ T6482] usb 2-1: Using ep0 maxpacket: 32 [ 594.692061][ T6482] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 594.705562][ T6482] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 594.736340][ T6482] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 594.745423][ T6482] usb 2-1: config 1 has no interface number 0 [ 594.790339][ T6482] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.831838][ T6482] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 595.160627][ T6482] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 595.202394][T11249] netlink: 'syz.3.1651': attribute type 9 has an invalid length. [ 595.210231][ T6482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.271850][ T6482] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 595.383892][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 595.398987][T11256] xt_TPROXY: Can be used only with -p tcp or -p udp [ 595.808648][ T6482] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 596.101644][ T6482] usb 2-1: USB disconnect, device number 78 [ 596.276579][ T6482] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 599.841737][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'. [ 599.851595][T11298] xt_TPROXY: Can be used only with -p tcp or -p udp [ 600.148844][T11305] ------------[ cut here ]------------ [ 600.154715][T11305] WARNING: CPU: 0 PID: 11305 at ./include/linux/memcontrol.h:361 folio_memcg+0x1a6/0x310 [ 600.164822][T11305] Modules linked in: [ 600.169044][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.0.1668 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 600.180901][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 600.191157][T11305] RIP: 0010:folio_memcg+0x1a6/0x310 [ 600.196457][T11305] Code: 42 80 3c 28 00 74 08 4c 89 ff e8 15 c1 1c 00 4d 8b 3f 4c 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 db 52 b6 ff 90 <0f> 0b 90 eb c6 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ff fe ff ff [ 600.216262][T11305] RSP: 0018:ffffc90003a57178 EFLAGS: 00010283 [ 600.222383][T11305] RAX: ffffffff820d1995 RBX: 0000000000000000 RCX: 0000000000080000 [ 600.230457][T11305] RDX: ffffc900051b9000 RSI: 0000000000002112 RDI: 0000000000002113 [ 600.238598][T11305] RBP: 0000000000000000 R08: ffffffff820d1958 R09: 1ffffd40002b30e0 [ 600.246943][T11305] R10: dffffc0000000000 R11: fffff940002b30e1 R12: ffffea0001598730 [ 600.254941][T11305] R13: dffffc0000000000 R14: ffffea0001598700 R15: ffff888036676200 [ 600.263019][T11305] FS: 00007f824d3a36c0(0000) GS:ffff888124fe5000(0000) knlGS:0000000000000000 [ 600.272033][T11305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.278802][T11305] CR2: 0000000000000000 CR3: 000000005ef7e000 CR4: 00000000003526f0 [ 600.286892][T11305] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 600.294892][T11305] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 600.302953][T11305] Call Trace: [ 600.306337][T11305] [ 600.309307][T11305] workingset_activation+0x123/0x6b0 [ 600.314681][T11305] ? folio_mark_accessed+0x711/0xa40 [ 600.320049][T11305] folio_mark_accessed+0x73e/0xa40 [ 600.325196][T11305] ? folio_mark_accessed+0x2d2/0xa40 [ 600.330590][T11305] kvm_release_page_clean+0x9b/0xe0 [ 600.335892][T11305] kvm_tdp_page_fault+0x304/0x3a0 [ 600.340957][T11305] kvm_mmu_do_page_fault+0x579/0xb50 [ 600.346372][T11305] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 600.352238][T11305] ? vmx_vcpu_run+0x16cf/0x2780 [ 600.357625][T11305] kvm_mmu_page_fault+0x2e5/0xc70 [ 600.362720][T11305] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 600.368384][T11305] ? rcu_is_watching+0x15/0xb0 [ 600.373190][T11305] ? handle_ept_violation+0x35b/0x690 [ 600.378672][T11305] ? __pfx_handle_ept_violation+0x10/0x10 [ 