last executing test programs: 40m2.644043559s ago: executing program 3 (id=6600): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1f8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000192c0)='net/ip6_mr_cache\x00') pread64(r3, &(0x7f0000000080)=""/102348, 0x10bf, 0x8) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 40m1.528417986s ago: executing program 3 (id=6603): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0) 40m1.356340603s ago: executing program 3 (id=6605): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pselect6(0x40, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x3d24, 0x8, 0x2, 0x2, 0x6a5}, &(0x7f00000000c0)={0x8, 0x7ff, 0x0, 0x4, 0x2dd2, 0x800, 0x8, 0x1}, 0x0, 0x0, 0x0) 40m1.197608983s ago: executing program 3 (id=6606): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 40m0.232243858s ago: executing program 3 (id=6614): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pselect6(0x40, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x3d24, 0x8, 0x2, 0x2, 0x6a5}, &(0x7f00000000c0)={0x8, 0x7ff, 0x0, 0x4, 0x2dd2, 0x800, 0x8, 0x1}, 0x0, 0x0, 0x0) 39m59.930867151s ago: executing program 3 (id=6616): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) 39m59.408763s ago: executing program 32 (id=6616): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) 9.016366312s ago: executing program 1 (id=23473): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 8.948249605s ago: executing program 1 (id=23475): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4040841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.762852124s ago: executing program 2 (id=23479): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) 8.749173145s ago: executing program 1 (id=23480): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0xb2fb5fbd786009c0, 0xfec3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 7.260342514s ago: executing program 2 (id=23488): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.453177062s ago: executing program 2 (id=23491): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x14, 0x5a, 0x1}, 0x14}}, 0x0) 1.451224823s ago: executing program 2 (id=23494): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x5c, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x80801) 1.450868822s ago: executing program 2 (id=23495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.449859133s ago: executing program 0 (id=23496): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000005, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='k', 0x1}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$packet(0x11, 0x3, 0x300) 1.447127003s ago: executing program 4 (id=23497): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 1.445628382s ago: executing program 0 (id=23498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.440555793s ago: executing program 0 (id=23499): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000004c0)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 1.440320753s ago: executing program 1 (id=23500): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(0xffffffffffffffff, r4) 1.440167943s ago: executing program 2 (id=23501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0xab, 0x8, &(0x7f0000000180)={0x2a, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) 1.440017733s ago: executing program 4 (id=23502): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.340749068s ago: executing program 1 (id=23503): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x1f, 0x1f, 0x1cc, 0x0}) 1.332286278s ago: executing program 0 (id=23504): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) 1.29703627s ago: executing program 4 (id=23505): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x10, 0x11, 0x1, 0x0, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 1.188287855s ago: executing program 1 (id=23506): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.187875165s ago: executing program 0 (id=23507): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340)='d', 0x1) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) 1.175732216s ago: executing program 4 (id=23508): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0xb2fb5fbd786009c0, 0xfec3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 1.135539147s ago: executing program 0 (id=23509): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 213.98642ms ago: executing program 4 (id=23510): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet(0x2, 0x3, 0x8d) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 0s ago: executing program 4 (id=23511): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, 'j'}, @main=@item_4={0x3, 0x0, 0x9, "5f72be78"}]}}, 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) kernel console output (not intermixed with test programs): ests per chain, 48000 per kthread [ 3042.414937][T29896] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 3042.636342][T29896] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3042.654914][T29896] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3042.686545][T29896] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 3042.714960][T29896] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3042.754926][T29896] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3042.774664][T29896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3042.817696][T24904] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3042.848733][T29896] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 3042.875799][T29896] usb 2-1: invalid MIDI out EP 0 [ 3043.031537][T29896] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 3043.097629][T29896] usb 2-1: USB disconnect, device number 34 [ 3044.029259][T24920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20901'. [ 3044.055214][T24920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20901'. [ 3044.437885][T24927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20905'. [ 3045.405455][T29896] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 3045.598895][T29896] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3045.614907][T29896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3045.633254][T29896] usb 2-1: Product: syz [ 3045.644379][T29896] usb 2-1: Manufacturer: syz [ 3045.659334][T29896] usb 2-1: SerialNumber: syz [ 3045.882188][T24942] netlink: 830 bytes leftover after parsing attributes in process `syz.1.20912'. [ 3045.905676][T24942] bond_slave_0: entered promiscuous mode [ 3045.911429][T24942] bond_slave_1: entered promiscuous mode [ 3045.935215][T24970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20922'. [ 3045.944483][T24970] @: renamed from veth0_to_batadv (while UP) [ 3045.978129][T24970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20922'. [ 3046.155792][T29896] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 3046.183790][T24975] fuseblk: Bad value for 'fd' [ 3047.789015][T29896] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71 [ 3047.814643][T29896] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3047.902626][T29896] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3047.929587][T29896] lan78xx: probe of 2-1:1.0 failed with error -71 [ 3047.943100][T29896] usb 2-1: USB disconnect, device number 35 [ 3048.164555][T25012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20941'. [ 3054.895054][T11930] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 3055.088909][T11930] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 3055.107468][T11930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3055.134948][T11930] usb 2-1: config 0 has no interface number 0 [ 3055.147103][T11930] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 3055.165557][T11930] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3055.183939][T11930] usb 2-1: Product: syz [ 3055.188825][T11930] usb 2-1: SerialNumber: syz [ 3055.203934][T11930] usb 2-1: config 0 descriptor?? [ 3055.586651][T25118] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3055.758882][T11930] usb 2-1: USB disconnect, device number 36 [ 3059.932035][T25219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21030'. [ 3060.365002][ T4799] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 3060.579002][ T4799] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3060.605214][ T4799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3060.646064][ T4799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 3060.667385][ T4799] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3060.700907][ T4799] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3060.721134][ T4799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.743201][T25221] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3060.763153][ T4799] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 3060.785696][ T4799] usb 5-1: invalid MIDI out EP 0 [ 3060.930478][T25227] syz.0.21034 (25227) used greatest stack depth: 20008 bytes left [ 3060.940477][ T4799] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 3060.985426][ T4799] usb 5-1: USB disconnect, device number 3 [ 3064.841356][T25336] fuseblk: Bad value for 'fd' [ 3065.599085][T25360] fuseblk: Bad value for 'fd' [ 3065.802313][T25368] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.21101'. [ 3065.824945][T25368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21101'. [ 3066.585283][ T8] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 3066.745180][ T8] usb 3-1: device descriptor read/64, error -71 [ 3066.818755][T25399] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.21114'. [ 3066.844956][T25399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21114'. [ 3067.015169][ T8] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 3067.174946][ T8] usb 3-1: device descriptor read/64, error -71 [ 3067.295315][ T8] usb usb3-port1: attempt power cycle [ 3067.718169][ T8] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 3067.765636][ T8] usb 3-1: device descriptor read/8, error -71 [ 3068.044933][ T8] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 3068.095653][ T8] usb 3-1: device descriptor read/8, error -71 [ 3068.221521][ T8] usb usb3-port1: unable to enumerate USB device [ 3070.734940][T24902] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 3070.894984][T24902] usb 3-1: device descriptor read/64, error -71 [ 3071.168851][T24902] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 3071.334932][T24902] usb 3-1: device descriptor read/64, error -71 [ 3071.356358][T25466] fuseblk: Unknown parameter '0xffffffffffffffff' [ 3071.455219][T24902] usb usb3-port1: attempt power cycle [ 3071.874959][T24902] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 3071.925671][T24902] usb 3-1: device descriptor read/8, error -71 [ 3072.205205][T24902] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 3072.257369][T24902] usb 3-1: device descriptor read/8, error -71 [ 3072.396241][T24902] usb usb3-port1: unable to enumerate USB device [ 3072.460629][T25486] fuseblk: Unknown parameter '0xffffffffffffffff' [ 3073.541248][T25508] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21163'. [ 3074.805250][ T5790] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 3074.972789][ T5790] usb 5-1: device descriptor read/64, error -71 [ 3075.246073][ T5790] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 3075.424962][ T5790] usb 5-1: device descriptor read/64, error -71 [ 3075.555210][ T5790] usb usb5-port1: attempt power cycle [ 3075.984985][ T5790] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 3076.025654][ T5790] usb 5-1: device descriptor read/8, error -71 [ 3076.305793][ T5790] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 3076.361119][ T5790] usb 5-1: device descriptor read/8, error -71 [ 3076.485540][ T5790] usb usb5-port1: unable to enumerate USB device [ 3077.605081][T24902] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 3077.675137][ T5790] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 3077.787113][T24902] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 3077.804892][T24902] usb 2-1: config 0 has no interface number 0 [ 3077.815169][T24902] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3077.836773][T24902] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3077.856805][T24902] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 3077.876290][T24902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3077.877013][ T5790] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 3077.905488][T24902] usb 2-1: config 0 descriptor?? [ 3077.912892][ T5790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3077.943776][ T5790] usb 3-1: config 0 has no interface number 0 [ 3077.962166][ T5790] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 3077.980412][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3077.988771][ T5790] usb 3-1: Product: syz [ 3077.992974][ T5790] usb 3-1: SerialNumber: syz [ 3078.007051][ T5790] usb 3-1: config 0 descriptor?? [ 3078.366415][T24902] prodikeys 0003:041E:2801.0011: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 3078.409518][T24902] hid_prodikeys: hid-prodikeys: failed to find output report [ 3078.409518][T24902] [ 3078.468039][T24902] usb 3-1: USB disconnect, device number 83 [ 3078.544024][ T5790] usb 2-1: USB disconnect, device number 37 [ 3079.837868][T25606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21209'. [ 3079.863247][T25606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21209'. [ 3082.255263][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.261621][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3086.885033][ T5873] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 3087.035218][ T5873] usb 2-1: device descriptor read/64, error -71 [ 3087.114974][ T8] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 3087.131494][T25758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21280'. [ 3087.141394][T25758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21280'. [ 3087.157550][T25758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21280'. [ 3087.169092][T25758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21280'. [ 3087.305001][ T5873] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 3087.317726][ T8] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 3087.326746][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3087.342129][ T8] usb 5-1: config 0 has no interface number 0 [ 3087.352596][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 3087.385309][ T8] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3087.393459][ T8] usb 5-1: Product: syz [ 3087.414906][ T8] usb 5-1: SerialNumber: syz [ 3087.429948][ T8] usb 5-1: config 0 descriptor?? [ 3087.464912][ T5873] usb 2-1: device descriptor read/64, error -71 [ 3087.544445][T25764] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.21283'. [ 3087.585140][ T5873] usb usb2-port1: attempt power cycle [ 3087.819415][T25750] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3087.994939][ T5873] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 3088.018928][ T4799] usb 5-1: USB disconnect, device number 8 [ 3088.035625][ T5873] usb 2-1: device descriptor read/8, error -71 [ 3088.260606][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21289'. [ 