last executing test programs: 4.096400559s ago: executing program 3 (id=3894): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) write(r0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect$uac1(0x3, 0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201da22000000086b1d0101400001020301090289000301f580040904000000010120000a240107000e020102072408020500090c2402020002220106007f330904010000010200000904010101010200000905010908"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 3.93994295s ago: executing program 1 (id=3895): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500), 0x0, 0x4) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 3.766496191s ago: executing program 1 (id=3898): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 3.765786357s ago: executing program 4 (id=3899): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r7, &(0x7f00000000c0)) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x54, 0x1) 3.649315645s ago: executing program 4 (id=3902): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000280)="ad90272ea34523ff", 0x8, 0x4008000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4000, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='veth0_macvtap\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) 3.500556709s ago: executing program 1 (id=3903): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x2a, &(0x7f0000000000)="00012c61020000001c11447298a9538f168516ff037f291e463685b0139216171afd0eafbd9c28d93b8b") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.403738908s ago: executing program 4 (id=3905): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2420b, &(0x7f0000000080)={0x0, 0xff7fffed, 0x10, 0x1, 0x39d}, 0x0, 0x0) 3.1063418s ago: executing program 4 (id=3910): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.919550581s ago: executing program 0 (id=3912): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r7, &(0x7f00000000c0)) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x54, 0x1) 2.78840718s ago: executing program 0 (id=3913): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x4161, 0x0) 2.738428153s ago: executing program 0 (id=3914): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) 2.665582262s ago: executing program 0 (id=3915): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000280)="ad90272ea34523ff", 0x8, 0x4008000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4000, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='veth0_macvtap\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) 2.609889539s ago: executing program 3 (id=3916): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000100)='Z', 0x1, 0x14, 0x0, 0x0) 2.460601343s ago: executing program 0 (id=3917): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.406428349s ago: executing program 2 (id=3918): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet(0xa, 0x801, 0x84) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r1}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.376429469s ago: executing program 3 (id=3919): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) shmctl$IPC_RMID(0x0, 0x0) 2.273333074s ago: executing program 1 (id=3920): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') 2.180113284s ago: executing program 0 (id=3921): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 2.012342097s ago: executing program 3 (id=3922): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) 1.959334308s ago: executing program 1 (id=3923): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 1.955968394s ago: executing program 2 (id=3924): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x4161, 0x0) 1.834894778s ago: executing program 3 (id=3925): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0xfffffffffffffffd, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2511c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.702702543s ago: executing program 2 (id=3926): ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x25, 0x0, 0x7ffc, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x9}) 1.700249194s ago: executing program 1 (id=3927): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffe) 264.47486ms ago: executing program 2 (id=3928): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 220.799558ms ago: executing program 2 (id=3929): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000100)='Z', 0x1, 0x14, 0x0, 0x0) 171.406414ms ago: executing program 3 (id=3930): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x6e, 0x0, 0x0, 0x20, 0x2, 0x10000, 0x106c, 0x80000001, 0x8000000000000, 0xc4af, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x4000, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 130.306601ms ago: executing program 4 (id=3931): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x25, 0x0, 0x7ffc, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port1\x00', 0x89, 0x14, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d}) 13.518046ms ago: executing program 2 (id=3932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be00", 0x9f}, {0x0}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 0s ago: executing program 4 (id=3933): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}, 0x1472}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): crng reseeded on system resumption [ 380.198778][ T994] usb 1-1: USB disconnect, device number 34 [ 380.966556][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 382.174950][ T5891] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 382.327570][ T5891] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 382.327597][ T5891] usb 2-1: config 0 has no interface number 0 [ 382.327647][ T5891] usb 2-1: config 0 interface 235 has no altsetting 0 [ 382.333858][ T5891] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 382.333886][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.333904][ T5891] usb 2-1: Product: syz [ 382.333917][ T5891] usb 2-1: Manufacturer: syz [ 382.333929][ T5891] usb 2-1: SerialNumber: syz [ 382.392317][ T5891] usb 2-1: config 0 descriptor?? [ 382.409610][ T5891] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 382.410243][ T5891] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 382.410449][ T5891] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 382.412865][ T5891] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 382.412958][ T5891] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 382.413621][ T5891] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 382.482261][ T5891] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 382.615823][ T5891] usb 2-1: USB disconnect, device number 37 [ 382.633286][ T5891] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 382.634323][ T5891] keyspan 2-1:0.235: device disconnected [ 382.735039][ T994] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 382.884941][ T994] usb 3-1: Using ep0 maxpacket: 16 [ 382.890791][ T994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.890851][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.890877][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 382.890895][ T994] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 382.890915][ T994] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.892429][ T994] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.892453][ T994] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.892471][ T994] usb 3-1: Manufacturer: syz [ 382.907006][ T994] usb 3-1: config 0 descriptor?? [ 383.148823][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.151033][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.868889][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 384.884919][ T5957] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 385.038656][ T5957] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 385.038777][ T5957] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.038812][ T5957] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 385.038833][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.058862][ T5957] usb 5-1: config 0 descriptor?? [ 385.060860][T10292] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 385.506533][ T5957] usbhid 5-1:0.0: can't add hid device: -71 [ 385.506655][ T5957] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 385.534908][ T5957] usb 5-1: USB disconnect, device number 25 [ 385.615065][ T994] rc_core: IR keymap rc-hauppauge not found [ 385.615086][ T994] Registered IR keymap rc-empty [ 385.615244][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.635552][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.659263][ T994] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 385.674708][ T994] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 385.691466][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.719470][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.741749][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.754924][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.774946][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.796432][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.815107][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.835958][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.856789][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.875092][ T994] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 385.924973][ T994] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 385.924997][ T994] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 385.985748][ T994] usb 3-1: USB disconnect, device number 35 [ 386.386201][T10316] netlink: 'syz.2.1906': attribute type 6 has an invalid length. [ 388.225035][ T994] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 388.377654][ T994] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 388.377687][ T994] usb 3-1: config 0 interface 0 has no altsetting 0 [ 388.377720][ T994] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 388.377740][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.383452][ T994] usb 3-1: config 0 descriptor?? [ 388.384482][T10346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 388.819534][ T994] usbhid 3-1:0.0: can't add hid device: -71 [ 388.819655][ T994] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 388.833313][ T994] usb 3-1: USB disconnect, device number 36 [ 392.215153][T10391] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.1937'. [ 393.894545][T10462] syzkaller0: entered promiscuous mode [ 393.894669][T10462] syzkaller0: entered allmulticast mode [ 395.220960][T10476] dns_resolver: Unsupported server list version (0) [ 401.768951][T10530] dns_resolver: Unsupported server list version (0) [ 404.804931][ T994] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 404.959616][ T994] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 404.959663][ T994] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.959684][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.036321][ T994] usb 3-1: config 0 descriptor?? [ 405.051968][ T994] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 405.974723][T10616] random: crng reseeded on system resumption [ 407.736161][ T5891] usb 3-1: USB disconnect, device number 37 [ 409.040597][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 409.257402][T10688] loop5: detected capacity change from 0 to 7 [ 409.973352][T10567] Dev loop5: unable to read RDB block 7 [ 409.973410][T10567] loop5: unable to read partition table [ 409.973648][T10567] loop5: partition table beyond EOD, truncated [ 410.459615][T10688] Dev loop5: unable to read RDB block 7 [ 410.459669][T10688] loop5: unable to read partition table [ 410.459910][T10688] loop5: partition table beyond EOD, truncated [ 410.459953][T10688] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 412.074007][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2081'. [ 415.592015][T10767] tipc: Started in network mode [ 415.592059][T10767] tipc: Node identity ba88267b0596, cluster identity 4711 [ 415.592253][T10767] tipc: Enabled bearer , priority 0 [ 415.593250][T10767] syzkaller0: entered promiscuous mode [ 415.593272][T10767] syzkaller0: entered allmulticast mode [ 415.625770][T10767] tipc: Resetting bearer [ 415.667417][T10765] tipc: Resetting bearer [ 415.885874][T10765] tipc: Disabling bearer [ 416.433570][T10785] netlink: 'syz.0.2102': attribute type 6 has an invalid length. [ 419.183308][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'. [ 419.183392][T10815] bridge_slave_1: left allmulticast mode [ 419.183406][T10815] bridge_slave_1: left promiscuous mode [ 419.187208][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.258664][T10815] bridge_slave_0: left allmulticast mode [ 419.258683][T10815] bridge_slave_0: left promiscuous mode [ 419.258969][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.394975][ T992] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 419.535022][ T992] usb 3-1: device descriptor read/64, error -71 [ 419.775126][ T992] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 419.904962][ T992] usb 3-1: device descriptor read/64, error -71 [ 420.029394][ T992] usb usb3-port1: attempt power cycle [ 420.374943][ T992] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 420.395803][ T992] usb 3-1: device descriptor read/8, error -71 [ 420.515048][ T994] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 420.634956][ T992] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 420.657318][ T992] usb 3-1: device descriptor read/8, error -71 [ 420.667875][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.667921][ T994] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 420.667942][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.709219][ T994] usb 1-1: config 0 descriptor?? [ 420.767784][ T992] usb usb3-port1: unable to enumerate USB device [ 420.924390][ T994] usbhid 1-1:0.0: can't add hid device: -71 [ 420.924517][ T994] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 420.965332][ T994] usb 1-1: USB disconnect, device number 35 [ 421.575557][T10829] loop5: detected capacity change from 0 to 7 [ 422.100696][T10829] Dev loop5: unable to read RDB block 7 [ 422.100746][T10829] loop5: unable to read partition table [ 422.100985][T10829] loop5: partition table beyond EOD, truncated [ 422.101025][T10829] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 422.666406][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'. [ 423.444934][ T994] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 423.574908][ T994] usb 5-1: device descriptor read/64, error -71 [ 423.826719][ T994] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 