600.384442][T11305] vmx_handle_exit+0x1076/0x1b20 [ 600.389500][T11305] ? vcpu_run+0x4cbf/0x7ad0 [ 600.394048][T11305] vcpu_run+0x5ecb/0x7ad0 [ 600.398510][T11305] ? vcpu_run+0x4cbf/0x7ad0 [ 600.403126][T11305] ? irqentry_exit+0x63/0x90 [ 600.407855][T11305] ? __pfx_vcpu_run+0x10/0x10 [ 600.412579][T11305] ? vmx_set_rflags+0x25e/0x5a0 [ 600.417724][T11305] ? __set_regs+0x7ba/0x8d0 [ 600.422283][T11305] kvm_arch_vcpu_ioctl_run+0x1047/0x1910 [ 600.428089][T11305] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1910 [ 600.433859][T11305] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 600.439969][T11305] ? __pfx___mutex_trylock_common+0x10/0x10 [ 600.445955][T11305] ? rcu_is_watching+0x15/0xb0 [ 600.450759][T11305] ? look_up_lock_class+0x7b/0x170 [ 600.456010][T11305] ? register_lock_class+0x54/0x330 [ 600.461269][T11305] ? __lock_acquire+0xad5/0xd80 [ 600.466220][T11305] ? do_raw_write_lock+0x14a/0x4f0 [ 600.471401][T11305] kvm_vcpu_ioctl+0xa24/0x1030 [ 600.476307][T11305] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 600.481544][T11305] ? __lock_acquire+0xad5/0xd80 [ 600.486531][T11305] ? __asan_memset+0x23/0x50 [ 600.491154][T11305] ? smack_file_ioctl+0x361/0x3b0 [ 600.496305][T11305] ? __pfx_smack_file_ioctl+0x10/0x10 [ 600.501751][T11305] ? __fget_files+0x2a/0x420 [ 600.506437][T11305] ? __fget_files+0x2a/0x420 [ 600.511065][T11305] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 600.516380][T11305] __se_sys_ioctl+0xf1/0x160 [ 600.521008][T11305] do_syscall_64+0xf3/0x230 [ 600.525691][T11305] ? clear_bhb_loop+0x45/0xa0 [ 600.530405][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.536398][T11305] RIP: 0033:0x7f824c58d169 [ 600.540844][T11305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.560551][T11305] RSP: 002b:00007f824d3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.569051][T11305] RAX: ffffffffffffffda RBX: 00007f824c7a5fa0 RCX: 00007f824c58d169 [ 600.577152][T11305] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 600.585199][T11305] RBP: 00007f824c60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 600.593304][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.601376][T11305] R13: 0000000000000000 R14: 00007f824c7a5fa0 R15: 00007ffeb076e9c8 [ 600.609454][T11305] [ 600.612508][T11305] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 600.619803][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.0.1668 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 600.631525][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 600.641765][T11305] Call Trace: [ 600.645065][T11305] [ 600.648007][T11305] dump_stack_lvl+0x241/0x360 [ 600.652699][T11305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.657905][T11305] ? __pfx__printk+0x10/0x10 [ 600.662506][T11305] ? vscnprintf+0x5d/0x90 [ 600.666841][T11305] panic+0x349/0x880 [ 600.670756][T11305] ? __warn+0x174/0x4d0 [ 600.674920][T11305] ? __pfx_panic+0x10/0x10 [ 600.679363][T11305] __warn+0x344/0x4d0 [ 600.683352][T11305] ? folio_memcg+0x1a6/0x310 [ 600.687953][T11305] report_bug+0x2b3/0x500 [ 600.692311][T11305] ? folio_memcg+0x1a6/0x310 [ 600.696906][T11305] ? folio_memcg+0x1a6/0x310 [ 600.701503][T11305] ? folio_memcg+0x1a8/0x310 [ 600.706102][T11305] handle_bug+0x89/0x170 [ 600.710363][T11305] exc_invalid_op+0x1a/0x50 [ 600.714875][T11305] asm_exc_invalid_op+0x1a/0x20 [ 600.719728][T11305] RIP: 0010:folio_memcg+0x1a6/0x310 [ 600.724935][T11305] Code: 42 80 3c 28 00 74 08 4c 89 ff e8 15 c1 1c 00 4d 8b 3f 4c 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 db 52 b6 ff 90 <0f> 0b 90 eb c6 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ff fe ff ff [ 600.744567][T11305] RSP: 0018:ffffc90003a57178 EFLAGS: 00010283 [ 600.750656][T11305] RAX: ffffffff820d1995 RBX: 0000000000000000 RCX: 0000000000080000 [ 600.758629][T11305] RDX: ffffc900051b9000 RSI: 0000000000002112 RDI: 0000000000002113 [ 600.766603][T11305] RBP: 0000000000000000 R08: ffffffff820d1958 R09: 1ffffd40002b30e0 [ 600.774581][T11305] R10: dffffc0000000000 R11: fffff940002b30e1 R12: ffffea0001598730 [ 600.782565][T11305] R13: dffffc0000000000 R14: ffffea0001598700 R15: ffff888036676200 [ 600.790547][T11305] ? folio_memcg+0x168/0x310 [ 600.795151][T11305] ? folio_memcg+0x1a5/0x310 [ 600.799756][T11305] ? folio_memcg+0x1a5/0x310 [ 600.804359][T11305] workingset_activation+0x123/0x6b0 [ 600.809680][T11305] ? folio_mark_accessed+0x711/0xa40 [ 600.814990][T11305] folio_mark_accessed+0x73e/0xa40 [ 600.820119][T11305] ? folio_mark_accessed+0x2d2/0xa40 [ 600.825419][T11305] kvm_release_page_clean+0x9b/0xe0 [ 600.830639][T11305] kvm_tdp_page_fault+0x304/0x3a0 [ 600.835678][T11305] kvm_mmu_do_page_fault+0x579/0xb50 [ 600.841028][T11305] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 600.846864][T11305] ? vmx_vcpu_run+0x16cf/0x2780 [ 600.851722][T11305] kvm_mmu_page_fault+0x2e5/0xc70 [ 600.856764][T11305] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 600.862331][T11305] ? rcu_is_watching+0x15/0xb0 [ 600.867107][T11305] ? handle_ept_violation+0x35b/0x690 [ 600.872494][T11305] ? __pfx_handle_ept_violation+0x10/0x10 [ 600.878233][T11305] vmx_handle_exit+0x1076/0x1b20 [ 600.883179][T11305] ? vcpu_run+0x4cbf/0x7ad0 [ 600.887706][T11305] vcpu_run+0x5ecb/0x7ad0 [ 600.892059][T11305] ? vcpu_run+0x4cbf/0x7ad0 [ 600.896613][T11305] ? irqentry_exit+0x63/0x90 [ 600.901227][T11305] ? __pfx_vcpu_run+0x10/0x10 [ 600.905906][T11305] ? vmx_set_rflags+0x25e/0x5a0 [ 600.910767][T11305] ? __set_regs+0x7ba/0x8d0 [ 600.915277][T11305] kvm_arch_vcpu_ioctl_run+0x1047/0x1910 [ 600.920932][T11305] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1910 [ 600.926661][T11305] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 600.932741][T11305] ? __pfx___mutex_trylock_common+0x10/0x10 [ 600.938642][T11305] ? rcu_is_watching+0x15/0xb0 [ 600.943422][T11305] ? look_up_lock_class+0x7b/0x170 [ 600.948548][T11305] ? register_lock_class+0x54/0x330 [ 600.953765][T11305] ? __lock_acquire+0xad5/0xd80 [ 600.958618][T11305] ? do_raw_write_lock+0x14a/0x4f0 [ 600.963750][T11305] kvm_vcpu_ioctl+0xa24/0x1030 [ 600.968532][T11305] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 600.973741][T11305] ? __lock_acquire+0xad5/0xd80 [ 600.978597][T11305] ? __asan_memset+0x23/0x50 [ 600.983180][T11305] ? smack_file_ioctl+0x361/0x3b0 [ 600.988209][T11305] ? __pfx_smack_file_ioctl+0x10/0x10 [ 600.993592][T11305] ? __fget_files+0x2a/0x420 [ 600.998189][T11305] ? __fget_files+0x2a/0x420 [ 601.002787][T11305] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 601.007990][T11305] __se_sys_ioctl+0xf1/0x160 [ 601.012585][T11305] do_syscall_64+0xf3/0x230 [ 601.017086][T11305] ? clear_bhb_loop+0x45/0xa0 [ 601.021768][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.027664][T11305] RIP: 0033:0x7f824c58d169 [ 601.032088][T11305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.051698][T11305] RSP: 002b:00007f824d3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.060118][T11305] RAX: ffffffffffffffda RBX: 00007f824c7a5fa0 RCX: 00007f824c58d169 [ 601.068095][T11305] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 601.076069][T11305] RBP: 00007f824c60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 601.084049][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.092025][T11305] R13: 0000000000000000 R14: 00007f824c7a5fa0 R15: 00007ffeb076e9c8 [ 601.100009][T11305] [ 601.103369][T11305] Kernel Offset: disabled [ 601.107696][T11305] Rebooting in 86400 seconds..