3088.269844][T25777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21289'. [ 3088.279966][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21289'. [ 3088.289321][T25777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21289'. [ 3088.304966][ T5873] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 3088.348825][ T5873] usb 2-1: device descriptor read/8, error -71 [ 3088.475125][ T5873] usb usb2-port1: unable to enumerate USB device [ 3088.592042][T25786] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.21292'. [ 3090.346006][ T5790] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3090.571093][ T5790] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3090.595125][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3090.603174][ T5790] usb 5-1: Product: syz [ 3090.635065][ T5790] usb 5-1: Manufacturer: syz [ 3090.639730][ T5790] usb 5-1: SerialNumber: syz [ 3090.901479][T25829] bond_slave_0: entered promiscuous mode [ 3090.907337][T25829] bond_slave_1: entered promiscuous mode [ 3091.117218][ T5790] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 3091.935185][ T4799] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 3092.120957][ T4799] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3092.145810][ T4799] usb 1-1: config 0 has no interfaces? [ 3092.151541][ T5790] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 3092.152080][ T4799] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3092.173227][ T5790] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3092.203185][ T4799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3092.206007][ T5790] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3092.223444][ T4799] usb 1-1: config 0 descriptor?? [ 3092.258984][ T5790] lan78xx: probe of 5-1:1.0 failed with error -32 [ 3092.443210][ T4799] usb 1-1: USB disconnect, device number 56 [ 3093.197709][T11930] usb 5-1: USB disconnect, device number 9 [ 3093.865127][ T4799] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 3094.066977][ T4799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3094.083788][ T4799] usb 2-1: config 0 has no interfaces? [ 3094.091170][ T4799] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3094.107283][ T4799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3094.121462][ T4799] usb 2-1: config 0 descriptor?? [ 3094.264970][T11930] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3094.294931][ T5873] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 3094.342309][ T5790] usb 2-1: USB disconnect, device number 42 [ 3094.460899][T11930] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3094.470429][T11930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3094.485016][T11930] usb 5-1: Product: syz [ 3094.491178][T11930] usb 5-1: Manufacturer: syz [ 3094.495281][ T5873] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 3094.503790][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3094.503831][T11930] usb 5-1: SerialNumber: syz [ 3094.534856][ T5873] usb 1-1: config 0 has no interface number 0 [ 3094.547277][ T5873] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 3094.565139][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3094.573507][ T5873] usb 1-1: Product: syz [ 3094.578290][ T5873] usb 1-1: SerialNumber: syz [ 3094.585880][ T5873] usb 1-1: config 0 descriptor?? [ 3094.738560][T25874] __nla_validate_parse: 2 callbacks suppressed [ 3094.738580][T25874] netlink: 830 bytes leftover after parsing attributes in process `syz.4.21335'. [ 3094.836606][T25876] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3094.959523][ T5873] usb 1-1: USB disconnect, device number 57 [ 3094.970328][T11930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 3096.005966][T11930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 3096.025851][T11930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3096.036956][T25923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21353'. [ 3096.046843][T11930] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3096.053860][T25923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21353'. [ 3096.065614][T25923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21353'. [ 3096.071382][T11930] lan78xx: probe of 5-1:1.0 failed with error -32 [ 3096.074598][T25923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21353'. [ 3097.067756][ T9843] usb 5-1: USB disconnect, device number 10 [ 3098.165598][ T4799] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 3098.362195][ T4799] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3098.376329][ T4799] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3098.386610][ T4799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3098.402152][ T4799] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 3098.452510][ T4799] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 3098.469696][T25426] udevd[25426]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3098.604936][ T8] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 3098.619950][ T4799] usb 5-1: USB disconnect, device number 11 [ 3098.796804][ T8] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 3098.813981][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3098.844998][ T8] usb 3-1: config 0 has no interface number 0 [ 3098.858620][ T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 3098.875090][ T8] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3098.893426][ T8] usb 3-1: Product: syz [ 3098.898335][ T8] usb 3-1: SerialNumber: syz [ 3098.923140][ T8] usb 3-1: config 0 descriptor?? [ 3099.238232][T25998] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3099.397740][ T4799] usb 3-1: USB disconnect, device number 84 [ 3106.054966][T24902] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 3106.264189][T24902] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3106.274688][T24902] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3106.308300][T24902] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3106.328968][T24902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3106.352131][T24902] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 3106.411662][T25426] udevd[25426]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3106.430007][T24902] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 3106.556183][T24902] usb 2-1: USB disconnect, device number 43 [ 3108.756936][T26279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21522'. [ 3108.794942][T26279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21522'. [ 3108.804231][T26279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21522'. [ 3108.835311][T26279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21522'. [ 3109.716056][T26303] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21532'. [ 3113.161827][T26360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21561'. [ 3113.195078][T26360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21561'. [ 3113.204355][T26360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21561'. [ 3113.230345][T26360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21561'. [ 3114.933398][T26395] netlink: 68 bytes leftover after parsing attributes in process `syz.0.21574'. [ 3115.095070][ T5790] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 3115.335603][T26402] netlink: 2076 bytes leftover after parsing attributes in process `syz.0.21576'. [ 3115.355886][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3115.382716][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3115.408544][ T5790] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3115.433113][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3115.460414][ T5790] usb 5-1: config 0 descriptor?? [ 3115.985068][ T5790] usbhid 5-1:0.0: can't add hid device: -71 [ 3115.991487][ T5790] usbhid: probe of 5-1:0.0 failed with error -71 [ 3116.008956][ T5790] usb 5-1: USB disconnect, device number 12 [ 3117.164947][ T4799] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 3117.352979][T26452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21598'. [ 3117.372095][T26452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21598'. [ 3117.372616][ T4799] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3117.384592][T26452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21598'. [ 3117.409238][T26452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21598'. [ 3117.433509][ T4799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 3117.453619][ T4799] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3117.484936][ T4799] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3117.503975][ T4799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3117.538170][ T4799] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 3117.608588][ T4799] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 3117.610276][T26391] udevd[26391]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3117.763841][ T4799] usb 5-1: USB disconnect, device number 13 [ 3118.212380][ T27] audit: type=1326 audit(1763529707.529:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.0.21608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff43d8f6c9 code=0x7ffc0000 [ 3118.272261][ T27] audit: type=1326 audit(1763529707.529:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.0.21608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff43d8f6c9 code=0x7ffc0000 [ 3118.338949][ T27] audit: type=1326 audit(1763529707.529:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.0.21608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7eff43d8f6c9 code=0x7ffc0000 [ 3118.392243][ T27] audit: type=1326 audit(1763529707.529:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.0.21608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff43d8f6c9 code=0x7ffc0000 [ 3118.455209][ T27] audit: type=1326 audit(1763529707.529:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26474 comm="syz.0.21608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff43d8f6c9 code=0x7ffc0000 [ 3120.892637][T26521] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21630'. [ 3122.897670][T26545] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21641'. [ 3124.786274][T26567] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21653'. [ 3125.857762][T26600] netlink: 68 bytes leftover after parsing attributes in process `syz.0.21666'. [ 3126.153795][T26608] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.21670'. [ 3126.884348][T26624] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21677'. [ 3127.834060][T26653] netlink: 68 bytes leftover after parsing attributes in process `syz.0.21690'. [ 3129.075546][T26698] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 3129.082117][T26698] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3129.092234][T26698] vhci_hcd vhci_hcd.0: Device attached [ 3129.118084][T26699] vhci_hcd: cannot find the pending unlink 1 [ 3129.405002][T24902] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 3129.412881][ T8] usb 34-1: SetAddress Request (2) to port 0 [ 3129.430399][ T8] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 3129.607338][T24902] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 3129.626621][T24902] usb 1-1: config 0 has no interface number 0 [ 3129.643376][T24902] usb 1-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 3129.664245][T24902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3129.685654][T24902] usb 1-1: config 0 descriptor?? [ 3129.693614][T24902] usb-storage 1-1:0.125: USB Mass Storage device detected [ 3129.899391][T24902] usb 1-1: USB disconnect, device number 58 [ 3129.913525][T26699] vhci_hcd: connection reset by peer [ 3129.935091][ T1091] vhci_hcd: stop threads [ 3129.942642][ T1091] vhci_hcd: release socket [ 3129.953341][ T1091] vhci_hcd: disconnect device [ 3131.922649][T21507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3131.950288][T21507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3131.974406][T21507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3131.987728][T21507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3131.999869][T21507] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3132.007638][T21507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3132.355912][T28126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3132.534568][T28126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3132.794299][T28126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3133.007367][T28126] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3133.380493][T26774] chnl_net:caif_netlink_parms(): no params data found [ 3133.823803][T26774] bridge0: port 1(bridge_slave_0) entered blocking state [ 3133.847004][T26774] bridge0: port 1(bridge_slave_0) entered disabled state [ 3133.872079][T26774] bridge_slave_0: entered allmulticast mode [ 3133.886288][T26774] bridge_slave_0: entered promiscuous mode [ 3133.929875][T26774] bridge0: port 2(bridge_slave_1) entered blocking state [ 3133.947640][T26774] bridge0: port 2(bridge_slave_1) entered disabled state [ 3133.966409][T26774] bridge_slave_1: entered allmulticast mode [ 3133.981706][T26774] bridge_slave_1: entered promiscuous mode [ 3134.095292][T21507] Bluetooth: hci3: command tx timeout [ 3134.207096][T26774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3134.247931][T26774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3134.448899][T26774] team0: Port device team_slave_0 added [ 3134.483307][T26774] team0: Port device team_slave_1 added [ 3134.582614][ T8] usb 34-1: device descriptor read/8, error -110 [ 3134.632242][T26774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3134.645067][T26774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3134.734886][T26774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3134.775397][T26774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3134.782385][T26774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3134.886324][T26774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3135.046175][ T8] usb usb34-port1: attempt power cycle [ 3135.230231][T26774] hsr_slave_0: entered promiscuous mode [ 3135.276060][T26774] hsr_slave_1: entered promiscuous mode [ 3135.294284][T26774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3135.316104][T26774] Cannot create hsr debugfs directory [ 3135.696759][ T8] usb usb34-port1: unable to enumerate USB device [ 3135.959367][T28126] hsr_slave_0: left promiscuous mode [ 3135.971075][T28126] hsr_slave_1: left promiscuous mode [ 3135.989991][T28126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3136.026339][T28126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3136.052203][T28126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3136.070028][T28126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3136.091080][T28126] bridge_slave_1: left allmulticast mode [ 3136.105103][T28126] bridge_slave_1: left promiscuous mode [ 3136.123234][T28126] bridge0: port 2(bridge_slave_1) entered disabled state [ 3136.155462][T28126] bridge_slave_0: left allmulticast mode [ 3136.161176][T28126] bridge_slave_0: left promiscuous mode [ 3136.167149][T21507] Bluetooth: hci3: command tx timeout [ 3136.196910][T28126] bridge0: port 1(bridge_slave_0) entered disabled