last executing test programs: 7.685326124s ago: executing program 0 (id=10650): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) r4 = getpid() syz_pidfd_open(r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 7.381385028s ago: executing program 4 (id=10654): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 7.2416234s ago: executing program 4 (id=10657): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff8d0100"}) 7.038834843s ago: executing program 4 (id=10660): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) 6.555317364s ago: executing program 0 (id=10664): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x91, 0x8e, 0xbd, 0x8, 0x3f0, 0x581d, 0xd736, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x20, 0xa, [{{0x9, 0x4, 0x96, 0xb, 0x2, 0xff, 0x1, 0x7, 0x6c, [], [{{0x9, 0x5, 0xc, 0x0, 0x2ff, 0x8, 0x7, 0x80}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x8, 0x22, 0x1}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xa, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40f}}, {0x6e, &(0x7f0000000640)=@string={0x6e, 0x3, "4853b7fd0a192ae997bbb144e3a1381c194e5fe9abb1681096d250331de7dd3b6c47a195798be374dce026d3df20b30047598c804171a35906d1d25ffb85502bf7e9bf65931961494299d7cfbbd0f3488c2edbbb1376a1b5f4a43b2d84c4bd08ed7ccecd70206ee3517a243a"}}, {0xee, &(0x7f0000000540)=@string={0xee, 0x3, "cd37281f00aeeac028550f0150e0742b8bc283a62104311f27c4cf87f4c01b57a8bbb3ce1e678d8171fcfb7c23a596ad08f0d4d45e91cfdd31e9d49ce111ecf9e85351115d90416e700b00073bbccf73b270982865e533bffe9b0db310a993deecdaac6f2bf713d6e5ff3f667bceca66e563058e7c94a06af868d4351b1943124b5bfeea21bdbcd323542cae14a46f00632f99fe63bc92afbf81dd7e7335395dd1fd09856663dadfcd62c89b80072a7351b68878fe921a087a7e300ab49276c45b57f77ed3a91ae0ef594ad72c16b4059705083ebca85bf8735cb8ea508ca34f783c96d218fb93e421ad9a90"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x24, &(0x7f0000000200)=@string={0x24, 0x3, "5dd88755883f647f19e7f34d2920b375f4b6ac5cdc39e43b6a743d1eed5a8859861c"}}, {0x7f, &(0x7f0000000340)=@string={0x7f, 0x3, "f440cd06000000000000002aa5fe5ed4380b23df6f18f4547ed8f5ea961168db1f8114b55957ca704c2571d3f4356bec0c51754d51d5ce5e85f09e3085aa71b27fc1026a43e2baebe9b729d749ed97d201ae69d59c0149f12127aa69e3c3c819f8cc028db1e623ed3c6852a15607fded7495bdc5333efac7444936e65c"}}, {0xb8, &(0x7f00000003c0)=@string={0xb8, 0x3, "0b9c0d66b8bd22c967ea0835f9d09f3ceef8ea6281475571831b715da7c2f31a0c88c046f89d04243664c8d88c3b729825be9a89fa14b36c38b8cc4009ab01b07b00d277c29934788e178241d7eadb1e20cd3c1a90e9c703c4e9f4fe0de60ea471928aaf9fe1073bdd836bf287b747e68e399ab4ebefd5061b8ff8e7c5515f2b17efb623a727d3e4b700fac17147b46d6cebd114fbf156e0c368863dfa994deaf2dee0d1075f21d3da3668a6c995588c174775eb5bef"}}]}) 5.26760392s ago: executing program 0 (id=10679): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040000) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) 5.092157602s ago: executing program 0 (id=10682): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5e114b66, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000040)=ANY=[@ANYBLOB="2639d055"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1001004, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000e51, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.658996535s ago: executing program 0 (id=10689): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000040)={0x2, r4}) 4.365413432s ago: executing program 1 (id=10695): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-6:5/'], 0x31) 4.130233735s ago: executing program 1 (id=10698): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r6, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x62020680) 3.936958071s ago: executing program 4 (id=10702): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 3.563635887s ago: executing program 1 (id=10706): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@nodevmap}], [], 0x6b}}) 3.517342887s ago: executing program 2 (id=10708): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-6:5/'], 0x31) 3.317803578s ago: executing program 2 (id=10710): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) 3.076288524s ago: executing program 1 (id=10712): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 2.824807104s ago: executing program 1 (id=10715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5e114b66, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000040)=ANY=[@ANYBLOB="2639d055"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1001004, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000e51, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.485851147s ago: executing program 4 (id=10717): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x6}, {0x3, 0xfff2}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.268043101s ago: executing program 1 (id=10719): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 1.873717531s ago: executing program 2 (id=10722): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r1, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r6, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) 1.741333966s ago: executing program 0 (id=10724): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040000) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) 1.731250235s ago: executing program 2 (id=10725): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 1.471788733s ago: executing program 2 (id=10727): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1.2210309s ago: executing program 3 (id=10730): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) syz_emit_ethernet(0xe58, &(0x7f0000001500)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010526", 0xe22, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1f, 0x18, "9df8869c24c505b7d471402a31e6ea98307116e5d84627360d9f4ded8e743b0a5631de7eb2af6781b38261e2ca88016e2bf001896cdfa7fc8170ab9adb87a391d8e02124fa9dfc4d572402ea66f17f88eeb6f25953faff57b27820bfe984332773e6f52bd686cf5e7bd0796180260e419b51620df7e8d9a8fc812c38cde15d9ae250850e519b044586e7bd0537f0b62ff3ee6e1b592140da9cef727f98361e77ad3c9c574dc00f3813d78ec38bf0639a73f5620eb2712015d39bbf81edc0ee2334608a65"}, {0x22, 0x3, "0e8ea79a6ce39825120e696373c2cb5b842a188554365f"}, {0x18, 0x8, "164812996b35d1b9e2f009bfa0918189ad27dd4a3d46585c7d16ce907c5504011d36dea981a80b504f997c2ed526ad05711a33c9b09415e65278bdb063fd5588fc"}, {0x0, 0x11, "b5fbe47cdb0b36345cc09f83e901dae4e362a963a13d4e5a77cd4635f762afac9637356d83e8410668207a283af51ec73dcccd5e34b888c9d6caf39b588d14ba163d0397375dfb1cb3f3a525b67095c43745f91ac908c1af4a0e62cc0730bb558e8a52746023e8f17ff22a41f825a7acb5902c8b2983e30fa5c18e28bcbc5ef7151c720cb0bf141365"}, {0xe, 0x19, "37ee356bee650bdd6af02cea4cad621cf827ed7ecb805aac800dcc61eae89f6d389087b862cf9558a7a289b4b959ba78102a42520fabfcd675eb5da12d23af9b213046ebfe548c661623d918704b93e0e8c093bb33c345ed4ef134f209875aae46e8c5687fead9814b3add68478c4ca286bb4e3419e54c20df53b7c7f256093a0e04867445fd011a78cfad22ac7ad2db83e0648fe231839ae93cc75254879267f4327ef43aa4739e70f9578f96825c35f9642d3f4df76bd6ff7612674ae9189c4cceedccc72228"}, {0x5, 0xd, "2890ab98d2047b0789f6e5e4ab99c79937d655f7876ca184567615000e9ac4aedcbeccbec4fa8ffeec4e3e94d0da137df21b2b6d4b16ae78bcb72d4f797d51192b56f4bf2922764899880660eedc0194bffc872df8a661bb891a4d118f560e11c5eaab7fe8e436799d26d5fd"}, {0x1f, 0x7, "0f078023085bc803dc3c68c0c4e6e790e139b1650b0dbd28073aae4aa7d13e92eab598a25147b369a7d2585c1d562f2c40b6b20c730e4236a6b856e3"}, {0x1f, 0x9, "87b62409876b32a091ad326971e24d0c74d96b20f59e34c1afef8d39b944eb7f0a49d314c3bbe43250158a11806d0784a37b9a3f3bd14e34b971a03cab740eb95caccb968bcf478e"}, {0x1, 0x155, "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"}]}}}}}}, 0x0) 1.148538661s ago: executing program 2 (id=10731): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="ea", 0x1}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0) 1.138548966s ago: executing program 3 (id=10732): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r6, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x62020680) 921.31039ms ago: executing program 3 (id=10733): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r7, 0x0, 0xd, &(0x7f0000000240)=0x7, 0x4) 765.857352ms ago: executing program 3 (id=10734): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000040)={0x2, r4}) 624.270869ms ago: executing program 3 (id=10735): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x2e, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9e, 0x3, 0x5, 0x0, 0xa, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0xb, 0x3000, 0xe6e78c00, [0x0, 0x401, 0x7, 0xc5]}) 461.278978ms ago: executing program 4 (id=10736): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@nodevmap}], [], 0x6b}}) 0s ago: executing program 3 (id=10737): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): roduct=0b07, bcdDevice=6c.b9 [ 1119.694914][T20476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.694937][T20476] usb 4-1: Product: syz [ 1119.694953][T20476] usb 4-1: Manufacturer: syz [ 1119.694968][T20476] usb 4-1: SerialNumber: syz [ 1119.784985][T20752] veth1_macvtap: entered promiscuous mode [ 1119.914535][T20752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.012088][T20476] uvcvideo 4-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1120.012126][T20476] uvcvideo 4-1:220.0: No valid video chain found. [ 1120.017115][T20752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.045474][T20476] usb 4-1: USB disconnect, device number 25 [ 1120.059819][ T90] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.060137][ T90] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.089871][ T90] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.099575][ T90] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.496903][T10811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.496938][T10811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.598909][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.598933][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.193430][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.193507][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.585837][ T5907] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1122.589005][T21103] 9pnet_fd: Insufficient options for proto=fd [ 1122.740995][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 1122.743588][ T5907] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1122.743618][ T5907] usb 4-1: config 0 has no interface number 0 [ 1122.743659][ T5907] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1122.747860][ T5907] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1122.747893][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.747919][ T5907] usb 4-1: Product: syz [ 1122.747936][ T5907] usb 4-1: Manufacturer: syz [ 1122.747955][ T5907] usb 4-1: SerialNumber: syz [ 1122.765091][ T5907] usb 4-1: config 0 descriptor?? [ 1122.788298][ T5907] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 1122.979730][ T5907] usb 4-1: USB disconnect, device number 26 [ 1124.208020][T21124] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6606'. [ 1124.799406][T21142] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6611'. [ 1126.955396][T21180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6632'. [ 1128.386080][T18996] Bluetooth: hci5: command 0x0406 tx timeout [ 1131.004162][T21273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.310185][T21273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.059613][T21288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6681'. [ 1133.295665][ T5788] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1133.448166][ T5788] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 1133.448195][ T5788] usb 3-1: config 0 has no interface number 0 [ 1133.454256][ T5788] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1133.454285][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.454305][ T5788] usb 3-1: Product: syz [ 1133.454321][ T5788] usb 3-1: Manufacturer: syz [ 1133.454335][ T5788] usb 3-1: SerialNumber: syz [ 1133.517318][ T5788] usb 3-1: config 0 descriptor?? [ 1133.700833][T21324] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6699'. [ 1133.777070][ T5788] option 3-1:0.19: GSM modem (1-port) converter detected [ 1133.864107][ T5788] usb 3-1: USB disconnect, device number 17 [ 1134.022950][ T5788] option 3-1:0.19: device disconnected [ 1134.037917][T21332] tmpfs: Unsupported parameter 'huge' [ 1134.842387][T21352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6712'. [ 1138.057222][ T5907] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1138.210271][ T5907] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.210301][ T5907] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1138.210345][ T5907] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1138.213522][ T5907] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1138.213554][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.213577][ T5907] usb 5-1: Product: syz [ 1138.213593][ T5907] usb 5-1: Manufacturer: syz [ 1138.213609][ T5907] usb 5-1: SerialNumber: syz [ 1138.509885][ T5907] uvcvideo 5-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1138.509922][ T5907] uvcvideo 5-1:220.0: No valid video chain found. [ 1138.532144][ T5907] usb 5-1: USB disconnect, device number 29 [ 1138.619731][T21388] tmpfs: Unsupported parameter 'huge' [ 1143.715646][ T5788] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1143.865643][ T5788] usb 1-1: Using ep0 maxpacket: 16 [ 1143.867844][ T5788] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1143.867868][ T5788] usb 1-1: config 0 has no interface number 0 [ 1143.867897][ T5788] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1143.870999][ T5788] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1143.871029][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.871052][ T5788] usb 1-1: Product: syz [ 1143.871069][ T5788] usb 1-1: Manufacturer: syz [ 1143.871085][ T5788] usb 1-1: SerialNumber: syz [ 1143.935181][ T5788] usb 1-1: config 0 descriptor?? [ 1143.944909][ T5788] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 1144.158101][ T31] usb 1-1: USB disconnect, device number 21 [ 1148.823782][T21455] 9pnet_fd: Insufficient options for proto=fd [ 1149.047385][T21461] loop5: detected capacity change from 0 to 7 [ 1149.676268][T21461] Dev loop5: unable to read RDB block 7 [ 1149.676328][T21461] loop5: unable to read partition table [ 1149.676581][T21461] loop5: partition table beyond EOD, truncated [ 1149.676616][T21461] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1149.990304][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1150.061962][T21477] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 1150.138284][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.138314][ T31] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1150.138353][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1150.141218][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1150.141247][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.141269][ T31] usb 2-1: Product: syz [ 1150.141284][ T31] usb 2-1: Manufacturer: syz [ 1150.141300][ T31] usb 2-1: SerialNumber: syz [ 1150.425817][ T31] uvcvideo 2-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1150.425856][ T31] uvcvideo 2-1:220.0: No valid video chain found. [ 