last executing test programs: 3m20.836076351s ago: executing program 3 (id=10565): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x458, 0x4) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, 0x0) 3m19.838803015s ago: executing program 3 (id=10569): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = dup(r4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r6, 0x0) 3m18.369379489s ago: executing program 3 (id=10571): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setresuid(0x0, 0xee01, 0x0) 3m16.959702285s ago: executing program 3 (id=10575): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x1b0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61"], 0x0) 3m14.989857031s ago: executing program 3 (id=10579): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x3) 3m13.160131072s ago: executing program 3 (id=10580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x9, 0x100000000000, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m57.734429531s ago: executing program 32 (id=10580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x9, 0x100000000000, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m29.223532088s ago: executing program 1 (id=10714): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004) mkdir(&(0x7f00000000c0)='./file0\x00', 0x91) 1m26.748903175s ago: executing program 1 (id=10717): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) 1m24.778714405s ago: executing program 1 (id=10721): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 1m18.434563118s ago: executing program 1 (id=10728): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x1) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 1m13.351220875s ago: executing program 1 (id=10733): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 1m8.206791364s ago: executing program 1 (id=10740): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 52.544616908s ago: executing program 33 (id=10740): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 22.4421895s ago: executing program 0 (id=10787): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x4d, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 21.93295006s ago: executing program 4 (id=10788): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x488d5) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r6}, 0xc) 17.936365635s ago: executing program 0 (id=10790): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, 0x0, 0x61, 0x5) 17.936036479s ago: executing program 2 (id=10791): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4040841) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 16.75693197s ago: executing program 4 (id=10792): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000040)={0x20002, r3, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000140)) 16.578364534s ago: executing program 2 (id=10793): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 16.578101428s ago: executing program 0 (id=10794): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="020200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000006465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 15.625095843s ago: executing program 2 (id=10795): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="500100001000130725bd705fee521071a1a0a5c7232047bc674b7c5000fcdbdf352001000000000000000000000000f09d520900"/64, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 15.596260818s ago: executing program 4 (id=10796): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') 13.552774244s ago: executing program 0 (id=10797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 11.714528904s ago: executing program 0 (id=10798): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec4e1034499c5a5a02463df", 0x44000004, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) 11.328849907s ago: executing program 2 (id=10799): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00), 0x4d, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 9.036994133s ago: executing program 4 (id=10800): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 4.51397512s ago: executing program 2 (id=10801): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioprio_set$pid(0x1, 0x0, 0x0) 2.594586144s ago: executing program 0 (id=10802): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4040841) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2.521380058s ago: executing program 4 (id=10803): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) 1.32261899s ago: executing program 2 (id=10804): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) 0s ago: executing program 4 (id=10805): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="020200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000006465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) kernel console output (not intermixed with test programs): handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.082546][T19602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.524379][T19719] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1039.984220][T19602] hsr_slave_0: entered promiscuous mode [ 1039.985647][T19602] hsr_slave_1: entered promiscuous mode [ 1039.986636][T19602] debugfs: 'hsr0' already exists in 'hsr' [ 1039.986661][T19602] Cannot create hsr debugfs directory [ 1040.622301][T17914] Bluetooth: hci5: command tx timeout [ 1040.930209][ T3583] hsr_slave_0: left promiscuous mode [ 1040.965561][ T3583] hsr_slave_1: left promiscuous mode [ 1040.966673][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.815718][T19741] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1044.641885][ T3583] team0 (unregistering): Port device team_slave_1 removed [ 1045.050958][ T3583] team0 (unregistering): Port device team_slave_0 removed [ 1046.381543][T12121] Bluetooth: hci4: command 0x0406 tx timeout [ 1050.765260][T19602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1050.846607][T19602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1050.922925][T19602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1050.966649][T19602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1051.387351][T19602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.499628][T19602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.532816][T19467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.534490][T19467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.573651][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.573893][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.255717][T19602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.473041][T19602] veth0_vlan: entered promiscuous mode [ 1052.511772][T19602] veth1_vlan: entered promiscuous mode [ 1052.586458][T19602] veth0_macvtap: entered promiscuous mode [ 1052.613203][T19602] veth1_macvtap: entered promiscuous mode [ 1052.655935][T19602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.677148][T19602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.715899][ T3583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.749366][ T3583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.767923][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.770845][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.301794][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.301817][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.534473][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.534495][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.388926][T19849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.688348][T19849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.477046][T12121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1056.483207][T12121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1056.485099][T12121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1056.489237][T12121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1056.490882][T12121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1056.821680][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1057.868310][T19860] chnl_net:caif_netlink_parms(): no params data found [ 1058.619592][T17914] Bluetooth: hci0: command tx timeout [ 1059.380566][T19860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.380727][T19860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.381461][T19860] bridge_slave_0: entered allmulticast mode [ 1059.390429][T19860] bridge_slave_0: entered promiscuous mode [ 1059.400602][T19901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.664271][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.664372][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.793110][T19901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.038460][T19860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.038601][T19860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.041093][T19860] bridge_slave_1: entered allmulticast mode [ 1060.070947][T19860] bridge_slave_1: entered promiscuous mode [ 1060.667446][T19860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.694562][T19860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.720377][T17914] Bluetooth: hci0: command tx timeout [ 1061.043373][T19860] team0: Port device team_slave_0 added [ 1061.160325][T19860] team0: Port device team_slave_1 added [ 1061.342537][T19935] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1061.751794][T19860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.751810][T19860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.751838][T19860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.805327][T19860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.805343][T19860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.805384][T19860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.173655][ T37] dummy0: left allmulticast mode [ 1062.173878][ T37] bridge0: port 3(dummy0) entered disabled state [ 1062.233174][ T37] bridge_slave_1: left allmulticast mode [ 1062.233206][ T37] bridge_slave_1: left promiscuous mode [ 1062.233494][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.372196][ T37] bridge_slave_0: left allmulticast mode [ 1062.372228][ T37] bridge_slave_0: left promiscuous mode [ 1062.372508][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.779147][T17914] Bluetooth: hci0: command tx timeout [ 1064.873857][T17914] Bluetooth: hci0: command tx timeout [ 1065.560488][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.660776][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.699969][ T37] bond0 (unregistering): Released all slaves [ 1066.003796][T19860] hsr_slave_0: entered promiscuous mode [ 1066.005257][T19860] hsr_slave_1: entered promiscuous mode [ 1066.332715][T19965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1067.659904][ T37] hsr_slave_0: left promiscuous mode [ 1067.710287][ T37] hsr_slave_1: left promiscuous mode [ 1067.711289][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.019867][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1071.309677][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1076.231189][T19860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1076.265052][T19860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1076.329707][T19860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1076.360378][T19860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1076.711567][T19860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.763582][T19860] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.793805][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.795883][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.837792][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.846254][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.710929][T19860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.892024][T19860] veth0_vlan: entered promiscuous mode [ 1077.922944][T19860] veth1_vlan: entered promiscuous mode [ 1077.991884][T19860] veth0_macvtap: entered promiscuous mode [ 1078.018456][T19860] veth1_macvtap: entered promiscuous mode [ 1078.074780][T19860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.088144][T19860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.156323][ T3583] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.156606][ T3583] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.156852][ T3583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.186505][ T3583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.699071][T19467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.699095][T19467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.903141][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.903165][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.495260][T20053] tmpfs: Bad value for 'mpol' [ 1080.874428][T20086] tmpfs: Bad value for 'mpol' [ 1082.511124][T20110] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1083.544200][T20125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1090.343242][T20191] netlink: 'syz.4.6695': attribute type 2 has an invalid length. [ 1090.586666][T20198] tmpfs: Bad value for 'mpol' [ 1091.992878][T20230] netlink: 'syz.3.6715': attribute type 16 has an invalid length. [ 1091.992904][T20230] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.6715'. [ 1092.231405][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6718'. [ 1092.458757][T12121] Bluetooth: hci1: command 0x0406 tx timeout [ 1093.839510][T20235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.920043][T20235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.964711][T20235] bond0 (unregistering): Released all slaves [ 1096.057393][T20288] netlink: 'syz.2.6734': attribute type 16 has an invalid length. [ 1096.057419][T20288] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.6734'. [ 1097.153781][T20311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1098.161672][T20342] netlink: 'syz.4.6766': attribute type 1 has an invalid length. [ 1098.731417][T20361] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1099.919643][T20395] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6793'. [ 1107.348930][T20523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6850'. [ 1110.948802][T20604] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1111.511612][T20619] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1114.198526][T20672] netlink: 'syz.2.6918': attribute type 16 has an invalid length. [ 1114.198552][T20672] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.6918'. [ 1114.399035][T20677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.737952][T20677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.744518][T20687] binder: 20686:20687 ioctl c0306201 2000000001c0 returned -14 [ 1115.875195][T20689] @: renamed from vlan0 (while UP) [ 1116.089833][T20698] netlink: 'syz.3.6931': attribute type 16 has an invalid length. [ 1116.089858][T20698] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1116.691723][T20719] binder: 20718:20719 ioctl c0306201 2000000001c0 returned -14 [ 1117.425539][T20746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1117.505780][T20750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6955'. [ 1117.535052][T20749] binder: 20748:20749 ioctl c0306201 2000000001c0 returned -14 [ 