423.954963][ T994] usb 5-1: device descriptor read/64, error -71 [ 424.067037][ T994] usb usb5-port1: attempt power cycle [ 424.404905][ T994] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 424.428864][ T994] usb 5-1: device descriptor read/8, error -71 [ 424.675011][ T994] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 424.697185][ T994] usb 5-1: device descriptor read/8, error -71 [ 424.805377][ T994] usb usb5-port1: unable to enumerate USB device [ 427.824948][ T992] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 427.954907][ T992] usb 4-1: device descriptor read/64, error -71 [ 428.194972][ T992] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 428.324965][ T992] usb 4-1: device descriptor read/64, error -71 [ 428.425024][ T994] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 428.435493][ T992] usb usb4-port1: attempt power cycle [ 428.574940][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 428.577273][ T994] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 428.577300][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.611912][ T994] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 428.782658][ T992] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 428.800963][ T992] usb 4-1: device descriptor read/8, error -71 [ 429.034925][ T992] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 429.055814][ T992] usb 4-1: device descriptor read/8, error -71 [ 429.165756][ T992] usb usb4-port1: unable to enumerate USB device [ 429.817429][ T994] gspca_nw80x: reg_w err -71 [ 429.817546][ T994] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 429.838316][ T994] usb 5-1: USB disconnect, device number 30 [ 431.135149][T10935] netlink: 5992 bytes leftover after parsing attributes in process `syz.4.2168'. [ 431.283566][T10938] tipc: Enabled bearer , priority 0 [ 431.284563][T10938] syzkaller0: entered promiscuous mode [ 431.284584][T10938] syzkaller0: entered allmulticast mode [ 431.363986][T10938] tipc: Resetting bearer [ 431.385178][T10937] tipc: Resetting bearer [ 431.526145][T10937] tipc: Disabling bearer [ 433.894953][ T994] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 434.034887][ T994] usb 5-1: device descriptor read/64, error -71 [ 434.274938][ T994] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 434.444986][ T994] usb 5-1: device descriptor read/64, error -71 [ 434.556460][ T994] usb usb5-port1: attempt power cycle [ 434.894964][ T994] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 434.915762][ T994] usb 5-1: device descriptor read/8, error -71 [ 435.144924][ T5891] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 435.162583][ T994] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 435.185967][ T994] usb 5-1: device descriptor read/8, error -71 [ 435.295358][ T994] usb usb5-port1: unable to enumerate USB device [ 435.311352][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.311378][ T5891] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.314180][ T5891] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 435.314206][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.314223][ T5891] usb 3-1: Product: syz [ 435.314235][ T5891] usb 3-1: Manufacturer: syz [ 435.314248][ T5891] usb 3-1: SerialNumber: syz [ 435.345047][ T5891] usb 3-1: config 0 descriptor?? [ 435.556201][ T5891] usb 3-1: USB disconnect, device number 42 [ 437.024945][ T5957] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 437.191182][ T5957] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 437.191214][ T5957] usb 4-1: config 0 interface 0 has no altsetting 0 [ 437.191253][ T5957] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 437.191273][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.245010][ T5957] usb 4-1: config 0 descriptor?? [ 437.246052][T11003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 437.663184][ T5957] usbhid 4-1:0.0: can't add hid device: -71 [ 437.663306][ T5957] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 437.669618][ T5957] usb 4-1: USB disconnect, device number 28 [ 438.014930][ T992] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 438.164997][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 438.165979][ T992] usb 5-1: no configurations [ 438.165994][ T992] usb 5-1: can't read configurations, error -22 [ 438.294954][ T992] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 438.445055][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 438.447584][ T992] usb 5-1: no configurations [ 438.447599][ T992] usb 5-1: can't read configurations, error -22 [ 438.449135][ T992] usb usb5-port1: attempt power cycle [ 438.824968][ T992] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 438.845884][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 438.846684][ T992] usb 5-1: no configurations [ 438.846698][ T992] usb 5-1: can't read configurations, error -22 [ 438.974922][ T992] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 438.997178][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 438.998260][ T992] usb 5-1: no configurations [ 438.998274][ T992] usb 5-1: can't read configurations, error -22 [ 438.998842][ T992] usb usb5-port1: unable to enumerate USB device [ 439.197188][T11055] tipc: Enabled bearer , priority 0 [ 439.198099][T11055] syzkaller0: entered promiscuous mode [ 439.198120][T11055] syzkaller0: entered allmulticast mode [ 439.241679][T11055] tipc: Resetting bearer [ 439.283608][T11054] tipc: Resetting bearer [ 439.480347][T11054] tipc: Disabling bearer [ 440.195819][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.195899][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.725486][T11143] dns_resolver: Unsupported server list version (0) [ 444.590784][ T992] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 444.737638][ T992] usb 4-1: Using ep0 maxpacket: 8 [ 444.739457][ T992] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.739480][ T992] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.739493][ T992] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.739505][ T992] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.739527][ T992] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.739547][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.777512][T11177] fuse: Bad value for 'user_id' [ 444.777537][T11177] fuse: Bad value for 'user_id' [ 444.948333][ T992] usb 4-1: usb_control_msg returned -32 [ 444.948361][ T992] usbtmc 4-1:16.0: can't read capabilities [ 444.953376][ T992] usb 4-1: USB disconnect, device number 29 [ 445.241661][T11185] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.2278'. [ 445.463876][T11187] syzkaller0: entered promiscuous mode [ 445.463902][T11187] syzkaller0: entered allmulticast mode [ 445.805054][ T5957] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 445.958030][ T5957] usb 3-1: config 0 has no interfaces? [ 445.960809][ T5957] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 445.960836][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 445.960854][ T5957] usb 3-1: Product: syz [ 445.960867][ T5957] usb 3-1: Manufacturer: syz [ 445.960879][ T5957] usb 3-1: SerialNumber: syz [ 445.975088][ T5957] usb 3-1: config 0 descriptor?? [ 446.223306][ T992] usb 3-1: USB disconnect, device number 43 [ 447.529099][T11232] syzkaller0: entered promiscuous mode [ 447.529116][T11232] syzkaller0: entered allmulticast mode [ 447.673621][T11223] dns_resolver: Unsupported server list version (0) [ 448.375250][ T5957] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 448.527916][ T5957] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 448.527948][ T5957] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 448.527972][ T5957] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 448.528014][ T5957] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 448.528035][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.616227][T11239] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 448.622877][ T5957] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.624121][ T5957] usb 4-1: invalid MIDI out EP 0 [ 449.066349][T10500] udevd[10500]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.188025][ T5957] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 449.234265][ T5957] usb 4-1: USB disconnect, device number 30 [ 449.645042][ T994] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 449.807275][ T994] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 449.807301][ T994] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 449.807337][ T994] usb 1-1: config 220 interface 0 has no altsetting 0 [ 449.810105][ T994] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 449.810132][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.810150][ T994] usb 1-1: Product: syz [ 449.810162][ T994] usb 1-1: Manufacturer: syz [ 449.810176][ T994] usb 1-1: SerialNumber: syz [ 450.099745][ T994] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 450.099779][ T994] uvcvideo 1-1:220.0: No valid video chain found. [ 450.113827][ T994] usb 1-1: USB disconnect, device number 36 [ 450.879983][T11271] dns_resolver: Unsupported server list version (0) [ 451.695783][T11306] netlink: 6028 bytes leftover after parsing attributes in process `syz.4.2327'. [ 451.759675][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2328'. [ 453.215613][ T994] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 453.377552][ T994] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 453.377592][ T994] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 453.377616][ T994] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.377651][ T994] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 453.377672][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.384213][T11333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 453.453700][ T994] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 453.462285][ T994] usb 1-1: invalid MIDI out EP 0 [ 453.675506][T11344] dns_resolver: Unsupported server list version (0) [ 453.711437][T11249] udevd[11249]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.764742][ T994] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 453.779906][ T994] usb 1-1: USB disconnect, device number 37 [ 454.959701][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2348'. [ 455.554937][ T994] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 455.704892][ T994] usb 3-1: Using ep0 maxpacket: 8 [ 455.707285][ T994] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.707310][ T994] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.707331][ T994] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.707349][ T994] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.707388][ T994] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.707406][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.947302][ T994] usb 3-1: usb_control_msg returned -32 [ 455.947342][ T994] usbtmc 3-1:16.0: can't read capabilities [ 456.009137][ T994] usb 3-1: USB disconnect, device number 44 [ 456.332401][T11374] netlink: 'syz.0.2359': attribute type 4 has an invalid length. [ 456.332425][T11374] netlink: 'syz.0.2359': attribute type 5 has an invalid length. [ 456.332437][T11374] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2359'. [ 458.878366][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 462.403045][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 462.485299][ T992] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 462.650166][ T992] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 462.650192][ T992] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 462.650227][ T992] usb 4-1: config 220 interface 0 has no altsetting 0 [ 462.653215][ T992] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 462.653241][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.653259][ T992] usb 4-1: Product: syz [ 462.653271][ T992] usb 4-1: Manufacturer: syz [ 462.653284][ T992] usb 4-1: SerialNumber: syz [ 462.938725][ T992] uvcvideo 4-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 462.938757][ T992] uvcvideo 4-1:220.0: No valid video chain found. [ 462.942210][ T992] usb 4-1: USB disconnect, device number 31 [ 463.855069][ T5890] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 464.008147][ T5890] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 464.008179][ T5890] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 464.008203][ T5890] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 464.008235][ T5890] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 464.008253][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.014469][T11489] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 464.030342][ T5890] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 464.031390][ T5890] usb 5-1: invalid MIDI out EP 0 [ 464.449538][ T5890] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 464.481259][ T5890] usb 5-1: USB disconnect, device number 39 [ 466.775141][T11527] gre1: entered allmulticast mode [ 469.065083][ T5890] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 469.070326][T11582] binder_alloc: 11581: binder_alloc_buf, no vma [ 469.222336][T11566] dns_resolver: Unsupported server list version (0) [ 469.263602][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.263650][ T5890] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 469.263671][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.297255][ T5890] usb 3-1: config 0 descriptor?? [ 469.525322][ T5890] usbhid 3-1:0.0: can't add hid device: -71 [ 469.525438][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 469.533768][ T5890] usb 3-1: USB disconnect, device number 45 [ 469.944936][ T994] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 470.118015][ T994] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 470.118036][ T994] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 470.118048][ T994] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 470.118069][ T994] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.118080][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.122612][T11589] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 470.140650][ T994] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.180431][ T994] usb 2-1: invalid MIDI out EP 0 [ 470.309787][ T994] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 470.349834][ T994] usb 2-1: USB disconnect, device number 38 [ 470.747070][T11249] udevd[11249]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.835371][T11676] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.2483'. [ 476.363557][T11686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2487'. [ 