1150.449878][ T31] usb 2-1: USB disconnect, device number 31 [ 1151.454838][T21503] loop5: detected capacity change from 0 to 7 [ 1152.105795][T21503] Dev loop5: unable to read RDB block 7 [ 1152.105851][T21503] loop5: unable to read partition table [ 1152.106098][T21503] loop5: partition table beyond EOD, truncated [ 1152.148825][T21503] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1152.560924][T21515] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6788'. [ 1152.935740][ T5907] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1153.090758][ T5907] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 1153.090786][ T5907] usb 3-1: config 0 has no interface number 0 [ 1153.119591][ T5907] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1153.119622][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.119643][ T5907] usb 3-1: Product: syz [ 1153.119658][ T5907] usb 3-1: Manufacturer: syz [ 1153.119672][ T5907] usb 3-1: SerialNumber: syz [ 1153.169349][ T5907] usb 3-1: config 0 descriptor?? [ 1153.377531][ T5907] option 3-1:0.19: GSM modem (1-port) converter detected [ 1153.407963][ T5907] usb 3-1: USB disconnect, device number 18 [ 1153.412881][ T5907] option 3-1:0.19: device disconnected [ 1153.495681][ T5870] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1153.655665][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 1153.658771][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1153.662569][ T5870] usb 5-1: config 2 has an invalid interface number: 184 but max is 0 [ 1153.662596][ T5870] usb 5-1: config 2 has no interface number 0 [ 1153.662678][ T5870] usb 5-1: config 2 interface 184 altsetting 200 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1153.662711][ T5870] usb 5-1: config 2 interface 184 altsetting 200 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.662742][ T5870] usb 5-1: config 2 interface 184 has no altsetting 0 [ 1153.679534][ T5870] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 2.2c [ 1153.679577][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.679612][ T5870] usb 5-1: Product: syz [ 1153.679632][ T5870] usb 5-1: Manufacturer: syz [ 1153.679655][ T5870] usb 5-1: SerialNumber: syz [ 1153.830366][T21537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6798'. [ 1153.830393][T21537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6798'. [ 1153.950139][T21537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6798'. [ 1153.950163][T21537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6798'. [ 1153.959009][ T5870] usb-storage 5-1:2.184: USB Mass Storage device detected [ 1153.973928][ T5870] usb-storage 5-1:2.184: Quirks match for vid 054c pid 002e: 1 [ 1153.995685][T18996] Bluetooth: hci0: command 0x0406 tx timeout [ 1154.155802][ T5870] usb 5-1: USB disconnect, device number 30 [ 1154.437120][T21553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.771011][T21553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1156.908301][T21593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.238835][T21593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.822084][T21606] tmpfs: Unsupported parameter 'huge' [ 1158.295686][ T5907] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1158.458709][ T5907] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 1158.458740][ T5907] usb 5-1: config 0 has no interface number 0 [ 1158.461775][ T5907] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1158.461822][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.461844][ T5907] usb 5-1: Product: syz [ 1158.461859][ T5907] usb 5-1: Manufacturer: syz [ 1158.461875][ T5907] usb 5-1: SerialNumber: syz [ 1158.524152][ T5907] usb 5-1: config 0 descriptor?? [ 1158.738569][ T5907] option 5-1:0.19: GSM modem (1-port) converter detected [ 1158.795108][ T5907] usb 5-1: USB disconnect, device number 31 [ 1158.816259][ T5907] option 5-1:0.19: device disconnected [ 1160.759138][T21648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.189287][T21648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.615260][T21668] 9pnet: Could not find request transport: fd0xffffffffffffffff18446744073709551615 [ 1166.733279][T21708] 9pnet: Could not find request transport: fd0xffffffffffffffff18446744073709551615 [ 1167.170342][T21713] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6879'. [ 1170.345689][ T5907] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1170.363260][ T5878] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1170.495643][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 1170.498104][ T5907] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1170.498129][ T5907] usb 1-1: config 0 has no interface number 0 [ 1170.498165][ T5907] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1170.501323][ T5907] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1170.501352][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.501374][ T5907] usb 1-1: Product: syz [ 1170.501389][ T5907] usb 1-1: Manufacturer: syz [ 1170.501405][ T5907] usb 1-1: SerialNumber: syz [ 1170.513863][ T5907] usb 1-1: config 0 descriptor?? [ 1170.532644][ T5907] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 1170.578777][ T5878] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 1170.578805][ T5878] usb 5-1: config 0 has no interface number 0 [ 1170.581880][ T5878] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1170.581908][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.581928][ T5878] usb 5-1: Product: syz [ 1170.581942][ T5878] usb 5-1: Manufacturer: syz [ 1170.581957][ T5878] usb 5-1: SerialNumber: syz [ 1170.632514][ T5878] usb 5-1: config 0 descriptor?? [ 1170.720289][ T5907] usb 1-1: USB disconnect, device number 22 [ 1170.845424][ T5878] option 5-1:0.19: GSM modem (1-port) converter detected [ 1170.864281][ T5878] usb 5-1: USB disconnect, device number 32 [ 1170.877066][ T5878] option 5-1:0.19: device disconnected [ 1171.047465][T21770] 9pnet_fd: Insufficient options for proto=fd [ 1174.463617][T21841] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6936'. [ 1175.790531][T21857] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6942'. [ 1177.937955][T21882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6954'. [ 1178.665656][ T5878] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1178.827916][ T5878] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.827943][ T5878] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1178.827978][ T5878] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1178.830964][ T5878] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1178.830993][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.831014][ T5878] usb 1-1: Product: syz [ 1178.831030][ T5878] usb 1-1: Manufacturer: syz [ 1178.831045][ T5878] usb 1-1: SerialNumber: syz [ 1179.123510][ T5878] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1179.123549][ T5878] uvcvideo 1-1:220.0: No valid video chain found. [ 1179.143574][ T5878] usb 1-1: USB disconnect, device number 23 [ 1179.625658][ T5878] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1179.765634][ T5878] usb 2-1: device descriptor read/64, error -71 [ 1180.005667][ T5878] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1180.135622][ T5878] usb 2-1: device descriptor read/64, error -71 [ 1180.246110][ T5878] usb usb2-port1: attempt power cycle [ 1180.578304][T21960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6991'. [ 1180.595168][ T5878] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1180.630974][ T5878] usb 2-1: device descriptor read/8, error -71 [ 1180.871259][ T5878] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1180.886441][ T5878] usb 2-1: device descriptor read/8, error -71 [ 1180.996069][ T5878] usb usb2-port1: unable to enumerate USB device [ 1181.790627][T21984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7004'. [ 1182.632806][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.632882][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.204166][T21996] loop5: detected capacity change from 0 to 7 [ 1183.782536][T21406] Dev loop5: unable to read RDB block 7 [ 1183.782643][T21406] loop5: unable to read partition table [ 1183.782936][T21406] loop5: partition table beyond EOD, truncated [ 1184.372139][T21996] Dev loop5: unable to read RDB block 7 [ 1184.372193][T21996] loop5: unable to read partition table [ 1184.372422][T21996] loop5: partition table beyond EOD, truncated [ 1184.372459][T21996] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1185.581584][T22004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7015'. [ 1186.657465][T22031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7028'. [ 1187.065698][ T5907] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1187.195795][ T5907] usb 4-1: device descriptor read/64, error -71 [ 1187.455627][ T5907] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1187.465700][ T5870] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1187.585656][ T5907] usb 4-1: device descriptor read/64, error -71 [ 1187.635662][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 1187.643142][ T5870] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1187.643165][ T5870] usb 1-1: config 0 has no interface number 0 [ 1187.643198][ T5870] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1187.649045][ T5870] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1187.649076][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.649098][ T5870] usb 1-1: Product: syz [ 1187.649112][ T5870] usb 1-1: Manufacturer: syz [ 1187.649128][ T5870] usb 1-1: SerialNumber: syz [ 1187.665094][ T5870] usb 1-1: config 0 descriptor?? [ 1187.696135][ T5907] usb usb4-port1: attempt power cycle [ 1187.699903][ T5870] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 1187.883945][ T5870] usb 1-1: USB disconnect, device number 24 [ 1188.035629][ T5907] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1188.056496][ T5907] usb 4-1: device descriptor read/8, error -71 [ 1188.295791][ T5907] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1188.316530][ T5907] usb 4-1: device descriptor read/8, error -71 [ 1188.426042][ T5907] usb usb4-port1: unable to enumerate USB device [ 1189.955625][T13164] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1190.109233][T13164] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 1190.109262][T13164] usb 2-1: config 0 has no interface number 0 [ 1190.111950][T13164] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1190.111978][T13164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.111998][T13164] usb 2-1: Product: syz [ 1190.112012][T13164] usb 2-1: Manufacturer: syz [ 1190.112025][T13164] usb 2-1: SerialNumber: syz [ 1190.120660][T13164] usb 2-1: config 0 descriptor?? [ 1190.330916][T13164] option 2-1:0.19: GSM modem (1-port) converter detected [ 1190.385937][T13164] usb 2-1: USB disconnect, device number 36 [ 1190.415473][T13164] option 2-1:0.19: device disconnected [ 1192.501422][ T38] audit: type=1326 audit(1763397899.692:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22130 comm="syz.2.7069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4ef00f6c9 code=0x0 [ 1192.625630][ T31] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1192.755662][ T31] usb 5-1: device descriptor read/64, error -71 [ 1193.005629][ T31] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1193.137292][ T31] usb 5-1: device descriptor read/64, error -71 [ 1193.248684][ T31] usb usb5-port1: attempt power cycle [ 1193.595660][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1193.625117][ T31] usb 5-1: device descriptor read/8, error -71 [ 1193.855681][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1193.887143][ T31] usb 5-1: device descriptor read/8, error -71 [ 1193.996871][ T31] usb usb5-port1: unable to enumerate USB device [ 1196.385643][T13164] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1196.566230][T13164] usb 5-1: device descriptor read/64, error -71 [ 1196.773937][T22176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7096'. [ 1196.805600][T13164] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1196.935629][T13164] usb 5-1: device descriptor read/64, error -71 [ 1197.056580][T13164] usb usb5-port1: attempt power cycle [ 1197.242011][T22191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.407214][T13164] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1197.427832][T13164] usb 5-1: device descriptor read/8, error -71 [ 1197.491198][T22191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.670456][T13164] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1197.686318][T13164] usb 5-1: device descriptor read/8, error -71 [ 1197.762121][T22205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7109'. [ 1197.795893][T13164] usb usb5-port1: unable to enumerate USB device [ 1200.067339][T18996] Bluetooth: hci3: command 0x0406 tx timeout [ 1200.255644][T13164] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1200.386017][T13164] usb 5-1: device descriptor read/64, error -71 [ 1200.625650][T13164] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1200.758579][T13164] usb 5-1: device descriptor read/64, error -71 [ 1200.772592][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7140'. [ 1200.772616][T22267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7140'. [ 1200.790705][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7140'. [ 1200.790725][T22267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7140'. [ 1200.867082][T13164] usb usb5-port1: attempt power cycle [ 1201.215921][T13164] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1201.237085][T13164] usb 5-1: device descriptor read/8, error -71 [ 1201.475641][T13164] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1201.499360][T13164] usb 5-1: device descriptor read/8, error -71 [ 1201.606065][T13164] usb usb5-port1: unable to enumerate USB device [ 1202.518125][T22287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7150'. [ 1202.897508][T22297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7156'. [ 1203.718670][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1203.718693][T22323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1203.815858][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1203.815881][T22323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1203.837738][T22327] 9pnet_fd: Insufficient options for proto=fd [ 1204.045736][T13164] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1204.238155][T13164] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.238180][T13164] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1204.238216][T13164] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1204.240723][T13164] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1204.240749][T13164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.240768][T13164] usb 2-1: Product: syz [ 1204.240782][T13164] usb 2-1: Manufacturer: syz [ 1204.240796][T13164] usb 2-1: SerialNumber: syz [ 1204.491258][T13164] uvcvideo 2-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1204.491293][T13164] uvcvideo 2-1:220.0: No valid video chain found. [ 1204.500410][T13164] usb 2-1: USB disconnect, device number 37 [ 1204.829155][T22347] tmpfs: Bad value for 'huge' [ 1205.081326][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7182'. [ 1205.081348][T22354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7182'. [ 1205.146016][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7182'. [ 1205.146036][T22354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7182'. [ 1206.295657][ T5907] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1206.445628][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 1206.448295][ T5907] usb 2-1: config 0 has no interfaces? [ 1206.485994][ T5907] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1206.486021][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.486040][ T5907] usb 2-1: Product: syz [ 1206.486054][ T5907] usb 2-1: Manufacturer: syz [ 1206.486068][ T5907] usb 2-1: SerialNumber: syz [ 1206.493538][ T5907] usb 2-1: config 0 descriptor?? [ 1206.710156][ T5907] usb 2-1: USB disconnect, device number 38 [ 1209.646373][T22395] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7203'. [ 1211.489924][T22413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7209'. [ 1211.857039][T22427] 9pnet_fd: Insufficient options for proto=fd [ 1212.227444][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7221'. [ 1212.227468][T22434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7221'. [ 1212.269138][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7221'. [ 1212.269159][T22434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7221'. [ 1213.469773][T22462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7233'. [ 1213.469796][T22462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7233'. [ 1213.559513][T22462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7233'. [ 1213.559534][T22462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7233'. [ 1216.732715][ T38] audit: type=1326 audit(1763397923.922:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22493 comm="syz.1.