1118.251147][T20779] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6968'. [ 1118.290863][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6969'. [ 1119.225998][T20817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1120.550126][T20856] netlink: 'syz.1.7005': attribute type 1 has an invalid length. [ 1121.103607][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.103683][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.661500][T20888] overlayfs: missing 'lowerdir' [ 1121.912686][T20895] netlink: 'syz.1.7023': attribute type 1 has an invalid length. [ 1122.560638][T20914] overlayfs: missing 'lowerdir' [ 1122.596219][T20918] tmpfs: Bad value for 'mpol' [ 1122.921541][T20930] netlink: 'syz.1.7041': attribute type 1 has an invalid length. [ 1123.787884][T20954] overlayfs: missing 'lowerdir' [ 1124.830239][T20987] overlayfs: missing 'lowerdir' [ 1125.066913][T20993] netlink: 'syz.2.7067': attribute type 1 has an invalid length. [ 1125.977908][T21015] overlayfs: missing 'lowerdir' [ 1127.250578][T21045] overlayfs: missing 'lowerdir' [ 1128.166496][T21068] netlink: 'syz.1.7103': attribute type 1 has an invalid length. [ 1128.848186][T21083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1133.421473][T17914] Bluetooth: hci3: command 0x0406 tx timeout [ 1136.609602][T21196] netlink: 'syz.4.7163': attribute type 1 has an invalid length. [ 1138.000384][T21224] netlink: 'syz.4.7176': attribute type 16 has an invalid length. [ 1138.000409][T21224] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.7176'. [ 1139.254013][T21256] blktrace: Concurrent blktraces are not allowed on sg0 [ 1139.787873][T21267] netlink: 'syz.4.7194': attribute type 1 has an invalid length. [ 1139.787899][T21267] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7194'. [ 1140.559197][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7200'. [ 1144.416960][T21331] devpts: Bad value for 'uid' [ 1144.416980][T21331] devpts: Bad value for 'uid' [ 1147.454290][T21335] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7229'. [ 1148.137005][T21351] 9pnet_fd: Insufficient options for proto=fd [ 1150.362767][T21393] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7254'. [ 1152.349961][T21419] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7268'. [ 1159.022578][T12121] Bluetooth: hci5: command 0x0406 tx timeout [ 1159.431587][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7299'. [ 1160.979499][T21489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.090852][T21489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.153111][T21489] bond0 (unregistering): Released all slaves [ 1162.662859][T21513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7311'. [ 1163.697470][T21535] blktrace: Concurrent blktraces are not allowed on sg0 [ 1164.357545][T21547] wireguard: wg1: Could not create IPv4 socket [ 1170.388333][T21660] @: renamed from vlan0 (while UP) [ 1171.836150][T21686] @: renamed from vlan0 (while UP) [ 1173.179911][T21711] binder: 21710:21711 ioctl c0306201 2000000001c0 returned -14 [ 1175.375845][T21765] binder: 21763:21765 ioctl c0306201 2000000001c0 returned -14 [ 1175.794355][T21777] netlink: 'syz.4.7436': attribute type 16 has an invalid length. [ 1175.794381][T21777] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.7436'. [ 1177.780142][T21828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7458'. [ 1179.281344][T21828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.370895][T21828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.437141][T21828] bond0 (unregistering): Released all slaves [ 1179.498897][T17914] Bluetooth: hci0: command 0x0406 tx timeout [ 1180.419910][T21870] overlay: Unknown parameter 'hash' [ 1180.612400][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7481'. [ 1181.860546][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7496'. [ 1182.543751][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.543857][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.143733][T22016] netlink: 'syz.4.7549': attribute type 16 has an invalid length. [ 1192.143759][T22016] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.7549'. [ 1194.239301][T22063] netlink: 'syz.3.7569': attribute type 1 has an invalid length. [ 1194.239327][T22063] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7569'. [ 1194.819878][T22070] @: renamed from vlan0 (while UP) [ 1195.074911][T22074] binder: 22073:22074 ioctl c0306201 2000000001c0 returned -14 [ 1196.280709][T22100] binder: 22098:22100 ioctl c0306201 2000000001c0 returned -14 [ 1196.580127][T22104] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7590'. [ 1201.549228][T22181] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7618'. [ 1206.557560][T22277] netlink: 'syz.3.7673': attribute type 1 has an invalid length. [ 1206.557587][T22277] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7673'. [ 1208.792550][T22320] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7694'. [ 1209.259553][T22330] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7699'. [ 1209.450421][T22334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7700'. [ 1212.107693][T22376] blktrace: Concurrent blktraces are not allowed on sg0 [ 1212.545055][T22383] binder: 22382:22383 ioctl c0306201 2000000001c0 returned -14 [ 1212.648553][T22388] tmpfs: Bad value for 'mpol' [ 1213.803199][T22419] netlink: 388 bytes leftover after parsing attributes in process `syz.1.7743'. [ 1213.970812][T22426] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7747'. [ 1214.190582][T22436] blktrace: Concurrent blktraces are not allowed on sg0 [ 1215.144084][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7761'. [ 1215.194539][T22458] wireguard: wg1: Could not create IPv4 socket [ 1215.719105][T19551] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1215.873878][T19551] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.873955][T19551] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1215.873983][T19551] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1215.874017][T19551] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1215.874068][T19551] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1215.874117][T19551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.882831][T22463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1215.995602][T19551] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1215.997110][T19551] usb 2-1: invalid MIDI out EP 0 [ 1216.602435][T22484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7774'. [ 1216.618839][T19551] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1216.629289][T19551] usb 2-1: USB disconnect, device number 5 [ 1216.926703][T22486] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7775'. [ 1218.669842][T22512] wireguard: wg1: Could not create IPv4 socket [ 1220.929618][T22550] netlink: 'syz.0.7806': attribute type 1 has an invalid length. [ 1220.929641][T22550] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7806'. [ 1221.246058][T22555] overlay: Unknown parameter 'hash' [ 1221.758424][T22571] netlink: 388 bytes leftover after parsing attributes in process `syz.2.7815'. [ 1222.463077][T22587] overlay: Unknown parameter 'hash' [ 1222.731765][T22591] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1228.625058][T22611] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7833'. [ 1228.625085][T22611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7833'. [ 1228.937621][T22618] netlink: 'syz.2.7838': attribute type 1 has an invalid length. [ 1229.285873][T22625] overlay: Unknown parameter 'hash' [ 1229.329551][T22627] tmpfs: Bad value for 'mpol' [ 1233.004122][T22640] @: renamed from vlan0 (while UP) [ 1234.313302][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7865'. [ 1235.549341][T14034] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1235.646488][T22718] tmpfs: Bad value for 'mpol' [ 1235.701755][T14034] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.701818][T14034] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1235.701847][T14034] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1235.701877][T14034] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1235.701922][T14034] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1235.701946][T14034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.712012][T22709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1235.773577][T14034] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1235.775317][T14034] usb 3-1: invalid MIDI out EP 0 [ 1235.834158][T22720] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7886'. [ 1236.159420][T22638] udevd[22638]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1236.248113][T14034] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1236.296360][T14034] usb 3-1: USB disconnect, device number 5 [ 1236.922735][T22746] tmpfs: Bad value for 'mpol' [ 1237.052336][T22748] netlink: 'syz.4.7898': attribute type 1 has an invalid length. [ 1238.225979][T22766] wireguard: wg1: Could not create IPv4 socket [ 1239.555759][T14058] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1239.716016][T14058] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.716084][T14058] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1239.716114][T14058] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1239.716143][T14058] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1239.716189][T14058] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1239.716214][T14058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.742726][T22780] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1239.805984][T14058] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1239.807088][T14058] usb 5-1: invalid MIDI out EP 0 [ 1240.024323][T14058] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1240.072781][T14058] usb 5-1: USB disconnect, device number 5 [ 1240.099914][T22790] udevd[22790]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.604113][T22800] netlink: 'syz.0.7921': attribute type 16 has an invalid length. [ 1240.604141][T22800] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.7921'. [ 1240.743643][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7923'. [ 1241.473664][T22818] wireguard: wg1: Could not create IPv4 socket [ 1241.723301][T22824] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7932'. [ 1242.059126][T14058] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1242.211943][T14058] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.212008][T14058] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1242.212038][T14058] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1242.212066][T14058] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1242.212112][T14058] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1242.212136][T14058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.290713][T22828] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1242.322719][T14058] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1242.323815][T14058] usb 1-1: invalid MIDI out EP 0 [ 1242.517033][T14058] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1242.536938][T14058] usb 1-1: USB disconnect, device number 7 [ 1242.708683][T19551] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1242.892684][T19551] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.892755][T19551] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1242.892784][T19551] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1242.892822][T19551] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1242.892868][T19551] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1242.892893][T19551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.944001][T22839] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1242.996143][T19551] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1242.997242][T19551] usb 5-1: invalid MIDI out EP 0 [ 1243.368508][T19551] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1243.408393][T19551] usb 5-1: USB disconnect, device number 6 [ 1243.983307][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.983413][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1247.262456][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7970'. [ 1247.524437][T22910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7974'. [ 1248.997818][T22930] wireguard: wg1: Could not create IPv4 socket [ 1249.356519][T22938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7987'. [ 1249.498063][T22941] netlink: 'syz.0.7989': attribute type 1 has an invalid length. [ 1249.498087][T22941] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7989'. [ 1250.168764][T14062] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1250.329028][T14062] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.329090][T14062] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1250.329120][T14062] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1250.329148][T14062] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1250.329193][T14062] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1250.329218][T14062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.383489][T22950] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1250.457764][T14062] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1250.465019][T14062] usb 2-1: invalid MIDI out EP 0 [ 1250.851612][T22790] udevd[22790]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1250.894853][T14062] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1250.964371][T14062] usb 2-1: USB disconnect, device number 6 [ 1251.458315][T22968] netlink: 'syz.3.8002': attribute type 1 has an invalid length. [ 1251.458455][T22968] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8002'. [ 1253.970500][T23012] dns_resolver: Unsupported content type (6) [ 1255.416459][T23050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8039'. [ 1256.374819][T23076] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8053'. [ 1256.411355][T23077] dns_resolver: Unsupported content type (6) [ 1256.870833][T23085] wireguard: wg1: Could not create IPv4 socket [ 1257.449188][T14062] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1257.587510][T23101] 9pnet_virtio: no channels available for device syz [ 1257.603619][T14062] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.603686][T14062] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1257.603717][T14062] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1257.603746][T14062] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1257.603791][T14062] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1257.603815][T14062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.679972][T23092] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1257.693205][T23103] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8063'. [ 1257.693233][T23103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8063'. [ 1257.720231][T14062] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1257.721355][T14062] usb 4-1: invalid MIDI out EP 0 [ 1257.954254][T14062] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1257.989651][T14062] usb 4-1: USB disconnect, device number 9 [ 1258.082885][T23107] dns_resolver: Unsupported content type (6) [ 1258.260124][T23109] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8067'. [ 