480.192532][T11743] vivid-007: disconnect [ 480.300956][T11747] netlink: 'syz.3.2511': attribute type 4 has an invalid length. [ 480.300979][T11747] netlink: 'syz.3.2511': attribute type 5 has an invalid length. [ 480.301001][T11747] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2511'. [ 480.610458][T11737] vivid-007: reconnect [ 481.490866][T11764] snd_virmidi snd_virmidi.0: control 2:7:1:syz1:889 is already present [ 483.365230][T11790] snd_virmidi snd_virmidi.0: control 2:7:1:syz1:889 is already present [ 485.805110][ T5890] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 485.937026][ T31] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 485.955269][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 485.957780][ T5890] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 485.957807][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.016155][ T5890] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 486.121066][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 486.121097][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 486.121122][ T31] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 486.121156][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 486.121185][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.195176][T11818] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 486.219689][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.220599][ T31] usb 2-1: invalid MIDI out EP 0 [ 486.416557][ T5890] gspca_nw80x: reg_r err -32 [ 486.416653][ T5890] nw80x 3-1:3.0: probe with driver nw80x failed with error -32 [ 486.450227][T10505] udevd[10505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.480184][ T31] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 486.612223][ T992] usb 2-1: USB disconnect, device number 39 [ 487.003485][T11835] netlink: 'syz.0.2550': attribute type 4 has an invalid length. [ 487.003506][T11835] netlink: 'syz.0.2550': attribute type 5 has an invalid length. [ 487.003518][T11835] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2550'. [ 488.617315][ T5890] usb 3-1: USB disconnect, device number 46 [ 488.925286][T11885] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2572'. [ 489.315046][T11901] loop5: detected capacity change from 0 to 7 [ 489.574044][T11905] tipc: Enabled bearer , priority 0 [ 489.582377][T11905] syzkaller0: entered promiscuous mode [ 489.582403][T11905] syzkaller0: entered allmulticast mode [ 489.703811][T11910] tipc: Resetting bearer [ 489.775389][T11903] tipc: Resetting bearer [ 489.814953][ T31] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 489.876270][T11901] Dev loop5: unable to read RDB block 7 [ 489.876320][T11901] loop5: unable to read partition table [ 489.876541][T11901] loop5: partition table beyond EOD, truncated [ 489.876582][T11901] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 489.979971][ T31] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.980003][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 489.995352][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 489.995380][ T31] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 489.995398][ T31] usb 2-1: Product: syz [ 489.995411][ T31] usb 2-1: Manufacturer: syz [ 489.995423][ T31] usb 2-1: SerialNumber: syz [ 490.005814][T11903] tipc: Disabling bearer [ 490.059414][ T31] usb 2-1: config 0 descriptor?? [ 490.111601][ T31] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 490.150223][T11914] atomic_op ffff888026e53218 conn xmit_atomic 0000000000000000 [ 490.227971][T10567] udevd[10567]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.303723][ T5890] usb 2-1: USB disconnect, device number 40 [ 490.896750][T11934] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 490.944882][ T31] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 491.098489][ T31] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 491.098522][ T31] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 491.098547][ T31] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 491.098581][ T31] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 491.098602][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.168161][T11928] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 491.204003][ T31] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 491.217780][ T31] usb 5-1: invalid MIDI out EP 0 [ 491.447596][T11249] udevd[11249]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.484043][ T31] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 491.518886][ T31] usb 5-1: USB disconnect, device number 40 [ 492.465227][ T5890] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 492.661470][ T5890] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 492.661499][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 492.685329][ T5890] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 492.685356][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 492.685375][ T5890] usb 4-1: Product: syz [ 492.685386][ T5890] usb 4-1: Manufacturer: syz [ 492.685399][ T5890] usb 4-1: SerialNumber: syz [ 492.690727][ T5890] usb 4-1: config 0 descriptor?? [ 492.805907][ T5890] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 492.917953][ T31] usb 4-1: USB disconnect, device number 32 [ 492.951591][T10567] udevd[10567]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.005176][ T5890] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 494.170387][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.170444][ T5890] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.170469][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 494.174680][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 494.174707][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 494.174726][ T5890] usb 5-1: Product: syz [ 494.174739][ T5890] usb 5-1: Manufacturer: syz [ 494.174751][ T5890] usb 5-1: SerialNumber: syz [ 494.249078][ T5890] usb 5-1: config 0 descriptor?? [ 494.342107][ T5890] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 494.452298][T10567] udevd[10567]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.480818][ T31] usb 5-1: USB disconnect, device number 41 [ 494.745338][ T37] audit: type=1326 audit(1763491823.902:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5a68f6c9 code=0x7ffc0000 [ 494.746450][ T37] audit: type=1326 audit(1763491823.902:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5a68f6c9 code=0x7ffc0000 [ 494.749141][ T37] audit: type=1326 audit(1763491823.902:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7faf5a68f6c9 code=0x7ffc0000 [ 494.749436][ T37] audit: type=1326 audit(1763491823.902:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5a68f6c9 code=0x7ffc0000 [ 494.749819][ T37] audit: type=1326 audit(1763491823.902:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5a68f6c9 code=0x7ffc0000 [ 494.750468][ T37] audit: type=1326 audit(1763491823.902:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf5a68f6c9 code=0x7ffc0000 [ 494.751271][ T37] audit: type=1326 audit(1763491823.902:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5a68f6c9 code=0x7ffc0000 [ 494.751321][ T37] audit: type=1326 audit(1763491823.902:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5a68f6c9 code=0x7ffc0000 [ 494.752146][ T37] audit: type=1326 audit(1763491823.902:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf5a68f6c9 code=0x7ffc0000 [ 494.753609][ T37] audit: type=1326 audit(1763491823.902:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12013 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5a68f6c9 code=0x7ffc0000 [ 496.458419][T12059] binder: BINDER_SET_CONTEXT_MGR already set [ 496.458434][T12059] binder: 12058:12059 ioctl 4018620d 200000004a80 returned -16 [ 496.518910][T12060] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2652'. [ 497.803042][T12095] netlink: 'syz.3.2670': attribute type 4 has an invalid length. [ 497.803065][T12095] netlink: 'syz.3.2670': attribute type 5 has an invalid length. [ 497.803077][T12095] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2670'. [ 498.545042][ T5890] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 498.697370][ T5890] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 498.697399][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 498.700435][ T5890] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 498.700461][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 498.700480][ T5890] usb 4-1: Product: syz [ 498.700492][ T5890] usb 4-1: Manufacturer: syz [ 498.700505][ T5890] usb 4-1: SerialNumber: syz [ 498.798324][ T5890] usb 4-1: config 0 descriptor?? [ 498.890255][ T5890] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 499.026811][ T5890] usb 4-1: USB disconnect, device number 33 [ 499.077273][T10567] udevd[10567]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.570744][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.570821][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.868500][T12146] binder: 12142:12146 ioctl 400c620e 0 returned -14 [ 503.675894][T12167] fuse: Bad value for 'fd' [ 503.855057][ T994] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 504.057765][ T994] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 504.057795][ T994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 504.064091][ T994] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 504.064119][ T994] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 504.064138][ T994] usb 5-1: Product: syz [ 504.064151][ T994] usb 5-1: Manufacturer: syz [ 504.064163][ T994] usb 5-1: SerialNumber: syz [ 504.081688][ T994] usb 5-1: config 0 descriptor?? [ 504.129092][ T994] usb 5-1: selecting invalid altsetting 0 [ 504.323485][ T994] usb 5-1: USB disconnect, device number 42 [ 504.463486][T11247] udevd[11247]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.154985][ T992] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 506.372073][ T992] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 506.372101][ T992] usb 5-1: config 0 interface 0 has no altsetting 0 [ 506.375697][ T992] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 506.375726][ T992] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 506.375745][ T992] usb 5-1: Product: syz [ 506.375758][ T992] usb 5-1: Manufacturer: syz [ 506.375770][ T992] usb 5-1: SerialNumber: syz [ 506.438232][ T992] usb 5-1: config 0 descriptor?? [ 506.472110][ T992] usb 5-1: selecting invalid altsetting 0 [ 506.669349][ T994] usb 5-1: USB disconnect, device number 43 [ 506.835237][T11247] udevd[11247]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.018995][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.037466][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.038728][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.044160][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.062984][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.558679][ T994] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 510.707469][ T994] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 510.707499][ T994] usb 1-1: config 0 interface 0 has no altsetting 0 [ 510.710545][ T994] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 510.710571][ T994] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 510.710590][ T994] usb 1-1: Product: syz [ 510.710603][ T994] usb 1-1: Manufacturer: syz [ 510.710615][ T994] usb 1-1: SerialNumber: syz [ 510.777272][ T994] usb 1-1: config 0 descriptor?? [ 510.810749][ T994] usb 1-1: selecting invalid altsetting 0 [ 511.017412][ T994] usb 1-1: USB disconnect, device number 38 [ 511.260375][T11247] udevd[11247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.128132][ T5810] Bluetooth: hci0: command tx timeout [ 513.123960][ T1157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.616795][ T1157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.712926][T12248] chnl_net:caif_netlink_parms(): no params data found [ 513.951706][ T1157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.212847][ T5810] Bluetooth: hci0: command tx timeout [ 514.376108][ T1157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.887319][T12248] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.887473][T12248] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.887653][T12248] bridge_slave_0: entered allmulticast mode [ 514.889954][T12248] bridge_slave_0: entered promiscuous mode [ 514.893457][T12248] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.898355][T12248] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.898576][T12248] bridge_slave_1: entered allmulticast mode [ 514.914988][T12248] bridge_slave_1: entered promiscuous mode [ 515.461839][T12248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.546390][T12248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.959624][T12248] team0: Port device team_slave_0 added [ 515.973836][T12248] team0: Port device team_slave_1 added [ 516.415945][ T5810] Bluetooth: hci0: command tx timeout [ 517.375787][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 517.585799][ T1157] bridge_slave_1: left allmulticast mode [ 517.585994][ T1157] bridge_slave_1: left promiscuous mode [ 517.590334][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.730203][ T1157] bridge_slave_0: left allmulticast mode [ 517.730231][ T1157] bridge_slave_0: left promiscuous mode [ 517.730560][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.452215][ T5810] Bluetooth: hci0: command tx timeout [ 521.619135][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2763'. [ 521.775802][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.933378][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.024183][ T1157] bond0 (unregistering): Released all slaves [ 522.079724][ T1157] bond1 (unregistering): Released all slaves [ 522.162213][ T1157] bond2 (unregistering): Released all slaves [ 522.220827][ T1157] bond3 (unregistering): Released all slaves [ 522.270047][ T1157] bond4 (unregistering): Released all slaves [ 522.336451][T12248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.336467][T12248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.336492][T12248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.350241][T12248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.350255][T12248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.350280][T12248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.888567][T12341] atomic_op ffff888032f72218 conn xmit_atomic 0000000000000000 [ 522.911630][ T1157] tipc: Left network mode [ 522.972752][T12248] hsr_slave_0: entered promiscuous mode [ 522.976187][T12248] hsr_slave_1: entered promiscuous mode [ 522.990789][ T5890] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 523.000928][T12248] debugfs: 'hsr0' already exists in 'hsr' [ 523.000956][T12248] Cannot create hsr debugfs directory [ 523.137520][ T5890] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 523.137546][ T5890] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 523.137586][ T5890] usb 4-1: config 220 interface 0 has no altsetting 0 [ 523.140789][ T5890] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 523.140816][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.140833][ T5890] usb 4-1: Product: syz [ 523.140846][ T5890] usb 4-1: Manufacturer: syz [ 523.140859][ T5890] usb 4-1: SerialNumber: syz [ 523.395566][ T5890] uvcvideo 4-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 523.395597][ T5890] uvcvideo 4-1:220.0: No valid video chain found. [ 523.403463][ T5890] usb 4-1: USB disconnect, device number 34 [ 525.785163][ T1157] hsr_slave_0: left promiscuous mode [ 525.852876][ T1157] hsr_slave_1: left promiscuous mode [ 525.854081][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.854236][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.919350][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.919385][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.074748][ T1157] veth1_macvtap: left promiscuous mode [ 526.076330][ T1157] veth1_vlan: left promiscuous mode [ 526.076687][ T1157] veth0_vlan: left promiscuous mode [ 528.198201][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 530.861016][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 531.177098][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 532.405022][ T5890] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 532.565191][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.565216][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.566481][ T5890] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 532.566515][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 532.566533][ T5890] usb 2-1: SerialNumber: syz [ 532.819722][ T5890] usb 2-1: 0:2 : does not exist [ 532.890897][ T5890] usb 2-1: USB disconnect, device number 41 [ 532.940200][T12338] udevd[12338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.088781][ T1157] IPVS: stop unused estimator thread 0... [ 537.699153][T12248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 537.762083][T12248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 537.835229][T12248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 537.899302][T12248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 538.341496][T12248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.433808][T12248] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.519928][ T3825] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.520083][ T3825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.538521][ T3825] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.539313][ T3825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.949087][T12487] binder: 12486:12487 ioctl 40046205 0 returned -22 [ 539.667654][T12248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.850394][T12248] veth0_vlan: entered promiscuous mode [ 540.936984][T12248] veth1_vlan: entered promiscuous mode [ 541.127047][T12248] veth0_macvtap: entered promiscuous mode [ 541.159977][T12248] veth1_macvtap: entered promiscuous mode [ 541.223355][T12248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.273236][T12248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.319238][ T1157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.320619][ T1157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.324629][ T1157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.329335][ T1157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.738808][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.738828][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.840127][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.840147][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.674914][ T5890] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 543.834924][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 543.837295][ T5890] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 543.837322][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.907590][ T5890] usb 3-1: config 0 descriptor?? [ 544.121623][T12592] random: crng reseeded on system resumption [ 544.165029][ T5890] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 544.168307][ T5890] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 544.168362][ T5890] dib0700: firmware download failed at 7 with -22 [ 544.369545][ T31] usb 3-1: USB disconnect, device number 47 [ 545.402848][T12617] binder: 12615:12617 ioctl 40046205 0 returned -22 [ 545.644974][ T5890] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 545.700101][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 545.722007][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 545.731686][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 545.732890][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 545.734212][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.797443][ T5890] usb 4-1: config 0 has an invalid interface number: 19 but max is 0 [ 545.797470][ T5890] usb 4-1: config 0 has no interface number 0 [ 545.800553][ T5890] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 545.800579][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.800597][ T5890] usb 4-1: Product: syz [ 545.800609][ T5890] usb 4-1: Manufacturer: syz [ 545.800621][ T5890] usb 4-1: SerialNumber: syz [ 545.857350][ T5890] usb 4-1: config 0 descriptor?? [ 546.155321][ T5890] qmi_wwan 4-1:0.19: probe with driver qmi_wwan failed with error -22 [ 546.192739][ T5890] usb 4-1: USB disconnect, device number 35 [ 546.544907][ T994] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 546.705879][ T994] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 546.705912][ T994] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 546.705937][ T994] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 546.705972][ T994] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 546.705993][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.715337][T12637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 546.792977][ T994] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 546.794025][ T994] usb 2-1: invalid MIDI out EP 0 [ 546.922456][ T994] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 546.994217][ T994] usb 2-1: USB disconnect, device number 42 [ 547.008730][T12433] udevd[12433]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.313044][T12624] chnl_net:caif_netlink_parms(): no params data found [ 547.825839][ T5810] Bluetooth: hci5: command tx timeout [ 548.003800][T12667] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2870'. [ 548.633860][T12685] netlink: 'syz.1.2877': attribute type 4 has an invalid length. [ 548.633883][T12685] netlink: 'syz.1.2877': attribute type 5 has an invalid length. [ 548.633895][T12685] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2877'. [ 548.949345][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.214207][T12624] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.214321][T12624] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.214522][T12624] bridge_slave_0: entered allmulticast mode [ 549.251775][T12624] bridge_slave_0: entered promiscuous mode [ 549.569392][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.685470][T12624] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.685607][T12624] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.685844][T12624] bridge_slave_1: entered allmulticast mode [ 549.688732][T12624] bridge_slave_1: entered promiscuous mode [ 549.884885][ T5810] Bluetooth: hci5: command tx timeout [ 550.488417][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.576257][T12624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.580654][T12624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.339295][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.411043][T12624] team0: Port device team_slave_0 added [ 551.445793][T12624] team0: Port device team_slave_1 added [ 551.780380][T12624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.780396][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.780421][T12624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.835967][T12624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.835983][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.836007][T12624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.965088][ T5810] Bluetooth: hci5: command tx timeout [ 552.384998][ T5890] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 552.477194][T12624] hsr_slave_0: entered promiscuous mode [ 552.485960][T12624] hsr_slave_1: entered promiscuous mode [ 552.487061][T12624] debugfs: 'hsr0' already exists in 'hsr' [ 552.487085][T12624] Cannot create hsr debugfs directory [ 552.535091][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 552.551799][ T5890] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 552.551828][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.589415][ T5890] usb 4-1: config 0 descriptor?? [ 552.795117][ T5890] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 552.797320][ T5890] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 552.797372][ T5890] dib0700: firmware download failed at 7 with -22 [ 552.834470][T12729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.853100][T12729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.923277][T12729] random: crng reseeded on system resumption [ 553.138097][ T5890] usb 4-1: USB disconnect, device number 36 [ 554.047122][ T5810] Bluetooth: hci5: command tx timeout [ 554.583381][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.900362][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.771171][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2907'. [ 556.571869][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.647401][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.700181][ T12] bond0 (unregistering): Released all slaves [ 556.783545][ T12] bond1 (unregistering): Released all slaves [ 556.807615][ T12] bond2 (unregistering): Released all slaves [ 557.356410][ T12] tipc: Left network mode [ 560.595065][ T12] hsr_slave_0: left promiscuous mode [ 560.670456][ T12] hsr_slave_1: left promiscuous mode [ 560.671416][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.671439][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.738176][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.738201][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.870122][ T12] veth1_macvtap: left promiscuous mode [ 560.870406][ T12] veth1_vlan: left promiscuous mode [ 560.870605][ T12] veth0_vlan: left promiscuous mode [ 563.018786][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.018858][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.788057][ T12] team0 (unregistering): Port device team_slave_1 removed [ 563.817217][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.067979][ T12] team0 (unregistering): Port device team_slave_0 removed [ 564.332875][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.834534][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.934105][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.482615][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.000193][T12931] mmap: syz.4.2969 (12931) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 567.387871][T12624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 567.597833][T12624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 567.636797][T12624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 567.756500][T12624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 568.137627][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.334903][ T994] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 568.389205][T12624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.507364][ T994] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.507390][ T994] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.508756][ T994] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 568.508781][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 568.508800][ T994] usb 4-1: SerialNumber: syz [ 568.623787][T12624] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.653603][ T12] IPVS: stop unused estimator thread 0... [ 568.683628][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.684175][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.740721][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.740900][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.794513][ T994] usb 4-1: 0:2 : does not exist [ 568.807961][ T994] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 568.850566][ T994] usb 4-1: USB disconnect, device number 37 [ 569.056447][T12922] udevd[12922]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.787549][T12624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.022139][T12624] veth0_vlan: entered promiscuous mode [ 570.064306][T12624] veth1_vlan: entered promiscuous mode [ 570.182017][T12624] veth0_macvtap: entered promiscuous mode [ 570.215140][T12624] veth1_macvtap: entered promiscuous mode [ 570.261387][T12624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.277567][T12624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.329411][ T1157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.329619][ T1157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.329817][ T1157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.373205][ T1157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.464904][ T992] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 570.627396][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 570.629709][ T992] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 570.629736][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.668453][ T992] usb 4-1: config 0 descriptor?? [ 570.895065][ T992] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 570.897294][ T992] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 570.897340][ T992] dib0700: firmware download failed at 7 with -22 [ 570.901372][T12986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.905181][T12986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.980266][T12986] random: crng reseeded on system resumption [ 571.127385][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.127407][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.333462][T12558] usb 