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eec62f6c9 code=0x7ffc0000 [ 1216.732767][ T38] audit: type=1326 audit(1763397923.922:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22493 comm="syz.1.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eec62f6c9 code=0x7ffc0000 [ 1216.733085][ T38] audit: type=1326 audit(1763397923.922:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22493 comm="syz.1.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f6eec62f6c9 code=0x7ffc0000 [ 1216.769383][ T38] audit: type=1326 audit(1763397923.952:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22493 comm="syz.1.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eec62f6c9 code=0x7ffc0000 [ 1216.769438][ T38] audit: type=1326 audit(1763397923.962:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22493 comm="syz.1.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eec62f6c9 code=0x7ffc0000 [ 1218.536474][T22512] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7258'. [ 1219.148292][T22528] 9pnet_fd: Insufficient options for proto=fd [ 1220.545674][T18996] Bluetooth: hci4: command 0x0406 tx timeout [ 1221.414884][T22557] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7272'. [ 1221.663980][T22561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7282'. [ 1223.600076][T22605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7303'. [ 1223.651871][T22604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7302'. [ 1223.675796][T22605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7303'. [ 1226.511975][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7348'. [ 1227.087119][T22710] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7355'. [ 1229.979388][T22784] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7388'. [ 1229.979421][T22784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7388'. [ 1231.195672][ T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1231.367352][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.367382][ T31] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1231.367422][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1231.370423][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1231.370453][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.370474][ T31] usb 2-1: Product: syz [ 1231.370488][ T31] usb 2-1: Manufacturer: syz [ 1231.370503][ T31] usb 2-1: SerialNumber: syz [ 1231.629925][ T31] uvcvideo 2-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1231.629959][ T31] uvcvideo 2-1:220.0: No valid video chain found. [ 1231.650482][ T31] usb 2-1: USB disconnect, device number 39 [ 1234.863720][ T5878] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1235.005618][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 1235.012232][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1235.015297][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1235.015331][ T5878] usb 2-1: can't read configurations, error -71 [ 1235.055618][ T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1235.218012][ T9] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 1235.218044][ T9] usb 1-1: config 0 has no interface number 0 [ 1235.221028][ T9] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1235.221058][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.221080][ T9] usb 1-1: Product: syz [ 1235.221096][ T9] usb 1-1: Manufacturer: syz [ 1235.221111][ T9] usb 1-1: SerialNumber: syz [ 1235.272037][ T9] usb 1-1: config 0 descriptor?? [ 1235.481207][ T9] option 1-1:0.19: GSM modem (1-port) converter detected [ 1235.543155][ T9] usb 1-1: USB disconnect, device number 25 [ 1235.602711][ T9] option 1-1:0.19: device disconnected [ 1236.655803][ T5907] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1236.805612][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 1236.814747][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1236.818382][ T5907] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1236.818419][ T5907] usb 1-1: can't read configurations, error -71 [ 1238.263081][T22931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7458'. [ 1240.405314][T22992] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7487'. [ 1240.856130][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1241.029859][ T31] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.029886][ T31] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1241.029921][ T31] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1241.039405][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1241.039434][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.039456][ T31] usb 3-1: Product: syz [ 1241.039470][ T31] usb 3-1: Manufacturer: syz [ 1241.039486][ T31] usb 3-1: SerialNumber: syz [ 1241.288380][ T31] uvcvideo 3-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1241.288412][ T31] uvcvideo 3-1:220.0: No valid video chain found. [ 1241.302005][ T31] usb 3-1: USB disconnect, device number 19 [ 1241.842951][T23013] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7496'. [ 1242.285609][ T5870] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1242.439020][ T5870] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 1242.439049][ T5870] usb 5-1: config 0 has no interface number 0 [ 1242.461262][ T5870] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1242.461288][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.461307][ T5870] usb 5-1: Product: syz [ 1242.461321][ T5870] usb 5-1: Manufacturer: syz [ 1242.461335][ T5870] usb 5-1: SerialNumber: syz [ 1242.505334][ T5870] usb 5-1: config 0 descriptor?? [ 1242.740852][ T5870] option 5-1:0.19: GSM modem (1-port) converter detected [ 1242.770731][ T5870] usb 5-1: USB disconnect, device number 45 [ 1242.775424][ T5870] option 5-1:0.19: device disconnected [ 1243.272417][T23039] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7510'. [ 1244.075324][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.075401][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.238536][T23065] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7523'. [ 1245.245344][T23085] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7531'. [ 1247.165717][ T5870] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1247.318336][ T5870] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.318374][ T5870] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1247.318416][ T5870] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1247.321721][ T5870] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1247.321752][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.321772][ T5870] usb 2-1: Product: syz [ 1247.321788][ T5870] usb 2-1: Manufacturer: syz [ 1247.321803][ T5870] usb 2-1: SerialNumber: syz [ 1247.617953][ T5870] uvcvideo 2-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1247.617987][ T5870] uvcvideo 2-1:220.0: No valid video chain found. [ 1247.641105][ T5870] usb 2-1: USB disconnect, device number 42 [ 1247.896157][T23157] binder: Bad value for 'max' [ 1249.242739][T23193] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7583'. [ 1250.088790][T23215] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7597'. [ 1253.292841][T23304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7635'. [ 1256.821866][T23365] binder: Bad value for 'max' [ 1258.845701][ T5907] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1258.999272][ T5907] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.999303][ T5907] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1258.999356][ T5907] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1259.002447][ T5907] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1259.002474][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.002494][ T5907] usb 4-1: Product: syz [ 1259.002507][ T5907] usb 4-1: Manufacturer: syz [ 1259.002521][ T5907] usb 4-1: SerialNumber: syz [ 1259.330505][ T5907] uvcvideo 4-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1259.330539][ T5907] uvcvideo 4-1:220.0: No valid video chain found. [ 1259.359978][ T5907] usb 4-1: USB disconnect, device number 31 [ 1265.012713][T23552] 9pnet_fd: Insufficient options for proto=fd [ 1269.795707][ T5907] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1269.950545][ T5907] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.950572][ T5907] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1269.950608][ T5907] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1269.955098][ T5907] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1269.955124][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.955143][ T5907] usb 1-1: Product: syz [ 1269.955157][ T5907] usb 1-1: Manufacturer: syz [ 1269.955171][ T5907] usb 1-1: SerialNumber: syz [ 1270.247438][ T5907] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1270.247490][ T5907] uvcvideo 1-1:220.0: No valid video chain found. [ 1270.265760][ T5907] usb 1-1: USB disconnect, device number 28 [ 1270.504001][T23625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7790'. [ 1271.173689][T23644] binder: Bad value for 'max' [ 1272.658110][T23658] kthread_run failed with err -4 [ 1273.557899][T23683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7816'. [ 1275.116280][T23715] binder: Bad value for 'max' [ 1279.381657][T23747] kthread_run failed with err -4 [ 1283.585801][T23837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7889'. [ 1288.335620][T20476] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1288.488557][T20476] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 1288.488587][T20476] usb 1-1: config 0 has no interface number 0 [ 1288.491652][T20476] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1288.491750][T20476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.491770][T20476] usb 1-1: Product: syz [ 1288.491784][T20476] usb 1-1: Manufacturer: syz [ 1288.491799][T20476] usb 1-1: SerialNumber: syz [ 1288.551886][T20476] usb 1-1: config 0 descriptor?? [ 1288.764681][T20476] option 1-1:0.19: GSM modem (1-port) converter detected [ 1288.819083][T20476] usb 1-1: USB disconnect, device number 29 [ 1288.845207][T20476] option 1-1:0.19: device disconnected [ 1289.350943][T23945] 9pnet_fd: Insufficient options for proto=fd [ 1290.348721][T23964] tmpfs: Bad value for 'nr_inodes' [ 1291.167137][T23979] 9pnet_fd: Insufficient options for proto=fd [ 1293.086163][T24012] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7968'. [ 1293.591028][T24022] tmpfs: Bad value for 'nr_inodes' [ 1294.473392][T24039] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7981'. [ 1295.830834][T24067] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7994'. [ 1301.595606][T24152] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8037'. [ 1302.093464][T24170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8043'. [ 1305.532113][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.532179][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.324761][T24258] Invalid ELF header len 16 [ 1313.723632][T24367] 9pnet_fd: Insufficient options for proto=fd [ 1314.771300][T24398] tmpfs: Bad value for 'nr_inodes' [ 1316.002345][T24438] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8165'. [ 1317.208659][T24444] kthread_run failed with err -4 [ 1318.446150][T24484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8186'. [ 1318.614011][T24492] binder: Bad value for 'max' [ 1319.116103][T24514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8201'. [ 1319.869972][T24544] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8216'. [ 1321.847593][T24593] tmpfs: Bad value for 'nr_inodes' [ 1322.693048][T24621] tmpfs: Bad value for 'nr_inodes' [ 1325.542899][T24681] tmpfs: Bad value for 'nr_inodes' [ 1326.570958][T24705] tmpfs: Bad value for 'nr_inodes' [ 1327.419556][T24722] binder: 24721:24722 ioctl c018620c 200000000180 returned -22 [ 1331.984404][T24804] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1332.175618][ T5870] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1332.348813][ T5870] usb 4-1: config 0 has an invalid interface number: 19 but max is 0 [ 1332.348845][ T5870] usb 4-1: config 0 has no interface number 0 [ 1332.353980][ T5870] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1332.354017][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.354038][ T5870] usb 4-1: Product: syz [ 1332.354054][ T5870] usb 4-1: Manufacturer: syz [ 1332.354069][ T5870] usb 4-1: SerialNumber: syz [ 1332.370180][ T5870] usb 4-1: config 0 descriptor?? [ 1332.585115][ T5870] option 4-1:0.19: GSM modem (1-port) converter detected [ 1332.610102][T24816] binder: Bad value for 'max' [ 1332.714550][ T5870] usb 4-1: USB disconnect, device number 32 [ 1332.791727][ T5870] option 4-1:0.19: device disconnected [ 1333.550929][T24828] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8347'. [ 1334.714419][T24845] tmpfs: Bad value for 'nr_inodes' [ 1339.585627][ T5870] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1339.741517][ T5870] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 1339.741548][ T5870] usb 5-1: config 0 has no interface number 0 [ 1339.745137][ T5870] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1339.745167][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.745188][ T5870] usb 5-1: Product: syz [ 1339.745203][ T5870] usb 5-1: Manufacturer: syz [ 1339.745218][ T5870] usb 5-1: SerialNumber: syz [ 1339.758022][ T5870] usb 5-1: config 0 descriptor?? [ 1339.970159][ T5870] option 