1261.430555][T23135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8079'. [ 1268.089507][T23215] netlink: 'syz.1.8116': attribute type 1 has an invalid length. [ 1268.089531][T23215] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8116'. [ 1269.119028][T14057] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1269.271914][T14057] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.271981][T14057] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1269.272011][T14057] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1269.272040][T14057] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1269.272086][T14057] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1269.272109][T14057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.365469][T23226] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1269.389225][T14057] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1269.390345][T14057] usb 4-1: invalid MIDI out EP 0 [ 1269.806441][T14057] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1269.849343][T14057] usb 4-1: USB disconnect, device number 10 [ 1271.248510][T23256] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8136'. [ 1271.248536][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8136'. [ 1271.822519][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8139'. [ 1272.192369][T23270] 9pnet_virtio: no channels available for device syz [ 1272.435706][T23274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8145'. [ 1273.101167][T23288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8152'. [ 1280.783873][T23348] tmpfs: Bad value for 'mpol' [ 1283.893043][T23385] tmpfs: Bad value for 'mpol' [ 1285.715272][T23406] tmpfs: Bad value for 'mpol' [ 1288.261482][T23450] tmpfs: Bad value for 'nr_blocks' [ 1288.469612][T23455] wireguard: wg1: Could not create IPv4 socket [ 1288.822484][T23467] fuseblk: Bad value for 'fd' [ 1289.541853][T23484] wireguard: wg1: Could not create IPv4 socket [ 1290.233552][T23503] netlink: 'syz.4.8254': attribute type 1 has an invalid length. [ 1290.830491][T23517] wireguard: wg1: Could not create IPv4 socket [ 1292.419477][T23541] wireguard: wg1: Could not create IPv4 socket [ 1294.057690][T23555] netlink: 'syz.0.8276': attribute type 1 has an invalid length. [ 1295.367115][T23582] netlink: 'syz.2.8290': attribute type 1 has an invalid length. [ 1296.267512][T23609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8302'. [ 1296.810294][T23619] netlink: 'syz.3.8307': attribute type 1 has an invalid length. [ 1300.934648][T23674] wireguard: wg1: Could not create IPv4 socket [ 1303.150103][T23684] netlink: 'syz.3.8337': attribute type 12 has an invalid length. [ 1303.460877][T23686] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8338'. [ 1305.426670][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.426746][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.268042][T23764] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8374'. [ 1309.268066][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8374'. [ 1309.709370][T23769] netlink: 'syz.2.8377': attribute type 12 has an invalid length. [ 1310.632484][T23788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8385'. [ 1313.774270][T23851] 9pnet_virtio: no channels available for device syz [ 1314.468686][T14034] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1314.622822][T14034] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.622885][T14034] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1314.622914][T14034] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1314.622942][T14034] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1314.622988][T14034] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1314.623012][T14034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.636884][T23855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1314.685483][T14034] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1314.686795][T14034] usb 4-1: invalid MIDI out EP 0 [ 1315.133910][T14034] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1315.154488][T14034] usb 4-1: USB disconnect, device number 11 [ 1315.925033][T23869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8425'. [ 1318.071243][T23919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8448'. [ 1319.079629][T23940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8458'. [ 1319.485106][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8460'. [ 1320.579191][T23954] netlink: 'syz.3.8461': attribute type 12 has an invalid length. [ 1321.500116][T23964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8470'. [ 1322.592948][T23977] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8475'. [ 1322.843714][T23979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8477'. [ 1323.758181][T23991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8482'. [ 1325.206360][T24005] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8489'. [ 1325.206385][T24005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8489'. [ 1326.814503][T24040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8507'. [ 1327.701005][T24053] dns_resolver: Unsupported content type (6) [ 1332.429240][T24106] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8537'. [ 1332.693701][T24111] wireguard: wg1: Could not create IPv4 socket [ 1332.966715][T24116] dns_resolver: Unsupported content type (6) [ 1335.877906][T24135] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8551'. [ 1338.896261][T24173] netlink: 'syz.4.8569': attribute type 12 has an invalid length. [ 1340.331891][T24198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8579'. [ 1342.154867][T24232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8593'. [ 1342.601650][T24241] dns_resolver: Unsupported content type (6) [ 1342.872344][T24246] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8600'. [ 1343.409693][T24259] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8607'. [ 1344.640959][T24280] netlink: 'syz.4.8618': attribute type 12 has an invalid length. [ 1345.820901][T24297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8627'. [ 1346.588719][T14034] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1346.747350][T14034] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.747415][T14034] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1346.747443][T14034] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1346.747471][T14034] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1346.747515][T14034] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1346.747539][T14034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.810709][T24304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1346.835360][T14034] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1346.836512][T14034] usb 3-1: invalid MIDI out EP 0 [ 1347.139583][T23205] udevd[23205]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1347.169947][T14034] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1347.204278][T14034] usb 3-1: USB disconnect, device number 6 [ 1347.722470][T24314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8631'. [ 1347.766931][T24318] 9pnet_virtio: no channels available for device syz [ 1347.772378][T24317] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8633'. [ 1348.650348][T24339] dns_resolver: Unsupported content type (6) [ 1350.123040][T24382] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8665'. [ 1350.706244][T24405] 9pnet_virtio: no channels available for device syz [ 1350.723817][T24407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8676'. [ 1350.906730][T24412] dns_resolver: Unsupported content type (6) [ 1351.445837][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8688'. [ 1351.746621][T24439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8692'. [ 1352.499137][T24463] tmpfs: Bad value for 'nr_blocks' [ 1353.665312][T24495] 9pnet_virtio: no channels available for device syz [ 1354.748710][T14058] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1354.902111][T14058] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.902183][T14058] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1354.902212][T14058] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1354.902240][T14058] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1354.902285][T14058] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1354.902309][T14058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.912574][T24523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1354.923961][T14058] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1354.925261][T14058] usb 3-1: invalid MIDI out EP 0 [ 1355.441252][T24534] udevd[24534]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1355.537162][T14058] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1355.671356][T14058] usb 3-1: USB disconnect, device number 7 [ 1357.114554][T24562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8750'. [ 1362.349696][T24632] wireguard: wg1: Could not create IPv4 socket [ 1364.413103][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8795'. [ 1365.676312][T24673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8803'. [ 1365.855350][T24677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8805'. [ 1366.863266][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.863369][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.331259][T24727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8830'. [ 1369.555268][T17914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1369.557752][T17914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1369.561985][T17914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1369.566083][T17914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1369.567015][T17914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1369.846680][T24735] input: syz1 as /devices/virtual/input/input8 [ 1369.846976][T24735] input: failed to attach handler leds to device input8, error: -6 [ 1370.726668][T19999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.124271][T19999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.658775][T12121] Bluetooth: hci2: command tx timeout [ 1371.695619][T19999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.356476][T19999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.480191][T24729] chnl_net:caif_netlink_parms(): no params data found [ 1373.424854][T24729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.425013][T24729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.425625][T24729] bridge_slave_0: entered allmulticast mode [ 1373.468695][T24729] bridge_slave_0: entered promiscuous mode [ 1373.505660][T24729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.505804][T24729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.506006][T24729] bridge_slave_1: entered allmulticast mode [ 1373.533772][T24729] bridge_slave_1: entered promiscuous mode [ 1373.739176][T12121] Bluetooth: hci2: command tx timeout [ 1373.911174][T24729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.917110][T24729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.084112][T19999] bridge_slave_1: left allmulticast mode [ 1374.084143][T19999] bridge_slave_1: left promiscuous mode [ 1374.084425][T19999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.200710][T19999] bridge_slave_0: left allmulticast mode [ 1374.200744][T19999] bridge_slave_0: left promiscuous mode [ 1374.201038][T19999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.572168][T24786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8851'. [ 1375.823820][T12121] Bluetooth: hci2: command tx timeout [ 1376.470496][T19999] bond1 (unregistering): Released all slaves [ 1376.529678][T19999] bond2 (unregistering): Released all slaves [ 1376.558005][T19999] bond3 (unregistering): Released all slaves [ 1376.585708][T19999] bond4 (unregistering): Released all slaves [ 1376.940140][T24729] team0: Port device team_slave_0 added [ 1376.957542][T24729] team0: Port device team_slave_1 added [ 1377.908669][T12121] Bluetooth: hci2: command tx timeout [ 1378.151386][T24729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.151406][T24729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.151437][T24729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.229127][T24729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.229144][T24729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.229172][T24729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.309501][T24729] hsr_slave_0: entered promiscuous mode [ 1379.311007][T24729] hsr_slave_1: entered promiscuous mode [ 1379.312053][T24729] debugfs: 'hsr0' already exists in 'hsr' [ 1379.312084][T24729] Cannot create hsr debugfs directory [ 1379.508623][T19999] hsr_slave_0: left promiscuous mode [ 1379.575160][T19999] hsr_slave_1: left promiscuous mode [ 1379.576156][T19999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.576183][T19999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.743934][T19999] veth1_macvtap: left promiscuous mode [ 1379.744043][T19999] veth0_macvtap: left promiscuous mode [ 1379.744301][T19999] veth1_vlan: left promiscuous mode [ 1379.744509][T19999] veth0_vlan: left promiscuous mode [ 1379.891139][T24832] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8875'. [ 1379.891165][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8875'. [ 1383.031313][T19999] team0 (unregistering): Port device team_slave_1 removed [ 1383.247628][T24860] fuseblk: Bad value for 'fd' [ 1383.370785][T19999] team0 (unregistering): Port device team_slave_0 removed [ 1383.705483][T24870] 9pnet_virtio: no channels available for device syz [ 1388.750952][T24924] dns_resolver: Unsupported content type (6) [ 1388.888033][T24729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1388.941321][T24729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1389.003345][T24729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1389.069401][T24729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1389.526290][T24729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.602019][T24729] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.621015][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.621794][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.680703][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.680860][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.040000][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8929'. [ 1390.409835][T24729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.489726][T19551] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1390.594664][T24729] veth0_vlan: entered promiscuous mode [ 1390.618035][T24729] veth1_vlan: entered promiscuous mode [ 1390.638818][T19551] usb 3-1: Using ep0 maxpacket: 16 [ 1390.643628][T19551] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 1390.643656][T19551] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.643677][T19551] usb 3-1: config 0 has no interface number 0 [ 1390.647412][T19551] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1390.647443][T19551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.647464][T19551] usb 3-1: Product: syz [ 1390.647478][T19551] usb 3-1: Manufacturer: syz [ 1390.647494][T19551] usb 3-1: SerialNumber: syz [ 1390.716630][T19551] usb 3-1: config 0 descriptor?? [ 1390.754205][T19551] net1080 3-1:0.147: probe with driver net1080 failed with error -22 [ 1390.790412][T24729] veth0_macvtap: entered promiscuous mode [ 1390.829259][T24729] veth1_macvtap: entered promiscuous mode [ 1390.948359][T24729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.973757][T24729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.015552][T19551] usb 3-1: USB disconnect, device number 8 [ 1391.072046][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.072661][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.073133][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.074354][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.532485][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.532523][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.699445][T19999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.699468][T19999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.137198][T24982] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8941'. [ 1392.240263][T24985] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8944'. [ 1392.928693][T19551] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1392.953423][T25004] wireguard: wg1: Could not create IPv4 socket [ 1393.048717][T24967] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1393.091868][T19551] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.091932][T19551] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1393.091977][T19551] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1393.092001][T19551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.114706][T19551] usbtmc 4-1:16.0: bulk endpoints not found [ 1393.171892][T25008] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8954'. [ 1393.231351][T24967] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.231417][T24967] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1393.231446][T24967] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1393.231474][T24967] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1393.231518][T24967] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1393.231543][T24967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.241081][T25001] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1393.278112][T24967] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1393.291246][T24967] usb 2-1: invalid MIDI out EP 0 [ 1393.297428][T25010] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8955'. [ 1393.643310][T24967] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1393.661358][T24962] udevd[24962]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.662819][T24967] usb 2-1: USB disconnect, device number 7 [ 1395.713135][T14034] usb 4-1: USB disconnect, device number 12 [ 1397.094712][T25058] tmpfs: Bad value for 'nr_blocks' [ 1398.530949][T17914] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1398.535851][T17914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1398.563637][T17914] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1398.588745][T17914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1398.599113][T17914] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1400.151223][ T85] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.699991][T12121] Bluetooth: hci4: command tx timeout [ 1400.702657][ T85] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.240288][ T85] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.894669][ T85] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.116098][T25068] chnl_net:caif_netlink_parms(): no params data found [ 1402.674623][T25114] overlay: Unknown parameter 'hash' [ 1402.779077][T12121] Bluetooth: hci4: command tx timeout [ 1403.039001][T25068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.039144][T25068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.039575][T25068] bridge_slave_0: entered allmulticast mode [ 1403.073243][T25068] bridge_slave_0: entered promiscuous mode [ 1403.188791][T25068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.188930][T25068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.189143][T25068] bridge_slave_1: entered allmulticast mode [ 1403.196910][T25068] bridge_slave_1: entered promiscuous mode [ 1403.852926][T25068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.872689][T25068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.011815][ T85] bridge_slave_1: left allmulticast mode [ 1404.011846][ T85] bridge_slave_1: left promiscuous mode [ 1404.012120][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.120397][ T85] bridge_slave_0: left allmulticast mode [ 1404.120430][ T85] bridge_slave_0: left promiscuous mode [ 1404.120746][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.294350][T25127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9002'. [ 1404.858816][T12121] Bluetooth: hci4: command tx timeout [ 1406.086413][ T85] bond0 (unregistering): Released all slaves [ 1406.122058][ T85] bond1 (unregistering): Released all slaves [ 1406.179953][ T85] bond2 (unregistering): Released all slaves [ 1406.407763][T25068] team0: Port device team_slave_0 added [ 1406.422751][T25068] team0: Port device team_slave_1 added [ 1406.939170][T12121] Bluetooth: hci4: command tx timeout [ 1407.309672][T25068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.309691][T25068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.309721][T25068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.360875][T25068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.360897][T25068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.360932][T25068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.114325][T25068] hsr_slave_0: entered promiscuous mode [ 1408.117540][T25068] hsr_slave_1: entered promiscuous mode [ 1408.120020][T25068] debugfs: 'hsr0' already exists in 'hsr' [ 1408.120053][T25068] Cannot create hsr debugfs directory [ 1408.238637][ T85] hsr_slave_0: left promiscuous mode [ 1408.258690][ T85] hsr_slave_1: left promiscuous mode [ 1408.259801][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1408.259828][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.316215][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1408.316248][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.432750][ T85] veth1_macvtap: left promiscuous mode [ 1408.432868][ T85] veth0_macvtap: left promiscuous mode [ 1408.433147][ T85] veth1_vlan: left promiscuous mode [ 1408.433337][ T85] veth0_vlan: left promiscuous mode [ 1410.772300][T14034] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1410.931003][T14034] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.931067][T14034] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1410.931094][T14034] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1410.931122][T14034] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1410.931166][T14034] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1410.931190][T14034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.937837][T25167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1410.953717][T14034] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1410.955043][T14034] usb 1-1: invalid MIDI out EP 0 [ 1411.214180][T14034] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1411.237212][T14034] usb 1-1: USB disconnect, device number 8 [ 1411.841675][ T85] team0 (unregistering): Port device team_slave_1 removed [ 1411.971821][T25176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9025'. [ 1412.179928][ T85] team0 (unregistering): Port device team_slave_0 removed [ 1414.559109][T25180] wireguard: wg1: Could not create IPv4 socket [ 1415.248688][T19551] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1415.401821][T19551] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.401912][T19551] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1415.401940][T19551] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1415.401967][T19551] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1415.402012][T19551] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1415.402036][T19551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.448300][T25194] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1415.474006][T19551] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1415.475250][T19551] usb 3-1: invalid MIDI out EP 0 [ 1415.820678][T25197] udevd[25197]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.892045][T19551] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1415.950717][T19551] usb 3-1: USB disconnect, device number 9 [ 1416.278344][T25212] wireguard: wg1: Could not create IPv4 socket [ 1416.474101][T25219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9044'. [ 1416.668610][T19551] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1416.818738][T19551] usb 2-1: Using ep0 maxpacket: 16 [ 1416.821120][T19551] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 1416.821146][T19551] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.821167][T19551] usb 2-1: config 0 has no interface number 0 [ 1416.824290][T19551] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1416.824318][T19551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.824339][T19551] usb 2-1: Product: syz [ 1416.824353][T19551] usb 2-1: Manufacturer: syz [ 1416.824369][T19551] usb 2-1: SerialNumber: syz [ 1416.894755][T19551] usb 2-1: config 0 descriptor?? [ 1416.919639][T19551] net1080 2-1:0.147: probe with driver net1080 failed with error -22 [ 1417.106408][T19551] usb 2-1: USB disconnect, device number 8 [ 1417.543119][T25068] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1417.815505][T25068] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1417.859876][T25068] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1417.931960][T25068] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1418.384093][T25068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.421107][T25068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.441220][T25207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.441385][T25207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.500678][T25207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.500906][T25207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.624365][T25258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9061'. [ 1418.755840][T25258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9061'. [ 1419.488402][T25068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.685112][T25068] veth0_vlan: entered promiscuous mode [ 1420.714023][T25068] veth1_vlan: entered promiscuous mode [ 1420.819242][T25068] veth0_macvtap: entered promiscuous mode [ 1420.840526][T25068] veth1_macvtap: entered promiscuous mode [ 1420.897287][T25068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.932541][T25068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.961299][T19467] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.963047][T19467] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.963465][T19467] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.000306][T19467] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.341711][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.341732][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.491793][T25207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.491816][T25207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.722446][T25346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9096'. [ 1424.942364][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1426.332339][T25431] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9136'. [ 1428.310993][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.311070][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.397835][T25467] overlay: Unknown parameter 'hash' [ 1428.666031][T25475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9157'. [ 1429.550523][T25495] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9168'. [ 1429.663637][T25497] tmpfs: Bad value for 'nr_blocks' [ 1429.873493][T25503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1430.893061][T25530] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9184'. [ 1430.893086][T25530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9184'. [ 1431.057317][T25533] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9187'. [ 1431.416815][T25543] fuseblk: Bad value for 'fd' [ 1434.519389][T25579] netlink: 112 bytes leftover after parsing attributes in process `syz.3.9210'. [ 1434.889554][T25587] 9p: Unknown access argument a: -22 [ 1434.910412][T25589] wireguard: wg1: Could not create IPv4 socket [ 1436.008708][ T44] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1436.161403][ T44] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.161486][ T44] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1436.161514][ T44] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1436.161541][ T44] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1436.161584][ T44] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1436.161608][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.240459][T25597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1436.265304][ T44] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1436.266414][ T44] usb 2-1: invalid MIDI out EP 0 [ 1436.414662][ T44] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1436.484919][ T44] usb 2-1: USB disconnect, device number 9 [ 1436.500555][T25604] udevd[25604]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1437.962478][T25631] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9233'. [ 1440.247229][T25669] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9252'. [ 1441.327148][T25688] fuseblk: Bad value for 'fd' [ 1442.094126][T25705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9270'. [ 1442.345190][T25714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9271'. [ 1443.115055][T25725] fuseblk: Bad value for 'fd' [ 1443.479295][T25733] tmpfs: Bad value for 'nr_blocks' [ 1444.050799][T25746] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1444.208098][T25750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9286'. [ 1444.586904][T25760] fuseblk: Bad value for 'fd' [ 1446.041310][T17914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1446.047374][T17914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1446.054114][T17914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1446.056519][T17914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1446.064047][T17914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1446.128717][ T44] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1446.303652][ T44] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.303715][ T44] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1446.303745][ T44] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1446.303773][ T44] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1446.303831][ T44] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1446.303855][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.373291][T25782] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1446.387885][ T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1446.396762][ T44] usb 3-1: invalid