4-1: USB disconnect, device number 38 [ 571.355357][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.355375][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.232152][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.466232][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 573.473268][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 573.492402][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 573.538907][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 573.545560][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.503597][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.915263][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.989961][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.450845][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.644959][ T5810] Bluetooth: hci1: command tx timeout [ 576.040199][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.708313][T13031] chnl_net:caif_netlink_parms(): no params data found [ 577.350954][ T12] bridge_slave_1: left allmulticast mode [ 577.350984][ T12] bridge_slave_1: left promiscuous mode [ 577.351288][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.456464][ T12] bridge_slave_0: left allmulticast mode [ 577.456494][ T12] bridge_slave_0: left promiscuous mode [ 577.456757][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.725738][ T5810] Bluetooth: hci1: command tx timeout [ 579.804929][ T5810] Bluetooth: hci1: command tx timeout [ 581.168238][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.270909][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.301074][ T12] bond0 (unregistering): Released all slaves [ 581.328473][ T12] bond1 (unregistering): Released all slaves [ 581.623963][ T12] tipc: Left network mode [ 581.624169][T13031] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.624313][T13031] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.624553][T13031] bridge_slave_0: entered allmulticast mode [ 581.627488][T13031] bridge_slave_0: entered promiscuous mode [ 581.665084][T13031] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.665218][T13031] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.665720][T13031] bridge_slave_1: entered allmulticast mode [ 581.681050][T13031] bridge_slave_1: entered promiscuous mode [ 581.884971][ T5810] Bluetooth: hci1: command tx timeout [ 582.499506][T13031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.536706][T13031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.511033][T13031] team0: Port device team_slave_0 added [ 583.675030][ T12] hsr_slave_0: left promiscuous mode [ 583.765329][ T12] hsr_slave_1: left promiscuous mode [ 583.766282][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.766308][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.849452][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.849480][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.027096][ T12] veth1_macvtap: left promiscuous mode [ 584.027387][ T12] veth1_vlan: left promiscuous mode [ 584.027572][ T12] veth0_vlan: left promiscuous mode [ 586.419927][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 586.993656][T13134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3033'. [ 588.425211][ T12] team0 (unregistering): Port device team_slave_1 removed [ 588.827027][ T12] team0 (unregistering): Port device team_slave_0 removed [ 589.971675][T13157] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3044'. [ 590.273684][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.233482][ T992] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 591.390533][ T992] usb 5-1: device descriptor read/64, error -71 [ 591.635031][ T992] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 591.756080][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.774966][ T992] usb 5-1: device descriptor read/64, error -71 [ 591.885297][ T992] usb usb5-port1: attempt power cycle [ 592.225040][ T992] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 592.254723][ T992] usb 5-1: device descriptor read/8, error -71 [ 592.504667][ T992] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 592.525660][ T992] usb 5-1: device descriptor read/8, error -71 [ 592.655439][ T992] usb usb5-port1: unable to enumerate USB device [ 592.789007][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.929942][T13031] team0: Port device team_slave_1 added [ 593.310605][T13031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.310623][T13031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.310647][T13031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.313111][T13031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.313125][T13031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.313147][T13031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.444988][ T31] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 593.618392][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 593.618412][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 593.618428][ T31] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.618449][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.618460][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.681265][T13199] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 593.718989][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 593.720062][ T31] usb 2-1: invalid MIDI out EP 0 [ 593.930073][T13031] hsr_slave_0: entered promiscuous mode [ 593.931562][T13031] hsr_slave_1: entered promiscuous mode [ 593.965121][ T31] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 594.009890][ T31] usb 2-1: USB disconnect, device number 43 [ 594.030037][T13213] udevd[13213]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.435030][ T12] IPVS: stop unused estimator thread 0... [ 597.889360][T13031] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 598.029867][T13031] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 598.113317][T13031] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 598.208537][T13031] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 598.694128][T13031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.729729][T13031] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.753552][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.778884][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.860066][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.875129][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.811057][T13031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.013769][T13031] veth0_vlan: entered promiscuous mode [ 600.041528][T13031] veth1_vlan: entered promiscuous mode [ 600.123713][T13031] veth0_macvtap: entered promiscuous mode [ 600.181416][T13031] veth1_macvtap: entered promiscuous mode [ 600.269751][T13031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.333139][T13031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.418694][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.418936][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.419370][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.419699][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.883105][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.883128][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.069615][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.069636][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.024975][T12558] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 603.185906][T12558] usb 4-1: no configurations [ 603.185924][T12558] usb 4-1: can't read configurations, error -22 [ 603.314962][T12558] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 603.463674][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 603.465875][T12558] usb 4-1: no configurations [ 603.465894][T12558] usb 4-1: can't read configurations, error -22 [ 603.466342][T12558] usb usb4-port1: attempt power cycle [ 603.501450][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 603.510286][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 603.523784][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 603.524973][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 603.764952][ T5891] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 603.815012][T12558] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 603.836679][T12558] usb 4-1: no configurations [ 603.836698][T12558] usb 4-1: can't read configurations, error -22 [ 603.944876][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 603.947303][ T5891] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 603.947329][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.968420][T12558] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 603.986210][T12558] usb 4-1: no configurations [ 603.986227][T12558] usb 4-1: can't read configurations, error -22 [ 603.986553][T12558] usb usb4-port1: unable to enumerate USB device [ 603.997770][ T5891] usb 2-1: config 0 descriptor?? [ 604.201651][ T5891] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 604.216184][ T5891] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 604.216230][ T5891] dib0700: firmware download failed at 7 with -22 [ 604.216324][T13367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.216878][T13367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.295215][T13375] random: crng reseeded on system resumption [ 604.539756][ T31] usb 2-1: USB disconnect, device number 44 [ 604.583553][T13365] chnl_net:caif_netlink_parms(): no params data found [ 605.298564][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.298700][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.298918][T13365] bridge_slave_0: entered allmulticast mode [ 605.328388][T13365] bridge_slave_0: entered promiscuous mode [ 605.332548][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.332684][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.332891][T13365] bridge_slave_1: entered allmulticast mode [ 605.362795][T13365] bridge_slave_1: entered promiscuous mode [ 605.545604][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.564901][ T5810] Bluetooth: hci2: command tx timeout [ 605.974107][T13390] netlink: 5780 bytes leftover after parsing attributes in process `syz.4.3107'. [ 606.370743][T13365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.970133][ T1163] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.059888][T13365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.646249][ T5810] Bluetooth: hci2: command tx timeout [ 607.852421][ T1163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.993379][T13365] team0: Port device team_slave_0 added [ 608.003947][T13365] team0: Port device team_slave_1 added [ 608.646707][ T1163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.681659][T13365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.681674][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.681699][T13365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.730836][T13365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.730852][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.730875][T13365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.259561][ T1163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.326671][T13365] hsr_slave_0: entered promiscuous mode [ 609.328070][T13365] hsr_slave_1: entered promiscuous mode [ 609.329019][T13365] debugfs: 'hsr0' already exists in 'hsr' [ 609.329043][T13365] Cannot create hsr debugfs directory [ 609.504921][T12556] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 609.661738][T12556] usb 5-1: Using ep0 maxpacket: 32 [ 609.664122][T12556] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 609.664148][T12556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.697039][T12556] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 609.725442][ T5810] Bluetooth: hci2: command tx timeout [ 610.089941][T12556] gspca_nw80x: reg_r err -32 [ 610.090033][T12556] nw80x 5-1:3.0: probe with driver nw80x failed with error -32 [ 610.780987][ T1163] bridge_slave_1: left allmulticast mode [ 610.781014][ T1163] bridge_slave_1: left promiscuous mode [ 610.781262][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.867834][ T1163] bridge_slave_0: left allmulticast mode [ 610.867863][ T1163] bridge_slave_0: left promiscuous mode [ 610.868129][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.804974][ T5810] Bluetooth: hci2: command tx timeout [ 612.311196][T13326] usb 5-1: USB disconnect, device number 48 [ 613.710170][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'. [ 614.358426][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.435767][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.496511][ T1163] bond0 (unregistering): Released all slaves [ 614.591440][T13522] bridge_slave_1: left allmulticast mode [ 614.591467][T13522] bridge_slave_1: left promiscuous mode [ 614.591706][T13522] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.755525][T13522] bridge_slave_0: left allmulticast mode [ 614.755552][T13522] bridge_slave_0: left promiscuous mode [ 614.755809][T13522] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.508743][ T1163] tipc: Left network mode [ 616.663668][T13588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3188'. [ 616.729970][T13590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3189'. [ 616.730061][T13590] bridge_slave_1: left allmulticast mode [ 616.730082][T13590] bridge_slave_1: left promiscuous mode [ 616.730338][T13590] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.806860][T13590] bridge_slave_0: left allmulticast mode [ 616.806892][T13590] bridge_slave_0: left promiscuous mode [ 616.807293][T13590] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.226419][T13601] atomic_op ffff888026b89218 conn xmit_atomic 0000000000000000 [ 617.976801][ T1163] hsr_slave_0: left promiscuous mode [ 618.017833][ T1163] hsr_slave_1: left promiscuous mode [ 618.018816][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.018843][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.076039][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.076067][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.114960][ T992] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 618.252146][ T1163] veth1_macvtap: left promiscuous mode [ 618.252259][ T1163] veth0_macvtap: left promiscuous mode [ 618.252528][ T1163] veth1_vlan: left promiscuous mode [ 618.252711][ T1163] veth0_vlan: left promiscuous mode [ 618.264964][ T992] usb 2-1: Using ep0 maxpacket: 32 [ 618.267575][ T992] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 