state [ 3136.384667][T28126] veth1_macvtap: left promiscuous mode [ 3136.395375][T28126] veth0_macvtap: left promiscuous mode [ 3136.401050][T28126] veth1_vlan: left promiscuous mode [ 3136.434999][T28126] veth0_vlan: left promiscuous mode [ 3137.988948][T28126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3138.092438][T28126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3138.254470][T21507] Bluetooth: hci3: command tx timeout [ 3138.874162][T28126] bond0 (unregistering): Released all slaves [ 3139.010686][T26848] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.21761'. [ 3139.030502][T26854] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21762'. [ 3139.099232][T26854] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21762'. [ 3139.905671][T26896] netlink: 48 bytes leftover after parsing attributes in process `syz.4.21775'. [ 3139.945283][T26896] netlink: 48 bytes leftover after parsing attributes in process `syz.4.21775'. [ 3140.199122][T26774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3140.233836][T26774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3140.273462][T26774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3140.327156][T16862] Bluetooth: hci3: command tx timeout [ 3140.339452][T26774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3140.627202][T26774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3140.645219][T16862] Bluetooth: hci1: command 0x0406 tx timeout [ 3140.698295][T26774] 8021q: adding VLAN 0 to HW filter on device team0 [ 3140.759991][T12779] bridge0: port 1(bridge_slave_0) entered blocking state [ 3140.767204][T12779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3140.803845][T12779] bridge0: port 2(bridge_slave_1) entered blocking state [ 3140.811112][T12779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3141.451193][T26774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3141.600331][T26774] veth0_vlan: entered promiscuous mode [ 3141.647695][T26774] veth1_vlan: entered promiscuous mode [ 3141.767445][T26774] veth0_macvtap: entered promiscuous mode [ 3141.796454][T26774] veth1_macvtap: entered promiscuous mode [ 3141.857600][T26774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3141.890977][T26774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3141.931613][T26774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3141.975037][T26774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.004164][T26774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3142.035353][T26774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.074028][T26774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3142.113903][T26774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.140742][T26774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3142.162786][T26774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.195914][T26774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3142.238948][T26774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.275121][T26774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.303722][T26774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.324719][T26774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.344880][T26774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.374878][T26774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.397063][T26774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.424994][T26774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.451488][T26774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.474861][T26774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.499508][T26774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3142.568714][T26774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3142.607784][T26774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3142.632713][T26774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3142.674894][T26774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3142.925647][T12779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3142.960589][T12779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3143.014917][ T252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3143.043087][ T252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3143.696591][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.702936][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3146.093972][T27027] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 3146.100553][T27027] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3146.135286][T27027] vhci_hcd vhci_hcd.0: Device attached [ 3146.154997][T27028] vhci_hcd: cannot find the pending unlink 1 [ 3146.174977][T27028] vhci_hcd: connection closed [ 3146.181030][T12779] vhci_hcd: stop threads [ 3146.193090][T12779] vhci_hcd: release socket [ 3146.200569][T12779] vhci_hcd: disconnect device [ 3150.261933][T27099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21830'. [ 3150.315021][T27099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21830'. [ 3151.455621][T16862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3151.476282][T16862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3151.498278][T16862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3151.541844][T16862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3151.556553][T16862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3151.564000][T16862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3151.990606][T27111] chnl_net:caif_netlink_parms(): no params data found [ 3152.366929][T27111] bridge0: port 1(bridge_slave_0) entered blocking state [ 3152.374194][T27111] bridge0: port 1(bridge_slave_0) entered disabled state [ 3152.385356][T27111] bridge_slave_0: entered allmulticast mode [ 3152.392718][T27111] bridge_slave_0: entered promiscuous mode [ 3152.437706][T27111] bridge0: port 2(bridge_slave_1) entered blocking state [ 3152.465143][T27111] bridge0: port 2(bridge_slave_1) entered disabled state [ 3152.472436][T27111] bridge_slave_1: entered allmulticast mode [ 3152.512798][T27111] bridge_slave_1: entered promiscuous mode [ 3152.712970][T27111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3152.756874][T27111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3152.879633][ T3523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3153.169107][ T3523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3153.222096][T27111] team0: Port device team_slave_0 added [ 3153.240940][T27111] team0: Port device team_slave_1 added [ 3153.377803][ T3523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3153.432616][T27111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3153.451720][T27111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3153.508877][T27111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3153.573659][ T3523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3153.596109][T27111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3153.603098][T27111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3153.654965][T27111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3153.690187][T21507] Bluetooth: hci4: command tx timeout [ 3153.762217][T27137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21845'. [ 3153.822201][T27137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21845'. [ 3153.877915][T27111] hsr_slave_0: entered promiscuous mode [ 3153.912792][T27111] hsr_slave_1: entered promiscuous mode [ 3153.940141][T27111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3153.955077][T27111] Cannot create hsr debugfs directory [ 3154.904392][T27155] veth1_to_bond: entered allmulticast mode [ 3154.986376][T27155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21852'. [ 3155.144730][T27155] bond0: (slave bond_slave_1): Releasing backup interface [ 3155.212599][T27155] veth1_to_bond (unregistering): left allmulticast mode [ 3155.765129][T21507] Bluetooth: hci4: command tx timeout [ 3156.051321][T27111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3156.092616][T27111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3156.199037][T27111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3156.232449][T27111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3156.530467][ T3523] hsr_slave_0: left promiscuous mode [ 3156.583764][ T3523] hsr_slave_1: left promiscuous mode [ 3156.602405][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3156.612221][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3156.637410][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3156.657804][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3156.674029][ T3523] bridge_slave_1: left allmulticast mode [ 3156.690181][ T3523] bridge_slave_1: left promiscuous mode [ 3156.710617][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 3156.732687][ T3523] bridge_slave_0: left allmulticast mode [ 3156.750932][ T3523] bridge_slave_0: left promiscuous mode [ 3156.771520][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 3156.905705][ T3523] veth1_macvtap: left promiscuous mode [ 3156.911298][ T3523] veth0_macvtap: left promiscuous mode [ 3156.938035][ T3523] veth1_vlan: left promiscuous mode [ 3156.943452][ T3523] veth0_vlan: left promiscuous mode [ 3157.846775][T21507] Bluetooth: hci4: command tx timeout [ 3158.417224][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 3158.530680][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 3158.619583][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3158.695427][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3159.264995][ T3523] bond0 (unregistering): Released all slaves [ 3159.368961][T27254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21881'. [ 3159.561544][T27111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3159.664408][T27111] 8021q: adding VLAN 0 to HW filter on device team0 [ 3159.703007][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 3159.710313][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3159.736520][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 3159.743674][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3159.790346][T27264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21887'. [ 3159.804214][T27264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21887'. [ 3159.874431][ T3523] IPVS: stop unused estimator thread 0... [ 3159.935409][T21507] Bluetooth: hci4: command tx timeout [ 3160.313634][T27111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3160.423560][T27111] veth0_vlan: entered promiscuous mode [ 3160.459928][T27111] veth1_vlan: entered promiscuous mode [ 3160.542094][T27111] veth0_macvtap: entered promiscuous mode [ 3160.572251][T27111] veth1_macvtap: entered promiscuous mode [ 3160.608165][T27111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3160.632289][T27111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3160.652507][T27111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3160.671245][T27111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3160.688036][T27111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3160.703656][T27111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3160.714931][T27111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3160.725914][T27111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3160.736461][T27111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3160.747310][T27111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3160.759344][T27111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3160.769384][T27295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21898'. [ 3160.797835][T27295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21898'. [ 3160.830084][T27111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3160.865129][T27111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3160.901245][T27111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3160.911966][T27111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3160.924040][T27111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3160.934726][T27111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3160.976686][T27111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3160.994526][T27111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3161.007440][T27111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3161.038218][T27111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3161.059927][T27111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3161.091221][T27111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3161.110888][T27111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3161.121846][T27111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3161.143409][T27111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3161.305750][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3161.346287][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3161.349219][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3161.387197][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3162.534900][T24717] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3162.735429][T24717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3162.757516][T24717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3162.790557][T24717] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3162.815310][T24717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3162.837009][T24717] usb 5-1: config 0 descriptor?? [ 3163.325745][T24717] usbhid 5-1:0.0: can't add hid device: -71 [ 3163.331784][T24717] usbhid: probe of 5-1:0.0 failed with error -71 [ 3163.375522][T24717] usb 5-1: USB disconnect, device number 14 [ 3163.505571][T16862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3163.517175][T16862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3163.531210][T16862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3163.542093][T16862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3163.559562][T16862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3163.567500][T16862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3163.589993][T27344] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21918'. [ 3164.255774][T27341] chnl_net:caif_netlink_parms(): no params data found [ 3164.629019][ T3469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3164.664297][T27341] bridge0: port 1(bridge_slave_0) entered blocking state [ 3164.686855][T27341] bridge0: port 1(bridge_slave_0) entered disabled state [ 3164.694188][T27341] bridge_slave_0: entered allmulticast mode [ 3164.722094][T27341] bridge_slave_0: entered promiscuous mode [ 3164.754678][T27341] bridge0: port 2(bridge_slave_1) entered blocking state [ 3164.766798][T27341] bridge0: port 2(bridge_slave_1) entered disabled state [ 3164.774073][T27341] bridge_slave_1: entered allmulticast mode [ 3164.796395][T27341] bridge_slave_1: entered promiscuous mode [ 3164.878977][ T3469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3165.037432][ T3469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3165.082754][T27341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3165.170181][ T3469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3165.227019][T27341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3165.359909][T27341] team0: Port device team_slave_0 added [ 3165.376700][T27341] team0: Port device team_slave_1 added [ 3165.495325][T27341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3165.502461][T27341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3165.533158][T27341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3165.547174][T27341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3165.554310][T27341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3165.601389][T27341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3165.612234][T16862] Bluetooth: hci2: command tx timeout [ 3165.809297][T27341] hsr_slave_0: entered promiscuous mode [ 3165.833327][T27341] hsr_slave_1: entered promiscuous mode [ 3165.875769][T27341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3165.883383][T27341] Cannot create hsr debugfs directory [ 3167.030655][T27400] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21935'. [ 3167.663878][T27341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3167.687075][T16862] Bluetooth: hci2: command tx timeout [ 3167.805716][T27341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3167.861993][T27341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3167.989007][T27341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3168.400973][ T3469] hsr_slave_0: left promiscuous mode [ 3168.413777][ T3469] hsr_slave_1: left promiscuous mode [ 3168.445309][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3168.466033][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3168.499778][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3168.524926][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3168.546328][ T3469] bridge_slave_1: left allmulticast mode [ 3168.552032][ T3469] bridge_slave_1: left promiscuous mode [ 3168.588393][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 3168.635851][ T3469] bridge_slave_0: left allmulticast mode [ 3168.645990][ T3469] bridge_slave_0: left promiscuous mode [ 3168.652072][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 3168.786686][ T3469] veth1_macvtap: left promiscuous mode [ 3168.792286][ T3469] veth0_macvtap: left promiscuous mode [ 3168.815627][ T3469] veth1_vlan: left promiscuous mode [ 3168.833001][ T3469] veth0_vlan: left promiscuous mode [ 3169.213072][T27441] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21944'. [ 3169.774701][T16862] Bluetooth: hci2: command tx timeout [ 3170.691071][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 3170.907748][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 3171.025984][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3171.847324][T16862] Bluetooth: hci2: command tx timeout [ 3172.427320][ T3469] bond0 (unregistering): Released all slaves [ 3172.711412][T27341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3172.799632][T27341] 8021q: adding VLAN 0 to HW filter on device team0 [ 3172.865617][T11566] bridge0: port 1(bridge_slave_0) entered blocking state [ 3172.872840][T11566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3172.933347][T11566] bridge0: port 2(bridge_slave_1) entered blocking state [ 3172.940584][T11566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3173.108420][T27341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3173.552868][T27341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3173.670137][T27341] veth0_vlan: entered promiscuous mode [ 3173.693579][T27341] veth1_vlan: entered promiscuous mode [ 3173.783215][T27341] veth0_macvtap: entered promiscuous mode [ 3173.824700][T27341] veth1_macvtap: entered promiscuous mode [ 3173.928820][T27341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3173.956349][T27341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3173.982630][T27341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3173.998947][T27341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3174.017952][T27341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3174.031300][T27341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3174.049536][T27341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3174.063969][T27341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3174.084200][T27341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3174.127775][T27341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3174.148898][T27341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3174.184490][T27341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3174.216241][T27341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3174.255280][T27341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3174.280489][T27341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3174.308708][T27341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3174.329845][T27341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3174.360182][T27341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3174.388365][T27341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3174.410424][T27341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3174.436533][T27341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3174.459376][T27341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3174.496560][T27341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3174.530075][T27341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3174.545028][T27341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3174.574318][T27341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3174.803501][ T252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3174.849091][ T252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3174.953691][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3174.990830][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3176.587295][T27547] veth1_to_bond: entered allmulticast mode [ 3176.604439][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21987'. [ 3176.632334][T27546] veth1_to_bond: left allmulticast mode [ 3177.323661][T27572] veth1_to_bond: entered allmulticast mode [ 3177.339776][T27572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21999'. [ 3177.361147][T27571] veth1_to_bond: left allmulticast mode [ 3181.570070][T27669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22042'. [ 3185.361340][T27699] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22057'. [ 3185.395579][T27699] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22057'. [ 3187.849708][T27743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.22075'. [ 3187.871737][T27743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.22075'. [ 3190.875091][ T8] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3191.088704][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3191.105180][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3191.136641][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3191.154930][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3191.192550][ T8] usb 1-1: config 0 descriptor?? [ 3191.653072][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 3191.665377][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 3191.686302][ T8] usb 1-1: USB disconnect, device number 59 [ 3191.975455][T27788] fuse: Bad value for 'rootmode' [ 3192.014155][ T8] IPVS: starting estimator thread 0... [ 3192.128561][T27789] IPVS: using max 34 ests per chain, 81600 per kthread [ 3193.890602][T27822] netlink: 68 bytes leftover after parsing attributes in process `syz.4.22111'. [ 3193.926457][T27825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22112'. [ 3193.947058][T27825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22112'. [ 3194.805084][T11930] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 3201.966946][T27993] netlink: 48 bytes leftover after parsing attributes in process `syz.4.22182'. [ 3201.995179][T27993] netlink: 48 bytes leftover after parsing attributes in process `syz.4.22182'. [ 3205.130660][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.137926][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3208.291339][T28052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22208'. [ 3210.145043][T11930] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 3210.345249][T11930] usb 1-1: Using ep0 maxpacket: 16 [ 3210.356631][T11930] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3210.378749][T11930] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3210.418779][T11930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3210.434970][T11930] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3210.451906][T11930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3210.479050][T11930] usb 1-1: config 0 descriptor?? [ 3210.737094][T11930] usbhid 1-1:0.0: can't add hid device: -71 [ 3210.743155][T11930] usbhid: probe of 1-1:0.0 failed with error -71 [ 3210.838033][T11930] usb 1-1: USB disconnect, device number 60 [ 3212.185174][T11930] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3212.366662][T11930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3212.395288][T11930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3212.431622][T11930] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3212.454971][T11930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3212.495404][T11930] usb 1-1: config 0 descriptor?? [ 3212.931845][T11930] usbhid 1-1:0.0: can't add hid device: -71 [ 3212.948675][T11930] usbhid: probe of 1-1:0.0 failed with error -71 [ 3212.975142][T11930] usb 1-1: USB disconnect, device number 61 [ 3218.175707][T28205] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22272'. [ 3220.664999][T29896] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 3221.281148][T28254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22295'. [ 3221.315845][T28254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3221.323350][T28254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3221.369834][T28254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3221.394948][T28254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3221.723036][T28263] netlink: 68 bytes leftover after parsing attributes in process `syz.1.22299'. [ 3223.464969][T11930] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3223.668544][T11930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3223.691090][T11930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3223.722926][T11930] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3223.740123][T11930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3223.757569][T11930] usb 1-1: config 0 descriptor?? [ 3224.108543][T11930] usbhid 1-1:0.0: can't add hid device: -71 [ 3224.114728][T11930] usbhid: probe of 1-1:0.0 failed with error -71 [ 3224.130301][T11930] usb 1-1: USB disconnect, device number 62 [ 3224.295999][T28314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22323'. [ 3224.366433][T28314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22323'. [ 3226.728231][T28352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22342'. [ 3226.870677][T28352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22342'. [ 3228.282691][T28376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22352'. [ 3228.306183][T28376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22352'. [ 3229.294482][T28395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22360'. [ 3229.435315][T28395] bond0: (slave bond_slave_1): Releasing backup interface [ 3230.156415][T28412] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22366'. [ 3231.415144][T11930] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3231.576072][T24717] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 3231.614909][T11930] usb 1-1: Using ep0 maxpacket: 16 [ 3231.627818][T11930] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3231.645006][T11930] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3231.673086][T28441] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22379'. [ 3231.683645][T11930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3231.695049][T11930] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3231.704140][T11930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3231.726000][T11930] usb 1-1: config 0 descriptor?? [ 3231.765707][T24717] usb 2-1: Using ep0 maxpacket: 16 [ 3231.773780][T24717] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3231.810381][T24717] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3231.829439][T24717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3231.845339][T24717] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3231.860425][T24717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3231.886464][T24717] usb 2-1: config 0 descriptor?? [ 3232.112354][T24717] usbhid 2-1:0.0: can't add hid device: -71 [ 3232.122168][T24717] usbhid: probe of 2-1:0.0 failed with error -71 [ 3232.145206][T24717] usb 2-1: USB disconnect, device number 45 [ 3232.155195][T11930] usbhid 1-1:0.0: can't add hid device: -71 [ 3232.172040][T11930] usbhid: probe of 1-1:0.0 failed with error -71 [ 3232.204451][T11930] usb 1-1: USB disconnect, device number 63 [ 3233.274270][T28475] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22394'. [ 3233.322314][T28477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22395'. [ 3233.352385][T28477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22395'. [ 3234.906864][T28499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22406'. [ 3234.935703][T28499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22406'. [ 3236.595036][T24717] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 3239.065033][ T5873] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 3239.245074][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 3239.261558][ T5873] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3239.285690][ T5873] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3239.325140][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3239.345019][ T5873] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3239.364424][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3239.387905][ T5873] usb 5-1: config 0 descriptor?? [ 3239.805080][ T5873] usbhid 5-1:0.0: can't add hid device: -71 [ 3239.811729][ T5873] usbhid: probe of 5-1:0.0 failed with error -71 [ 3239.835347][ T5873] usb 5-1: USB disconnect, device number 16 [ 3240.241360][T28580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22445'. [ 3240.356205][T28580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22445'. [ 3240.897021][T28599] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22454'. [ 3241.645189][T28612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22459'. [ 3241.776208][T28612] bond0: (slave bond_slave_1): Releasing backup interface [ 3244.091569][T28644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22476'. [ 3244.214298][T28644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22476'. [ 3244.951836][T28681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22489'. [ 3245.079606][T28681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22489'. [ 3245.373300][T28707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22499'. [ 