MIDI out EP 0 [ 1446.681792][T25788] udevd[25788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1446.718685][ T44] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1446.746440][ T44] usb 3-1: USB disconnect, device number 10 [ 1447.409037][T19467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.874848][T19467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.140457][T12121] Bluetooth: hci1: command tx timeout [ 1448.295862][T19467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.860819][T19467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.218847][T25785] chnl_net:caif_netlink_parms(): no params data found [ 1450.218899][T17914] Bluetooth: hci1: command tx timeout [ 1450.219429][T25785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.219570][T25785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.219816][T25785] bridge_slave_0: entered allmulticast mode [ 1450.255745][T25785] bridge_slave_0: entered promiscuous mode [ 1450.279944][T25785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.298232][T25785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.301721][T25785] bridge_slave_1: entered allmulticast mode [ 1450.308998][T25785] bridge_slave_1: entered promiscuous mode [ 1450.310774][T19467] bridge_slave_1: left allmulticast mode [ 1450.310799][T19467] bridge_slave_1: left promiscuous mode [ 1450.311024][T19467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.420839][T19467] bridge_slave_0: left allmulticast mode [ 1450.420868][T19467] bridge_slave_0: left promiscuous mode [ 1450.421124][T19467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.313821][T17914] Bluetooth: hci1: command tx timeout [ 1453.609901][T19467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.693454][T19467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.737389][T19467] bond0 (unregistering): Released all slaves [ 1453.773556][T19467] bond1 (unregistering): Released all slaves [ 1453.809352][T19467] bond2 (unregistering): Released all slaves [ 1453.835333][T19467] bond3 (unregistering): Released all slaves [ 1453.863311][T19467] bond4 (unregistering): Released all slaves [ 1453.904353][T19467] bond5 (unregistering): Released all slaves [ 1453.935058][T19467] bond6 (unregistering): Released all slaves [ 1453.965562][T19467] bond7 (unregistering): Released all slaves [ 1454.145204][T25844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9326'. [ 1454.145487][T25848] wireguard: wg1: Could not create IPv4 socket [ 1454.365503][T25844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9326'. [ 1454.367071][T25785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.379853][T17914] Bluetooth: hci1: command tx timeout [ 1454.412244][T25785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.555055][T25785] team0: Port device team_slave_0 added [ 1455.563833][T25785] team0: Port device team_slave_1 added [ 1456.078623][T19578] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1456.233617][T19578] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.233705][T19578] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1456.233735][T19578] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1456.233764][T19578] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1456.233809][T19578] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1456.233834][T19578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.315303][T25893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1456.342942][T19578] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1456.344069][T19578] usb 3-1: invalid MIDI out EP 0 [ 1456.477349][T25785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.477369][T25785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.477399][T25785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.557373][T25785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.557392][T25785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.557423][T25785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.773192][T19578] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1456.810551][T19578] usb 3-1: USB disconnect, device number 11 [ 1456.898656][T19467] hsr_slave_0: left promiscuous mode [ 1456.978704][T19467] hsr_slave_1: left promiscuous mode [ 1456.979815][T19467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.979842][T19467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.147414][T19467] veth1_macvtap: left promiscuous mode [ 1457.147530][T19467] veth0_macvtap: left promiscuous mode [ 1457.147807][T19467] veth1_vlan: left promiscuous mode [ 1457.147998][T19467] veth0_vlan: left promiscuous mode [ 1459.353807][T25937] capability: warning: `syz.4.9369' uses deprecated v2 capabilities in a way that may be insecure [ 1459.981904][T14034] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1460.130960][T14034] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.131021][T14034] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1460.131051][T14034] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1460.131078][T14034] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1460.131123][T14034] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1460.131147][T14034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.215700][T25947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1460.240699][T14034] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.243082][T14034] usb 2-1: invalid MIDI out EP 0 [ 1460.662822][T14034] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1460.699117][T14034] usb 2-1: USB disconnect, device number 10 [ 1460.779431][T25959] 9pnet_virtio: no channels available for device syz [ 1461.820215][T25989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9390'. [ 1462.170861][T19467] team0 (unregistering): Port device team_slave_1 removed [ 1462.532993][T19467] team0 (unregistering): Port device team_slave_0 removed [ 1463.159795][T26013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9403'. [ 1463.833983][T26023] JFS: discard option not supported on device [ 1463.865807][T26023] Mount JFS Failure: -5 [ 1466.140847][T26052] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9423'. [ 1466.140874][T26052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9423'. [ 1467.022449][T25945] netlink: 'syz.4.9371': attribute type 12 has an invalid length. [ 1467.615672][T25785] hsr_slave_0: entered promiscuous mode [ 1467.617248][T25785] hsr_slave_1: entered promiscuous mode [ 1467.619420][T25785] debugfs: 'hsr0' already exists in 'hsr' [ 1467.619452][T25785] Cannot create hsr debugfs directory [ 1468.374778][T26084] JFS: discard option not supported on device [ 1468.375318][T26084] Mount JFS Failure: -5 [ 1470.168227][T25785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1470.246240][T25785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1470.309516][T25785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1470.333531][T25785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1470.694759][T25785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.777506][T25785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.815040][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.815269][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.869980][T19467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.870145][T19467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1471.831092][T25785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1472.034488][T25785] veth0_vlan: entered promiscuous mode [ 1472.089337][T25785] veth1_vlan: entered promiscuous mode [ 1472.209271][T26150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9464'. [ 1472.248356][T25785] veth0_macvtap: entered promiscuous mode [ 1472.299932][T25785] veth1_macvtap: entered promiscuous mode [ 1472.449138][T25785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1472.482544][T25785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1472.512317][T19467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.512970][T19467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.513575][T19467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.513885][T19467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.107836][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.107860][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.290570][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.290593][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.310775][T12121] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1477.332688][T12121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1477.349439][T12121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1477.354379][T12121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1477.355688][T12121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1478.354295][T26214] 9pnet_virtio: no channels available for device syz [ 1478.407534][T26190] chnl_net:caif_netlink_parms(): no params data found [ 1479.418644][T17914] Bluetooth: hci3: command tx timeout [ 1479.622046][T26190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.622271][T26190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.622492][T26190] bridge_slave_0: entered allmulticast mode [ 1479.626844][T26190] bridge_slave_0: entered promiscuous mode [ 1479.671354][T26190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.671468][T26190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.671691][T26190] bridge_slave_1: entered allmulticast mode [ 1479.674379][T26190] bridge_slave_1: entered promiscuous mode [ 1480.011327][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.651954][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.706758][T26190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.753364][T26190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.256884][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.319623][T26190] team0: Port device team_slave_0 added [ 1481.333114][T26190] team0: Port device team_slave_1 added [ 1481.499287][T17914] Bluetooth: hci3: command tx timeout [ 1482.203206][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.360295][T26190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.360315][T26190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.360346][T26190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.417526][T26190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.417545][T26190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.417577][T26190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.837400][T26190] hsr_slave_0: entered promiscuous mode [ 1482.866518][T26190] hsr_slave_1: entered promiscuous mode [ 1482.867385][T26190] debugfs: 'hsr0' already exists in 'hsr' [ 1482.867409][T26190] Cannot create hsr debugfs directory [ 1483.595540][T17914] Bluetooth: hci3: command tx timeout [ 1483.976139][ T37] bridge_slave_1: left allmulticast mode [ 1483.976171][ T37] bridge_slave_1: left promiscuous mode [ 1483.976428][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.124998][ T37] bridge_slave_0: left allmulticast mode [ 1484.125030][ T37] bridge_slave_0: left promiscuous mode [ 1484.125302][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.665572][T26266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9511'. [ 1485.658787][T17914] Bluetooth: hci3: command tx timeout [ 1487.315270][T26272] fuseblk: Bad value for 'fd' [ 1487.549694][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1487.550237][T26276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9515'. [ 1487.661146][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1487.704072][ T37] bond0 (unregistering): Released all slaves [ 1487.747329][ T37] bond1 (unregistering): Released all slaves [ 1487.819834][T14034] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1487.971281][T14034] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.971351][T14034] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1487.971380][T14034] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1487.971431][T14034] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1487.971476][T14034] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1487.971500][T14034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.022347][T26275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1488.050637][T14034] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1488.063081][T14034] usb 4-1: invalid MIDI out EP 0 [ 1488.512476][T14034] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1488.516938][T14034] usb 4-1: USB disconnect, device number 13 [ 1489.350736][T26313] overlayfs: missing 'lowerdir' [ 1489.720670][T26327] binder: 26326:26327 ioctl c0306201 0 returned -14 [ 1489.743094][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.743188][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.199185][ T37] hsr_slave_0: left promiscuous mode [ 1490.241570][T26337] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1490.248796][ T37] hsr_slave_1: left promiscuous mode [ 1490.249971][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1490.250001][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.436442][ T37] veth1_macvtap: left promiscuous mode [ 1490.436559][ T37] veth0_macvtap: left promiscuous mode [ 1490.443354][ T37] veth1_vlan: left promiscuous mode [ 1490.443461][ T37] veth0_vlan: left promiscuous mode [ 1491.605204][T26355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9552'. [ 1491.823142][T12121] Bluetooth: hci2: command 0x0406 tx timeout [ 1492.247227][T26363] netlink: 388 bytes leftover after parsing attributes in process `syz.2.9557'. [ 1492.645490][T26370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9555'. [ 1493.058607][T14057] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1493.215425][T14057] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.215485][T14057] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1493.215515][T14057] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1493.215543][T14057] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1493.215587][T14057] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1493.215610][T14057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.296689][T26372] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1493.334509][T14057] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1493.335659][T14057] usb 2-1: invalid MIDI out EP 0 [ 1493.476788][T26380] 9pnet_virtio: no channels available for device syz [ 1493.662935][T14057] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1493.684550][T14057] usb 2-1: USB disconnect, device number 11 [ 1494.029537][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1494.463847][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1494.538255][T26392] tmpfs: Bad value for 'huge' [ 1497.435635][T26420] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9581'. [ 1497.435660][T26420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9581'. [ 1499.539683][T26190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1499.610715][T26190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1499.669885][T26190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1499.751431][T26190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1500.415560][T26190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.531260][T26190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.612580][T19467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.628804][T19467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.693707][ T9420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.712068][ T9420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.447496][T26190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.679791][T26481] overlayfs: missing 'lowerdir' [ 1501.680022][T26190] veth0_vlan: entered promiscuous mode [ 1501.707905][T26190] veth1_vlan: entered promiscuous mode [ 1501.844988][T26190] veth0_macvtap: entered promiscuous mode [ 1501.901518][T26190] veth1_macvtap: entered promiscuous mode [ 1502.011398][T26190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1502.043260][T26190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1502.086034][ T85] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.086429][ T85] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.086786][ T85] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.086836][ T85] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.556826][T25207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.556860][T25207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.678176][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.678198][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.842227][T26487] binder: 26486:26487 ioctl c0306201 0 returned -14 [ 1503.448743][T26496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9612'. [ 1504.382099][T12121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1504.397034][T12121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1504.399404][T12121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1504.402153][T12121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1504.405768][T12121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1504.919814][T26496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.979794][T26496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1505.002577][T26496] bond0 (unregistering): Released all slaves [ 1506.007537][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.482792][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.540632][T17914] Bluetooth: hci5: command tx timeout [ 1507.017143][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.615442][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.104554][T26526] netlink: 'syz.0.9628': attribute type 12 has an invalid length. [ 1508.330799][T26505] chnl_net:caif_netlink_parms(): no params data found [ 1508.619136][T17914] Bluetooth: hci5: command tx timeout [ 1509.002764][ T12] bridge_slave_1: left allmulticast mode [ 1509.002796][ T12] bridge_slave_1: left promiscuous mode [ 1509.003050][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.190815][ T12] bridge_slave_0: left allmulticast mode [ 1509.190849][ T12] bridge_slave_0: left promiscuous mode [ 1509.191161][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.699000][T17914] Bluetooth: hci5: command tx timeout [ 1511.047874][ T12] bond1 (unregistering): Released all slaves [ 1511.082623][ T12] bond0 (unregistering): Released all slaves [ 1511.116221][ T12] bond2 (unregistering): Released all slaves [ 1511.309768][T26552] netlink: 'syz.0.9639': attribute type 12 has an invalid length. [ 1511.353237][T26556] macvtap0: entered promiscuous mode [ 1511.360816][T26556] macvtap0: left promiscuous mode [ 1511.522279][T26560] overlayfs: missing 'lowerdir' [ 1512.175837][T26505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.175980][T26505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.176233][T26505] bridge_slave_0: entered allmulticast mode [ 1512.181428][T26505] bridge_slave_0: entered promiscuous mode [ 1512.185684][T26505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.198889][T26505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.199190][T26505] bridge_slave_1: entered allmulticast mode [ 1512.209984][T26505] bridge_slave_1: entered promiscuous mode [ 1512.446998][T26576] netlink: 'syz.1.9652': attribute type 12 has an invalid length. [ 1512.618729][T14034] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1512.771498][T14034] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.771584][T14034] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1512.771613][T14034] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1512.771641][T14034] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1512.771685][T14034] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1512.771710][T14034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.780072][T17914] Bluetooth: hci5: command tx timeout [ 1512.869539][T26578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1512.875316][T14034] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1512.876431][T14034] usb 1-1: invalid MIDI out EP 0 [ 1513.034225][T14034] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1513.110509][T14034] usb 1-1: USB disconnect, device number 9 [ 1513.124071][T26278] udevd[26278]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1513.339035][T26505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.346733][T26505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.730321][T26593] binder: 26592:26593 ioctl c0306201 0 returned -14 [ 1513.792248][T26505] team0: Port device team_slave_0 added [ 1514.011440][ T12] hsr_slave_0: left promiscuous mode [ 1514.042216][T26604] JFS: discard option not supported on device [ 1514.044579][T26604] Mount JFS Failure: -5 [ 1514.060375][ T12] hsr_slave_1: left promiscuous mode [ 1514.061363][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1514.061407][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.245944][ T12] veth1_macvtap: left promiscuous mode [ 1514.246060][ T12] veth0_macvtap: left promiscuous mode [ 1514.246337][ T12] veth1_vlan: left promiscuous mode [ 1514.246422][ T12] veth0_vlan: left promiscuous mode [ 1514.581081][T26615] netlink: 112 bytes leftover after parsing attributes in process `syz.3.9669'. [ 1515.055198][T26627] overlayfs: missing 'lowerdir' [ 1516.307401][T26649] overlayfs: missing 'lowerdir' [ 1516.782051][T26662] binder: 26660:26662 ioctl c0306201 0 returned -14 [ 1517.939382][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1518.320232][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1519.162154][T26678] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9701'. [ 1519.564351][T26684] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1521.572785][T26505] team0: Port device team_slave_1 added [ 1521.588578][T26686] netlink: 'syz.4.9699': attribute type 12 has an invalid length. [ 1521.950722][T26505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.950743][T26505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.950774][T26505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.981841][T26505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.981862][T26505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.981903][T26505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.218035][T26711] overlayfs: missing 'lowerdir' [ 1522.358594][T25070] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1522.453227][T26505] hsr_slave_0: entered promiscuous mode [ 1522.462272][T26505] hsr_slave_1: entered promiscuous mode [ 1522.518483][T25070] usb 5-1: Using ep0 maxpacket: 16 [ 1522.520917][T25070] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 1522.520944][T25070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.520964][T25070] usb 5-1: config 0 has no interface number 0 [ 1522.527345][T25070] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1522.527376][T25070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.527398][T25070] usb 5-1: Product: syz [ 1522.527413][T25070] usb 5-1: Manufacturer: syz [ 1522.527428][T25070] usb 5-1: SerialNumber: syz [ 1522.535925][T25070] usb 5-1: config 0 descriptor?? [ 1522.539089][T12121] Bluetooth: hci4: command 0x0406 tx timeout [ 1522.584830][T25070] net1080 5-1:0.147: probe with driver net1080 failed with error -22 [ 1522.774383][T25070] usb 5-1: USB disconnect, device number 7 [ 1522.969671][T26717] netlink: 'syz.3.9719': attribute type 12 has an invalid length. [ 1524.719033][T26505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1524.790695][T26505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1524.832366][T26505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1524.883405][T26505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1525.253384][T26505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.356228][T26505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.405586][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.405846][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.451300][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.453484][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.341264][T26505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1526.523319][T26505] veth0_vlan: entered promiscuous mode [ 1526.565908][T26505] veth1_vlan: entered promiscuous mode [ 1526.726540][T26505] veth0_macvtap: entered promiscuous mode [ 1526.752880][T26505] veth1_macvtap: entered promiscuous mode [ 1526.850087][T26505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.887087][T26505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.898019][T26748] trusted_key: encrypted_key: insufficient parameters specified [ 1526.936525][T19999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.938076][T19999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.956553][T19999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.968599][T19999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.465604][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.465627][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.587452][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.587474][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.145598][T26766] macvtap0: entered promiscuous mode [ 1528.147608][T26766] macvtap0: left promiscuous mode [ 1528.408579][T25070] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1528.561077][T25070] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.561139][T25070] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1528.561168][T25070] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1528.561195][T25070] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1528.561239][T25070] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1528.561263][T25070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.654923][T26768] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1528.670667][T25070] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1528.671786][T25070] usb 2-1: invalid MIDI out EP 0 [ 1528.922647][T25070] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1528.962614][T25070] usb 2-1: USB disconnect, device number 12 [ 1537.108686][T14057] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1537.260963][T14057] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.261035][T14057] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1537.261066][T14057] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1537.261093][T14057] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1537.261137][T14057] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1537.261160][T14057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.267909][T26860] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1537.357667][T14057] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1537.366214][T14057] usb 3-1: invalid MIDI out EP 0 [ 1537.496743][T14057] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1537.524380][T14057] usb 3-1: USB disconnect, device number 12 [ 1537.686589][T26875] udevd[26875]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1538.739096][T26891] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9794'. [ 1538.817167][T26893] overlayfs: missing 'lowerdir' [ 1540.023751][T26920] overlayfs: missing 'lowerdir' [ 1540.840208][T26950] Mount JFS Failure: -5 [ 1541.062582][T26953] JFS: discard option not supported on device [ 1541.063093][T26953] Mount JFS Failure: -5 [ 1543.401597][T14062] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1543.457850][T27008] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9844'. [ 1543.471974][T27006] macvtap0: entered promiscuous mode [ 1543.474025][T27006] macvtap0: left promiscuous mode [ 1543.548566][T14062] usb 1-1: Using ep0 maxpacket: 16 [ 1543.551342][T14062] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 1543.551371][T14062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.551392][T14062] usb 1-1: config 0 has no interface number 0 [ 1543.555670][T14062] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1543.555703][T14062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.555724][T14062] usb 1-1: Product: syz [ 1543.555739][T14062] usb 1-1: Manufacturer: syz [ 1543.555755][T14062] usb 1-1: SerialNumber: syz [ 1543.586587][T14062] usb 1-1: config 0 descriptor?? [ 1543.614837][T14062] net1080 1-1:0.147: probe with driver net1080 failed with error -22 [ 1543.799266][T14062] usb 1-1: USB disconnect, device number 10 [ 1543.823835][T27012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9846'. [ 1545.590570][T14057] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1545.616064][T27049] bond1: entered promiscuous mode [ 1545.738672][T14057] usb 1-1: Using ep0 maxpacket: 16 [ 1545.741228][T14057] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 1545.741255][T14057] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.741277][T14057] usb 1-1: config 0 has no interface number 0 [ 1545.746130][T14057] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1545.746160][T14057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.746181][T14057] usb 1-1: Product: syz [ 1545.746196][T14057] usb 1-1: Manufacturer: syz [ 1545.746211][T14057] usb 1-1: SerialNumber: syz [ 1545.756400][T14057] usb 1-1: config 0 descriptor?? [ 1545.815644][T14057] net1080 1-1:0.147: probe with driver net1080 failed with error -22 [ 1545.968042][T19578] usb 1-1: USB disconnect, device number 11 [ 1546.773852][T27069] 9pnet_fd: Insufficient options for proto=fd [ 1547.029286][T27074] 9pnet_virtio: no channels available for device syz [ 1547.478625][T14034] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1547.631410][T14034] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.631473][T14034] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1547.631503][T14034] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1547.631532][T14034] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1547.631577][T14034] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1547.631602][T14034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.707446][T27079] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1547.728168][T14034] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1547.743357][T14034] usb 5-1: invalid MIDI out EP 0 [ 1547.973701][T27002] udevd[27002]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1548.023300][T14034] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1548.077633][T14034] usb 5-1: USB