618.267734][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.273452][ T992] usb 2-1: config 0 descriptor?? [ 618.479164][ T992] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 618.480201][T13619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.480774][T13619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.484683][ T992] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 618.484748][ T992] dib0700: firmware download failed at 7 with -22 [ 618.532244][T13619] random: crng reseeded on system resumption [ 618.795219][ T992] usb 2-1: USB disconnect, device number 45 [ 622.406288][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 622.494927][ T5957] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 622.671705][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 622.674209][ T5957] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.674235][ T5957] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 622.674253][ T5957] usb 1-1: config 1 has no interface number 1 [ 622.674313][ T5957] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.697395][ T5957] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.697424][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.697442][ T5957] usb 1-1: Product: syz [ 622.697454][ T5957] usb 1-1: Manufacturer: syz [ 622.697467][ T5957] usb 1-1: SerialNumber: syz [ 622.888549][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 622.964750][ T5957] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 622.964903][ T5957] usb 1-1: 2:1 : format type 6 is not supported yet [ 623.005472][ T5957] usb 1-1: USB disconnect, device number 39 [ 623.093704][T12922] udevd[12922]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.536026][T13671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3228'. [ 624.457640][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.457715][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.516081][ T992] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 624.689484][ T992] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 624.689510][ T992] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 624.689550][ T992] usb 1-1: config 220 interface 0 has no altsetting 0 [ 624.693829][ T992] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 624.693857][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.693874][ T992] usb 1-1: Product: syz [ 624.693886][ T992] usb 1-1: Manufacturer: syz [ 624.693898][ T992] usb 1-1: SerialNumber: syz [ 624.957124][ T992] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 624.957158][ T992] uvcvideo 1-1:220.0: No valid video chain found. [ 624.965667][ T992] usb 1-1: USB disconnect, device number 40 [ 627.294987][T13326] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 627.431402][T13365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 627.505291][T13326] usb 1-1: Using ep0 maxpacket: 32 [ 627.507671][T13326] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 627.507697][T13326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.570091][T13326] usb 1-1: config 0 descriptor?? [ 627.617206][T13365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 627.676705][T13365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 627.774500][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.774975][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.797898][T13709] random: crng reseeded on system resumption [ 627.818658][T13326] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 627.818758][T13326] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 627.818842][T13326] dib0700: firmware download failed at 7 with -22 [ 628.038412][ T992] usb 1-1: USB disconnect, device number 41 [ 628.272411][T13365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.603776][T13740] netlink: 'syz.3.3250': attribute type 1 has an invalid length. [ 628.674654][T13743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3250'. [ 628.814651][T13740] bond1: entered promiscuous mode [ 628.815995][T13740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.848941][T13743] bond1: entered allmulticast mode [ 628.952055][T13740] bond1: (slave bridge0): making interface the new active one [ 628.952078][T13740] bridge0: entered promiscuous mode [ 628.952255][T13740] bridge0: entered allmulticast mode [ 628.980929][T13740] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 629.424518][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.470946][T13365] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.502177][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.502484][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.576890][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.577028][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.276631][T13365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.383872][T13365] veth0_vlan: entered promiscuous mode [ 630.407975][T13365] veth1_vlan: entered promiscuous mode [ 630.500709][T13365] veth0_macvtap: entered promiscuous mode [ 630.514588][T13365] veth1_macvtap: entered promiscuous mode [ 630.571485][T13365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.612631][T13365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.674675][ T1180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.694415][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.718105][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.737572][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.965562][T13326] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 631.071099][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.071119][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.104951][T13326] usb 4-1: device descriptor read/64, error -71 [ 631.251250][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.251269][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.345015][T13326] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 631.500729][T13326] usb 4-1: device descriptor read/64, error -71 [ 631.605306][T13326] usb usb4-port1: attempt power cycle [ 631.945259][T13326] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 631.979160][T13326] usb 4-1: device descriptor read/8, error -71 [ 632.214990][T13326] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 632.235717][T13326] usb 4-1: device descriptor read/8, error -71 [ 632.345291][T13326] usb usb4-port1: unable to enumerate USB device [ 632.534188][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 632.548419][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 632.562785][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 632.563883][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 632.564590][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 632.754891][T12556] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 632.911300][T12556] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.911323][T12556] usb 3-1: config 0 has no interfaces? [ 632.957852][T12556] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 632.957882][T12556] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 632.957900][T12556] usb 3-1: Product: syz [ 632.957913][T12556] usb 3-1: Manufacturer: syz [ 632.957925][T12556] usb 3-1: SerialNumber: syz [ 632.988133][T12556] usb 3-1: config 0 descriptor?? [ 633.126453][T13872] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3306'. [ 633.387249][T13326] usb 3-1: USB disconnect, device number 48 [ 634.009124][T13857] chnl_net:caif_netlink_parms(): no params data found [ 634.586927][T13914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3323'. [ 634.586987][T13914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3323'. [ 634.690511][ T5810] Bluetooth: hci3: command tx timeout [ 634.824954][T13326] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 634.862986][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.989398][T13326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.989424][T13326] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 635.018093][T13326] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 635.018121][T13326] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 635.018140][T13326] usb 5-1: Product: syz [ 635.018152][T13326] usb 5-1: Manufacturer: syz [ 635.018165][T13326] usb 5-1: SerialNumber: syz [ 635.068445][T13326] usb 5-1: config 0 descriptor?? [ 635.444159][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.529606][T12558] usb 5-1: USB disconnect, device number 49 [ 636.011851][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.427080][T13857] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.427157][T13857] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.427333][T13857] bridge_slave_0: entered allmulticast mode [ 636.428994][T13857] bridge_slave_0: entered promiscuous mode [ 636.431301][T13857] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.431382][T13857] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.431677][T13857] bridge_slave_1: entered allmulticast mode [ 636.433207][T13857] bridge_slave_1: entered promiscuous mode [ 636.768419][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 636.768457][ T5810] Bluetooth: hci3: command tx timeout [ 637.170440][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.242067][T13857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.254670][T13857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.733419][T13857] team0: Port device team_slave_0 added [ 637.762264][T13857] team0: Port device team_slave_1 added [ 638.243679][T13857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.243695][T13857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.243718][T13857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.265864][T13857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.265879][T13857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.265904][T13857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.844894][ T5821] Bluetooth: hci3: command tx timeout [ 638.901540][T13857] hsr_slave_0: entered promiscuous mode [ 638.902997][T13857] hsr_slave_1: entered promiscuous mode [ 638.904000][T13857] debugfs: 'hsr0' already exists in 'hsr' [ 638.904021][T13857] Cannot create hsr debugfs directory [ 640.239440][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.935388][ T5821] Bluetooth: hci3: command tx timeout [ 642.305353][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.395775][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.438857][ T58] bond0 (unregistering): Released all slaves [ 642.480086][ T58] bond1 (unregistering): Released all slaves [ 644.515071][ T58] hsr_slave_0: left promiscuous mode [ 644.573605][ T58] hsr_slave_1: left promiscuous mode [ 644.574568][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.574585][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.638603][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.638631][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.771537][ T58] veth1_macvtap: left promiscuous mode [ 644.771814][ T58] veth1_vlan: left promiscuous mode [ 644.771995][ T58] veth0_vlan: left promiscuous mode [ 646.721133][T14015] netlink: 'syz.0.3358': attribute type 4 has an invalid length. [ 646.721155][T14015] netlink: 'syz.0.3358': attribute type 5 has an invalid length. [ 646.721167][T14015] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3358'. [ 648.338631][ T58] team0 (unregistering): Port device team_slave_1 removed [ 648.635690][ T58] team0 (unregistering): Port device team_slave_0 removed [ 649.755695][T12558] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 649.904964][T12558] usb 4-1: Using ep0 maxpacket: 8 [ 649.909361][T12558] usb 4-1: unable to get BOS descriptor or descriptor too short [ 649.910767][T12558] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.910791][T12558] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.910828][T12558] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 649.913122][T12558] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 649.913138][T12558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.913148][T12558] usb 4-1: Product: syz [ 649.913155][T12558] usb 4-1: Manufacturer: syz [ 649.913162][T12558] usb 4-1: SerialNumber: syz [ 650.156356][T12558] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 650.210596][T12558] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 650.213595][T12558] usb 4-1: USB disconnect, device number 47 [ 650.273330][T14022] udevd[14022]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.525110][T14071] netlink: 'syz.2.3378': attribute type 4 has an invalid length. [ 652.525133][T14071] netlink: 'syz.2.3378': attribute type 5 has an invalid length. [ 652.525145][T14071] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3378'. [ 653.171412][T14080] binder: 14079:14080 ioctl 40046205 0 returned -22 [ 653.961074][T13857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 654.071135][T13857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 654.131761][T13857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 654.200251][T13857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 654.503400][T14106] netlink: 'syz.4.3389': attribute type 4 has an invalid length. [ 654.503419][T14106] netlink: 'syz.4.3389': attribute type 5 has an invalid length. [ 654.503431][T14106] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3389'. [ 654.666074][T13857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.719813][T13857] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.746472][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.746619][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.796816][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.804192][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.810745][T13857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.995614][T13857] veth0_vlan: entered promiscuous mode [ 656.036906][T13857] veth1_vlan: entered promiscuous mode [ 656.203439][T13857] veth0_macvtap: entered promiscuous mode [ 656.225314][T13857] veth1_macvtap: entered promiscuous mode [ 656.289128][T13857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.347108][T13857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.430984][ T3825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.433230][ T3825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.433465][ T3825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.433502][ T3825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.975086][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.975105][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.061070][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.061090][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.584938][T13326] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 