3245.398569][T28707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3245.411655][T28707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3245.431376][T28707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3245.451693][T28707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3247.257376][T28792] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22538'. [ 3247.715045][T24902] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 3247.915092][T24902] usb 1-1: Using ep0 maxpacket: 16 [ 3247.934304][T24902] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3247.966071][T24902] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3247.975436][T24902] usb 1-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 3247.984518][T24902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3248.018753][T24902] usb 1-1: config 0 descriptor?? [ 3248.485673][T24902] hid_mf 0003:0079:1844.0012: hidraw0: USB HID v1.00 Device [HID 0079:1844] on usb-dummy_hcd.0-1/input0 [ 3248.514909][T24902] hid_mf 0003:0079:1844.0012: Invalid report, this should never happen! [ 3248.533518][T24902] hid_mf 0003:0079:1844.0012: Force feedback init failed. [ 3248.652742][T29896] usb 1-1: USB disconnect, device number 64 [ 3249.345601][T28817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22546'. [ 3249.366343][T28817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22546'. [ 3250.155066][T24902] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3250.347462][T24902] usb 5-1: Using ep0 maxpacket: 16 [ 3250.369115][T24902] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3250.388176][T24902] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3250.424920][T24902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3250.431603][T24902] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3250.449946][T24902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3250.477229][T24902] usb 5-1: config 0 descriptor?? [ 3250.515132][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22566'. [ 3250.699185][T24902] usbhid 5-1:0.0: can't add hid device: -71 [ 3250.715488][T24902] usbhid: probe of 5-1:0.0 failed with error -71 [ 3250.742423][T24902] usb 5-1: USB disconnect, device number 17 [ 3254.725070][ T5873] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 3254.914918][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 3254.922670][ T5873] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3254.934845][ T5873] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3254.965047][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3254.971849][ T5873] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3255.004904][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3255.027128][ T5873] usb 2-1: config 0 descriptor?? [ 3255.269133][ T5873] usbhid 2-1:0.0: can't add hid device: -71 [ 3255.295850][ T5873] usbhid: probe of 2-1:0.0 failed with error -71 [ 3255.324257][ T5873] usb 2-1: USB disconnect, device number 46 [ 3256.139251][T28986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22626'. [ 3256.628537][T29002] netlink: 68 bytes leftover after parsing attributes in process `syz.1.22632'. [ 3256.735057][T24717] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 3256.943535][T29019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22637'. [ 3256.953785][T24717] usb 5-1: Using ep0 maxpacket: 16 [ 3256.983778][T24717] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3257.004962][T24717] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3257.029112][T24717] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3257.036912][T24717] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3257.064272][T24717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3257.079357][T29019] bond0: (slave bond_slave_1): Releasing backup interface [ 3257.091822][T24717] usb 5-1: config 0 descriptor?? [ 3257.444353][T29028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22642'. [ 3257.505570][T29896] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 3257.532797][T24717] usbhid 5-1:0.0: can't add hid device: -71 [ 3257.553108][T24717] usbhid: probe of 5-1:0.0 failed with error -71 [ 3257.581421][T24717] usb 5-1: USB disconnect, device number 18 [ 3257.698316][T29896] usb 2-1: Using ep0 maxpacket: 16 [ 3257.720894][T29896] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3257.732418][T29896] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3257.755493][T29896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3257.766467][T29896] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3257.780285][T29896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3257.796101][T29896] usb 2-1: config 0 descriptor?? [ 3258.024424][T29896] usbhid 2-1:0.0: can't add hid device: -71 [ 3258.035950][T29896] usbhid: probe of 2-1:0.0 failed with error -71 [ 3258.064738][T29896] usb 2-1: USB disconnect, device number 47 [ 3258.408369][T28990] Bluetooth: hci3: command 0x0406 tx timeout [ 3261.448657][T29089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22661'. [ 3262.754987][T29896] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 3262.957103][T29896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3262.988589][T29896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3263.014909][T29896] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3263.035716][T29896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3263.055936][T29896] usb 3-1: config 0 descriptor?? [ 3263.543206][T29896] usbhid 3-1:0.0: can't add hid device: -71 [ 3263.549614][T29896] usbhid: probe of 3-1:0.0 failed with error -71 [ 3263.585910][T29896] usb 3-1: USB disconnect, device number 86 [ 3264.525756][T29123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22680'. [ 3266.582442][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.589005][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3268.005967][ T5790] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 3268.195221][ T5790] usb 5-1: Using ep0 maxpacket: 16 [ 3268.214731][ T5790] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3268.236291][ T5790] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3268.269803][ T5790] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3268.288438][ T5790] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3268.305389][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3268.341117][ T5790] usb 5-1: config 0 descriptor?? [ 3268.566244][ T5790] usbhid 5-1:0.0: can't add hid device: -71 [ 3268.572306][ T5790] usbhid: probe of 5-1:0.0 failed with error -71 [ 3268.604701][ T5790] usb 5-1: USB disconnect, device number 19 [ 3269.175368][ T5790] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 3269.376790][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3269.405203][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3269.425675][ T5790] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3269.445403][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3269.467084][ T5790] usb 1-1: config 0 descriptor?? [ 3269.915888][ T5790] usbhid 1-1:0.0: can't add hid device: -71 [ 3269.925239][ T5790] usbhid: probe of 1-1:0.0 failed with error -71 [ 3269.952288][ T5790] usb 1-1: USB disconnect, device number 65 [ 3270.794933][ T5873] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 3270.994965][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 3271.007096][ T5873] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3271.018289][ T5873] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3271.054857][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3271.071761][ T5873] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3271.092064][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3271.114738][ T5873] usb 3-1: config 0 descriptor?? [ 3271.539092][ T5873] usbhid 3-1:0.0: can't add hid device: -71 [ 3271.545822][ T5873] usbhid: probe of 3-1:0.0 failed with error -71 [ 3271.574815][ T5873] usb 3-1: USB disconnect, device number 87 [ 3273.765194][T16862] Bluetooth: hci4: command 0x0406 tx timeout [ 3273.955396][T29232] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22732'. [ 3274.735427][T11930] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3274.937379][T11930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3274.958766][T11930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3274.990859][T11930] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3275.012344][T11930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3275.073040][T11930] usb 5-1: config 0 descriptor?? [ 3275.539416][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22752'. [ 3275.549617][T11930] usbhid 5-1:0.0: can't add hid device: -71 [ 3275.565716][T11930] usbhid: probe of 5-1:0.0 failed with error -71 [ 3275.577342][T11930] usb 5-1: USB disconnect, device number 20 [ 3275.640993][T29278] bond0: (slave bond_slave_1): Releasing backup interface [ 3275.697807][T29280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22753'. [ 3275.707738][T29280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3275.715900][T29280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3275.724418][T29280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3275.735562][T29280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3276.135188][T11930] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 3276.330375][T11930] usb 2-1: Using ep0 maxpacket: 16 [ 3276.347140][T11930] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3276.367842][T11930] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3276.405688][T11930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3276.412421][T11930] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3276.431803][T11930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3276.453896][T11930] usb 2-1: config 0 descriptor?? [ 3276.685927][T11930] usbhid 2-1:0.0: can't add hid device: -71 [ 3276.691984][T11930] usbhid: probe of 2-1:0.0 failed with error -71 [ 3276.738379][T11930] usb 2-1: USB disconnect, device number 48 [ 3278.996382][T29328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22776'. [ 3279.589983][T29338] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22781'. [ 3286.640837][T29413] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22816'. [ 3287.558040][T29437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22825'. [ 3287.584997][T29437] netlink: 'syz.1.22825': attribute type 14 has an invalid length. [ 3287.592962][T29437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22825'. [ 3287.621743][T29437] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3287.630690][T29437] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3287.639695][T29437] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3287.648606][T29437] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3287.686803][T29437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22825'. [ 3287.719284][T29437] netlink: 'syz.1.22825': attribute type 14 has an invalid length. [ 3287.737969][T29437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22825'. [ 3289.138855][T28990] Bluetooth: hci2: command 0x0406 tx timeout [ 3290.245050][T24902] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 3290.351090][T24717] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 3290.445501][T24902] usb 1-1: Using ep0 maxpacket: 16 [ 3290.459802][T24902] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3290.480465][T24902] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3290.509659][T24902] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3290.525001][T24902] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3290.538703][T24902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3290.554892][T24717] usb 5-1: Using ep0 maxpacket: 16 [ 3290.562192][T24717] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3290.584469][T24902] usb 1-1: config 0 descriptor?? [ 3290.589774][T24717] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3290.608492][T24717] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3290.615997][T24717] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3290.626367][T24717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3290.652979][T24717] usb 5-1: config 0 descriptor?? [ 3290.812166][T24902] usbhid 1-1:0.0: can't add hid device: -71 [ 3290.825009][T24902] usbhid: probe of 1-1:0.0 failed with error -71 [ 3290.858262][T24902] usb 1-1: USB disconnect, device number 66 [ 3291.081319][T24717] usbhid 5-1:0.0: can't add hid device: -71 [ 3291.092616][T24717] usbhid: probe of 5-1:0.0 failed with error -71 [ 3291.111101][T24717] usb 5-1: USB disconnect, device number 21 [ 3291.789247][T29506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22855'. [ 3292.548920][T29520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22861'. [ 3293.967009][T29533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22868'. [ 3297.865702][ T9843] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 3298.060987][ T9843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3298.076675][T29606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22899'. [ 3298.086403][ T9843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3298.105562][ T9843] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3298.130449][ T9843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3298.157443][ T9843] usb 3-1: config 0 descriptor?? [ 3298.592050][ T9843] usbhid 3-1:0.0: can't add hid device: -71 [ 3298.605151][ T9843] usbhid: probe of 3-1:0.0 failed with error -71 [ 3298.630127][ T9843] usb 3-1: USB disconnect, device number 88 [ 3299.884001][T29642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22911'. [ 3300.046208][T24717] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 3300.367793][ T5790] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 3300.584897][ T5790] usb 3-1: Using ep0 maxpacket: 16 [ 3300.601002][ T5790] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3300.624975][ T5790] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3300.654233][ T5790] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3300.664362][ T5790] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3300.694916][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3300.706069][ T5790] usb 3-1: config 0 descriptor?? [ 3300.747926][T29646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22913'. [ 3300.935150][ T5790] usbhid 3-1:0.0: can't add hid device: -71 [ 3300.941207][ T5790] usbhid: probe of 3-1:0.0 failed with error -71 [ 3300.957238][ T5790] usb 3-1: USB disconnect, device number 89 [ 3305.175020][ T9843] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 3305.377087][ T9843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3305.394920][ T9843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3305.420428][ T9843] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3305.444882][ T9843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3305.500984][ T9843] usb 2-1: config 0 descriptor?? [ 3305.936672][ T9843] usbhid 2-1:0.0: can't add hid device: -71 [ 3305.942732][ T9843] usbhid: probe of 2-1:0.0 failed with error -71 [ 3305.964954][T24717] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3305.973092][ T9843] usb 2-1: USB disconnect, device number 49 [ 3306.165114][T24717] usb 5-1: Using ep0 maxpacket: 16 [ 