disconnect, device number 8 [ 1550.068632][T14034] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1550.167345][T27137] JFS: discard option not supported on device [ 1550.167869][T27137] Mount JFS Failure: -5 [ 1550.231497][T14034] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.231560][T14034] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1550.231589][T14034] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1550.231679][T14034] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1550.231726][T14034] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1550.231751][T14034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.267935][T27125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1550.329480][T14034] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1550.330606][T14034] usb 2-1: invalid MIDI out EP 0 [ 1550.489625][T14034] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1550.523695][T14062] usb 2-1: USB disconnect, device number 13 [ 1550.554602][T27002] udevd[27002]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1551.053980][T27147] program syz.2.9907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1551.186857][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.186932][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.889905][T27167] binder: Bad value for 'max' [ 1552.228378][T27171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9918'. [ 1552.237339][T27171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9918'. [ 1553.004761][T27181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9923'. [ 1553.486299][T27186] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9925'. [ 1553.486323][T27186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9925'. [ 1553.825989][T27193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9930'. [ 1555.635033][T27193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.720128][T27193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.762168][T27193] bond0 (unregistering): Released all slaves [ 1555.903134][T27208] Mount JFS Failure: -5 [ 1556.982888][T27226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9943'. [ 1558.552828][T27248] 9pnet_fd: Insufficient options for proto=fd [ 1559.197473][T27258] netlink: 'syz.1.9960': attribute type 12 has an invalid length. [ 1560.669740][T27275] program syz.2.9961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1561.441997][T27293] veth0_to_batadv: entered allmulticast mode [ 1561.527491][T27295] 9pnet_fd: Insufficient options for proto=fd [ 1561.765808][T27299] Mount JFS Failure: -5 [ 1562.632832][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9990'. [ 1562.706914][T27319] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1563.920038][T27317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.953323][T27352] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1563.999582][T27317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.050445][T27317] bond0 (unregistering): Released all slaves [ 1565.147941][T27375] JFS: discard option not supported on device [ 1565.154199][T27375] Mount JFS Failure: -5 [ 1568.621448][T12121] Bluetooth: hci1: command 0x0406 tx timeout [ 1569.295427][T27408] Mount JFS Failure: -5 [ 1569.621873][T27412] overlayfs: missing 'lowerdir' [ 1570.641845][T27436] bond0: entered promiscuous mode [ 1571.208623][T14034] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1571.391138][T14034] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.391210][T14034] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1571.391389][T14034] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1571.391419][T14034] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1571.391464][T14034] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1571.391489][T14034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.482470][T27443] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1571.501911][T14034] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1571.502992][T14034] usb 5-1: invalid MIDI out EP 0 [ 1571.743993][T14034] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1571.792886][T27001] udevd[27001]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1571.823872][T14034] usb 5-1: USB disconnect, device number 9 [ 1572.279526][T27463] netlink: 'syz.3.10058': attribute type 12 has an invalid length. [ 1572.319721][T27461] binder: 27460:27461 ioctl c0306201 0 returned -14 [ 1572.408830][T27466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10053'. [ 1572.656441][T27466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10053'. [ 1573.504271][T27480] bond1: entered promiscuous mode [ 1575.804433][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10066'. [ 1576.119205][T27490] binder: 27489:27490 ioctl c0306201 0 returned -14 [ 1577.342138][T27506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10075'. [ 1577.628348][T27511] overlayfs: failed to resolve './file0': -2 [ 1579.941089][T27529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10086'. [ 1580.667058][T27539] Mount JFS Failure: -5 [ 1586.876056][T27611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10124'. [ 1588.439432][T27611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.540845][T27611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.596036][T27611] bond0 (unregistering): Released all slaves [ 1590.639183][T27637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10138'. [ 1591.135036][T27649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10145'. [ 1592.496780][T27672] JFS: discard option not supported on device [ 1592.497260][T27672] Mount JFS Failure: -5 [ 1593.427267][T27688] netlink: 'syz.3.10162': attribute type 12 has an invalid length. [ 1595.087576][T27715] overlayfs: missing 'lowerdir' [ 1596.386493][T27757] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1597.718609][T14034] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1597.892942][T14034] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.892971][T14034] usb 4-1: config 0 has no interfaces? [ 1597.893004][T14034] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1597.893409][T14034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.901290][T14034] usb 4-1: config 0 descriptor?? [ 1598.109077][T14034] usb 4-1: USB disconnect, device number 14 [ 1600.860064][T27858] netlink: 'syz.2.10231': attribute type 12 has an invalid length. [ 1602.742364][T27904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10265'. [ 1604.463032][T17914] Bluetooth: hci3: command 0x0406 tx timeout [ 1605.284869][T27938] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1607.711767][T27968] netlink: 'syz.0.10295': attribute type 12 has an invalid length. [ 1607.995804][T27976] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1609.480794][T28008] netlink: 'syz.0.10311': attribute type 12 has an invalid length. [ 1609.751061][T28014] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1610.318720][T14034] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1610.479181][T14034] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.479246][T14034] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1610.479272][T14034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.554652][T14034] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1610.630986][T14034] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1610.699754][T28002] udevd[28002]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1610.824661][T19578] usb 1-1: USB disconnect, device number 12 [ 1611.442057][T28039] netlink: 'syz.0.10324': attribute type 12 has an invalid length. [ 1612.051803][T28055] veth0_to_batadv: entered allmulticast mode [ 1612.402719][T28061] program syz.2.10335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1612.563013][T28067] netlink: 'syz.2.10339': attribute type 12 has an invalid length. [ 1612.623069][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.623174][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.676830][T28166] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10384'. [ 1618.676864][T28166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10384'. [ 1621.419209][T19551] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1621.581512][T19551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.581541][T19551] usb 4-1: config 0 has no interfaces? [ 1621.581573][T19551] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1621.581596][T19551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.626921][T19551] usb 4-1: config 0 descriptor?? [ 1621.834145][T19551] usb 4-1: USB disconnect, device number 15 [ 1627.339091][T14062] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1627.542120][T14062] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.542187][T14062] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1627.542217][T14062] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1627.542241][T14062] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1627.542287][T14062] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1627.542310][T14062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.566626][T14062] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1627.567870][T14062] usb 5-1: invalid MIDI out EP 0 [ 1627.863258][T28255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10425'. [ 1627.927898][T14062] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1627.953171][T14062] usb 5-1: USB disconnect, device number 10 [ 1628.075933][T28260] udevd[28260]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1628.801378][T28270] netlink: 'syz.4.10431': attribute type 12 has an invalid length. [ 1629.370119][T28278] Mount JFS Failure: -5 [ 1629.647612][T28284] veth0_to_batadv: entered allmulticast mode [ 1630.058780][T17914] Bluetooth: hci5: command 0x0406 tx timeout [ 1632.948319][T28323] 9pnet_fd: Insufficient options for proto=fd [ 1634.275919][T28358] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.10473'. [ 1634.688621][T28369] binder: 28368:28369 ioctl c0306201 0 returned -14 [ 1635.884316][T28398] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.10491'. [ 1636.122191][T28404] binder: 28403:28404 ioctl c0306201 0 returned -14 [ 1642.177310][T28496] binder: 28494:28496 ioctl c0306201 0 returned -14 [ 1646.052154][ T38] kauditd_printk_skb: 44 callbacks suppressed [ 1646.052174][ T38] audit: type=1326 audit(1763511999.158:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28529 comm="syz.1.10550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f318367f6c9 code=0x0 [ 1646.141723][T17914] Bluetooth: hci5: command 0x0406 tx timeout [ 1646.281355][T28533] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1646.538929][T28535] program syz.1.10558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1647.095446][T28541] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10560'. [ 1647.197837][T28544] binder: 28542:28544 ioctl c0306201 0 returned -14 [ 1650.788923][T28563] program syz.1.10570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1652.211599][T28569] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10573'. [ 1666.443292][T28612] netlink: 'syz.0.10590': attribute type 12 has an invalid length. [ 1674.063004][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.063109][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1682.639590][T28662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1682.659362][T28662] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1682.690118][T28662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1682.699819][T28662] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1682.705305][T28662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1685.051334][T12121] Bluetooth: hci0: command tx timeout [ 1687.588346][T12121] Bluetooth: hci0: command tx timeout [ 1689.668610][T28662] Bluetooth: hci0: command tx timeout [ 1691.812538][T28662] Bluetooth: hci0: command tx timeout [ 1704.107659][T28748] 9pnet_fd: Insufficient options for proto=fd [ 1705.372564][T28659] chnl_net:caif_netlink_parms(): no params data found [ 1719.188687][T28659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.188832][T28659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.189102][T28659] bridge_slave_0: entered allmulticast mode [ 1719.661145][T28659] bridge_slave_0: entered promiscuous mode [ 1719.998773][T28659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.998887][T28659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.999108][T28659] bridge_slave_1: entered allmulticast mode [ 1720.009715][T28659] bridge_slave_1: entered promiscuous mode [ 1724.769964][T28659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1724.800765][T28659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.744226][T28659] team0: Port device team_slave_0 added [ 1732.748635][T28659] team0: Port device team_slave_1 added [ 1735.508693][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.508768][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.656494][T28841] netlink: 'syz.2.10683': attribute type 12 has an invalid length. [ 1744.264446][T12121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1744.294559][T12121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1744.306161][T12121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1744.316724][T12121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1744.329842][T12121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1744.924984][T28868] overlayfs: missing 'lowerdir' [ 1747.483587][T28662] Bluetooth: hci1: command tx timeout [ 1749.738535][T28662] Bluetooth: hci1: command tx timeout [ 1751.818481][T28662] Bluetooth: hci1: command tx timeout [ 1753.898671][T28662] Bluetooth: hci1: command tx timeout [ 1754.860663][T28901] overlayfs: missing 'lowerdir' [ 1758.417654][T28912] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10713'. [ 1758.460190][T28912] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10713'. [ 1767.588122][T28866] chnl_net:caif_netlink_parms(): no params data found [ 1771.575965][T28946] netlink: 'syz.2.10725': attribute type 12 has an invalid length. [ 1778.832058][T28866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.851879][T28866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1778.852155][T28866] bridge_slave_0: entered allmulticast mode [ 1778.942807][T28866] bridge_slave_0: entered promiscuous mode [ 1778.946255][T28866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.946403][T28866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.946633][T28866] bridge_slave_1: entered allmulticast mode [ 1778.950873][T28866] bridge_slave_1: entered promiscuous mode [ 1781.898552][T28978] netlink: 'syz.4.10739': attribute type 12 has an invalid length. [ 1786.317860][T28866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.383204][T28866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1790.136474][T28866] team0: Port device team_slave_0 added [ 1790.181256][T28866] team0: Port device team_slave_1 added [ 1796.945484][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.945580][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1805.492107][T12121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1805.521133][T12121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1805.540389][T12121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1805.683720][T12121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1806.091018][T12121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1808.378685][T29044] Bluetooth: hci0: command tx timeout [ 1810.381131][T28662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1810.415783][T28662] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1810.430333][T28662] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1810.434106][T28662] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1810.438761][T28662] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1810.466939][T29044] Bluetooth: hci0: command tx timeout [ 1812.540645][T29044] Bluetooth: hci6: command tx timeout [ 1812.540950][T29044] Bluetooth: hci0: command tx timeout [ 1812.725111][ C1] vkms_vblank_simulate: vblank timer overrun [ 1812.908469][ C1] vkms_vblank_simulate: vblank timer overrun [ 1812.944676][ C1] vkms_vblank_simulate: vblank timer overrun [ 1813.045598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1815.509503][ C1] vkms_vblank_simulate: vblank timer overrun [ 1815.516740][T28662] Bluetooth: hci0: command tx timeout [ 1815.516774][T28662] Bluetooth: hci6: command tx timeout [ 1815.944988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1817.074431][T29068] sctp: [Deprecated]: syz.0.10773 (pid 29068) Use of int in maxseg socket option. [ 1817.074431][T29068] Use struct sctp_assoc_value instead [ 1817.578952][T28662] Bluetooth: hci6: command tx timeout [ 1819.813307][T28662] Bluetooth: hci6: command tx timeout [ 1821.054149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.134864][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.174466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.254159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.473829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.501418][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.604425][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.704113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.825416][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.925232][ C0] vkms_vblank_simulate: vblank timer overrun [ 1822.054713][ C0] vkms_vblank_simulate: vblank timer overrun [ 1822.204383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1822.505267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1822.784951][ C0] vkms_vblank_simulate: vblank timer overrun [ 1822.823863][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.024374][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.081136][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.124646][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.574710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.675127][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.776482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.854982][ C0] vkms_vblank_simulate: vblank timer overrun [ 1823.974708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.034294][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.228482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.574473][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.674217][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.774541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.854705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.974549][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.055057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.118564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.154720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.255532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.584048][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.654809][ C0] vkms_vblank_simulate: vblank timer overrun [ 1832.704501][ C0] vkms_vblank_simulate: vblank timer overrun [ 1832.805223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1832.904469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1833.485913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1833.534150][ C0] vkms_vblank_simulate: vblank timer overrun [ 1834.559560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1834.703610][ C0] vkms_vblank_simulate: vblank timer overrun [ 1834.885066][ C0] vkms_vblank_simulate: vblank timer overrun [ 1835.324698][ C0] vkms_vblank_simulate: vblank timer overrun [ 1835.405738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1835.804269][ C0] vkms_vblank_simulate: vblank timer overrun [ 1836.504857][T29035] chnl_net:caif_netlink_parms(): no params data found [ 1836.884983][ C0] vkms_vblank_simulate: vblank timer overrun [ 1836.967687][T29128] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10795'. [ 1837.024260][ C0] vkms_vblank_simulate: vblank timer overrun [ 1837.553785][ C0] vkms_vblank_simulate: vblank timer overrun [ 1844.276779][T29052] chnl_net:caif_netlink_parms(): no params data found [ 1851.338640][ T39] INFO: task syz.3.10580:28587 blocked for more than 143 seconds. [ 1851.338687][ T39] Not tainted syzkaller #0 [ 1851.338700][ T39] Blocked by coredump. [ 1851.338707][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1851.338718][ T39] task:syz.3.10580 state:D stack:20976 pid:28587 tgid:28587 ppid:25785 task_flags:0x40044c flags:0x00080003 [ 1851.338807][ T39] Call Trace: [ 1851.338818][ T39] [ 1851.338835][ T39] __schedule+0x16f3/0x4c20 [ 1851.338906][ T39] ? __lock_acquire+0xab9/0xd20 [ 1851.338939][ T39] ? __pfx___schedule+0x10/0x10 [ 1851.338989][ T39] ? schedule+0x91/0x360 [ 1851.339022][ T39] schedule+0x165/0x360 [ 1851.339055][ T39] schedule_timeout+0x9a/0x270 [ 1851.339085][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 1851.339129][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1851.339162][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1851.339191][ T39] ? wait_for_completion+0x267/0x5d0 [ 1851.339225][ T39] wait_for_completion+0x2bf/0x5d0 [ 1851.339272][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 1851.339312][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 1851.339344][ T39] rcu_barrier+0x463/0x570 [ 1851.339377][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 1851.339406][ T39] netdev_run_todo+0x327/0xea0 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 1851.339439][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 1851.339475][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 1851.339503][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1851.339546][ T39] ? netdev_state_change+0x1ca/0x220 [ 1851.339572][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 1851.339600][ T39] tun_chr_close+0x13f/0x1c0 [ 1851.339630][ T39] __fput+0x45b/0xa80 [ 1851.339666][ T39] task_work_run+0x1d4/0x260 [ 1851.339691][ T39] ? __pfx_task_work_run+0x10/0x10 [ 1851.339712][ T39] ? do_exit+0x6b0/0x2300 [ 1851.339752][ T39] ? do_exit+0x6b0/0x2300 [ 1851.339790][ T39] do_exit+0x6b5/0x2300 [ 1851.339823][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1851.339868][ T39] ? __pfx_do_exit+0x10/0x10 [ 1851.339899][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1851.339924][ T39] ? rt_spin_lock+0x1c1/0x3e0 [ 1851.339967][ T39] do_group_exit+0x21c/0x2d0 [ 1851.339988][ T39] ? rt_spin_unlock+0x161/0x200 [ 1851.340017][ T39] get_signal+0x125d/0x1310 [ 1851.340069][ T39] arch_do_signal_or_restart+0xa0/0x790 [ 1851.340099][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1851.340143][ T39] ? exit_to_user_mode_loop+0x40/0x130 [ 1851.340178][ T39] exit_to_user_mode_loop+0x72/0x130 [ 1851.340209][ T39] do_syscall_64+0x2bd/0xfa0 [ 1851.340240][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1851.340271][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.340294][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1851.340322][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.340344][ T39] RIP: 0033:0x7f27078df6c9 [ 1851.340369][ T39] RSP: 002b:00007ffc61fc2a08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1851.340392][ T39] RAX: 0000000000000000 RBX: 000000000019473a RCX: 00007f27078df6c9 [ 1851.340407][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1851.340421][ T39] RBP: 00007f2707b37da0 R08: 0000000000000001 R09: 0000000761fc2cff [ 1851.340435][ T39] R10: 0000001b2e720000 R11: 0000000000000246 R12: 00007f2707b35fac [ 1851.340450][ T39] R13: 00007f2707b35fa0 R14: ffffffffffffffff R15: 00007ffc61fc2b20 [ 1851.340487][ T39] [ 1851.340516][ T39] [ 1851.340516][ T39] Showing all locks held in the system: [ 1851.340532][ T39] 2 locks held by ksoftirqd/1/30: [ 1851.340546][ T39] 1 lock held by khungtaskd/39: [ 1851.340558][ T39] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1851.340619][ T39] 6 locks held by kworker/u8:6/85: [ 1851.340649][ T39] 2 locks held by getty/5558: [ 1851.340661][ T39] #0: ffff88823bf728a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1851.340717][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1851.340787][ T39] 3 locks held by kworker/u8:3/19467: [ 1851.340800][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1851.340862][ T39] #1: ffffc90003f37ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1851.340918][ T39] #2: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1851.340976][ T39] 10 locks held by syz-executor/25068: [ 1851.340990][ T39] 3 locks held by kworker/0:2/25314: [ 1851.341007][ T39] 1 lock held by syz.3.10580/28587: [ 1851.341019][ T39] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1851.341071][ T39] 1 lock held by syz-executor/28659: [ 1851.341084][ T39] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1851.341136][ T39] 1 lock held by syz-executor/28866: [ 1851.341148][ T39] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1851.341199][ T39] 1 lock held by syz.1.10740/28980: [ 1851.341211][ T39] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1851.341264][ T39] 3 locks held by syz-executor/29035: [ 1851.341276][ T39] 2 locks held by syz-executor/29052: [ 1851.341288][ T39] #0: ffffffff8dffaa20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1851.341345][ T39] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1851.341394][ T39] 5 locks held by syz.2.10804/29145: [ 1851.341408][ T39] 5 locks held by syz.0.10802/29148: [ 1851.341421][ T39] [ 1851.341426][ T39] ============================================= [ 1851.341426][ T39] [ 1851.341437][ T39] NMI backtrace for cpu 1 [ 1851.341463][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1851.341487][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1851.341501][ T39] Call Trace: [ 1851.341509][ T39] [ 1851.341517][ T39] dump_stack_lvl+0x189/0x250 [ 1851.341555][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1851.341588][ T39] ? __pfx__printk+0x10/0x10 [ 1851.341628][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1851.341657][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1851.341686][ T39] ? __pfx__printk+0x10/0x10 [ 1851.341717][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1851.341752][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1851.341781][ T39] watchdog+0xf60/0xfa0 [ 1851.341818][ T39] ? watchdog+0x1e2/0xfa0 [ 1851.341855][ T39] kthread+0x711/0x8a0 [ 1851.341891][ T39] ? __pfx_watchdog+0x10/0x10 [ 1851.341921][ T39] ? __pfx_kthread+0x10/0x10 [ 1851.341949][ T39] ? rt_spin_unlock+0x150/0x200 [ 1851.341980][ T39] ? rt_spin_unlock+0x161/0x200 [ 1851.342003][ T39] ? __pfx_kthread+0x10/0x10 [ 1851.342035][ T39] ret_from_fork+0x4bc/0x870 [ 1851.342065][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1851.342099][ T39] ? __switch_to_asm+0x39/0x70 [ 1851.342120][ T39] ? __switch_to_asm+0x33/0x70 [ 1851.342139][ T39] ? __pfx_kthread+0x10/0x10 [ 1851.342172][ T39] ret_from_fork_asm+0x1a/0x30 [ 1851.342209][ T39] [ 1851.342217][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1851.342243][ C0] NMI backtrace for cpu 0 [ 1851.342264][ C0] CPU: 0 UID: 0 PID: 26190 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1851.342285][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1851.342296][ C0] RIP: 0010:lock_is_held_type+0x11c/0x190 [ 1851.342326][ C0] Code: 48 c7 c7 0b 55 f6 8c e8 82 16 00 00 b8 ff ff ff ff 65 0f c1 05 75 3b e2 06 83 f8 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b [ 1851.342342][ C0] RSP: 0018:ffffc9000590f938 EFLAGS: 00000046 [ 1851.342357][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: de0ff005d3bc9000 [ 1851.342370][ C0] RDX: 0000000000000000 RSI: ffffffff8cf6550b RDI: ffffffff8b3ddfe0 [ 1851.342382][ C0] RBP: 00000000ffffffff R08: ffffffff8ed64077 R09: 1ffffffff1dac80e [ 1851.342396][ C0] R10: dffffc0000000000 R11: fffffbfff1dac80f R12: 0000000000000246 [ 1851.342409][ C0] R13: ffff888037eada00 R14: ffffffff8d5aa940 R15: 1ffff11017107718 [ 1851.342423][ C0] FS: 0000555578e45500(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 1851.342439][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1851.342451][ C0] CR2: 0000001b31122ff8 CR3: 00000000540be000 CR4: 00000000003526f0 [ 1851.342467][ C0] Call Trace: [ 1851.342473][ C0] [ 1851.342483][ C0] __schedule+0x241/0x4c20 [ 1851.342515][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1851.342540][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1851.342568][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1851.342601][ C0] ? __lock_acquire+0xab9/0xd20 [ 1851.342625][ C0] ? __pfx___schedule+0x10/0x10 [ 1851.342659][ C0] ? schedule+0x91/0x360 [ 1851.342684][ C0] schedule+0x165/0x360 [ 1851.342709][ C0] do_nanosleep+0x20f/0x650 [ 1851.342736][ C0] ? do_nanosleep+0x8a/0x650 [ 1851.342763][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1851.342789][ C0] ? __hrtimer_setup+0x18a/0x200 [ 1851.342815][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1851.342834][ C0] hrtimer_nanosleep+0x1f7/0x410 [ 1851.342864][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1851.342894][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1851.342912][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1851.342936][ C0] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 1851.342972][ C0] __se_sys_clock_nanosleep+0x339/0x390 [ 1851.343001][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1851.343030][ C0] ? do_syscall_64+0xbe/0xfa0 [ 1851.343059][ C0] do_syscall_64+0xfa/0xfa0 [ 1851.343084][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1851.343111][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.343129][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1851.343150][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.343167][ C0] RIP: 0033:0x7f1836e11f85 [ 1851.343182][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 1851.343197][ C0] RSP: 002b:00007ffc7d685ae0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1851.343215][ C0] RAX: ffffffffffffffda RBX: 0000000000000231 RCX: 00007f1836e11f85 [ 1851.343229][ C0] RDX: 00007ffc7d685b20 RSI: 0000000000000000 RDI: 0000000000000000 [ 1851.343240][ C0] RBP: 00007ffc7d685b8c R08: 0000000000000000 R09: 0000000000000000 [ 1851.343251][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1851.343263][ C0] R13: 00000000000927c0 R14: 00000000001c3be2 R15: 00007ffc7d685be0 [ 1851.343286][ C0] [ 1858.418893][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.418972][ T1320] ieee802154 phy1 wpan1: encryption failed: -22