last executing test programs: 9.174614253s ago: executing program 2 (id=2454): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018"], 0xc0}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8.98908134s ago: executing program 2 (id=2455): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x51, &(0x7f00000001c0)="d28f7fbb774b0de98bb0fa7b34a38a63762953bab45e02911ec4e3ba1aaac5ef35232c0e12e3f4feb89cf5f8c0af3cb9239b53f28fe9d7739e27482bf6fa8ba008f5091c7cf3272fc9b4379c5583a02e8f"}) 8.783998758s ago: executing program 2 (id=2456): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 8.520345479s ago: executing program 2 (id=2457): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4040841) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f00000000c0)={@local, 0x23}) 8.217123295s ago: executing program 2 (id=2458): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x300000d, 0x12, r4, 0xff84c000) 7.74353723s ago: executing program 2 (id=2460): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 5.635250976s ago: executing program 1 (id=2473): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 4.420962292s ago: executing program 3 (id=2482): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[], 0x118) 3.641730895s ago: executing program 0 (id=2487): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, 0x0, 0x0) 3.459980337s ago: executing program 0 (id=2488): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) 3.327700508s ago: executing program 0 (id=2489): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 3.287939156s ago: executing program 3 (id=2490): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 3.134432222s ago: executing program 3 (id=2491): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) 2.929389693s ago: executing program 3 (id=2492): rt_sigaction(0xd, &(0x7f0000000140)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d00000002000001090224000100000000090400000103000000092100000001220500090581"], 0x0) 2.874971354s ago: executing program 1 (id=2493): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 2.025577795s ago: executing program 1 (id=2494): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x1c4, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x89, 0x1, {{'md5\x00'}, 0x208, "fd03480f2e2ebb04183ebca2d78f40b20e8473b935f6cf6f3d2c402e34b339e1b0cd2b29cd33e8f258cf85e6c1348f664a094fe82198b2247fe438734b6b8a3542"}}]}, 0x1c4}}, 0x0) 1.498814866s ago: executing program 3 (id=2495): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc040884) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0xc4, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.27741012s ago: executing program 1 (id=2496): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) 1.166314796s ago: executing program 1 (id=2497): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[], 0x118) 1.072896549s ago: executing program 1 (id=2498): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) sendto(r5, 0x0, 0x0, 0x11, 0x0, 0x0) unshare(0x62020680) 843.936446ms ago: executing program 0 (id=2499): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) 406.675347ms ago: executing program 3 (id=2500): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 177.378602ms ago: executing program 0 (id=2501): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500), 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r5, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x1c5200800, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x2c, 0x0, 0x0}, 0x58) 0s ago: executing program 0 (id=2502): rt_sigaction(0xd, &(0x7f0000000140)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d00000002000001090224000100000000090400000103000000092100000001220500090581"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 80.946375][ T5809] cgroup: Unknown subsys name 'net' [ 81.057207][ T5809] cgroup: Unknown subsys name 'cpuset' [ 81.066794][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.729517][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.191031][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.192434][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.201880][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.207333][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.214986][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.222042][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.235999][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.236385][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.244647][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.252101][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.260587][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.266231][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.282377][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.285678][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.290713][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.298223][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.305402][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.318112][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.326883][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.348736][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.828290][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 91.072067][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 91.085961][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 91.145791][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.153770][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.161202][ T5823] bridge_slave_0: entered allmulticast mode [ 91.171059][ T5823] bridge_slave_0: entered promiscuous mode [ 91.189149][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.196520][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.203803][ T5823] bridge_slave_1: entered allmulticast mode [ 91.211405][ T5823] bridge_slave_1: entered promiscuous mode [ 91.281877][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 91.340776][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.377467][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.481241][ T5823] team0: Port device team_slave_0 added [ 91.487606][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.495424][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.502624][ T5826] bridge_slave_0: entered allmulticast mode [ 91.510154][ T5826] bridge_slave_0: entered promiscuous mode [ 91.517685][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.525076][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.532274][ T5822] bridge_slave_0: entered allmulticast mode [ 91.539883][ T5822] bridge_slave_0: entered promiscuous mode [ 91.554829][ T5823] team0: Port device team_slave_1 added [ 91.575633][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.582817][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.590600][ T5826] bridge_slave_1: entered allmulticast mode [ 91.598307][ T5826] bridge_slave_1: entered promiscuous mode [ 91.606873][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.614389][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.621689][ T5822] bridge_slave_1: entered allmulticast mode [ 91.629183][ T5822] bridge_slave_1: entered promiscuous mode [ 91.704473][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.711549][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.737672][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.776821][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.784387][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.791561][ T5824] bridge_slave_0: entered allmulticast mode [ 91.799086][ T5824] bridge_slave_0: entered promiscuous mode [ 91.807868][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.814954][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.841055][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.855258][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.868362][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.882411][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.890364][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.897728][ T5824] bridge_slave_1: entered allmulticast mode [ 91.905201][ T5824] bridge_slave_1: entered promiscuous mode [ 91.921854][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.946701][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.968853][ T10] cfg80211: failed to load regulatory.db [ 92.033959][ T5822] team0: Port device team_slave_0 added [ 92.042773][ T5822] team0: Port device team_slave_1 added [ 92.054406][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.066030][ T5826] team0: Port device team_slave_0 added [ 92.076193][ T5826] team0: Port device team_slave_1 added [ 92.110313][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.191586][ T5823] hsr_slave_0: entered promiscuous mode [ 92.198534][ T5823] hsr_slave_1: entered promiscuous mode [ 92.206276][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.213602][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.239588][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.265428][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.272415][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.298713][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.311591][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.318950][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.344918][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.357062][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.364696][ T5828] Bluetooth: hci0: command tx timeout [ 92.364704][ T5833] Bluetooth: hci1: command tx timeout [ 92.365071][ T5839] Bluetooth: hci2: command tx timeout [ 92.370559][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.407504][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.420914][ T5824] team0: Port device team_slave_0 added [ 92.429741][ T5824] team0: Port device team_slave_1 added [ 92.443709][ T5839] Bluetooth: hci3: command tx timeout [ 92.490954][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.498111][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.524185][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.537824][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.544930][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.570973][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.706781][ T5822] hsr_slave_0: entered promiscuous mode [ 92.713906][ T5822] hsr_slave_1: entered promiscuous mode [ 92.720130][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 92.726765][ T5822] Cannot create hsr debugfs directory [ 92.743662][ T5826] hsr_slave_0: entered promiscuous mode [ 92.750199][ T5826] hsr_slave_1: entered promiscuous mode [ 92.757013][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 92.762784][ T5826] Cannot create hsr debugfs directory [ 92.788691][ T5824] hsr_slave_0: entered promiscuous mode [ 92.795408][ T5824] hsr_slave_1: entered promiscuous mode [ 92.801742][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 92.807946][ T5824] Cannot create hsr debugfs directory [ 93.265085][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.279659][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.300174][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.311613][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.378360][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.391135][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.401681][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.417255][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.501160][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.514161][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.526238][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.553321][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.654794][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.666303][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.683522][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.699577][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.745798][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.807044][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.844471][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.854766][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.862247][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.889630][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.897003][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.938084][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.960770][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.968005][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.008323][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.015682][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.078217][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.130253][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.197781][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.223229][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.259078][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.266886][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.280138][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.287419][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.319280][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.326620][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.349390][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.356732][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.443491][ T5839] Bluetooth: hci2: command tx timeout [ 94.448967][ T5839] Bluetooth: hci1: command tx timeout [ 94.449030][ T5828] Bluetooth: hci0: command tx timeout [ 94.524992][ T5828] Bluetooth: hci3: command tx timeout [ 94.570382][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.620661][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.766197][ T5823] veth0_vlan: entered promiscuous mode [ 94.791287][ T5823] veth1_vlan: entered promiscuous mode [ 94.807726][ T5826] veth0_vlan: entered promiscuous mode [ 94.837202][ T5826] veth1_vlan: entered promiscuous mode [ 94.899208][ T5823] veth0_macvtap: entered promiscuous mode [ 94.918763][ T5823] veth1_macvtap: entered promiscuous mode [ 94.986799][ T5826] veth0_macvtap: entered promiscuous mode [ 95.002458][ T5826] veth1_macvtap: entered promiscuous mode [ 95.021804][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.036218][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.067405][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.093796][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.100913][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.112129][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.132360][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.141607][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.155133][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.185600][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.206205][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.224807][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.234389][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.264829][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.328163][ T5824] veth0_vlan: entered promiscuous mode [ 95.397915][ T5822] veth0_vlan: entered promiscuous mode [ 95.423731][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.430885][ T5824] veth1_vlan: entered promiscuous mode [ 95.431770][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.474064][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.481931][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.519943][ T5822] veth1_vlan: entered promiscuous mode [ 95.538130][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.550849][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.602568][ T5824] veth0_macvtap: entered promiscuous mode [ 95.619784][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.628461][ T5824] veth1_macvtap: entered promiscuous mode [ 95.629889][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.656622][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.708205][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.757942][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.776878][ T5822] veth0_macvtap: entered promiscuous mode [ 95.806389][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.827997][ T5822] veth1_macvtap: entered promiscuous mode [ 95.847252][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.878366][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.906930][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.936415][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.975084][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.065788][ T5914] syz.2.3 (5914) used greatest stack depth: 17864 bytes left [ 96.079240][ T3462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.110406][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.127521][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.137364][ T3462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.150786][ T3462] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.179820][ T3462] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.245110][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.253818][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.278574][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 96.456504][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.514462][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.525370][ T5828] Bluetooth: hci1: command tx timeout [ 96.531360][ T5833] Bluetooth: hci2: command tx timeout [ 96.531377][ T5839] Bluetooth: hci0: command tx timeout [ 96.604262][ T5839] Bluetooth: hci3: command tx timeout [ 96.629754][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.665473][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.026605][ T5943] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2'. [ 98.605194][ T5839] Bluetooth: hci1: command tx timeout [ 98.605214][ T5828] Bluetooth: hci2: command tx timeout [ 98.610764][ T5839] Bluetooth: hci0: command tx timeout [ 98.683581][ T5839] Bluetooth: hci3: command tx timeout [ 98.897894][ T6015] netlink: 'syz.0.49': attribute type 13 has an invalid length. [ 99.119358][ T6019] netlink: 68 bytes leftover after parsing attributes in process `syz.0.51'. [ 99.764654][ T6036] netlink: 'syz.1.59': attribute type 13 has an invalid length. [ 100.003246][ T6043] netlink: 68 bytes leftover after parsing attributes in process `syz.0.62'. [ 103.191492][ T6083] netlink: 'syz.3.83': attribute type 13 has an invalid length. [ 104.148076][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 105.516273][ T6136] netlink: 68 bytes leftover after parsing attributes in process `syz.3.108'. [ 107.960498][ T6179] netlink: 'syz.0.124': attribute type 13 has an invalid length. [ 108.505690][ T6192] netlink: 'syz.0.136': attribute type 13 has an invalid length. [ 111.314541][ T6233] cgroup: Invalid name [ 112.687141][ T6245] netlink: 68 bytes leftover after parsing attributes in process `syz.0.160'. [ 113.391831][ T6249] netlink: 'syz.1.162': attribute type 13 has an invalid length. [ 113.558315][ T6251] cgroup: Invalid name [ 114.091255][ T6264] netlink: 'syz.3.170': attribute type 13 has an invalid length. [ 117.548048][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 117.898067][ T6320] netlink: 68 bytes leftover after parsing attributes in process `syz.3.199'. [ 119.223456][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 122.780431][ T6379] netlink: 'syz.2.224': attribute type 13 has an invalid length. [ 124.553467][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.737094][ T5818] usb 4-1: config index 0 descriptor too short (expected 88, got 18) [ 124.756318][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.787324][ T5818] usb 4-1: config 0 has no interfaces? [ 124.792894][ T5818] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 124.842871][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.868208][ T5818] usb 4-1: config 0 descriptor?? [ 125.093168][ T5881] usb 4-1: USB disconnect, device number 2 [ 125.765960][ T6422] netlink: 'syz.3.245': attribute type 13 has an invalid length. [ 126.127359][ T6433] cgroup: Invalid name [ 126.378960][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 130.318433][ T6484] netlink: 'syz.3.265': attribute type 13 has an invalid length. [ 133.432110][ T6500] cgroup: Invalid name [ 133.973089][ T5818] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.165987][ T5818] usb 1-1: config index 0 descriptor too short (expected 88, got 18) [ 134.183057][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.203077][ T5818] usb 1-1: config 0 has no interfaces? [ 134.219334][ T5818] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 134.238737][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.260424][ T5818] usb 1-1: config 0 descriptor?? [ 134.483584][ T5818] usb 1-1: USB disconnect, device number 2 [ 135.455011][ T6523] netlink: 'syz.0.292': attribute type 13 has an invalid length. [ 135.939562][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 136.500129][ T6540] netlink: 'syz.0.301': attribute type 13 has an invalid length. [ 136.945621][ T6554] netlink: 'syz.3.306': attribute type 13 has an invalid length. [ 137.097873][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 137.211645][ T6561] 9p: Bad value for 'wfdno' [ 137.743635][ T6577] netlink: 'syz.2.317': attribute type 13 has an invalid length. [ 137.804265][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 137.910704][ T6583] 9p: Bad value for 'wfdno' [ 138.050207][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.063100][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.473376][ T5818] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.583329][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 138.627026][ T5818] usb 4-1: config index 0 descriptor too short (expected 88, got 18) [ 138.643076][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.663086][ T5818] usb 4-1: config 0 has no interfaces? [ 138.668740][ T5818] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 138.693061][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.714563][ T5818] usb 4-1: config 0 descriptor?? [ 138.754302][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.775182][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.796408][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 138.813757][ T10] usb 2-1: Manufacturer: syz [ 138.826993][ T10] usb 2-1: config 0 descriptor?? [ 138.847096][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 138.926254][ T10] usb 4-1: USB disconnect, device number 3 [ 139.050736][ T794] usb 2-1: USB disconnect, device number 2 [ 140.643088][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.845631][ T10] usb 4-1: config index 0 descriptor too short (expected 88, got 18) [ 140.856288][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.883187][ T10] usb 4-1: config 0 has no interfaces? [ 140.888811][ T10] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 140.910293][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.941665][ T10] usb 4-1: config 0 descriptor?? [ 141.158115][ T5881] usb 4-1: USB disconnect, device number 4 [ 143.181241][ T6669] netlink: 68 bytes leftover after parsing attributes in process `syz.0.363'. [ 146.071876][ T6739] netlink: 68 bytes leftover after parsing attributes in process `syz.0.398'. [ 146.823694][ T6761] netlink: 68 bytes leftover after parsing attributes in process `syz.2.409'. [ 146.961785][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 147.115033][ T6767] netlink: 'syz.2.413': attribute type 13 has an invalid length. [ 147.734969][ T6779] netlink: 'syz.2.418': attribute type 13 has an invalid length. [ 147.881940][ T6783] netlink: 68 bytes leftover after parsing attributes in process `syz.2.420'. [ 148.054594][ T6787] netlink: 'syz.2.422': attribute type 13 has an invalid length. [ 148.183769][ T5881] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.345675][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.368025][ T5881] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 148.387554][ T5881] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 148.413414][ T5881] usb 2-1: Manufacturer: syz [ 148.444147][ T5881] usb 2-1: config 0 descriptor?? [ 148.455955][ T5881] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 148.668932][ T10] usb 2-1: USB disconnect, device number 3 [ 148.774710][ T6797] netlink: 'syz.2.428': attribute type 13 has an invalid length. [ 149.653148][ T794] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.815245][ T794] usb 3-1: config index 0 descriptor too short (expected 88, got 18) [ 149.824692][ T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.835345][ T794] usb 3-1: config 0 has no interfaces? [ 149.840855][ T794] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 149.874643][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.899514][ T794] usb 3-1: config 0 descriptor?? [ 150.119890][ T794] usb 3-1: USB disconnect, device number 2 [ 152.783138][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.947070][ T10] usb 4-1: config index 0 descriptor too short (expected 88, got 18) [ 152.965464][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.993082][ T10] usb 4-1: config 0 has no interfaces? [ 152.998686][ T10] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 153.021220][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.046813][ T10] usb 4-1: config 0 descriptor?? [ 153.060858][ T6867] netlink: 'syz.1.462': attribute type 13 has an invalid length. [ 153.259730][ T10] usb 4-1: USB disconnect, device number 5 [ 153.507865][ T6877] netlink: 'syz.0.467': attribute type 13 has an invalid length. [ 157.133107][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 157.305265][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.316453][ T5881] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 157.333136][ T5881] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 157.352797][ T5881] usb 2-1: Manufacturer: syz [ 157.370412][ T5881] usb 2-1: config 0 descriptor?? [ 157.390353][ T5881] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 157.592448][ T5881] usb 2-1: USB disconnect, device number 4 [ 157.772177][ T6944] netlink: 68 bytes leftover after parsing attributes in process `syz.2.497'. [ 158.243707][ T6952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.113241][ T5818] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.295716][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.314470][ T5818] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 160.333186][ T5818] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 160.343293][ T5818] usb 4-1: Manufacturer: syz [ 160.362754][ T5818] usb 4-1: config 0 descriptor?? [ 160.380911][ T5818] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 160.593478][ T5818] usb 4-1: USB disconnect, device number 6 [ 162.033118][ T5915] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.195118][ T5915] usb 2-1: config index 0 descriptor too short (expected 88, got 18) [ 162.203598][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.233150][ T5915] usb 2-1: config 0 has no interfaces? [ 162.238674][ T5915] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 162.268115][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.293136][ T5915] usb 2-1: config 0 descriptor?? [ 162.505118][ T24] usb 2-1: USB disconnect, device number 5 [ 166.707285][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 167.001234][ T7058] netlink: 68 bytes leftover after parsing attributes in process `syz.1.554'. [ 168.858367][ T7077] netlink: 68 bytes leftover after parsing attributes in process `syz.3.564'. [ 169.633320][ T5915] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.814783][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.844326][ T5915] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 169.863035][ T5915] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 169.881498][ T5915] usb 3-1: Manufacturer: syz [ 169.899490][ T5915] usb 3-1: config 0 descriptor?? [ 169.917351][ T5915] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 170.118156][ T5818] usb 3-1: USB disconnect, device number 3 [ 170.322888][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 170.620654][ T7092] netlink: 'syz.1.571': attribute type 13 has an invalid length. [ 173.934161][ T7110] netlink: 'syz.1.581': attribute type 13 has an invalid length. [ 174.253896][ T7122] netlink: 68 bytes leftover after parsing attributes in process `syz.0.585'. [ 174.425754][ T5881] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 174.592056][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.614961][ T5881] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.641931][ T5881] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 174.661709][ T5881] usb 2-1: Manufacturer: syz [ 174.702762][ T5881] usb 2-1: config 0 descriptor?? [ 174.725771][ T5881] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 174.937450][ T24] usb 2-1: USB disconnect, device number 6 [ 174.998337][ T7144] netlink: 68 bytes leftover after parsing attributes in process `syz.3.596'. [ 175.338042][ T7158] netlink: 'syz.3.601': attribute type 13 has an invalid length. [ 175.662227][ T7170] netlink: 68 bytes leftover after parsing attributes in process `syz.3.607'. [ 176.003083][ T5818] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.164997][ T5818] usb 2-1: config index 0 descriptor too short (expected 88, got 18) [ 176.174433][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.196179][ T5818] usb 2-1: config 0 has no interfaces? [ 176.216502][ T5818] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 176.234608][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.263866][ T5818] usb 2-1: config 0 descriptor?? [ 176.482863][ T10] usb 2-1: USB disconnect, device number 7 [ 178.453162][ T794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.625775][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.637175][ T794] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 178.653091][ T794] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 178.661139][ T794] usb 1-1: Manufacturer: syz [ 178.702777][ T794] usb 1-1: config 0 descriptor?? [ 178.724985][ T794] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 178.927000][ T5818] usb 1-1: USB disconnect, device number 3 [ 180.006672][ T7227] netlink: 'syz.3.637': attribute type 13 has an invalid length. [ 180.289186][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 180.655645][ T7249] netlink: 68 bytes leftover after parsing attributes in process `syz.3.647'. [ 181.256430][ T7284] cgroup: Invalid name [ 181.364997][ T7291] netlink: 'syz.2.666': attribute type 13 has an invalid length. [ 181.628831][ T5818] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.760270][ T7312] netlink: 68 bytes leftover after parsing attributes in process `syz.2.676'. [ 181.795347][ T5818] usb 2-1: config index 0 descriptor too short (expected 28504, got 18) [ 181.818446][ T5818] usb 2-1: config 15 has too many interfaces: 240, using maximum allowed: 32 [ 181.844417][ T5818] usb 2-1: config 15 has an invalid descriptor of length 34, skipping remainder of the config [ 181.873337][ T5818] usb 2-1: config 15 has 0 interfaces, different from the descriptor's value: 240 [ 181.882624][ T5818] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 181.908401][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.082737][ T7326] netlink: 'syz.2.682': attribute type 13 has an invalid length. [ 182.144985][ T5818] usb 2-1: string descriptor 0 read error: -71 [ 182.169186][ T5818] usb 2-1: USB disconnect, device number 8 [ 187.534780][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 188.749261][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 189.403171][ T5818] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 189.597417][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.608861][ T5818] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 189.618577][ T5818] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 189.638534][ T5818] usb 1-1: Manufacturer: syz [ 189.653749][ T5818] usb 1-1: config 0 descriptor?? [ 189.679648][ T5818] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 189.876261][ T5818] usb 1-1: USB disconnect, device number 4 [ 190.687946][ T7492] netlink: 'syz.1.759': attribute type 13 has an invalid length. [ 191.473069][ T5818] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 191.607838][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 191.634353][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.654805][ T5818] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 191.664515][ T5818] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 191.672541][ T5818] usb 3-1: Manufacturer: syz [ 191.694089][ T5818] usb 3-1: config 0 descriptor?? [ 191.706902][ T5818] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 191.910170][ T7520] netlink: 'syz.3.772': attribute type 13 has an invalid length. [ 191.927752][ T794] usb 3-1: USB disconnect, device number 4 [ 192.877364][ T7538] netlink: 'syz.3.781': attribute type 13 has an invalid length. [ 193.153726][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 193.603412][ T7559] cgroup: Invalid name [ 194.901502][ T7598] netlink: 'syz.1.811': attribute type 13 has an invalid length. [ 194.936698][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 196.412572][ T7618] netlink: 'syz.2.822': attribute type 13 has an invalid length. [ 197.261260][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'. [ 198.183064][ T794] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 198.344967][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.375259][ T794] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 198.393042][ T794] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 198.412235][ T794] usb 1-1: Manufacturer: syz [ 198.427507][ T794] usb 1-1: config 0 descriptor?? [ 198.486701][ T794] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 198.688086][ T5818] usb 1-1: USB disconnect, device number 5 [ 199.489028][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.497474][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.210756][ T7688] netlink: 'syz.1.852': attribute type 13 has an invalid length. [ 202.355233][ T7704] cgroup: Invalid name [ 209.258481][ T7772] cgroup: Invalid name [ 209.681543][ T7788] netlink: 68 bytes leftover after parsing attributes in process `syz.2.901'. [ 209.879311][ T7794] cgroup: Invalid name [ 210.537451][ T7818] cgroup: Invalid name [ 211.174572][ T7841] netlink: 68 bytes leftover after parsing attributes in process `syz.2.927'. [ 212.013058][ T5881] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 212.215084][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.229131][ T5881] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.248440][ T5881] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 