3306.177243][T24717] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3306.198683][T24717] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3306.224846][T24717] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3306.244878][T24717] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3306.253967][T24717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3306.279039][T24717] usb 5-1: config 0 descriptor?? [ 3306.698546][T24717] usbhid 5-1:0.0: can't add hid device: -71 [ 3306.714762][T24717] usbhid: probe of 5-1:0.0 failed with error -71 [ 3306.737551][T24717] usb 5-1: USB disconnect, device number 22 [ 3306.875012][ T8] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 3306.980217][T29726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22950'. [ 3307.064881][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 3307.077061][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3307.098568][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3307.110045][ T8] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3307.119781][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3307.132412][ T8] usb 2-1: config 0 descriptor?? [ 3307.442804][T29742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22955'. [ 3307.551522][ T8] ft260 0003:0403:6030.0013: unknown main item tag 0x7 [ 3307.749943][ T8] ft260 0003:0403:6030.0013: chip code: aa7b 7457 [ 3307.951272][ T8] ft260 0003:0403:6030.0013: failed to retrieve system status [ 3307.976927][ T8] ft260: probe of 0003:0403:6030.0013 failed with error -71 [ 3307.997182][ T8] usb 2-1: USB disconnect, device number 50 [ 3309.095151][ T5873] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 3309.325032][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 3309.336664][ T5873] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3309.365417][ T5873] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3309.393304][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3309.415007][ T5873] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3309.424091][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3309.458501][ T5873] usb 2-1: config 0 descriptor?? [ 3309.883209][ T5873] usbhid 2-1:0.0: can't add hid device: -71 [ 3309.906185][ T5873] usbhid: probe of 2-1:0.0 failed with error -71 [ 3309.936785][ T5873] usb 2-1: USB disconnect, device number 51 [ 3311.315429][ T5790] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 3311.514900][ T5790] usb 2-1: Using ep0 maxpacket: 16 [ 3311.522125][ T5790] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3311.542316][ T5790] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3311.556529][ T5790] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3311.563189][ T5790] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3311.573939][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3311.594566][ T5790] usb 2-1: config 0 descriptor?? [ 3311.624991][ T9843] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 3311.804930][ T9843] usb 1-1: Using ep0 maxpacket: 16 [ 3311.812929][ T9843] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3311.835030][ T9843] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3311.854936][ T5790] usbhid 2-1:0.0: can't add hid device: -71 [ 3311.860969][ T5790] usbhid: probe of 2-1:0.0 failed with error -71 [ 3311.868978][ T9843] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3311.879304][ T5790] usb 2-1: USB disconnect, device number 52 [ 3311.885399][ T9843] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3311.894459][ T9843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3311.916375][ T9843] usb 1-1: config 0 descriptor?? [ 3312.332336][ T9843] usbhid 1-1:0.0: can't add hid device: -71 [ 3312.363525][ T9843] usbhid: probe of 1-1:0.0 failed with error -71 [ 3312.379111][ T9843] usb 1-1: USB disconnect, device number 68 [ 3312.826782][T29823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22989'. [ 3313.824987][T24902] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 3314.025181][T24902] usb 2-1: Using ep0 maxpacket: 16 [ 3314.036991][T24902] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3314.058420][T24902] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3314.094891][T24902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3314.101745][T24902] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3314.120393][T24902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3314.166544][T24902] usb 2-1: config 0 descriptor?? [ 3314.581379][T24902] usbhid 2-1:0.0: can't add hid device: -71 [ 3314.590710][T24902] usbhid: probe of 2-1:0.0 failed with error -71 [ 3314.630368][T24902] usb 2-1: USB disconnect, device number 53 [ 3315.854981][ T9843] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 3315.928012][T29902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23026'. [ 3315.955169][T29902] netlink: 'syz.4.23026': attribute type 14 has an invalid length. [ 3315.963165][T29902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23026'. [ 3315.989293][T29902] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3315.998324][T29902] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3316.007330][T29902] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3316.016276][T29902] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3316.027082][T29902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23026'. [ 3316.041275][T29902] netlink: 'syz.4.23026': attribute type 14 has an invalid length. [ 3316.054053][T29902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23026'. [ 3316.067720][ T9843] usb 2-1: Using ep0 maxpacket: 16 [ 3316.076862][ T9843] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3316.098295][ T9843] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3316.128985][ T9843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3316.150947][ T9843] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3316.162325][ T9843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3316.177177][ T9843] usb 2-1: config 0 descriptor?? [ 3316.601030][ T9843] usbhid 2-1:0.0: can't add hid device: -71 [ 3316.617364][ T9843] usbhid: probe of 2-1:0.0 failed with error -71 [ 3316.644629][ T9843] usb 2-1: USB disconnect, device number 54 [ 3316.905121][ T8] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 3317.095080][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 3317.102934][ T8] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3317.117764][ T8] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3317.131717][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3317.139422][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3317.148982][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3317.166467][ T8] usb 1-1: config 0 descriptor?? [ 3317.399592][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 3317.409290][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 3317.434089][ T8] usb 1-1: USB disconnect, device number 69 [ 3317.995065][T11930] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3318.198332][T11930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3318.217113][T11930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3318.244082][T11930] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3318.262015][T11930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3318.289682][T11930] usb 5-1: config 0 descriptor?? [ 3318.744315][T11930] usbhid 5-1:0.0: can't add hid device: -71 [ 3318.760852][T11930] usbhid: probe of 5-1:0.0 failed with error -71 [ 3318.778329][T11930] usb 5-1: USB disconnect, device number 23 [ 3320.575016][ T5873] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 3320.765673][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 3320.777016][ T5873] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3320.798238][ T5873] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3320.824988][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3320.831661][ T5873] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3320.855320][T29999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23069'. [ 3320.874614][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3320.897370][ T5873] usb 3-1: config 0 descriptor?? [ 3320.915131][T24902] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 3321.117123][T24902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3321.139565][T24902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3321.164894][T24902] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3321.179602][T24902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3321.191983][T24902] usb 2-1: config 0 descriptor?? [ 3321.315137][ T5873] usbhid 3-1:0.0: can't add hid device: -71 [ 3321.321269][ T5873] usbhid: probe of 3-1:0.0 failed with error -71 [ 3321.349305][ T5873] usb 3-1: USB disconnect, device number 90 [ 3321.534349][T24902] usbhid 2-1:0.0: can't add hid device: -71 [ 3321.545208][T24902] usbhid: probe of 2-1:0.0 failed with error -71 [ 3321.565292][T24902] usb 2-1: USB disconnect, device number 55 [ 3323.085030][T11930] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 3323.287941][T11930] usb 3-1: Using ep0 maxpacket: 16 [ 3323.325166][T11930] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3323.346549][T11930] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3323.371441][T11930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3323.388557][T11930] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3323.408046][T11930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3323.444095][T11930] usb 3-1: config 0 descriptor?? [ 3323.872514][T11930] usbhid 3-1:0.0: can't add hid device: -71 [ 3323.892684][T11930] usbhid: probe of 3-1:0.0 failed with error -71 [ 3323.923307][T11930] usb 3-1: USB disconnect, device number 91 [ 3326.440293][T30095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23110'. [ 3326.455843][T30095] netlink: 'syz.4.23110': attribute type 14 has an invalid length. [ 3326.476353][T30095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23110'. [ 3326.504401][T30095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23110'. [ 3326.517384][T30095] netlink: 'syz.4.23110': attribute type 14 has an invalid length. [ 3326.526676][T30095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23110'. [ 3327.205036][ T9843] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3327.415377][ T9843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3327.435056][ T9843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3327.461776][ T9843] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3327.484886][ T9843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3327.506157][ T9843] usb 5-1: config 0 descriptor?? [ 3327.943856][ T9843] usbhid 5-1:0.0: can't add hid device: -71 [ 3327.950166][ T9843] usbhid: probe of 5-1:0.0 failed with error -71 [ 3327.977698][ T9843] usb 5-1: USB disconnect, device number 24 [ 3327.988293][T30122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23122'. [ 3328.012096][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3328.018653][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.027089][T30122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3328.047140][T30122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3328.071790][T30122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3328.105100][T30122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3328.438162][ T5873] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 3328.634893][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 3328.657650][ T5873] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3328.684874][ T5873] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3328.718322][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3328.739026][ T5873] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3328.760732][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3328.780973][ T5873] usb 3-1: config 0 descriptor?? [ 3329.200261][ T5873] usbhid 3-1:0.0: can't add hid device: -71 [ 3329.215102][ T5873] usbhid: probe of 3-1:0.0 failed with error -71 [ 3329.225950][ T5873] usb 3-1: USB disconnect, device number 92 [ 3330.794926][ T5873] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 3331.005007][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 3331.016769][ T5873] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3331.035536][ T5873] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3331.051618][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3331.058923][ T5873] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3331.068869][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3331.080659][ T5873] usb 3-1: config 0 descriptor?? [ 3331.502133][ T5873] usbhid 3-1:0.0: can't add hid device: -71 [ 3331.508659][ T5873] usbhid: probe of 3-1:0.0 failed with error -71 [ 3331.515427][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23151'. [ 3331.526097][ T5873] usb 3-1: USB disconnect, device number 93 [ 3331.746107][T30192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23154'. [ 3333.255923][T30214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23164'. [ 3333.744979][ T9843] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 3333.955440][ T9843] usb 3-1: Using ep0 maxpacket: 16 [ 3333.995893][ T9843] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3334.017229][ T9843] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3334.055393][ T9843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3334.082428][ T9843] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3334.115077][ T9843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3334.157909][ T9843] usb 3-1: config 0 descriptor?? [ 3334.574759][ T9843] usbhid 3-1:0.0: can't add hid device: -71 [ 3334.585008][ T9843] usbhid: probe of 3-1:0.0 failed with error -71 [ 3334.622127][ T9843] usb 3-1: USB disconnect, device number 94 [ 3335.028067][T30246] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23175'. [ 3335.071768][T30246] syz.4.23175: attempt to access beyond end of device [ 3335.071768][T30246] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3336.425084][T30271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23189'. [ 3336.434190][T30271] netlink: 'syz.0.23189': attribute type 14 has an invalid length. [ 3336.442720][T30271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23189'. [ 3336.460259][T30271] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3336.469236][T30271] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3336.478176][T30271] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3336.486968][T30271] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3336.499635][T30271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23189'. [ 3336.518161][T30271] netlink: 'syz.0.23189': attribute type 14 has an invalid length. [ 3336.528135][T30271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23189'. [ 3336.605940][T11930] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3336.795160][T11930] usb 5-1: Using ep0 maxpacket: 16 [ 3336.802820][T11930] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3336.822927][T11930] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3336.855183][T11930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3336.861906][T11930] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 