5-1:0.19: GSM modem (1-port) converter detected [ 1340.029618][ T5870] usb 5-1: USB disconnect, device number 46 [ 1340.050434][ T5870] option 5-1:0.19: device disconnected [ 1344.020822][T24973] 9pnet_fd: Insufficient options for proto=fd [ 1351.303010][T25107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8486'. [ 1358.105697][ T5870] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1358.256846][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 1358.261145][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1358.262721][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1358.262772][ T5870] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1358.262800][ T5870] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1358.310428][ T5870] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1358.310459][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.310481][ T5870] usb 4-1: Product: syz [ 1358.310498][ T5870] usb 4-1: Manufacturer: syz [ 1358.310514][ T5870] usb 4-1: SerialNumber: syz [ 1358.531883][T25185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8523'. [ 1358.636415][ T5870] cdc_ncm 4-1:1.0: bind() failure [ 1358.644881][ T5870] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1358.644930][ T5870] cdc_ncm 4-1:1.1: bind() failure [ 1358.716059][ T5870] usb 4-1: USB disconnect, device number 33 [ 1365.423996][T25297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8564'. [ 1366.955201][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.955307][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.494566][T25385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8607'. [ 1375.121864][T25468] binder: Bad value for 'max' [ 1382.075952][T25571] binder: 25570:25571 ioctl 4018620d 0 returned -22 [ 1383.653050][T25601] binder: 25600:25601 ioctl c0306201 0 returned -14 [ 1384.230145][T25617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8707'. [ 1386.216492][T25663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8729'. [ 1386.691069][T25674] binder: Bad value for 'max' [ 1390.936370][T25739] Invalid ELF header len 16 [ 1394.452056][T25795] Invalid ELF header len 16 [ 1395.158918][T25815] binder: Bad value for 'max' [ 1396.170175][T25837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1396.170201][T25837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1396.184475][T25837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1396.184497][T25837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1399.167147][T13164] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1399.347871][T13164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.351024][T13164] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1399.351055][T13164] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1399.351078][T13164] usb 2-1: Product: syz [ 1399.351094][T13164] usb 2-1: Manufacturer: syz [ 1399.351111][T13164] usb 2-1: SerialNumber: syz [ 1399.356814][T13164] usb 2-1: config 0 descriptor?? [ 1399.373112][T13164] usb 2-1: selecting invalid altsetting 1 [ 1399.373139][T13164] usb 2-1: Can not set alternate setting to 1, error: -22 [ 1399.373186][T13164] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -22 [ 1399.629402][ T5788] usb 2-1: USB disconnect, device number 43 [ 1407.388232][T26009] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8892'. [ 1412.315657][ T5907] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1412.476926][ T5907] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 1412.476957][ T5907] usb 5-1: config 0 has no interface number 0 [ 1412.481594][ T5907] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1412.481625][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.481647][ T5907] usb 5-1: Product: syz [ 1412.481663][ T5907] usb 5-1: Manufacturer: syz [ 1412.481678][ T5907] usb 5-1: SerialNumber: syz [ 1412.517859][ T5907] usb 5-1: config 0 descriptor?? [ 1412.730215][ T5907] option 5-1:0.19: GSM modem (1-port) converter detected [ 1412.758418][ T5907] usb 5-1: USB disconnect, device number 47 [ 1412.764750][ T5907] option 5-1:0.19: device disconnected [ 1415.986348][T18996] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1416.019330][T18996] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1416.022026][T18996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1416.023911][T18996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1416.024895][T18996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1417.013438][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.501393][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.941676][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.145616][T11831] Bluetooth: hci1: command tx timeout [ 1418.451400][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.529162][T26124] chnl_net:caif_netlink_parms(): no params data found [ 1419.411732][T26124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.411878][T26124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.412106][T26124] bridge_slave_0: entered allmulticast mode [ 1419.414997][T26124] bridge_slave_0: entered promiscuous mode [ 1419.497352][T26124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.497573][T26124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.497769][T26124] bridge_slave_1: entered allmulticast mode [ 1419.529619][T26124] bridge_slave_1: entered promiscuous mode [ 1419.965202][T26124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.023402][T26124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.225694][T11831] Bluetooth: hci1: command tx timeout [ 1420.358252][ T12] bridge_slave_1: left allmulticast mode [ 1420.358285][ T12] bridge_slave_1: left promiscuous mode [ 1420.358589][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.518200][ T12] bridge_slave_0: left allmulticast mode [ 1420.518233][ T12] bridge_slave_0: left promiscuous mode [ 1420.518504][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.305653][T11831] Bluetooth: hci1: command tx timeout [ 1424.385567][T11831] Bluetooth: hci1: command tx timeout [ 1424.806381][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.956653][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.016111][ T12] bond0 (unregistering): Released all slaves [ 1425.248648][T26124] team0: Port device team_slave_0 added [ 1425.302336][T26124] team0: Port device team_slave_1 added [ 1426.110081][T26124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.110100][T26124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.110131][T26124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.166213][T26124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.166232][T26124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.166262][T26124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.163115][T26124] hsr_slave_0: entered promiscuous mode [ 1427.175139][T26124] hsr_slave_1: entered promiscuous mode [ 1427.185966][T26124] debugfs: 'hsr0' already exists in 'hsr' [ 1427.185993][T26124] Cannot create hsr debugfs directory [ 1427.723850][ T12] hsr_slave_0: left promiscuous mode [ 1427.790068][ T12] hsr_slave_1: left promiscuous mode [ 1427.791100][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.791126][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.032263][ T12] veth1_macvtap: left promiscuous mode [ 1428.032368][ T12] veth0_macvtap: left promiscuous mode [ 1428.032619][ T12] veth1_vlan: left promiscuous mode [ 1428.032789][ T12] veth0_vlan: left promiscuous mode [ 1428.392357][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.392434][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.965556][T20476] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1429.118653][T20476] usb 1-1: Using ep0 maxpacket: 16 [ 1429.135169][T20476] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1429.147908][T20476] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1429.147961][T20476] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1429.147987][T20476] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1429.150339][T20476] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1429.150367][T20476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.150389][T20476] usb 1-1: Product: syz [ 1429.150403][T20476] usb 1-1: Manufacturer: syz [ 1429.150419][T20476] usb 1-1: SerialNumber: syz [ 1429.451214][T20476] cdc_ncm 1-1:1.0: bind() failure [ 1429.499525][T20476] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1429.499571][T20476] cdc_ncm 1-1:1.1: bind() failure [ 1429.519453][T20476] usb 1-1: USB disconnect, device number 30 [ 1430.705653][ T5788] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1430.859068][ T5788] usb 4-1: config 0 has an invalid interface number: 19 but max is 0 [ 1430.859100][ T5788] usb 4-1: config 0 has no interface number 0 [ 1430.862221][ T5788] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1430.862250][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.862271][ T5788] usb 4-1: Product: syz [ 1430.862287][ T5788] usb 4-1: Manufacturer: syz [ 1430.862302][ T5788] usb 4-1: SerialNumber: syz [ 1430.922277][ T5788] usb 4-1: config 0 descriptor?? [ 1431.137982][ T5788] option 4-1:0.19: GSM modem (1-port) converter detected [ 1431.172338][ T5788] usb 4-1: USB disconnect, device number 34 [ 1431.201861][ T5788] option 4-1:0.19: device disconnected [ 1431.406337][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1431.676694][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1432.513452][T26266] tmpfs: Bad value for 'nr_inodes' [ 1435.685593][ T5788] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1435.859966][ T5788] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1435.860005][ T5788] usb 3-1: can't read configurations, error -61 [ 1435.985999][ T5788] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1436.139680][ T5788] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1436.139719][ T5788] usb 3-1: can't read configurations, error -61 [ 1436.140203][ T5788] usb usb3-port1: attempt power cycle [ 1436.495665][ T5788] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1436.521653][ T5788] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1436.521694][ T5788] usb 3-1: can't read configurations, error -61 [ 1436.675643][ T5788] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1436.723479][ T5788] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1436.723520][ T5788] usb 3-1: can't read configurations, error -61 [ 1436.740474][ T5788] usb usb3-port1: unable to enumerate USB device [ 1437.172456][T26339] tmpfs: Bad value for 'nr_inodes' [ 1437.479057][T26124] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1437.510227][T26124] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1437.578747][T26124] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1437.621213][T26124] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1439.033114][T26124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.113743][T26124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.153802][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.157801][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.179969][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.191000][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.608461][ T5870] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1439.778557][ T5870] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 1439.778589][ T5870] usb 3-1: config 0 has no interface number 0 [ 1439.806119][ T5870] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1439.806152][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.806174][ T5870] usb 3-1: Product: syz [ 1439.806189][ T5870] usb 3-1: Manufacturer: syz [ 1439.806224][ T5870] usb 3-1: SerialNumber: syz [ 1439.827093][ T5870] usb 3-1: config 0 descriptor?? [ 1439.999742][T26395] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9038'. [ 1440.065358][ T5870] option 3-1:0.19: GSM modem (1-port) converter detected [ 1440.142254][ T5870] usb 3-1: USB disconnect, device number 24 [ 1440.188585][ T5870] option 3-1:0.19: device disconnected [ 1441.545610][T26124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1442.710611][T26124] veth0_vlan: entered promiscuous mode [ 1442.762384][T26124] veth1_vlan: entered promiscuous mode [ 1442.947350][T26124] veth0_macvtap: entered promiscuous mode [ 1442.954955][T26124] veth1_macvtap: entered promiscuous mode [ 1443.015235][T26124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1443.071556][T26124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1443.106134][T10811] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.106388][T10811] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.106622][T10811] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.106665][T10811] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.242298][T26454] binder: 26452:26454 ioctl 4018620d 0 returned -22 [ 1443.365562][ T5878] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1443.503044][T23991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.503067][T23991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.520958][ T5878] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 1443.521010][ T5878] usb 2-1: config 0 has no interface number 0 [ 1443.532013][ T5878] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1443.532047][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.532070][ T5878] usb 2-1: Product: syz [ 1443.532087][ T5878] usb 2-1: Manufacturer: syz [ 1443.532101][ T5878] usb 2-1: SerialNumber: syz [ 1443.578709][ T5878] usb 2-1: config 0 descriptor?? [ 1443.798449][ T5878] option 2-1:0.19: GSM modem (1-port) converter detected [ 1443.818352][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.818374][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.841310][ T5878] usb 2-1: USB disconnect, device number 44 [ 1443.880376][ T5878] option 2-1:0.19: device disconnected [ 1444.807781][T26484] binder: 26483:26484 ioctl c0306201 0 returned -14 [ 1445.610366][T18996] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1445.625095][T18996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1445.633272][T18996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1445.675902][T18996] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1445.681806][T26127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1446.556103][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.021435][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.543850][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.745872][T11831] Bluetooth: hci5: command tx timeout [ 1447.992756][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.891860][T26510] binder: 26509:26510 ioctl c0306201 0 returned -14 [ 1448.956540][T26491] chnl_net:caif_netlink_parms(): no params data found [ 1448.963573][ T68] bridge_slave_1: left allmulticast mode [ 1448.963599][ T68] bridge_slave_1: left promiscuous mode [ 1449.000049][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.137477][ T68] bridge_slave_0: left allmulticast mode [ 1449.137507][ T68] bridge_slave_0: left promiscuous mode [ 1449.137785][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.825763][T11831] Bluetooth: hci5: command tx timeout [ 1450.260633][T26541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1451.907357][T11831] Bluetooth: hci5: command tx timeout [ 1453.440807][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.547956][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.599469][ T68] bond0 (unregistering): Released all slaves [ 1454.027111][T11831] Bluetooth: hci5: command tx timeout [ 1456.233538][T26491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.233679][T26491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.233920][T26491] bridge_slave_0: entered allmulticast mode [ 1456.261572][T26491] bridge_slave_0: entered promiscuous mode [ 1456.286528][T26491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.286669][T26491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.286890][T26491] bridge_slave_1: entered allmulticast mode [ 1456.289814][T26491] bridge_slave_1: entered promiscuous mode [ 1456.708813][T26491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.899629][ T68] hsr_slave_0: left promiscuous mode [ 1457.002300][ T68] hsr_slave_1: left promiscuous mode [ 1457.003324][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.003351][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.137659][ T68] veth1_macvtap: left promiscuous mode [ 1457.137782][ T68] veth0_macvtap: left promiscuous mode [ 1457.138147][ T68] veth1_vlan: left promiscuous mode [ 1457.138337][ T68] veth0_vlan: left promiscuous mode [ 1457.915565][T13164] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1458.068362][T13164] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 1458.068393][T13164] usb 5-1: config 0 has no interface number 0 [ 1458.071541][T13164] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1458.071569][T13164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.071592][T13164] usb 5-1: Product: syz [ 1458.071606][T13164] usb 5-1: Manufacturer: syz [ 1458.071622][T13164] usb 5-1: SerialNumber: syz [ 1458.149201][T13164] usb 5-1: config 0 descriptor?? [ 1458.378258][T13164] option 5-1:0.19: GSM modem (1-port) converter detected [ 1458.407770][T13164] usb 5-1: USB disconnect, device number 48 [ 1458.441330][T13164] option 5-1:0.19: device disconnected [ 1459.765594][ T5788] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1459.918254][ T5788] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 1459.918286][ T5788] usb 5-1: config 0 has no interface number 0 [ 1459.921656][ T5788] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1459.921688][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.921710][ T5788] usb 5-1: Product: syz [ 1459.921726][ T5788] usb 5-1: Manufacturer: syz [ 1459.921742][ T5788] usb 5-1: SerialNumber: syz [ 1459.954782][ T5788] usb 5-1: config 0 descriptor?? [ 1460.170964][ T5788] option 5-1:0.19: GSM modem (1-port) converter detected [ 1460.221103][ T5788] usb 5-1: USB disconnect, device number 49 [ 1460.255767][ T5788] option 5-1:0.19: device disconnected [ 1460.657925][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1460.986297][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1462.244670][T26696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9145'. [ 1463.408966][T26491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.784204][T26491] team0: Port device team_slave_0 added [ 1463.790887][T26491] team0: Port device team_slave_1 added [ 1463.843271][ T5788] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1464.008075][ T5788] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 1464.008106][ T5788] usb 5-1: config 0 has no interface number 0 [ 1464.012340][ T5788] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f5.e9 [ 1464.012370][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.012392][ T5788] usb 5-1: Product: syz [ 1464.012407][ T5788] usb 5-1: Manufacturer: syz [ 1464.012423][ T5788] usb 5-1: SerialNumber: syz [ 1464.030473][ T5788] usb 5-1: config 0 descriptor?? [ 1464.243845][ T5788] option 5-1:0.19: GSM modem (1-port) converter detected [ 1464.312756][ T5788] usb 5-1: USB disconnect, device number 50 [ 1464.333709][ T5788] option 5-1:0.19: device disconnected [ 1464.380012][T26491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.380029][T26491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.380058][T26491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.404613][T26491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.404634][T26491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.404668][T26491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.017702][T26491] hsr_slave_0: entered promiscuous mode [ 1465.019157][T26491] hsr_slave_1: entered promiscuous mode [ 1466.071874][T26746] Bluetooth: MGMT ver 1.23 [ 1469.121620][T26491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1469.186639][T26491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1469.277580][T26491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1469.370543][T26491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1469.920826][T26491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.014844][T26491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.062434][T23992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.062700][T23992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.112441][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.115998][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1471.159805][T26491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.398049][T26491] veth0_vlan: entered promiscuous mode [ 1471.472677][T26491] veth1_vlan: entered promiscuous mode [ 1471.672077][T26491] veth0_macvtap: entered promiscuous mode [ 1471.679751][T26491] veth1_macvtap: entered promiscuous mode [ 1471.821348][T26491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.894111][T26491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.997607][ T3602] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.015287][ T3602] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.016078][ T3602] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.016127][ T3602] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.545577][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.545600][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.770780][T23991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.770806][T23991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.689472][T18996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1474.693808][T18996] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1474.695269][T18996] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1474.729825][T18996] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1474.734385][T18996] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1475.715163][T26925] chnl_net:caif_netlink_parms(): no params data found [ 1476.556813][T26925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.556957][T26925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.557360][T26925] bridge_slave_0: entered allmulticast mode [ 1476.560196][T26925] bridge_slave_0: entered promiscuous mode [ 1476.564248][T26925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.603249][T26925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.603517][T26925] bridge_slave_1: entered allmulticast mode [ 1476.622408][T26925] bridge_slave_1: entered promiscuous mode [ 1476.796519][T11831] Bluetooth: hci2: command tx timeout [ 1477.420063][T26925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.695687][T23991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.772880][T26925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.463212][T23991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.533908][T26925] team0: Port device team_slave_0 added [ 1478.549026][T26925] team0: Port device team_slave_1 added [ 1478.866589][T11831] Bluetooth: hci2: command tx timeout [ 1479.099124][T23991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.258035][T26925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.258054][T26925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.258085][T26925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.559477][T23991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.619910][T26925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.619927][T26925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.619955][T26925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.954476][T26925] hsr_slave_0: entered promiscuous mode [ 1479.962273][T26925] hsr_slave_1: entered promiscuous mode [ 1479.963883][T26925] debugfs: 'hsr0' already exists in 'hsr' [ 1479.963902][T26925] Cannot create hsr debugfs directory [ 1480.627027][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1480.785662][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1480.790874][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1480.792177][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1480.792230][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1480.792258][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1480.795082][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1480.795112][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.795135][ T9] usb 1-1: Product: syz [ 1480.795152][ T9] usb 1-1: Manufacturer: syz [ 1480.795168][ T9] usb 1-1: SerialNumber: syz [ 1480.945910][T11831] Bluetooth: hci2: command tx timeout [ 1481.114264][ T9] cdc_ncm 1-1:1.0: bind() failure [ 1481.148107][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1481.148153][ T9] cdc_ncm 1-1:1.1: bind() failure [ 1481.200702][ T9] usb 1-1: USB disconnect, device number 31 [ 1481.256166][T23991] bridge_slave_1: left allmulticast mode [ 1481.256195][T23991] bridge_slave_1: left promiscuous mode [ 1481.256481][T23991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.337344][T23991] bridge_slave_0: left allmulticast mode [ 1481.337375][T23991] bridge_slave_0: left promiscuous mode [ 1481.337667][T23991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.025591][T11831] Bluetooth: hci2: command tx timeout [ 1483.992899][T23991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.070370][T23991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.120203][T23991] bond0 (unregistering): Released all slaves [ 1485.803675][T23991] hsr_slave_0: left promiscuous mode [ 1485.835545][T23991] hsr_slave_1: left promiscuous mode [ 1485.836500][T23991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.836527][T23991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.019814][T23991] veth1_macvtap: left promiscuous mode [ 1486.019926][T23991] veth0_macvtap: left promiscuous mode [ 1486.020213][T23991] veth1_vlan: left promiscuous mode [ 1486.020422][T23991] veth0_vlan: left promiscuous mode [ 1489.831491][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.831579][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.156374][T23991] team0 (unregistering): Port device team_slave_1 removed [ 1490.497016][T23991] team0 (unregistering): Port device team_slave_0 removed [ 1490.881711][T27211] binder: Unknown parameter 'ma' [ 1493.695580][ T5788] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1493.848014][ T5788] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.848072][ T5788] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1493.848100][ T5788] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1493.848127][ T5788] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1493.848169][ T5788] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1493.848197][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.859295][T27245] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1493.889482][ T5788] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1493.891433][ T5788] usb 4-1: invalid MIDI out EP 0 [ 1494.267124][T27252] udevd[27252]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1494.427052][ T5788] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1494.431313][ T5788] usb 4-1: USB disconnect, device number 35 [ 1495.282146][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9358'. [ 1496.512729][T26925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1496.645727][T26925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1496.781668][T26925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1496.878555][T26925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1497.372782][T26925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.473113][T27317] binder: 27316:27317 ioctl 4018620d 0 returned -22 [ 1497.499390][T26925] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.508757][T23992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.511121][T23992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.596864][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.622491][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.558832][T26925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1498.695814][T26925] veth0_vlan: entered promiscuous mode [ 1498.738098][T26925] veth1_vlan: entered promiscuous mode [ 1498.869116][T26925] veth0_macvtap: entered promiscuous mode [ 1498.909438][T26925] veth1_macvtap: entered promiscuous mode [ 1498.980646][T26925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.034886][T26925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1499.105716][T23991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.109371][T23991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.112254][T23991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.157213][T23991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.541310][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.541334][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.651859][T23991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.651880][T23991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.392050][T18996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1501.426280][T18996] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1501.430002][T18996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1501.443244][T18996] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1501.444058][T18996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1502.277305][T27356] chnl_net:caif_netlink_parms(): no params data found [ 1503.413376][ T90] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.506839][T11831] Bluetooth: hci0: command tx timeout [ 1503.635613][T27336] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1503.807159][T27336] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1503.808705][T27336] usb 4-1: not running at top speed; connect to a high speed hub [ 1503.810344][T27336] usb 4-1: config index 0 descriptor too short (expected 56677, got 101) [ 1503.810371][T27336] usb 4-1: config 45 has too many interfaces: 229, using maximum allowed: 32 [ 1503.810394][T27336] usb 4-1: config 45 has an invalid descriptor of length 161, skipping remainder of the config [ 1503.810416][T27336] usb 4-1: config 45 has 0 interfaces, different from the descriptor's value: 229 [ 1503.814618][T27336] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1503.814646][T27336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.814667][T27336] usb 4-1: Product: syz [ 1503.814691][T27336] usb 4-1: Manufacturer: syz [ 1503.814706][T27336] usb 4-1: SerialNumber: syz [ 1504.080591][T27336] usb 4-1: USB disconnect, device