212.273017][ T5881] usb 3-1: Manufacturer: syz [ 212.285774][ T5881] usb 3-1: config 0 descriptor?? [ 212.309120][ T5881] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 212.511111][ T794] usb 3-1: USB disconnect, device number 5 [ 213.561060][ T7868] cgroup: Invalid name [ 216.673160][ T5818] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.854277][ T5818] usb 3-1: config index 0 descriptor too short (expected 88, got 18) [ 216.872674][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.896170][ T5818] usb 3-1: config 0 has no interfaces? [ 216.901701][ T5818] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 216.925827][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 216.931502][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.931981][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 216.940844][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 216.946993][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 216.985524][ T5818] usb 3-1: config 0 descriptor?? [ 217.208460][ T5915] usb 3-1: USB disconnect, device number 6 [ 219.134634][ T7970] netlink: 'syz.2.986': attribute type 13 has an invalid length. [ 220.529412][ T8020] netlink: 'syz.1.1011': attribute type 13 has an invalid length. [ 220.639406][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 223.011946][ T8072] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1039'. [ 225.423083][ T5915] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 225.594602][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.615210][ T5915] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 225.633028][ T5915] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 225.652117][ T5915] usb 1-1: Manufacturer: syz [ 225.663388][ T5915] usb 1-1: config 0 descriptor?? [ 225.689104][ T5915] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 225.878448][ T5881] usb 1-1: USB disconnect, device number 6 [ 227.497297][ T8138] netlink: 'syz.3.1058': attribute type 13 has an invalid length. [ 227.557465][ T8140] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1069'. [ 230.349128][ T8224] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1110'. [ 230.829939][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 231.303372][ T8268] cgroup: Invalid name [ 232.940649][ T8357] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1175'. [ 233.455578][ T8388] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1187'. [ 234.286832][ T8408] 9p: Bad value for 'rfdno' [ 235.100413][ T8427] 9p: Bad value for 'rfdno' [ 235.273546][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 235.436418][ T24] usb 2-1: config index 0 descriptor too short (expected 28504, got 18) [ 235.453249][ T24] usb 2-1: config 15 has too many interfaces: 240, using maximum allowed: 32 [ 235.462101][ T24] usb 2-1: config 15 has an invalid descriptor of length 34, skipping remainder of the config [ 235.483983][ T24] usb 2-1: config 15 has 0 interfaces, different from the descriptor's value: 240 [ 235.503098][ T24] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 235.512159][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.751071][ T24] usb 2-1: string descriptor 0 read error: -71 [ 235.767579][ T24] usb 2-1: USB disconnect, device number 9 [ 235.808615][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 236.807498][ T8498] cgroup: Invalid name [ 236.903284][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 237.075533][ T24] usb 1-1: config index 0 descriptor too short (expected 28504, got 18) [ 237.098597][ T24] usb 1-1: config 15 has too many interfaces: 240, using maximum allowed: 32 [ 237.118007][ T24] usb 1-1: config 15 has an invalid descriptor of length 34, skipping remainder of the config [ 237.138639][ T24] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 240 [ 237.158311][ T24] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 237.179453][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.182036][ T8516] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1250'. [ 237.346407][ T8522] cgroup: Invalid name [ 237.420265][ T24] usb 1-1: string descriptor 0 read error: -71 [ 237.441921][ T24] usb 1-1: USB disconnect, device number 7 [ 239.185148][ T8573] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1279'. [ 239.876809][ T8602] 9p: Bad value for 'rfdno' [ 240.256433][ T8616] cgroup: Invalid name [ 240.514641][ T8627] netlink: 'syz.2.1304': attribute type 13 has an invalid length. [ 240.680364][ T8633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1307'. [ 240.726233][ T8635] 9p: Bad value for 'rfdno' [ 240.792578][ T8639] cgroup: Invalid name [ 241.246232][ T8658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1319'. [ 241.319100][ T8662] cgroup: Invalid name [ 241.870299][ T8682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1331'. [ 242.146793][ T8686] cgroup: Invalid name [ 243.053118][ T793] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 243.227126][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.239372][ T793] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 243.259669][ T793] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 243.283023][ T793] usb 2-1: Manufacturer: syz [ 243.290630][ T793] usb 2-1: config 0 descriptor?? [ 243.304998][ T793] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 243.506225][ T5818] usb 2-1: USB disconnect, device number 10 [ 244.966321][ T8726] netlink: 'syz.0.1347': attribute type 13 has an invalid length. [ 245.683857][ T8736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1356'. [ 247.370084][ T8754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1365'. [ 247.753879][ T8768] 9p: Bad value for 'rfdno' [ 248.563091][ T794] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 248.715219][ T794] usb 4-1: config index 0 descriptor too short (expected 88, got 18) [ 248.743183][ T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.765573][ T794] usb 4-1: config 0 has no interfaces? [ 248.771123][ T794] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 248.790918][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.824049][ T794] usb 4-1: config 0 descriptor?? [ 248.944276][ T8800] Zero length message leads to an empty skb [ 249.036217][ T793] usb 4-1: USB disconnect, device number 7 [ 251.021814][ T8846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1408'. [ 252.959743][ T8885] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1424'. [ 252.993254][ T5915] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 253.165280][ T5915] usb 2-1: config index 0 descriptor too short (expected 88, got 18) [ 253.181583][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.203077][ T5915] usb 2-1: config 0 has no interfaces? [ 253.208626][ T5915] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 253.233045][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.264765][ T5915] usb 2-1: config 0 descriptor?? [ 253.476084][ T5915] usb 2-1: USB disconnect, device number 11 [ 253.823798][ T8901] 9p: Bad value for 'rfdno' [ 254.271411][ T8925] 9p: Bad value for 'rfdno' [ 255.469884][ T8956] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1458'. [ 256.903204][ T5881] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 257.065937][ T5881] usb 2-1: config index 0 descriptor too short (expected 88, got 18) [ 257.078330][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.103582][ T5881] usb 2-1: config 0 has no interfaces? [ 257.109209][ T5881] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 257.131187][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.155725][ T5881] usb 2-1: config 0 descriptor?? [ 257.365632][ T5915] usb 2-1: USB disconnect, device number 12 [ 257.817934][ T9019] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1487'. [ 258.225586][ T9033] 9p: Bad value for 'rfdno' [ 258.331728][ T9041] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1498'. [ 258.494550][ T9050] tmpfs: Bad value for 'huge' [ 258.653737][ T5881] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 258.814950][ T5881] usb 1-1: config index 0 descriptor too short (expected 88, got 18) [ 258.826345][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.837992][ T5881] usb 1-1: config 0 has no interfaces? [ 258.843978][ T5881] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 258.853515][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.864705][ T5881] usb 1-1: config 0 descriptor?? [ 258.963050][ T5818] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 259.087281][ T5915] usb 1-1: USB disconnect, device number 8 [ 259.139121][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.160740][ T5818] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 259.180177][ T5818] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 259.199005][ T5818] usb 4-1: Manufacturer: syz [ 259.217144][ T5818] usb 4-1: config 0 descriptor?? [ 259.248360][ T5818] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 259.430076][ T5818] usb 4-1: USB disconnect, device number 8 [ 260.293346][ T9102] 9p: Bad value for 'rfdno' [ 260.930189][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.932886][ T9117] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1525'. [ 260.937574][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.340267][ T9125] 9p: Bad value for 'rfdno' [ 264.079181][ T9155] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1549'. [ 264.356759][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1557'. [ 264.964240][ T9177] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1564'. [ 266.878100][ T9200] 9p: Bad value for 'rfdno' [ 266.979383][ T9202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1578'. [ 267.781814][ T9234] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1591'. [ 268.342992][ T9255] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1602'. [ 268.999374][ T9279] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1614'. [ 269.573561][ T9287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1619'. [ 269.983034][ T5818] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 270.140127][ T5818] usb 4-1: config index 0 descriptor too short (expected 88, got 18) [ 270.148835][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.173109][ T5818] usb 4-1: config 0 has no interfaces? [ 270.178648][ T5818] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 270.214738][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.232618][ T5818] usb 4-1: config 0 descriptor?? [ 270.447942][ T5818] usb 4-1: USB disconnect, device number 9 [ 270.578951][ T9307] tmpfs: Bad value for 'huge' [ 270.808728][ T9311] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1625'. [ 271.252200][ T9321] 9p: Bad value for 'rfdno' [ 272.453019][ T5818] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 272.615215][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.636431][ T5818] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 272.662992][ T5818] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 272.681204][ T5818] usb 3-1: Manufacturer: syz [ 272.692340][ T5818] usb 3-1: config 0 descriptor?? [ 272.706752][ T5818] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 272.905911][ T5915] usb 3-1: USB disconnect, device number 7 [ 273.917736][ T9370] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1649'. [ 281.368107][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 283.663509][ T9537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1739'. [ 285.293082][ T5818] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 285.465321][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.484347][ T5818] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 285.506477][ T5818] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 285.522983][ T5818] usb 4-1: Manufacturer: syz [ 285.534203][ T5818] usb 4-1: config 0 descriptor?? [ 285.561464][ T5818] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 285.756740][ T5818] usb 4-1: USB disconnect, device number 10 [ 285.891152][ T9595] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 286.346960][ T9612] tmpfs: Bad value for 'huge' [ 287.091604][ T9643] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1789'. [ 287.224973][ T9651] 9p: Bad value for 'rfdno' [ 287.499386][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1802'. [ 287.704162][ T9675] 9p: Bad value for 'rfdno' [ 287.966799][ T9687] tmpfs: Bad value for 'huge' [ 288.355530][ T9704] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1819'. [ 288.554898][ T9708] tmpfs: Bad value for 'huge' [ 288.578386][ T9713] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 288.604470][ T9713] overlayfs: failed to resolve '/./file0': -2 [ 288.892033][ T9726] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1830'. [ 289.206109][ T9736] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 289.224602][ T9736] overlayfs: failed to resolve '/./file0': -2 [ 289.402031][ T9744] 9p: Bad value for 'rfdno' [ 289.762246][ T9760] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 289.787314][ T9760] overlayfs: failed to resolve '/./file0': -2 [ 289.916938][ T9766] 9p: Bad value for 'rfdno' [ 290.793056][ T5818] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 290.955848][ T5818] usb 3-1: config index 0 descriptor too short (expected 88, got 18) [ 290.974474][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.995022][ T5818] usb 3-1: config 0 has no interfaces? [ 291.010786][ T5818] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 291.030169][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.059233][ T5818] usb 3-1: config 0 descriptor?? [ 291.274408][ T5818] usb 3-1: USB disconnect, device number 8 [ 291.914716][ T9795] tmpfs: Bad value for 'huge' [ 294.183183][ T9853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1892'. [ 294.516771][ T9863] 9p: Bad value for 'rfdno' [ 295.373032][ T5915] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 295.546396][ T5915] usb 2-1: config index 0 descriptor too short (expected 88, got 18) [ 295.555527][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.580481][ T5915] usb 2-1: config 0 has no interfaces? [ 295.593036][ T5915] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 295.612476][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.636109][ T5915] usb 2-1: config 0 descriptor?? [ 295.849276][ T5818] usb 2-1: USB disconnect, device number 13 [ 296.824000][ T5915] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 296.980167][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.001626][ T5915] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 297.021160][ T5915] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 297.034840][ T5915] usb 2-1: Manufacturer: syz [ 297.046020][ T5915] usb 2-1: config 0 descriptor?? [ 297.075010][ T5915] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 297.277751][ T794] usb 2-1: USB disconnect, device number 14 [ 298.884396][ T9934] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1932'. [ 299.953129][ T9953] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1941'. [ 300.158551][ T9957] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 300.685402][ T9978] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 301.046813][ T9995] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1962'. [ 301.381248][T10007] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 301.401568][T10007] overlayfs: failed to resolve '/./file0': -2 [ 301.519447][T10017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1972'. [ 301.829526][T10034] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 301.857545][T10034] overlayfs: failed to resolve '/./file0': -2 [ 301.906071][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1983'. [ 302.631881][T10062] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 302.691230][T10062] overlayfs: failed to resolve '/./file0': -2 [ 303.311256][T10085] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2005'. [ 305.303933][T10099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2013'. [ 308.524965][T10127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2026'. [ 308.903104][ T794] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 309.064904][ T794] usb 3-1: config index 0 descriptor too short (expected 88, got 18) [ 309.073260][ T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.093300][ T794] usb 3-1: config 0 has no interfaces? [ 309.104363][ T794] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 309.124348][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.146292][ T794] usb 3-1: config 0 descriptor?? [ 309.368719][ T794] usb 3-1: USB disconnect, device number 9 [ 309.583731][ T5915] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 309.737743][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.754338][ T5915] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 309.763747][ T5915] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 309.771769][ T5915] usb 4-1: Manufacturer: syz [ 309.795774][ T5915] usb 4-1: config 0 descriptor?? [ 309.815926][ T5915] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 310.030194][ T5881] usb 4-1: USB disconnect, device number 11 [ 310.713152][ T5881] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 310.915475][ T5881] usb 3-1: config index 0 descriptor too short (expected 88, got 18) [ 310.939625][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.962531][ T5881] usb 3-1: config 0 has no interfaces? [ 310.971919][ T5881] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 310.991443][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.024321][ T5881] usb 