3336.881288][T11930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3336.902224][T11930] usb 5-1: config 0 descriptor?? [ 3336.944933][ T5790] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 3337.119690][T11930] usbhid 5-1:0.0: can't add hid device: -71 [ 3337.135294][T11930] usbhid: probe of 5-1:0.0 failed with error -71 [ 3337.157469][ T5790] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3337.167006][T11930] usb 5-1: USB disconnect, device number 25 [ 3337.184949][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3337.203223][ T5790] usb 1-1: Product: syz [ 3337.207798][ T5790] usb 1-1: Manufacturer: syz [ 3337.212435][ T5790] usb 1-1: SerialNumber: syz [ 3337.443318][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 3337.466307][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 3338.370347][T16862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3338.383046][T16862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3338.395129][T16862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3338.425144][T16862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3338.438598][T16862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3338.455363][T16862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3338.711144][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 3338.743670][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 3338.765033][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 3338.779451][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 3338.796884][T30295] chnl_net:caif_netlink_parms(): no params data found [ 3338.805288][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 3338.835768][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 3338.855987][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 3338.884178][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 3338.922391][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3338.945582][ T5790] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3338.986332][ T5790] lan78xx: probe of 1-1:1.0 failed with error -71 [ 3339.046413][ T5790] usb 1-1: USB disconnect, device number 70 [ 3339.147148][T30295] bridge0: port 1(bridge_slave_0) entered blocking state [ 3339.154585][T30295] bridge0: port 1(bridge_slave_0) entered disabled state [ 3339.162390][T30295] bridge_slave_0: entered allmulticast mode [ 3339.170510][T30295] bridge_slave_0: entered promiscuous mode [ 3339.197962][T30295] bridge0: port 2(bridge_slave_1) entered blocking state [ 3339.215465][T30295] bridge0: port 2(bridge_slave_1) entered disabled state [ 3339.230377][T30295] bridge_slave_1: entered allmulticast mode [ 3339.261432][T30295] bridge_slave_1: entered promiscuous mode [ 3339.493148][T30295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3339.529380][T30295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3339.592080][T30295] team0: Port device team_slave_0 added [ 3339.611042][T30295] team0: Port device team_slave_1 added [ 3339.685033][T29896] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 3339.710188][T30295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3339.717976][T30295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3339.747743][T30295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3339.781663][T30295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3339.791388][T30295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3339.822535][T30295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3339.878481][T29896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3339.894935][T29896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3339.915680][T29896] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3339.919693][T28126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3339.925094][T29896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3339.953622][T28126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3339.953675][T29896] usb 1-1: SerialNumber: syz [ 3340.103577][T30295] hsr_slave_0: entered promiscuous mode [ 3340.121059][T30295] hsr_slave_1: entered promiscuous mode [ 3340.141635][T30295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3340.149368][T30295] Cannot create hsr debugfs directory [ 3340.190942][T30327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23211'. [ 3340.206899][T28126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3340.228559][T29896] usb 1-1: 0:2 : does not exist [ 3340.246520][T28126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3340.285653][T29896] usb 1-1: USB disconnect, device number 71 [ 3340.416874][T28126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3340.442062][T28126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3340.485031][T16862] Bluetooth: hci0: command tx timeout [ 3340.559516][T28126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3340.572058][T28126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3340.616265][T30331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23213'. [ 3340.626195][T30331] netlink: 'syz.1.23213': attribute type 14 has an invalid length. [ 3340.634183][T30331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23213'. [ 3340.667072][T30331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23213'. [ 3340.682661][T30331] netlink: 'syz.1.23213': attribute type 14 has an invalid length. [ 3340.690803][T30331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23213'. [ 3342.043932][T30370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23225'. [ 3342.360890][T30295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3342.378379][T30375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23227'. [ 3342.385791][T30295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3342.533532][T30295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3342.564955][T16862] Bluetooth: hci0: command tx timeout [ 3342.715097][T30295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3342.813317][T28126] hsr_slave_0: left promiscuous mode [ 3342.865513][T28126] hsr_slave_1: left promiscuous mode [ 3342.876324][T28126] bridge_slave_1: left allmulticast mode [ 3342.882041][T28126] bridge_slave_1: left promiscuous mode [ 3342.911273][T28126] bridge0: port 2(bridge_slave_1) entered disabled state [ 3342.931042][T28126] bridge_slave_0: left allmulticast mode [ 3342.949734][T28126] bridge_slave_0: left promiscuous mode [ 3342.975366][T28126] bridge0: port 1(bridge_slave_0) entered disabled state [ 3343.106002][T28126] veth1_macvtap: left promiscuous mode [ 3343.121855][T28126] veth0_macvtap: left promiscuous mode [ 3343.135124][T28126] veth1_vlan: left promiscuous mode [ 3343.155005][T28126] veth0_vlan: left promiscuous mode [ 3344.646456][T16862] Bluetooth: hci0: command tx timeout [ 3345.035922][T28126] team0 (unregistering): Port device team_slave_1 removed [ 3345.177683][T28126] team0 (unregistering): Port device team_slave_0 removed [ 3345.309490][T28126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3346.388340][T28126] bond0 (unregistering): Released all slaves [ 3346.725244][T28990] Bluetooth: hci0: command tx timeout [ 3346.758851][T30295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3346.824312][T30295] 8021q: adding VLAN 0 to HW filter on device team0 [ 3346.872000][ T252] bridge0: port 1(bridge_slave_0) entered blocking state [ 3346.879278][ T252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3346.892893][ T252] bridge0: port 2(bridge_slave_1) entered blocking state [ 3346.900111][ T252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3347.040437][T28126] IPVS: stop unused estimator thread 0... [ 3347.541277][T30295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3348.168618][T30295] veth0_vlan: entered promiscuous mode [ 3348.203581][T30295] veth1_vlan: entered promiscuous mode [ 3348.273271][T30295] veth0_macvtap: entered promiscuous mode [ 3348.309110][T30295] veth1_macvtap: entered promiscuous mode [ 3348.357289][T30295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3348.380392][T30295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3348.412953][T30295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3348.437155][T30295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3348.466860][T30295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3348.500382][T30295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3348.526838][T30295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3348.547137][T30295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3348.568215][T30295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3348.597040][T30295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3348.620948][T30295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3348.645169][T30295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3348.653933][T30295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3348.675033][T30295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3348.811351][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3348.830657][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3348.879826][T11566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3348.897089][T11566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3349.471557][T30456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23248'. [ 3349.484481][T30456] syz.2.23248: attempt to access beyond end of device [ 3349.484481][T30456] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3349.605258][ T9843] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 3349.805000][ T9843] usb 1-1: Using ep0 maxpacket: 32 [ 3349.814067][ T9843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3349.865050][ T9843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3349.884903][ T9843] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3349.904491][ T9843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3349.937304][ T9843] usb 1-1: config 0 descriptor?? [ 3350.360799][ T9843] usbhid 1-1:0.0: can't add hid device: -71 [ 3350.391263][ T9843] usbhid: probe of 1-1:0.0 failed with error -71 [ 3350.418763][ T9843] usb 1-1: USB disconnect, device number 72 [ 3350.632012][T30496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23266'. [ 3351.176550][T30512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23274'. [ 3351.232043][T30514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23275'. [ 3351.752982][T30534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23284'. [ 3352.502621][T30557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23296'. [ 3352.525198][T30541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23286'. [ 3352.695237][T30561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23298'. [ 3352.714934][T30561] netlink: 'syz.1.23298': attribute type 14 has an invalid length. [ 3352.732805][T30561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23298'. [ 3352.773389][T30561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23298'. [ 3352.810828][T30561] netlink: 'syz.1.23298': attribute type 14 has an invalid length. [ 3353.837116][T30591] netlink: 'syz.2.23310': attribute type 14 has an invalid length. [ 3353.868091][T30591] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3353.877073][T30591] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3353.886101][T30591] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3353.894933][T30591] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3353.913981][T30591] netlink: 'syz.2.23310': attribute type 14 has an invalid length. [ 3353.939003][T24902] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 3354.156648][T24902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3354.184960][T24902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3354.205097][T24902] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3354.224070][T24902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3354.239910][T24902] usb 5-1: config 0 descriptor?? [ 3354.252498][T30601] syz.2.23315: attempt to access beyond end of device [ 3354.252498][T30601] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3354.315014][ T9843] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 3354.505024][ T9843] usb 2-1: Using ep0 maxpacket: 32 [ 3354.518451][ T9843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3354.545087][ T9843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3354.569858][T30607] __nla_validate_parse: 6 callbacks suppressed [ 3354.569876][T30607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23318'. [ 3354.580014][ T9843] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3354.594770][ T9843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3354.626053][ T9843] usb 2-1: config 0 descriptor?? [ 3354.692272][T24902] usbhid 5-1:0.0: can't add hid device: -71 [ 3354.716048][T24902] usbhid: probe of 5-1:0.0 failed with error -71 [ 3354.740048][T24902] usb 5-1: USB disconnect, device number 26 [ 3355.249077][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 3355.257504][ T9843] usbhid 2-1:0.0: can't add hid device: -32 [ 3355.263584][ T9843] usbhid: probe of 2-1:0.0 failed with error -32 [ 3355.295210][ T9843] usb 2-1: USB disconnect, device number 56 [ 3357.274977][T29896] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 3357.476012][T29896] usb 2-1: Using ep0 maxpacket: 32 [ 3357.484125][T29896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3357.503968][T29896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3357.514422][T29896] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3357.528605][T29896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3357.549113][T29896] usb 2-1: config 0 descriptor?? [ 3358.208625][T29896] usbhid 2-1:0.0: can't add hid device: -71 [ 3358.214700][T29896] usbhid: probe of 2-1:0.0 failed with error -71 [ 3358.240882][T29896] usb 2-1: USB disconnect, device number 57 [ 3358.309685][T30665] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23345'. [ 3358.359867][T30665] syz.2.23345: attempt to access beyond end of device [ 3358.359867][T30665] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3361.730986][T30714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23369'. [ 3361.760325][T30714] netlink: 'syz.4.23369': attribute type 14 has an invalid length. [ 3361.782866][T30714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23369'. [ 3361.822168][T30714] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3361.831315][T30714] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3361.840203][T30714] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3361.849086][T30714] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3361.891975][T30714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23369'. [ 3361.907978][T30714] netlink: 'syz.4.23369': attribute type 14 has an invalid length. [ 3361.929718][T30714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23369'. [ 3362.191354][T30726] loop5: detected capacity change from 0 to 7 [ 3362.231621][T30726] Dev loop5: unable to read RDB block 7 [ 3362.255018][T30726] loop5: unable to read partition table [ 3362.260917][T30726] loop5: partition table beyond EOD, truncated [ 3362.274961][T30726] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 3362.735895][T30748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23383'. [ 