659.754858][T13326] usb 4-1: Using ep0 maxpacket: 32 [ 659.757227][T13326] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 659.757254][T13326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.784656][T13326] usb 4-1: config 0 descriptor?? [ 659.998642][T13326] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 660.001027][T13326] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 660.001074][T13326] dib0700: firmware download failed at 7 with -22 [ 660.005726][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.006265][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.056022][T14205] random: crng reseeded on system resumption [ 660.135139][ T44] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 660.282801][T12558] usb 4-1: USB disconnect, device number 48 [ 660.289425][ T44] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 660.289449][ T44] usb 3-1: config 0 has no interface number 0 [ 660.292297][ T44] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 660.292323][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.292339][ T44] usb 3-1: Product: syz [ 660.292352][ T44] usb 3-1: Manufacturer: syz [ 660.292364][ T44] usb 3-1: SerialNumber: syz [ 660.371180][ T44] usb 3-1: config 0 descriptor?? [ 660.595295][ T44] qmi_wwan 3-1:0.19: probe with driver qmi_wwan failed with error -22 [ 660.615587][ T44] usb 3-1: USB disconnect, device number 49 [ 662.016623][T14257] netlink: 'syz.0.3438': attribute type 1 has an invalid length. [ 662.136040][T14263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3438'. [ 662.203113][T14257] bond1: entered promiscuous mode [ 662.205383][T14257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 662.241398][T14263] bond1: entered allmulticast mode [ 662.355868][T14257] bond1: (slave bridge1): making interface the new active one [ 662.355890][T14257] bridge1: entered promiscuous mode [ 662.356060][T14257] bridge1: entered allmulticast mode [ 662.360367][T14257] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 662.384939][ T5891] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 662.536583][ T5891] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 662.536604][ T5891] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 662.536617][ T5891] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 662.536637][ T5891] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 662.536648][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.540896][T14260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 662.615625][ T5891] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 662.616199][ T5891] usb 3-1: invalid MIDI out EP 0 [ 662.832236][ T5891] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 662.860268][T14275] udevd[14275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.886629][ T5891] usb 3-1: USB disconnect, device number 50 [ 663.356171][T14287] batadv_slave_1: entered promiscuous mode [ 663.357456][T14285] batadv_slave_1: left promiscuous mode [ 663.459034][T14289] netlink: 6028 bytes leftover after parsing attributes in process `syz.3.3448'. [ 663.882556][T14309] netlink: 'syz.2.3456': attribute type 4 has an invalid length. [ 665.416931][T14328] batadv_slave_1: entered promiscuous mode [ 665.417269][T14327] batadv_slave_1: left promiscuous mode [ 665.980513][T14332] netlink: 6028 bytes leftover after parsing attributes in process `syz.1.3466'. [ 666.298946][T14335] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3467'. [ 667.819313][T14360] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.3478'. [ 669.081333][T14375] netlink: 'syz.4.3483': attribute type 4 has an invalid length. [ 669.081354][T14375] netlink: 'syz.4.3483': attribute type 5 has an invalid length. [ 669.081366][T14375] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3483'. [ 669.474934][ T31] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 669.668336][ T31] usb 4-1: config 0 has an invalid interface number: 19 but max is 0 [ 669.668361][ T31] usb 4-1: config 0 has no interface number 0 [ 669.672101][ T31] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 669.672127][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.672145][ T31] usb 4-1: Product: syz [ 669.672158][ T31] usb 4-1: Manufacturer: syz [ 669.672170][ T31] usb 4-1: SerialNumber: syz [ 669.688119][ T31] usb 4-1: config 0 descriptor?? [ 669.943478][ T31] qmi_wwan 4-1:0.19: probe with driver qmi_wwan failed with error -22 [ 670.068274][ T31] usb 4-1: USB disconnect, device number 49 [ 670.825118][T14396] batadv_slave_1: entered promiscuous mode [ 670.857064][T14394] batadv_slave_1: left promiscuous mode [ 671.075848][T14410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3497'. [ 671.075909][T14410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3497'. [ 672.604908][T13945] Bluetooth: hci5: command 0x0406 tx timeout [ 673.758216][ T44] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 673.936798][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.936814][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 673.937810][ T44] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 673.937825][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 673.937835][ T44] usb 4-1: SerialNumber: syz [ 674.256423][ T44] usb 4-1: 0:2 : does not exist [ 674.283090][ T44] usb 4-1: USB disconnect, device number 50 [ 674.500391][T14022] udevd[14022]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 674.933948][T14449] netlink: 'syz.2.3511': attribute type 4 has an invalid length. [ 674.933962][T14449] netlink: 'syz.2.3511': attribute type 5 has an invalid length. [ 674.933969][T14449] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3511'. [ 675.864879][ T31] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 676.015395][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 676.018104][ T31] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 676.018130][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.112738][ T31] usb 4-1: config 0 descriptor?? [ 676.330813][ T31] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 676.362176][T14461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.364143][T14461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.383255][ T31] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 676.383313][ T31] dib0700: firmware download failed at 7 with -22 [ 676.451358][T14461] random: crng reseeded on system resumption [ 676.756026][ T31] usb 4-1: USB disconnect, device number 51 [ 677.425473][T14497] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.3534'. [ 677.945927][T14513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3543'. [ 678.174920][T13326] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 678.337201][T13326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.337224][T13326] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.338983][T13326] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 678.339007][T13326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 678.339026][T13326] usb 4-1: SerialNumber: syz [ 678.609790][T13326] usb 4-1: 0:2 : does not exist [ 678.647680][T13326] usb 4-1: USB disconnect, device number 52 [ 678.716475][T14022] udevd[14022]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.404967][T13326] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 679.573738][T13326] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 679.573767][T13326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.573820][T13326] usb 1-1: Product: syz [ 679.573833][T13326] usb 1-1: Manufacturer: syz [ 679.573845][T13326] usb 1-1: SerialNumber: syz [ 679.625100][T13326] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 679.729969][ T31] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 680.892270][ T31] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 680.892735][ T31] ath9k_htc: Failed to initialize the device [ 680.905671][T13326] usb 1-1: USB disconnect, device number 42 [ 680.955091][T13326] usb 1-1: ath9k_htc: USB layer deinitialized [ 680.961178][ C1] vkms_vblank_simulate: vblank timer overrun [ 680.962024][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 681.005029][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.011482][T12558] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 681.166656][T12558] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.166678][T12558] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.167648][T12558] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 681.167663][T12558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 681.167673][T12558] usb 3-1: SerialNumber: syz [ 681.386159][T12558] usb 3-1: 0:2 : does not exist [ 681.511126][T12558] usb 3-1: USB disconnect, device number 51 [ 682.057572][T13326] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 682.205149][T13326] usb 1-1: Using ep0 maxpacket: 8 [ 682.209286][T13326] usb 1-1: unable to get BOS descriptor or descriptor too short [ 682.211886][T13326] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.211907][T13326] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.211943][T13326] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 682.260452][T13326] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 682.260482][T13326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.260500][T13326] usb 1-1: Product: syz [ 682.260512][T13326] usb 1-1: Manufacturer: syz [ 682.260531][T13326] usb 1-1: SerialNumber: syz [ 682.539104][T13326] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 682.592410][T13326] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 682.604490][T13326] usb 1-1: USB disconnect, device number 43 [ 682.650759][T14022] udevd[14022]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 683.344882][T13326] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 683.497958][T13326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.497983][T13326] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.499493][T13326] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 683.499516][T13326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 683.499534][T13326] usb 4-1: SerialNumber: syz [ 683.776167][T13326] usb 4-1: 0:2 : does not exist [ 683.835989][T13326] usb 4-1: USB disconnect, device number 53 [ 683.919968][T14022] udevd[14022]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.659127][T14668] binder: 14667:14668 ioctl 40046205 0 returned -22 [ 685.917764][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.917837][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.607248][T14731] binder: 14730:14731 ioctl 40046205 0 returned -22 [ 691.230538][T14761] netlink: 'syz.1.3649': attribute type 1 has an invalid length. [ 691.322683][T14766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3649'. [ 691.340922][T14761] bond1: entered promiscuous mode [ 691.341397][T14761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.501739][T14761] bond1: (slave bridge1): making interface the new active one [ 691.501760][T14761] bridge1: entered promiscuous mode [ 691.502798][T14761] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 691.963493][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3657'. [ 692.484883][T13326] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 692.637438][T13326] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 692.637455][T13326] usb 2-1: config 0 has no interface number 0 [ 692.639404][T13326] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 692.639419][T13326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.639429][T13326] usb 2-1: Product: syz [ 692.639436][T13326] usb 2-1: Manufacturer: syz [ 692.639443][T13326] usb 2-1: SerialNumber: syz [ 692.643063][T13326] usb 2-1: config 0 descriptor?? [ 692.849921][T13326] qmi_wwan 2-1:0.19: probe with driver qmi_wwan failed with error -22 [ 692.868489][T13326] usb 2-1: USB disconnect, device number 46 [ 694.268361][T14822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3673'. [ 696.301768][T14857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3685'. [ 697.485324][ T31] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 697.691169][ T31] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 697.691196][ T31] usb 1-1: config 0 has no interface number 0 [ 697.693747][ T31] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 697.693826][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.693844][ T31] usb 1-1: Product: syz [ 697.693857][ T31] usb 1-1: Manufacturer: syz [ 697.693869][ T31] usb 1-1: SerialNumber: syz [ 697.752886][ T31] usb 1-1: config 0 descriptor?? [ 698.030191][ T31] qmi_wwan 1-1:0.19: probe with driver qmi_wwan failed with error -22 [ 698.075276][ T31] usb 1-1: USB disconnect, device number 44 [ 698.208918][T13945] Bluetooth: hci1: command 0x0406 tx timeout [ 699.184422][T14895] binder: BINDER_SET_CONTEXT_MGR already set [ 699.184469][T14895] binder: 14887:14895 ioctl 4018620d 200000000040 returned -16 [ 702.978374][T14926] binder: 14925:14926 ioctl c0306201 200000000640 returned -22 [ 703.337243][T14933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3718'. [ 703.624182][T14942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3720'. [ 703.624244][T14942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3720'. [ 706.814901][ T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 706.977382][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.977407][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.977447][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 706.977465][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 706.979039][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 706.979063][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 706.979081][ T31] usb 1-1: SerialNumber: syz [ 707.275315][ T31] usb 1-1: 0:2 : does not exist [ 707.275404][ T31] usb 1-1: unit 5 not found! [ 707.309522][ T31] usb 1-1: USB disconnect, device number 45 [ 707.437771][T14022] udevd[14022]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.684961][T12558] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 709.847529][T12558] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.847554][T12558] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 709.849132][T12558] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 709.849157][T12558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 709.849175][T12558] usb 5-1: SerialNumber: syz [ 710.134293][T12558] usb 5-1: 0:2 : does not exist [ 