number 36 [ 1504.160210][ T90] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.211608][T27356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.211814][T27356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.212069][T27356] bridge_slave_0: entered allmulticast mode [ 1504.214758][T27356] bridge_slave_0: entered promiscuous mode [ 1504.246834][T27356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.247076][T27356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.247279][T27356] bridge_slave_1: entered allmulticast mode [ 1504.250025][T27356] bridge_slave_1: entered promiscuous mode [ 1504.574661][ T90] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.640042][T27356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.680472][T27356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.903792][ T90] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.044495][T27356] team0: Port device team_slave_0 added [ 1505.056098][T27356] team0: Port device team_slave_1 added [ 1505.258016][T27356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.258031][T27356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.258053][T27356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.260376][T27356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.260389][T27356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.260410][T27356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.513613][T27356] hsr_slave_0: entered promiscuous mode [ 1505.514793][T27356] hsr_slave_1: entered promiscuous mode [ 1505.515914][T27356] debugfs: 'hsr0' already exists in 'hsr' [ 1505.515940][T27356] Cannot create hsr debugfs directory [ 1505.585558][T11831] Bluetooth: hci0: command tx timeout [ 1505.857436][ T90] bridge_slave_1: left allmulticast mode [ 1505.857459][ T90] bridge_slave_1: left promiscuous mode [ 1505.857657][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.947283][ T90] bridge_slave_0: left allmulticast mode [ 1505.947308][ T90] bridge_slave_0: left promiscuous mode [ 1505.947513][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.665576][T11831] Bluetooth: hci0: command tx timeout [ 1508.347588][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.440227][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.488718][ T90] bond0 (unregistering): Released all slaves [ 1508.655575][T20476] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1509.068126][T20476] usb 4-1: Using ep0 maxpacket: 16 [ 1509.182356][T20476] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1509.184194][T20476] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.184219][T20476] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1509.634425][T20476] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1509.634456][T20476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.634476][T20476] usb 4-1: Product: syz [ 1509.634490][T20476] usb 4-1: Manufacturer: syz [ 1509.634505][T20476] usb 4-1: SerialNumber: syz [ 1509.710952][T27426] kthread_run failed with err -4 [ 1509.776130][T11831] Bluetooth: hci0: command tx timeout [ 1510.107224][T20476] usb 4-1: 0:2 : does not exist [ 1510.177432][T20476] usb 4-1: USB disconnect, device number 37 [ 1510.269630][T27254] udevd[27254]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1510.483668][T27448] binder: BINDER_SET_CONTEXT_MGR already set [ 1510.483684][T27448] binder: 27447:27448 ioctl 4018620d 200000000040 returned -16 [ 1513.977432][T27489] kthread_run failed with err -4 [ 1514.344210][ T90] hsr_slave_0: left promiscuous mode [ 1514.380228][ T90] hsr_slave_1: left promiscuous mode [ 1514.381200][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1514.381224][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.590025][ T90] veth1_macvtap: left promiscuous mode [ 1514.590138][ T90] veth0_macvtap: left promiscuous mode [ 1514.596315][ T90] veth1_vlan: left promiscuous mode [ 1514.596558][ T90] veth0_vlan: left promiscuous mode [ 1515.409597][T27336] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1516.547781][T27336] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.547839][T27336] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1516.547868][T27336] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1516.547897][T27336] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1516.547940][T27336] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1516.547973][T27336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.571411][T27508] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1516.584039][T27336] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1516.618147][T27336] usb 4-1: invalid MIDI out EP 0 [ 1516.940539][T27254] udevd[27254]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1517.086959][T27336] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1517.099816][T27336] usb 4-1: USB disconnect, device number 38 [ 1518.563812][ T90] team0 (unregistering): Port device team_slave_1 removed [ 1518.833697][ T90] team0 (unregistering): Port device team_slave_0 removed [ 1522.618510][T27356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1522.960908][T27356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1523.705714][T27356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1524.065327][T27356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1524.473029][T27616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9497'. [ 1524.608713][T27356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.717710][T27356] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.788002][T23992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.798557][T23992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.823690][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.823824][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.299528][T27637] binder: 27634:27637 ioctl 4018620d 0 returned -22 [ 1525.855215][T27356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1526.004709][T27663] tmpfs: Unknown parameter '&' [ 1526.013292][T27356] veth0_vlan: entered promiscuous mode [ 1526.070692][T27356] veth1_vlan: entered promiscuous mode [ 1526.236776][T27356] veth0_macvtap: entered promiscuous mode [ 1526.242206][T27356] veth1_macvtap: entered promiscuous mode [ 1526.352563][T27356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.402511][T27356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.425307][ T90] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.456515][ T1443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.459928][ T1443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.466611][ T1443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.523631][T27676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9517'. [ 1526.920752][T23991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.920775][T23991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.103593][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.103615][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.407443][T27697] binder: Bad value for 'max' [ 1527.639672][T27702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1528.726627][T18996] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1528.738614][T18996] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1528.739987][T18996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1528.741227][T18996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1528.742064][T18996] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1529.735764][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9546'. [ 1530.006507][T27724] chnl_net:caif_netlink_parms(): no params data found [ 1530.791062][T11831] Bluetooth: hci4: command tx timeout [ 1531.811559][ T90] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.873290][T27724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.873424][T27724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.873657][T27724] bridge_slave_0: entered allmulticast mode [ 1531.899536][T27724] bridge_slave_0: entered promiscuous mode [ 1531.903033][T27724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.903241][T27724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.903461][T27724] bridge_slave_1: entered allmulticast mode [ 1531.917314][T20476] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1531.957957][T27724] bridge_slave_1: entered promiscuous mode [ 1532.111351][T20476] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.111390][T20476] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1532.119509][T20476] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1532.119542][T20476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.119565][T20476] usb 3-1: Product: syz [ 1532.119581][T20476] usb 3-1: Manufacturer: syz [ 1532.119596][T20476] usb 3-1: SerialNumber: syz [ 1532.208687][T20476] usb 3-1: config 0 descriptor?? [ 1532.512371][ T90] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.645343][T27336] usb 3-1: USB disconnect, device number 25 [ 1532.669286][T27724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1532.698110][T27724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.875523][T11831] Bluetooth: hci4: command tx timeout [ 1533.190322][ T90] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.237566][T27724] team0: Port device team_slave_0 added [ 1533.242514][T27724] team0: Port device team_slave_1 added [ 1533.633222][T27830] tmpfs: Unknown parameter 'nr_in' [ 1534.263903][ T90] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.291916][T11831] Bluetooth: hci4: command tx timeout [ 1535.580988][T27853] tmpfs: Unknown parameter 'nr_inod' [ 1535.593262][T27724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.593280][T27724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.593310][T27724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.661722][T27724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.661740][T27724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.661769][T27724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.158886][T27724] hsr_slave_0: entered promiscuous mode [ 1536.166495][T27724] hsr_slave_1: entered promiscuous mode [ 1536.167581][T27724] debugfs: 'hsr0' already exists in 'hsr' [ 1536.167607][T27724] Cannot create hsr debugfs directory [ 1537.035699][ T90] bridge_slave_1: left allmulticast mode [ 1537.035729][ T90] bridge_slave_1: left promiscuous mode [ 1537.035978][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.153637][ T90] bridge_slave_0: left allmulticast mode [ 1537.153669][ T90] bridge_slave_0: left promiscuous mode [ 1537.153940][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.345515][T11831] Bluetooth: hci4: command tx timeout [ 1538.884730][T27912] tmpfs: Unknown parameter 'nr_inod' [ 1539.635512][ T5878] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1539.822918][ T5878] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.823019][ T5878] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1539.823046][ T5878] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1539.823074][ T5878] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1539.823117][ T5878] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1539.823141][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.898663][T27925] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1539.929222][ T5878] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1539.930203][ T5878] usb 4-1: invalid MIDI out EP 0 [ 1540.170382][T27936] udevd[27936]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1540.213248][ T5878] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1540.228864][ T5878] usb 4-1: USB disconnect, device number 39 [ 1541.783684][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.820477][T27946] netlink: 'syz.3.9636': attribute type 13 has an invalid length. [ 1541.820502][T27946] netlink: 'syz.3.9636': attribute type 17 has an invalid length. [ 1541.866269][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.909267][ T90] bond0 (unregistering): Released all slaves [ 1542.436063][T27946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1543.035587][ T5907] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1543.193177][ T5907] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.193237][ T5907] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1543.193266][ T5907] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1543.193293][ T5907] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1543.193335][ T5907] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1543.193358][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.221169][T27963] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1543.241985][ T5907] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1543.243243][ T5907] usb 5-1: invalid MIDI out EP 0 [ 1543.555139][T27992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9660'. [ 1543.634749][ T5907] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1543.667623][T11831] Bluetooth: hci1: command 0x0406 tx timeout [ 1543.689346][ T5907] usb 5-1: USB disconnect, device number 51 [ 1544.416628][T28016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9671'. [ 1544.665579][ T90] hsr_slave_0: left promiscuous mode [ 1544.714986][ T90] hsr_slave_1: left promiscuous mode [ 1544.722815][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1544.722844][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.903363][ T90] veth1_macvtap: left promiscuous mode [ 1544.903481][ T90] veth0_macvtap: left promiscuous mode [ 1544.903749][ T90] veth1_vlan: left promiscuous mode [ 1544.903934][ T90] veth0_vlan: left promiscuous mode [ 1544.985502][T26411] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1545.149756][T26411] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.149786][T26411] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1545.149826][T26411] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1545.165586][T26411] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1545.165619][T26411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.165642][T26411] usb 4-1: Product: syz [ 1545.165659][T26411] usb 4-1: Manufacturer: syz [ 1545.165692][T26411] usb 4-1: SerialNumber: syz [ 1545.459493][T26411] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22 [ 1545.489311][T26411] usb 4-1: USB disconnect, device number 40 [ 1545.695588][ T5907] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1545.862151][ T5907] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.862241][ T5907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1545.862292][ T5907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1545.862323][ T5907] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1545.862378][ T5907] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1545.862406][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.871865][T28038] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1545.923509][ T5907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1545.945259][ T5907] usb 3-1: invalid MIDI out EP 0 [ 1547.243401][ T5907] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1547.287516][ T5907] usb 3-1: USB disconnect, device number 26 [ 1548.200591][T28069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9683'. [ 1548.467134][ T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1548.628571][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.628642][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1548.628672][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1548.628703][ T9] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1548.628750][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1548.628775][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.722631][T28068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1548.754894][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1548.763662][ T9] usb 4-1: invalid MIDI out EP 0 [ 1548.893268][T27860] udevd[27860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1548.979288][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1548.984887][ T9] usb 4-1: USB disconnect, device number 41 [ 1549.749566][ T90] team0 (unregistering): Port device team_slave_1 removed [ 1550.056873][ T90] team0 (unregistering): Port device team_slave_0 removed [ 1551.170987][T28126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9718'. [ 1551.304475][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.304549][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.904186][T28162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1555.904216][T28162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1556.204334][T28162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1556.204360][T28162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1556.895517][ T9] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1557.090795][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.090856][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1557.090886][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1557.090915][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1557.090961][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1557.090986][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.131015][T28173] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1557.236043][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1557.237428][ T9] usb 5-1: invalid MIDI out EP 0 [ 1557.605642][T28174] udevd[28174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1557.690746][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1557.708781][ T9] usb 5-1: USB disconnect, device number 52 [ 1558.278118][T27724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1558.515581][T27724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1558.709358][T28228] overlayfs: missing 'lowerdir' [ 1558.749170][T27724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1558.837719][T27724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1559.330194][T27724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.365490][ T9] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1559.414218][T27724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.520242][T27513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.521187][T27513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1559.536724][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.536787][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1559.536818][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1559.536849][ T9] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1559.536897][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1559.536921][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.549436][T27513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.549600][T27513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.629067][T28245] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1559.648333][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1559.649454][ T9] usb 4-1: invalid MIDI out EP 0 [ 1559.774103][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1559.845674][T28257] usb 4-1: USB disconnect, device number 42 [ 1559.932541][T28263] udevd[28263]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1560.421053][T28275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9768'. [ 1560.778578][T27724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1560.962293][T27724] veth0_vlan: entered promiscuous mode [ 1560.978277][T27724] veth1_vlan: entered promiscuous mode [ 1561.039970][T27724] veth0_macvtap: entered promiscuous mode [ 1561.059172][T27724] veth1_macvtap: entered promiscuous mode [ 1561.123429][T27724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1561.171202][T27724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1561.203551][ T3538] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.204863][ T3538] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.205140][ T3538] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.222514][ T3538] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.708825][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.708847][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.802237][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.802260][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.135481][ T9] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1567.292387][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.292475][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1567.292508][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1567.292539][ T9] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1567.292586][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1567.292613][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.345512][T26411] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1567.396121][T28360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1567.424069][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1567.425193][ T9] usb 1-1: invalid MIDI out EP 0 [ 1567.506145][T26411] usb 2-1: Using ep0 maxpacket: 16 [ 1567.531461][T26411] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1567.566680][T26411] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1567.566737][T26411] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1567.566766][T26411] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1567.609529][T26411] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1567.609559][T26411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.609579][T26411] usb 2-1: Product: syz [ 1567.609593][T26411] usb 2-1: Manufacturer: syz [ 1567.609607][T26411] usb 2-1: SerialNumber: syz [ 1567.720359][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1567.744775][ T9] usb 1-1: USB disconnect, device number 32 [ 1567.802160][T28375] udevd[28375]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1567.995974][T26411] cdc_ncm 2-1:1.0: bind() failure [ 1568.029577][T26411] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1568.029626][T26411] cdc_ncm 2-1:1.1: bind() failure [ 1568.055239][T26411] usb 2-1: USB disconnect, device number 45 [ 1568.705624][T11831] Bluetooth: hci5: command 0x0406 tx timeout [ 1572.000906][T28450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9842'. [ 1576.966667][T20476] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1577.146103][T20476] usb 2-1: Using ep0 maxpacket: 16 [ 1577.530252][T20476] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1577.531895][T20476] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1577.531946][T20476] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1577.531971][T20476] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1577.602344][T20476] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1577.602379][T20476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.602402][T20476] usb 2-1: Product: syz [ 1577.602417][T20476] usb 2-1: Manufacturer: syz [ 1577.602433][T20476] usb 2-1: SerialNumber: syz [ 1577.856041][T28495] Bluetooth: MGMT ver 1.23 [ 1577.875656][T20476] cdc_ncm 2-1:1.0: bind() failure [ 1577.899523][T20476] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1577.899572][T20476] cdc_ncm 2-1:1.1: bind() failure [ 1577.939673][T20476] usb 2-1: USB disconnect, device number 46 [ 1579.996336][T28510] kthread_run failed with err -4 [ 1582.047814][T28542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1582.344335][T28553] netlink: 'syz.3.9885': attribute type 13 has an invalid length. [ 1582.344358][T28553] netlink: 'syz.3.9885': attribute type 17 has an invalid length. [ 1582.368783][T28542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.625889][T28553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1583.558771][T28582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9898'. [ 1586.400340][T28629] netlink: 'syz.2.9923': attribute type 13 has an invalid length. [ 1586.400366][T28629] netlink: 'syz.2.9923': attribute type 17 has an invalid length. [ 1586.825288][T28629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1587.657052][T28663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9934'. [ 1589.085735][T28695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9952'. [ 1589.994636][T28717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.819928][T28717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1591.284580][T28732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.736172][T28754] netlink: 'syz.2.9978': attribute type 13 has an invalid length. [ 1592.736194][T28754] netlink: 'syz.2.9978': attribute type 17 has an invalid length. [ 1592.842520][T28754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1594.670507][T28776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1594.928607][T28776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1596.242474][T28788] kthread_run failed with err -4 [ 1597.016874][T28816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.445503][T28816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.562638][T28852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10016'. [ 1599.431249][T18996] Bluetooth: hci2: command 0x0406 tx timeout [ 1602.060604][T28882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10032'. [ 1609.460284][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1609.625454][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1609.628444][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1609.630417][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1609.630476][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1609.630505][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1609.633743][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1609.633774][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.633797][ T9] usb 1-1: Product: syz [ 1609.633812][ T9] usb 1-1: Manufacturer: syz [ 1609.633829][ T9] usb 1-1: SerialNumber: syz [ 1609.888411][ T9] cdc_ncm 1-1:1.0: bind() failure [ 1609.920026][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1609.920071][ T9] cdc_ncm 1-1:1.1: bind() failure [ 1610.000150][ T9] usb 1-1: USB disconnect, device number 33 [ 1612.721196][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.721270][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1616.236525][T26411] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1617.323658][T26411] usb 2-1: Using ep0 maxpacket: 16 [ 1617.447491][T26411] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1617.451095][T26411] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1617.451153][T26411] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1617.451184][T26411] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1617.490040][T26411] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1617.490075][T26411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.490098][T26411] usb 2-1: Product: syz [ 1617.490114][T26411] usb 2-1: Manufacturer: syz [ 1617.490130][T26411] usb 2-1: SerialNumber: syz [ 1617.738671][T26411] cdc_ncm 2-1:1.0: bind() failure [ 1617.777674][T26411] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1617.777723][T26411] cdc_ncm 2-1:1.1: bind() failure [ 1617.809200][T26411] usb 2-1: USB disconnect, device number 47 [ 1618.495672][T29073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10113'. [ 1618.995613][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10117'. [ 1619.130296][T29085] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10119'. [ 1619.555528][T29095] netlink: 'syz.2.10124': attribute type 13 has an invalid length. [ 1619.555549][T29095] netlink: 'syz.2.10124': attribute type 17 has an invalid length. [ 1619.653158][T29095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1622.910002][T29128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10138'. [ 1625.029470][T11831] Bluetooth: hci0: command 0x0406 tx timeout [ 1625.227819][T29165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10150'. [ 1625.227843][T29165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10150'. [ 1625.242924][T29165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10150'. [ 1625.242948][T29165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10150'. [ 1626.662867][T29183] netlink: 'syz.0.10163': attribute type 13 has an invalid length. [ 1626.662893][T29183] netlink: 'syz.0.10163': attribute type 17 has an invalid length. [ 1627.116239][T29183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1627.273585][ T5788] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1627.440840][ T5788] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.440914][ T5788] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1627.440954][ T5788] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1627.440980][ T5788] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1627.441022][ T5788] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1627.441046][ T5788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.480032][T29194] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1627.503114][ T5788] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1627.504319][ T5788] usb 3-1: invalid MIDI out EP 0 [ 1627.910980][ T5788] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1627.928729][ T5788] usb 3-1: USB disconnect, device number 27 [ 1627.958706][T29222] udevd[29222]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1631.834611][T29316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10222'. [ 1633.284887][T29362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.339585][T29367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10245'. [ 1636.025518][T20476] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1636.178038][T20476] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.178095][T20476] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1636.178122][T20476] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1636.178150][T20476] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1636.178192][T20476] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1636.178215][T20476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.184774][T29416] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1636.211088][T20476] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1636.212237][T20476] usb 1-1: invalid MIDI out EP 0 [ 1637.425994][T29221] udevd[29221]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1637.624731][T20476] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1637.689439][T20476] usb 1-1: USB disconnect, device number 34 [ 1639.330028][T29467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10290'. [ 