3362.764939][T30748] netlink: 'syz.2.23383': attribute type 14 has an invalid length. [ 3362.789628][T30748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23383'. [ 3362.804209][T30748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23383'. [ 3362.829719][T30748] netlink: 'syz.2.23383': attribute type 14 has an invalid length. [ 3362.847672][T30748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23383'. [ 3362.870326][T30753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23377'. [ 3362.881022][T30753] syz.0.23377: attempt to access beyond end of device [ 3362.881022][T30753] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3363.067576][ T5790] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 3363.355025][ T5790] usb 2-1: Using ep0 maxpacket: 32 [ 3363.365393][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3363.392129][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3363.423028][ T5790] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3363.432295][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3363.448535][ T5790] usb 2-1: config 0 descriptor?? [ 3364.076605][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 3364.083910][ T5790] usbhid 2-1:0.0: can't add hid device: -32 [ 3364.090320][ T5790] usbhid: probe of 2-1:0.0 failed with error -32 [ 3364.116443][ T5790] usb 2-1: USB disconnect, device number 58 [ 3366.765915][T30802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23404'. [ 3366.785989][T30802] netlink: 'syz.4.23404': attribute type 14 has an invalid length. [ 3366.799920][T30802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23404'. [ 3366.816857][T30802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23404'. [ 3366.844976][T30802] netlink: 'syz.4.23404': attribute type 14 has an invalid length. [ 3366.874989][T30802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23404'. [ 3368.219819][T30821] loop5: detected capacity change from 0 to 7 [ 3368.260918][T30821] Dev loop5: unable to read RDB block 7 [ 3368.275635][T30821] loop5: unable to read partition table [ 3368.305313][T30821] loop5: partition table beyond EOD, truncated [ 3368.335304][T30821] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 3370.001843][T30868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23439'. [ 3372.075064][T24902] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 3372.254988][T24902] usb 5-1: Using ep0 maxpacket: 32 [ 3372.264615][T24902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3372.281481][T24902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3372.305108][T24902] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3372.314482][T24902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3372.331696][T24902] usb 5-1: config 0 descriptor?? [ 3372.752808][T24902] ft260 0003:0403:6030.0014: unknown main item tag 0x7 [ 3372.948247][T24902] ft260 0003:0403:6030.0014: failed to retrieve chip version [ 3372.975879][T24902] ft260: probe of 0003:0403:6030.0014 failed with error -32 [ 3373.817087][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23475'. [ 3373.829496][T30951] netlink: 'syz.1.23475': attribute type 14 has an invalid length. [ 3373.840859][T30951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23475'. [ 3373.853628][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23475'. [ 3373.867277][T30951] netlink: 'syz.1.23475': attribute type 14 has an invalid length. [ 3373.876800][T30951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23475'. [ 3374.835765][ T5790] usb 5-1: USB disconnect, device number 27 [ 3375.276869][T30971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23483'. [ 3375.313668][T30971] syz.0.23483: attempt to access beyond end of device [ 3375.313668][T30971] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3375.626141][T30984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23489'. [ 3375.668118][T30984] netlink: 'syz.4.23489': attribute type 14 has an invalid length. [ 3375.707617][T30984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23489'. [ 3375.760502][T30984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23489'. [ 3375.801017][T30984] netlink: 'syz.4.23489': attribute type 14 has an invalid length. [ 3375.835016][T30984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23489'. [ 3381.544926][ T5873] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 3381.756843][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3381.778938][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3381.799338][ T5873] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3381.818990][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3381.845660][ T5873] usb 3-1: config 0 descriptor?? [ 3382.278496][ T5873] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 3382.305678][ T5873] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 3382.479217][ T5873] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 3383.074901][T24902] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 3383.083693][T31011] ================================================================== [ 3383.091791][T31011] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x714/0xf00 [ 3383.099281][T31011] Read of size 42 at addr ffffc90003617d41 by task syz.2.23501/31011 [ 3383.107366][T31011] [ 3383.109715][T31011] CPU: 0 PID: 31011 Comm: syz.2.23501 Not tainted syzkaller #0 [ 3383.117273][T31011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3383.127355][T31011] Call Trace: [ 3383.130639][T31011] [ 3383.133582][T31011] dump_stack_lvl+0x16c/0x230 [ 3383.138375][T31011] ? cp2112_xfer+0x714/0xf00 [ 3383.143086][T31011] ? show_regs_print_info+0x20/0x20 [ 3383.148317][T31011] ? load_image+0x3b0/0x3b0 [ 3383.152854][T31011] ? register_lock_class+0xb5/0x890 [ 3383.158060][T31011] ? __virt_addr_valid+0xc3/0x540 [ 3383.163096][T31011] print_report+0xac/0x220 [ 3383.167512][T31011] ? cp2112_xfer+0x714/0xf00 [ 3383.172099][T31011] kasan_report+0x117/0x150 [ 3383.176605][T31011] ? cp2112_xfer+0x714/0xf00 [ 3383.181193][T31011] kasan_check_range+0x288/0x290 [ 3383.186122][T31011] ? cp2112_xfer+0x714/0xf00 [ 3383.190705][T31011] __asan_memcpy+0x29/0x70 [ 3383.195117][T31011] cp2112_xfer+0x714/0xf00 [ 3383.199532][T31011] ? cp2112_i2c_xfer+0xe70/0xe70 [ 3383.204458][T31011] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 3383.210434][T31011] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 3383.216401][T31011] __i2c_smbus_xfer+0x888/0x1d90 [ 3383.221335][T31011] ? cp2112_i2c_xfer+0xe70/0xe70 [ 3383.226270][T31011] ? i2c_smbus_write_i2c_block_data+0x1b0/0x1b0 [ 3383.232507][T31011] ? rt_mutex_adjust_prio_chain+0x2400/0x2400 [ 3383.238567][T31011] ? lock_chain_count+0x20/0x20 [ 3383.243411][T31011] ? i2c_smbus_xfer+0x121/0x3a0 [ 3383.248253][T31011] i2c_smbus_xfer+0x267/0x3a0 [ 3383.252919][T31011] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3383.259136][T31011] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 3383.264411][T31011] i2cdev_ioctl_smbus+0x423/0x670 [ 3383.269436][T31011] ? i2cdev_ioctl_rdwr+0x690/0x690 [ 3383.274549][T31011] ? __might_fault+0xaa/0x120 [ 3383.279214][T31011] ? __might_fault+0xc6/0x120 [ 3383.283878][T31011] ? __might_fault+0xaa/0x120 [ 3383.288547][T31011] i2cdev_ioctl+0x5d1/0x7e0 [ 3383.293043][T31011] ? i2cdev_write+0x120/0x120 [ 3383.297713][T31011] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3383.302635][T31011] ? security_file_ioctl+0x80/0xa0 [ 3383.307747][T31011] ? i2cdev_write+0x120/0x120 [ 3383.312427][T31011] __se_sys_ioctl+0xfd/0x170 [ 3383.317047][T31011] do_syscall_64+0x55/0xb0 [ 3383.321461][T31011] ? clear_bhb_loop+0x40/0x90 [ 3383.326128][T31011] ? clear_bhb_loop+0x40/0x90 [ 3383.330814][T31011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3383.336713][T31011] RIP: 0033:0x7fa2d458f6c9 [ 3383.341142][T31011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3383.360762][T31011] RSP: 002b:00007fa2d53c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3383.369174][T31011] RAX: ffffffffffffffda RBX: 00007fa2d47e5fa0 RCX: 00007fa2d458f6c9 [ 3383.377143][T31011] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 3383.385113][T31011] RBP: 00007fa2d4611f91 R08: 0000000000000000 R09: 0000000000000000 [ 3383.393073][T31011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3383.401052][T31011] R13: 00007fa2d47e6038 R14: 00007fa2d47e5fa0 R15: 00007ffcc90f97a8 [ 3383.409036][T31011] [ 3383.412048][T31011] [ 3383.414362][T31011] The buggy address belongs to stack of task syz.2.23501/31011 [ 3383.421891][T31011] and is located at offset 33 in frame: [ 3383.427503][T31011] i2cdev_ioctl_smbus+0x0/0x670 [ 3383.432348][T31011] [ 3383.434657][T31011] This frame has 1 object: [ 3383.439057][T31011] [32, 66) 'temp' [ 3383.439068][T31011] [ 3383.445078][T31011] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90003610000 allocated at copy_process+0x549/0x3d70 [ 3383.458012][T31011] The buggy address belongs to the physical page: [ 3383.464419][T31011] page:ffffea0001dc0100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77004 [ 3383.474558][T31011] memcg:ffff88814b194702 [ 3383.478779][T31011] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 3383.485891][T31011] page_type: 0xffffffff() [ 3383.490205][T31011] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 3383.498777][T31011] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88814b194702 [ 3383.507351][T31011] page dumped because: kasan: bad access detected [ 3383.513757][T31011] page_owner tracks the page as allocated [ 3383.519459][T31011] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 30789, tgid 30789 (syz.2.23400), ts 3365845989801, free_ts 3365843536206 [ 3383.538242][T31011] post_alloc_hook+0x1cd/0x210 [ 3383.543006][T31011] get_page_from_freelist+0x195c/0x19f0 [ 3383.548547][T31011] __alloc_pages+0x1e3/0x460 [ 3383.553132][T31011] __vmalloc_node_range+0x96b/0x1320 [ 3383.558411][T31011] dup_task_struct+0x3d0/0x7c0 [ 3383.563166][T31011] copy_process+0x549/0x3d70 [ 3383.567781][T31011] kernel_clone+0x21b/0x840 [ 3383.572277][T31011] __se_sys_clone3+0x252/0x2c0 [ 3383.577033][T31011] do_syscall_64+0x55/0xb0 [ 3383.581442][T31011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3383.587364][T31011] page last free stack trace: [ 3383.592024][T31011] free_unref_page_prepare+0x7ce/0x8e0 [ 3383.597495][T31011] free_unref_page+0x32/0x2e0 [ 3383.602183][T31011] tlb_finish_mmu+0x112/0x1d0 [ 3383.606865][T31011] exit_mmap+0x3f0/0xb50 [ 3383.611109][T31011] __mmput+0x118/0x3c0 [ 3383.615169][T31011] exit_mm+0x1da/0x2c0 [ 3383.619246][T31011] do_exit+0x88e/0x23c0 [ 3383.623413][T31011] do_group_exit+0x21b/0x2d0 [ 3383.628020][T31011] get_signal+0x12fc/0x1400 [ 3383.632529][T31011] arch_do_signal_or_restart+0x9c/0x7b0 [ 3383.638093][T31011] exit_to_user_mode_loop+0x70/0x110 [ 3383.643387][T31011] exit_to_user_mode_prepare+0xf6/0x180 [ 3383.648931][T31011] irqentry_exit_to_user_mode+0x9/0x40 [ 3383.654409][T31011] asm_exc_invalid_op+0x1a/0x20 [ 3383.659259][T31011] [ 3383.661573][T31011] Memory state around the buggy address: [ 3383.667190][T31011] ffffc90003617c00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 3383.675237][T31011] ffffc90003617c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3383.683286][T31011] >ffffc90003617d00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3 [ 3383.691344][T31011] ^ [ 3383.698526][T31011] ffffc90003617d80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 3383.706575][T31011] ffffc90003617e00: f1 f1 f1 f1 04 f2 00 00 f2 f2 00 00 f3 f3 f3 f3 [ 3383.714637][T31011] ================================================================== [ 3383.914946][T31011] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3383.922188][T31011] CPU: 1 PID: 31011 Comm: syz.2.23501 Not tainted syzkaller #0 [ 3383.929739][T31011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3383.939859][T31011] Call Trace: [ 3383.943144][T31011] [ 3383.946082][T31011] dump_stack_lvl+0x16c/0x230 [ 3383.950807][T31011] ? show_regs_print_info+0x20/0x20 [ 3383.956022][T31011] ? load_image+0x3b0/0x3b0 [ 3383.960538][T31011] panic+0x2c0/0x710 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3383.964446][T31011] ? bpf_jit_dump+0xd0/0xd0 [ 3383.968961][T31011] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 3383.974866][T31011] ? _raw_spin_unlock+0x40/0x40 [ 3383.979734][T31011] ? print_memory_metadata+0x314/0x400 [ 3383.985229][T31011] ? cp2112_xfer+0x714/0xf00 [ 3383.989834][T31011] check_panic_on_warn+0x84/0xa0 [ 3383.994787][T31011] ? cp2112_xfer+0x714/0xf00 [ 3383.999385][T31011] end_report+0x6f/0x140 [ 3384.003636][T31011] kasan_report+0x128/0x150 [ 3384.008152][T31011] ? cp2112_xfer+0x714/0xf00 [ 3384.012764][T31011] kasan_check_range+0x288/0x290 [ 3384.017700][T31011] ? cp2112_xfer+0x714/0xf00 [ 3384.022285][T31011] __asan_memcpy+0x29/0x70 [ 3384.026699][T31011] cp2112_xfer+0x714/0xf00 [ 3384.031119][T31011] ? cp2112_i2c_xfer+0xe70/0xe70 [ 3384.036058][T31011] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 3384.042041][T31011] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 3384.047930][T31011] __i2c_smbus_xfer+0x888/0x1d90 [ 3384.052870][T31011] ? cp2112_i2c_xfer+0xe70/0xe70 [ 3384.057806][T31011] ? i2c_smbus_write_i2c_block_data+0x1b0/0x1b0 [ 3384.064039][T31011] ? rt_mutex_adjust_prio_chain+0x2400/0x2400 [ 3384.070112][T31011] ? lock_chain_count+0x20/0x20 [ 3384.074961][T31011] ? i2c_smbus_xfer+0x121/0x3a0 [ 3384.079804][T31011] i2c_smbus_xfer+0x267/0x3a0 [ 3384.084474][T31011] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3384.090622][T31011] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 3384.095899][T31011] i2cdev_ioctl_smbus+0x423/0x670 [ 3384.100926][T31011] ? i2cdev_ioctl_rdwr+0x690/0x690 [ 3384.106044][T31011] ? __might_fault+0xaa/0x120 [ 3384.110728][T31011] ? __might_fault+0xc6/0x120 [ 3384.115412][T31011] ? __might_fault+0xaa/0x120 [ 3384.120081][T31011] i2cdev_ioctl+0x5d1/0x7e0 [ 3384.124579][T31011] ? i2cdev_write+0x120/0x120 [ 3384.129261][T31011] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3384.134190][T31011] ? security_file_ioctl+0x80/0xa0 [ 3384.139305][T31011] ? i2cdev_write+0x120/0x120 [ 3384.143979][T31011] __se_sys_ioctl+0xfd/0x170 [ 3384.148568][T31011] do_syscall_64+0x55/0xb0 [ 3384.152986][T31011] ? clear_bhb_loop+0x40/0x90 [ 3384.157657][T31011] ? clear_bhb_loop+0x40/0x90 [ 3384.162343][T31011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3384.168246][T31011] RIP: 0033:0x7fa2d458f6c9 [ 3384.172662][T31011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3384.192277][T31011] RSP: 002b:00007fa2d53c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3384.200717][T31011] RAX: ffffffffffffffda RBX: 00007fa2d47e5fa0 RCX: 00007fa2d458f6c9 [ 3384.209118][T31011] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 3384.217081][T31011] RBP: 00007fa2d4611f91 R08: 0000000000000000 R09: 0000000000000000 [ 3384.225049][T31011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3384.233105][T31011] R13: 00007fa2d47e6038 R14: 00007fa2d47e5fa0 R15: 00007ffcc90f97a8 [ 3384.241088][T31011] [ 3384.244329][T31011] Kernel Offset: disabled [ 3384.248639][T31011] Rebooting in 86400 seconds..