710.134343][T12558] usb 5-1: unit 5 not found! [ 710.249573][T12558] usb 5-1: USB disconnect, device number 50 [ 710.374113][T14022] udevd[14022]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.514917][ T5891] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 712.693022][ T5891] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 712.693048][ T5891] usb 5-1: config 0 has no interface number 0 [ 712.705629][ T5891] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 712.705657][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.705675][ T5891] usb 5-1: Product: syz [ 712.705688][ T5891] usb 5-1: Manufacturer: syz [ 712.705700][ T5891] usb 5-1: SerialNumber: syz [ 712.747199][ T5891] usb 5-1: config 0 descriptor?? [ 712.868410][T15059] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.3763'. [ 712.957228][ T5891] qmi_wwan 5-1:0.19: probe with driver qmi_wwan failed with error -22 [ 713.040343][ T5891] usb 5-1: USB disconnect, device number 51 [ 713.720329][T15081] binder: BINDER_SET_CONTEXT_MGR already set [ 713.720352][T15081] binder: 15073:15081 ioctl 4018620d 200000000040 returned -16 [ 714.457312][T15090] netlink: 'syz.0.3777': attribute type 4 has an invalid length. [ 714.457335][T15090] netlink: 'syz.0.3777': attribute type 5 has an invalid length. [ 714.457347][T15090] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3777'. [ 714.968486][T15101] binder: 15100:15101 ioctl 40046205 0 returned -22 [ 715.155886][T15081] syz.2.3773 (15081): drop_caches: 2 [ 715.716439][T15117] netlink: 'syz.1.3789': attribute type 4 has an invalid length. [ 715.716459][T15117] netlink: 'syz.1.3789': attribute type 5 has an invalid length. [ 715.716470][T15117] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3789'. [ 715.731085][T15118] macsec0: entered promiscuous mode [ 715.731308][T15118] macsec0: entered allmulticast mode [ 715.731319][T15118] veth1_macvtap: entered allmulticast mode [ 716.264890][T13326] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 716.415018][T13326] usb 3-1: Using ep0 maxpacket: 16 [ 716.417568][T13326] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 716.417592][T13326] usb 3-1: config 0 has no interface number 0 [ 716.417639][T13326] usb 3-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 716.471169][T13326] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 716.471197][T13326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.471215][T13326] usb 3-1: Product: syz [ 716.471228][T13326] usb 3-1: Manufacturer: syz [ 716.471240][T13326] usb 3-1: SerialNumber: syz [ 716.499429][T15144] netlink: 'syz.1.3800': attribute type 1 has an invalid length. [ 716.517130][T13326] usb 3-1: config 0 descriptor?? [ 716.520085][T15127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 716.587087][T13326] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 716.626360][T15149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3800'. [ 716.743469][T15144] bond2: entered promiscuous mode [ 716.743979][T15144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 716.754940][T12558] usb 3-1: USB disconnect, device number 52 [ 716.764947][ T43] usb 3-1: Failed to submit usb control message: -71 [ 716.764982][ T43] usb 3-1: unable to send the bmi data to the device: -71 [ 716.764998][ T43] usb 3-1: unable to get target info from device [ 716.765021][ T43] usb 3-1: could not get target info (-71) [ 716.765365][ T43] usb 3-1: could not probe fw (-71) [ 717.063529][T15149] bond2: (slave bridge2): making interface the new active one [ 717.065120][T15149] bridge2: entered promiscuous mode [ 717.137060][T15149] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 718.377690][T15172] dns_resolver: Unsupported server list version (0) [ 719.937728][T15197] netlink: 'syz.2.3816': attribute type 4 has an invalid length. [ 719.937749][T15197] netlink: 'syz.2.3816': attribute type 5 has an invalid length. [ 719.937761][T15197] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3816'. [ 720.310794][T15204] macsec0: entered promiscuous mode [ 720.311022][T15204] macsec0: entered allmulticast mode [ 720.311035][T15204] veth1_macvtap: entered allmulticast mode [ 721.601929][T15247] dns_resolver: Unsupported server list version (0) [ 721.744001][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 721.744020][ T37] audit: type=1326 audit(1763492050.892:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15249 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a847f6c9 code=0x7ffc0000 [ 721.744318][ T37] audit: type=1326 audit(1763492050.892:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15249 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f80a847f6c9 code=0x7ffc0000 [ 721.744576][ T37] audit: type=1326 audit(1763492050.892:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15249 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a847f6c9 code=0x7ffc0000 [ 721.784167][ T37] audit: type=1326 audit(1763492050.892:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15249 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a847f6c9 code=0x7ffc0000 [ 723.795920][T15286] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.3854'. [ 724.585999][T15312] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.597813][T15347] capability: warning: `syz.4.3881' uses 32-bit capabilities (legacy support in use) [ 727.585816][T12556] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 727.689015][T15364] netlink: 'syz.0.3885': attribute type 4 has an invalid length. [ 727.738318][T12556] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 727.738339][T12556] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 727.738352][T12556] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 727.738373][T12556] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 727.738385][T12556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.766812][T15360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 727.818873][T12556] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 727.822349][T12556] usb 2-1: invalid MIDI out EP 0 [ 728.193851][T14036] udevd[14036]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.306401][T12556] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 728.390614][T12556] usb 2-1: USB disconnect, device number 47 [ 728.935136][T13945] Bluetooth: hci2: command 0x0406 tx timeout [ 729.864146][T12556] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 730.024973][T12556] usb 4-1: Using ep0 maxpacket: 8 [ 730.035842][T12556] usb 4-1: unable to get BOS descriptor or descriptor too short [ 730.038133][T12556] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.038155][T12556] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 730.038190][T12556] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 730.051435][T12556] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 730.051471][T12556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.051489][T12556] usb 4-1: Product: syz [ 730.051501][T12556] usb 4-1: Manufacturer: syz [ 730.051513][T12556] usb 4-1: SerialNumber: syz [ 730.320950][T12556] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 730.448850][T12556] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 730.463881][T12556] usb 4-1: USB disconnect, device number 54 [ 730.533624][T14022] udevd[14022]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.806729][T15428] netlink: 'syz.4.3910': attribute type 4 has an invalid length. [ 731.292813][T15441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3918'. [ 731.754963][T13326] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 731.840219][T15451] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.917236][T13326] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 731.917258][T13326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.917268][T13326] usb 1-1: Product: syz [ 731.917275][T13326] usb 1-1: Manufacturer: syz [ 731.917282][T13326] usb 1-1: SerialNumber: syz [ 731.981874][T13326] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 732.021387][T13815] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 733.169483][T13815] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 733.169611][T13815] ath9k_htc: Failed to initialize the device [ 733.202244][ T5957] usb 1-1: USB disconnect, device number 46 [ 733.266055][ T5957] usb 1-1: ath9k_htc: USB layer deinitialized [ 733.715252][T15444] ------------[ cut here ]------------ [ 733.715273][T15444] WARNING: CPU: 1 PID: 15444 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 733.715324][T15444] Modules linked in: [ 733.715358][T15444] CPU: 1 UID: 0 PID: 15444 Comm: syz.0.3921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 733.715379][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 733.715394][T15444] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 733.715419][T15444] Code: c7 c7 10 44 c5 8e 48 c7 c6 cb 26 da 8c 48 c7 c2 aa fc d8 8c 4c 89 f9 e8 72 4b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 2e 04 09 0f 1f 40 00 90 90 [ 733.715435][T15444] RSP: 0018:ffffc90006237d00 EFLAGS: 00010206 [ 733.715450][T15444] RAX: 5f5dfa571f04b400 RBX: ffff8881447a7d00 RCX: 0000000000000000 [ 733.715484][T15444] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 733.715496][T15444] RBP: ffffc90006237e68 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 733.715509][T15444] R10: dffffc0000000000 R11: fffffbfff1dac80f R12: 1ffff110047f5a6d [ 733.715523][T15444] R13: 0000000000000000 R14: ffff8881447a7d08 R15: ffff888029d95a00 [ 733.715536][T15444] FS: 000055558f123500(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 733.715551][T15444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 733.715564][T15444] CR2: 000055557483f5c8 CR3: 00000000390aa000 CR4: 00000000003526f0 [ 733.715580][T15444] Call Trace: [ 733.715591][T15444] [ 733.715602][T15444] do_exit+0x105/0x2300 [ 733.715636][T15444] ? rt_mutex_slowunlock+0x493/0x8a0 [ 733.715662][T15444] ? __pfx_do_exit+0x10/0x10 [ 733.715687][T15444] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 733.715717][T15444] ? rt_spin_unlock+0x161/0x200 [ 733.715741][T15444] do_group_exit+0x21c/0x2d0 [ 733.715764][T15444] __x64_sys_exit_group+0x3f/0x40 [ 733.715781][T15444] x64_sys_call+0x21f7/0x2200 [ 733.715800][T15444] do_syscall_64+0xfa/0xfa0 [ 733.715825][T15444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.715842][T15444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 733.715860][T15444] ? clear_bhb_loop+0x60/0xb0 [ 733.715882][T15444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.715900][T15444] RIP: 0033:0x7fd86a4cf6c9 [ 733.715921][T15444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.715936][T15444] RSP: 002b:00007ffc9efd8cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 733.715955][T15444] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd86a4cf6c9 [ 733.715968][T15444] RDX: 00007fd869731000 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.715980][T15444] RBP: 00007ffc9efd8d1c R08: 0000000000004304 R09: 00000000000927c0 [ 733.715992][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000c6 [ 733.716004][T15444] R13: 00000000000927c0 R14: 00000000000b27d1 R15: 00007ffc9efd8d70 [ 733.716037][T15444] [ 733.716051][T15444] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 733.716064][T15444] CPU: 1 UID: 0 PID: 15444 Comm: syz.0.3921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 733.716084][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 733.716095][T15444] Call Trace: [ 733.716102][T15444] [ 733.716110][T15444] dump_stack_lvl+0x99/0x250 [ 733.716137][T15444] ? __asan_memcpy+0x40/0x70 [ 733.716158][T15444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.716184][T15444] ? __pfx__printk+0x10/0x10 [ 733.716220][T15444] vpanic+0x237/0x6d0 [ 733.716237][T15444] ? __pfx_vpanic+0x10/0x10 [ 733.716266][T15444] panic+0xb9/0xc0 [ 733.716283][T15444] ? __pfx_panic+0x10/0x10 [ 733.716325][T15444] __warn+0x31b/0x4b0 [ 733.716341][T15444] ? kcov_task_exit+0x13c/0x150 [ 733.716367][T15444] ? kcov_task_exit+0x13c/0x150 [ 733.716390][T15444] report_bug+0x2be/0x4f0 [ 733.716414][T15444] ? kcov_task_exit+0x13c/0x150 [ 733.716436][T15444] ? kcov_task_exit+0x13c/0x150 [ 733.716458][T15444] ? kcov_task_exit+0x13e/0x150 [ 733.716480][T15444] handle_bug+0x84/0x160 [ 733.716498][T15444] exc_invalid_op+0x1a/0x50 [ 733.716517][T15444] asm_exc_invalid_op+0x1a/0x20 [ 733.716534][T15444] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 733.716573][T15444] Code: c7 c7 10 44 c5 8e 48 c7 c6 cb 26 da 8c 48 c7 c2 aa fc d8 8c 4c 89 f9 e8 72 4b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 2e 04 09 0f 1f 40 00 90 90 [ 733.716590][T15444] RSP: 0018:ffffc90006237d00 EFLAGS: 00010206 [ 733.716613][T15444] RAX: 5f5dfa571f04b400 RBX: ffff8881447a7d00 RCX: 0000000000000000 [ 733.716626][T15444] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 733.716639][T15444] RBP: ffffc90006237e68 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 733.716653][T15444] R10: dffffc0000000000 R11: fffffbfff1dac80f R12: 1ffff110047f5a6d [ 733.716667][T15444] R13: 0000000000000000 R14: ffff8881447a7d08 R15: ffff888029d95a00 [ 733.716699][T15444] ? rt_spin_lock+0x1c1/0x3e0 [ 733.716740][T15444] do_exit+0x105/0x2300 [ 733.716777][T15444] ? rt_mutex_slowunlock+0x493/0x8a0 [ 733.716800][T15444] ? __pfx_do_exit+0x10/0x10 [ 733.716823][T15444] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 733.716852][T15444] ? rt_spin_unlock+0x161/0x200 [ 733.716875][T15444] do_group_exit+0x21c/0x2d0 [ 733.716898][T15444] __x64_sys_exit_group+0x3f/0x40 [ 733.716914][T15444] x64_sys_call+0x21f7/0x2200 [ 733.716931][T15444] do_syscall_64+0xfa/0xfa0 [ 733.716953][T15444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.716970][T15444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 733.716987][T15444] ? clear_bhb_loop+0x60/0xb0 [ 733.717009][T15444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.717026][T15444] RIP: 0033:0x7fd86a4cf6c9 [ 733.717041][T15444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.717056][T15444] RSP: 002b:00007ffc9efd8cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 733.717074][T15444] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd86a4cf6c9 [ 733.717087][T15444] RDX: 00007fd869731000 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.717099][T15444] RBP: 00007ffc9efd8d1c R08: 0000000000004304 R09: 00000000000927c0 [ 733.717111][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000c6 [ 733.717123][T15444] R13: 00000000000927c0 R14: 00000000000b27d1 R15: 00007ffc9efd8d70 [ 733.717154][T15444] [ 733.717525][T15444] Kernel Offset: disabled