1640.635456][ T5907] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1640.785454][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 1640.794900][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1640.806713][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1640.806774][ T5907] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1640.806804][ T5907] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1640.821381][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1640.821414][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.821438][ T5907] usb 1-1: Product: syz [ 1640.821454][ T5907] usb 1-1: Manufacturer: syz [ 1640.821471][ T5907] usb 1-1: SerialNumber: syz [ 1641.929681][ T5907] cdc_ncm 1-1:1.0: bind() failure [ 1641.990808][ T5907] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1641.990859][ T5907] cdc_ncm 1-1:1.1: bind() failure [ 1642.077571][ T5907] usb 1-1: USB disconnect, device number 35 [ 1642.420061][T29528] netlink: 268 bytes leftover after parsing attributes in process `syz.4.10315'. [ 1643.964077][T29588] netlink: 268 bytes leftover after parsing attributes in process `syz.1.10344'. [ 1645.855596][T20476] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1646.005564][T20476] usb 1-1: Using ep0 maxpacket: 8 [ 1646.009308][T20476] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1646.010805][T20476] usb 1-1: config 1 has an invalid interface number: 150 but max is 0 [ 1646.010831][T20476] usb 1-1: config 1 has no interface number 0 [ 1646.010879][T20476] usb 1-1: config 1 interface 150 altsetting 11 endpoint 0xC has invalid maxpacket 767, setting to 64 [ 1646.010907][T20476] usb 1-1: config 1 interface 150 has no altsetting 0 [ 1646.015197][T20476] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=d7.36 [ 1646.015224][T20476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.015244][T20476] usb 1-1: Product: Џ [ 1646.015259][T20476] usb 1-1: Manufacturer: Я [ 1646.015273][T20476] usb 1-1: SerialNumber: 午ﶷᤊ뮗䒱ꇣ᰸丙놫ၨ튖㍐㯝䝬閡譹瓣팦⃟³奇肌煁妣턆忒藻⭐斿ᦓ䥡饂쿗킻䣳⺌믛瘓떡ꓴⴻ쒄ࢽ糭췎⁰穑㨤 [ 1646.372233][T20476] usb 1-1: USB disconnect, device number 36 [ 1646.635928][ T5870] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1646.798014][ T5870] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.798075][ T5870] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1646.798105][ T5870] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1646.798133][ T5870] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1646.798177][ T5870] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1646.798203][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.804854][T29653] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1646.879390][ T5870] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1646.880536][ T5870] usb 2-1: invalid MIDI out EP 0 [ 1647.151527][T29640] udevd[29640]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1647.187488][ T5870] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1647.225998][ T5870] usb 2-1: USB disconnect, device number 48 [ 1651.925465][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1652.085423][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1652.089457][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1652.091013][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1652.091065][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1652.091093][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1652.095043][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1652.095073][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.095095][ T9] usb 1-1: Product: syz [ 1652.095111][ T9] usb 1-1: Manufacturer: syz [ 1652.095127][ T9] usb 1-1: SerialNumber: syz [ 1652.408367][ T9] cdc_ncm 1-1:1.0: bind() failure [ 1652.428305][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1652.428355][ T9] cdc_ncm 1-1:1.1: bind() failure [ 1652.462314][ T9] usb 1-1: USB disconnect, device number 37 [ 1654.883067][T29833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10459'. [ 1656.149112][T11831] Bluetooth: hci4: command 0x0406 tx timeout [ 1663.534834][T30042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10556'. [ 1663.534856][T30042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10556'. [ 1663.573862][T30042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10556'. [ 1663.573882][T30042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10556'. [ 1664.676124][T30075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10572'. [ 1664.676150][T30075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10572'. [ 1664.819343][T30075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10572'. [ 1664.819369][T30075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10572'. [ 1665.721561][T30111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10587'. [ 1666.665436][ T5878] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1666.818751][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 1666.833897][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1666.835130][ T5878] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1666.835184][ T5878] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1666.835211][ T5878] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1666.922509][ T5878] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1666.922537][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.922557][ T5878] usb 2-1: Product: syz [ 1666.922571][ T5878] usb 2-1: Manufacturer: syz [ 1666.922584][ T5878] usb 2-1: SerialNumber: syz [ 1667.199838][ T5878] cdc_ncm 2-1:1.0: bind() failure [ 1667.227977][ T5878] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1667.228021][ T5878] cdc_ncm 2-1:1.1: bind() failure [ 1667.266225][ T5878] usb 2-1: USB disconnect, device number 49 [ 1672.705425][T28257] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1672.855700][T28257] usb 1-1: Using ep0 maxpacket: 8 [ 1672.859028][T28257] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1672.860609][T28257] usb 1-1: config 1 has an invalid interface number: 150 but max is 0 [ 1672.860633][T28257] usb 1-1: config 1 has no interface number 0 [ 1672.860677][T28257] usb 1-1: config 1 interface 150 altsetting 11 endpoint 0xC has invalid maxpacket 767, setting to 64 [ 1672.860706][T28257] usb 1-1: config 1 interface 150 has no altsetting 0 [ 1672.863320][T28257] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=d7.36 [ 1672.863345][T28257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.863364][T28257] usb 1-1: Product: Џ [ 1672.863377][T28257] usb 1-1: Manufacturer: Я [ 1672.863391][T28257] usb 1-1: SerialNumber: 午ﶷᤊ뮗䒱ꇣ᰸丙놫ၨ튖㍐㯝䝬閡譹瓣팦⃟³奇肌煁妣턆忒藻⭐斿ᦓ䥡饂쿗킻䣳⺌믛瘓떡ꓴⴻ쒄ࢽ糭췎⁰穑㨤 [ 1673.183039][T28257] usb 1-1: USB disconnect, device number 38 [ 1674.153591][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.153662][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.363185][T30355] IPv6: addrconf: prefix option has invalid lifetime [ 1676.005427][ T5907] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1676.177753][ T5907] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.177812][ T5907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1676.177840][ T5907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1676.177867][ T5907] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1676.177909][ T5907] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1676.177933][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.194576][T30365] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1676.229452][ T5907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1676.247270][ T5907] usb 3-1: invalid MIDI out EP 0 [ 1676.539726][T30382] netlink: 'syz.4.10717': attribute type 13 has an invalid length. [ 1676.539749][T30382] netlink: 'syz.4.10717': attribute type 17 has an invalid length. [ 1676.607017][ T5907] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1676.630227][ T5907] usb 3-1: USB disconnect, device number 28 [ 1676.885969][T30382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1678.071538][T23993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.155433][T28257] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1678.318042][T28257] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.318111][T28257] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1678.318140][T28257] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1678.318169][T28257] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1678.318214][T28257] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1678.318238][T28257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.329817][T30408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1678.407200][T28257] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1678.408278][T28257] usb 3-1: invalid MIDI out EP 0 [ 1678.670744][T30144] udevd[30144]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1678.678227][T23993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.730349][T28257] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1678.756577][T28257] usb 3-1: USB disconnect, device number 29 [ 1678.974433][T28257] =========[ 1678.974433][T28257] ================================================================== [ 1678.974449][T28257] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1678.974541][T28257] Read of size 8 at addr ffffc9000fa61008 by task kworker/1:2/28257 [ 1678.974559][T28257] [ 1678.974595][T28257] CPU: 1 UID: 0 PID: 28257 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1678.974619][T28257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1678.974632][T28257] Workqueue: usb_hub_wq hub_event [ 1678.974751][T28257] Call Trace: [ 1678.974762][T28257] [ 1678.974771][T28257] dump_stack_lvl+0x189/0x250 [ 1678.974825][T28257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1678.974854][T28257] ? __pfx__printk+0x10/0x10 [ 1678.974883][T28257] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1678.975002][T28257] ? __virt_addr_valid+0xdc/0x5c0 [ 1678.975043][T28257] ? __virt_addr_valid+0xdc/0x5c0 [ 1678.975074][T28257] print_report+0xca/0x240 [ 1678.975101][T28257] ? __list_add_valid_or_report+0x4e/0x130 [ 1678.975125][T28257] kasan_report+0x118/0x150 [ 1678.975182][T28257] ? __list_add_valid_or_report+0x4e/0x130 [ 1678.975210][T28257] __list_add_valid_or_report+0x4e/0x130 [ 1678.975236][T28257] kcov_remote_stop+0x52d/0x660 [ 1678.975268][T28257] hub_event+0x45d2/0x4a20 [ 1678.975323][T28257] ? do_raw_spin_lock+0x121/0x290 [ 1678.975350][T28257] ? register_lock_class+0x51/0x320 [ 1678.975385][T28257] ? __pfx_hub_event+0x10/0x10 [ 1678.975413][T28257] ? process_scheduled_works+0x9ef/0x17b0 [ 1678.975453][T28257] ? _raw_spin_unlock_irq+0x23/0x50 [ 1678.975483][T28257] ? process_scheduled_works+0x9ef/0x17b0 [ 1678.975508][T28257] ? process_scheduled_works+0x9ef/0x17b0 [ 1678.975534][T28257] process_scheduled_works+0xae1/0x17b0 [ 1678.975573][T28257] ? __pfx_process_scheduled_works+0x10/0x10 [ 1678.975606][T28257] worker_thread+0x8a0/0xda0 [ 1678.975633][T28257] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1678.975668][T28257] ? __kthread_parkme+0x7b/0x200 [ 1678.975699][T28257] kthread+0x711/0x8a0 [ 1678.975729][T28257] ? __pfx_worker_thread+0x10/0x10 [ 1678.975754][T28257] ? __pfx_kthread+0x10/0x10 [ 1678.975782][T28257] ? rt_spin_unlock+0x150/0x200 [ 1678.975808][T28257] ? rt_spin_unlock+0x161/0x200 [ 1678.975831][T28257] ? __pfx_kthread+0x10/0x10 [ 1678.975862][T28257] ret_from_fork+0x4bc/0x870 [ 1678.975894][T28257] ? __pfx_ret_from_fork+0x10/0x10 [ 1678.975922][T28257] ? __switch_to_asm+0x39/0x70 [ 1678.975942][T28257] ? __switch_to_asm+0x33/0x70 [ 1678.975961][T28257] ? __pfx_kthread+0x10/0x10 [ 1678.975991][T28257] ret_from_fork_asm+0x1a/0x30 [ 1678.976020][T28257] [ 1678.976034][T28257] [ 1678.976039][T28257] The buggy address belongs to a vmalloc virtual mapping [ 1678.976056][T28257] Memory state around the buggy address: [ 1678.976068][T28257] ffffc9000fa60f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1678.976081][T28257] ffffc9000fa60f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1678.976095][T28257] >ffffc9000fa61000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1678.976110][T28257] ^ [ 1678.976120][T28257] ffffc9000fa61080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1678.976134][T28257] ffffc9000fa61100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1678.976145][T28257] ================================================================== [ 1678.976270][T28257] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1678.976283][T28257] CPU: 1 UID: 0 PID: 28257 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1678.976307][T28257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1678.976321][T28257] Workqueue: usb_hub_wq hub_event [ 1678.976349][T28257] Call Trace: [ 1678.976359][T28257] [ 1678.976368][T28257] dump_stack_lvl+0x99/0x250 [ 1678.976405][T28257] ? __asan_memcpy+0x40/0x70 [ 1678.976431][T28257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1678.976484][T28257] ? __pfx__printk+0x10/0x10 [ 1678.976520][T28257] vpanic+0x237/0x6d0 [ 1678.976545][T28257] ? __pfx_vpanic+0x10/0x10 [ 1678.976565][T28257] ? preempt_schedule_common+0x83/0xd0 [ 1678.976643][T28257] ? preempt_schedule+0xae/0xc0 [ 1678.976679][T28257] panic+0xb9/0xc0 [ 1678.976701][T28257] ? __pfx_panic+0x10/0x10 [ 1678.976730][T28257] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1678.976769][T28257] ? __list_add_valid_or_report+0x4e/0x130 [ 1678.976798][T28257] check_panic_on_warn+0x89/0xb0 [ 1678.976822][T28257] ? __list_add_valid_or_report+0x4e/0x130 [ 1678.976852][T28257] end_report+0x78/0x160 [ 1678.976885][T28257] kasan_report+0x129/0x150 [ 1678.976921][T28257] ? __list_add_valid_or_report+0x4e/0x130 [ 1678.976957][T28257] __list_add_valid_or_report+0x4e/0x130 [ 1678.977001][T28257] kcov_remote_stop+0x52d/0x660 [ 1678.977043][T28257] hub_event+0x45d2/0x4a20 [ 1678.977083][T28257] ? do_raw_spin_lock+0x121/0x290 [ 1678.977131][T28257] ? register_lock_class+0x51/0x320 [ 1678.977174][T28257] ? __pfx_hub_event+0x10/0x10 [ 1678.977201][T28257] ? process_scheduled_works+0x9ef/0x17b0 [ 1678.977235][T28257] ? _raw_spin_unlock_irq+0x23/0x50 [ 1678.977271][T28257] ? process_scheduled_works+0x9ef/0x17b0 [ 1678.977299][T28257] ? process_scheduled_works+0x9ef/0x17b0 [ 1678.977331][T28257] process_scheduled_works+0xae1/0x17b0 [ 1678.977377][T28257] ? __pfx_process_scheduled_works+0x10/0x10 [ 1678.977427][T28257] worker_thread+0x8a0/0xda0 [ 1678.977456][T28257] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1678.977496][T28257] ? __kthread_parkme+0x7b/0x200 [ 1678.977531][T28257] kthread+0x711/0x8a0 [ 1678.977566][T28257] ? __pfx_worker_thread+0x10/0x10 [ 1678.977594][T28257] ? __pfx_kthread+0x10/0x10 [ 1678.977626][T28257] ? rt_spin_unlock+0x150/0x200 [ 1678.977665][T28257] ? rt_spin_unlock+0x161/0x200 [ 1678.977689][T28257] ? __pfx_kthread+0x10/0x10 [ 1678.977720][T28257] ret_from_fork+0x4bc/0x870 [ 1678.977748][T28257] ? __pfx_ret_from_fork+0x10/0x10 [ 1678.977776][T28257] ? __switch_to_asm+0x39/0x70 [ 1678.977798][T28257] ? __switch_to_asm+0x33/0x70 [ 1678.977819][T28257] ? __pfx_kthread+0x10/0x10 [ 1678.977853][T28257] ret_from_fork_asm+0x1a/0x30 [ 1678.977882][T28257] [ 1678.978184][T28257] Kernel Offset: disabled