3-1: config 0 descriptor?? [ 311.244370][ T5818] usb 3-1: USB disconnect, device number 10 [ 312.899962][T10202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2061'. [ 314.105466][T10223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2071'. [ 315.116143][T10248] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 316.423037][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 316.584513][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.633066][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 316.642162][ T24] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 316.663279][ T24] usb 4-1: Manufacturer: syz [ 316.676019][ T24] usb 4-1: config 0 descriptor?? [ 316.704950][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 316.888321][ T5881] usb 4-1: USB disconnect, device number 12 [ 317.576180][T10296] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 317.976973][T10313] 9p: Bad value for 'rfdno' [ 322.375922][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.382324][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.564156][ T5818] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 326.746058][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.764345][ T5818] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 326.793355][ T5818] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 326.823305][ T5818] usb 2-1: Manufacturer: syz [ 326.851355][ T5818] usb 2-1: config 0 descriptor?? [ 326.924048][ T5818] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 327.119343][ T794] usb 2-1: USB disconnect, device number 15 [ 328.746725][ T793] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 328.916099][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.946797][ T793] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 328.971629][ T793] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 329.002979][ T793] usb 2-1: Manufacturer: syz [ 329.015976][ T793] usb 2-1: config 0 descriptor?? [ 329.029596][ T793] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 329.239103][ T793] usb 2-1: USB disconnect, device number 16 [ 330.274095][T10532] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 330.839304][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.848257][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.868334][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.876531][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.884261][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.411761][T10540] chnl_net:caif_netlink_parms(): no params data found [ 331.858108][T10540] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.887398][T10540] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.896494][T10560] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 331.903330][T10540] bridge_slave_0: entered allmulticast mode [ 331.919670][T10540] bridge_slave_0: entered promiscuous mode [ 331.940732][T10540] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.958761][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.973271][T10540] bridge_slave_1: entered allmulticast mode [ 331.989617][T10540] bridge_slave_1: entered promiscuous mode [ 332.148655][T10540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.186949][T10540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.331498][T10540] team0: Port device team_slave_0 added [ 332.360512][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.417657][T10540] team0: Port device team_slave_1 added [ 332.601740][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.689509][T10540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.698898][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.826876][T10540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.893081][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.933139][ T5834] Bluetooth: hci4: command tx timeout [ 333.008515][T10540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.022997][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.093069][T10540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.354789][T10540] hsr_slave_0: entered promiscuous mode [ 333.361656][T10540] hsr_slave_1: entered promiscuous mode [ 333.390279][T10540] debugfs: 'hsr0' already exists in 'hsr' [ 333.406639][T10540] Cannot create hsr debugfs directory [ 333.455783][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.134822][ T79] bridge_slave_1: left allmulticast mode [ 334.140612][ T79] bridge_slave_1: left promiscuous mode [ 334.172194][T10586] tmpfs: Bad value for 'huge' [ 334.194680][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.319576][ T79] bridge_slave_0: left allmulticast mode [ 334.340284][ T79] bridge_slave_0: left promiscuous mode [ 334.345821][T10592] 9p: Bad value for 'rfdno' [ 334.368859][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.006521][ T5834] Bluetooth: hci4: command tx timeout [ 335.650630][T10615] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 335.814024][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.857222][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.876018][ T79] bond0 (unregistering): Released all slaves [ 336.257668][T10625] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2249'. [ 336.761988][ T79] hsr_slave_0: left promiscuous mode [ 336.779279][ T79] hsr_slave_1: left promiscuous mode [ 336.795580][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.811023][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.839768][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.853019][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.912476][ T79] veth1_macvtap: left promiscuous mode [ 336.943226][ T79] veth0_macvtap: left promiscuous mode [ 336.965242][ T79] veth1_vlan: left promiscuous mode [ 336.984407][ T79] veth0_vlan: left promiscuous mode [ 336.993016][ T5915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 337.084447][ T5834] Bluetooth: hci4: command tx timeout [ 337.655368][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.667135][ T5915] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 337.683049][ T5915] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 337.693144][ T5915] usb 2-1: Manufacturer: syz [ 337.713996][ T5915] usb 2-1: config 0 descriptor?? [ 337.756537][ T5915] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 337.934371][ T5915] usb 2-1: USB disconnect, device number 17 [ 338.056197][ T79] team0 (unregistering): Port device team_slave_1 removed [ 338.131985][ T79] team0 (unregistering): Port device team_slave_0 removed [ 338.599916][T10656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2258'. [ 338.837964][T10540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.870838][T10540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.885857][T10540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.913654][T10540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.173907][ T5834] Bluetooth: hci4: command tx timeout [ 339.195705][T10540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.249390][T10540] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.278022][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.285279][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.311557][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.318774][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.937780][T10540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.058742][T10540] veth0_vlan: entered promiscuous mode [ 340.080323][T10540] veth1_vlan: entered promiscuous mode [ 340.160852][T10719] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 340.176834][T10540] veth0_macvtap: entered promiscuous mode [ 340.227827][T10540] veth1_macvtap: entered promiscuous mode [ 340.281145][T10540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.315943][T10540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.350231][T10683] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.365406][T10683] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.413247][T10683] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.422026][T10683] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.616753][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.663941][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.748406][T10683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.790784][T10683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.944612][T10746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2284'. [ 341.091384][T10753] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 341.684344][T10777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2296'. [ 342.015518][ T5915] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 342.183136][ T5915] usb 2-1: device descriptor read/64, error -71 [ 342.433089][ T5915] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 342.603163][ T5915] usb 2-1: device descriptor read/64, error -71 [ 342.725035][ T5915] usb usb2-port1: attempt power cycle [ 343.073024][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 343.113523][ T5915] usb 2-1: device descriptor read/8, error -71 [ 343.373026][ T5915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 343.411597][ T5915] usb 2-1: device descriptor read/8, error -71 [ 343.523391][ T5915] usb usb2-port1: unable to enumerate USB device [ 345.143133][ T5881] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 345.349524][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.382424][ T5881] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 345.412887][ T5881] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 345.432951][ T5881] usb 1-1: Manufacturer: syz [ 345.444077][ T5881] usb 1-1: config 0 descriptor?? [ 345.465802][ T5881] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 345.659601][ T5915] usb 1-1: USB disconnect, device number 9 [ 348.333153][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 348.493067][ T5915] usb 4-1: device descriptor read/64, error -71 [ 348.733024][ T5915] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 348.893133][ T5915] usb 4-1: device descriptor read/64, error -71 [ 349.003385][ T5915] usb usb4-port1: attempt power cycle [ 349.343059][ T5915] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 349.394079][ T5915] usb 4-1: device descriptor read/8, error -71 [ 349.636126][ T5915] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 349.683578][ T5915] usb 4-1: device descriptor read/8, error -71 [ 349.806919][ T5915] usb usb4-port1: unable to enumerate USB device [ 352.403106][ T5915] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 352.563981][ T5915] usb 2-1: device descriptor read/64, error -71 [ 352.803122][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 353.023066][ T5915] usb 2-1: device descriptor read/64, error -71 [ 353.153245][ T5915] usb usb2-port1: attempt power cycle [ 353.523852][ T5915] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 353.563720][ T5915] usb 2-1: device descriptor read/8, error -71 [ 353.803934][ T5915] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 353.849902][ T5915] usb 2-1: device descriptor read/8, error -71 [ 353.929783][T10918] 9p: Bad value for 'rfdno' [ 353.973990][ T5915] usb usb2-port1: unable to enumerate USB device [ 354.244674][T10925] tmpfs: Bad value for 'huge' [ 355.675101][T10962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2383'. [ 356.386475][T10991] 9p: Bad value for 'rfdno' [ 356.542796][T10995] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2398'. [ 358.403589][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.416113][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.434241][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.449295][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.459257][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.327224][T11019] chnl_net:caif_netlink_parms(): no params data found [ 359.906531][T11019] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.933088][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.953866][T11019] bridge_slave_0: entered allmulticast mode [ 359.983318][T11019] bridge_slave_0: entered promiscuous mode [ 359.995003][T11019] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.023101][T11019] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.030413][T11019] bridge_slave_1: entered allmulticast mode [ 360.055225][T11019] bridge_slave_1: entered promiscuous mode [ 360.300341][T11019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.327133][T11019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.523064][ T5834] Bluetooth: hci3: command tx timeout [ 360.947718][T11019] team0: Port device team_slave_0 added [ 360.998894][ T1321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.117393][T11019] team0: Port device team_slave_1 added [ 361.175757][T11047] 9p: Bad value for 'rfdno' [ 361.312180][ T1321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.416650][T11019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.437879][T11019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.518456][T11019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.557838][T11019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.572959][T11019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.623052][T11019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.771858][ T1321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.960941][ T1321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.971318][T11059] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 362.055174][T11019] hsr_slave_0: entered promiscuous mode [ 362.072820][T11019] hsr_slave_1: entered promiscuous mode [ 362.079896][T11019] debugfs: 'hsr0' already exists in 'hsr' [ 362.093010][T11019] Cannot create hsr debugfs directory [ 362.433790][ T1321] bridge_slave_1: left allmulticast mode [ 362.439494][ T1321] bridge_slave_1: left promiscuous mode [ 362.483572][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.554105][ T1321] bridge_slave_0: left allmulticast mode [ 362.559805][ T1321] bridge_slave_0: left promiscuous mode [ 362.570074][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.603080][ T5834] Bluetooth: hci3: command tx timeout [ 363.183807][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.206918][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.225881][ T1321] bond0 (unregistering): Released all slaves [ 363.893721][ T1321] hsr_slave_0: left promiscuous mode [ 363.928326][ T1321] hsr_slave_1: left promiscuous mode [ 363.945363][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.952803][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.014004][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.021439][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.090647][ T1321] veth1_macvtap: left promiscuous mode [ 364.113030][ T1321] veth0_macvtap: left promiscuous mode [ 364.118779][ T1321] veth1_vlan: left promiscuous mode [ 364.145499][ T1321] veth0_vlan: left promiscuous mode [ 364.684464][ T5834] Bluetooth: hci3: command tx timeout [ 365.531576][ T1321] team0 (unregistering): Port device team_slave_1 removed [ 365.649918][ T1321] team0 (unregistering): Port device team_slave_0 removed [ 366.765419][ T5834] Bluetooth: hci3: command tx timeout [ 367.577304][T11019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.667601][T11019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.772590][T11019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 367.839616][T11019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.205099][T11019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.259195][T11019] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.301407][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.308610][T10683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.367180][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.374420][T10683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.061290][T11019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.221576][T11019] veth0_vlan: entered promiscuous mode [ 369.261797][T11019] veth1_vlan: entered promiscuous mode [ 369.362354][T11019] veth0_macvtap: entered promiscuous mode [ 369.401087][T11019] veth1_macvtap: entered promiscuous mode [ 369.465625][T11019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.529457][T11019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.560075][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.594452][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.664523][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.692997][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.922882][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.931074][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.011327][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.025883][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.290950][T11191] tmpfs: Bad value for 'huge' [ 371.021110][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.030638][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.038685][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.049883][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.058095][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.083156][ T5915] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 371.249120][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.274377][ T5915] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 371.293094][ T5915] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 371.301168][ T5915] usb 1-1: Manufacturer: syz [ 371.324231][ T5915] usb 1-1: config 0 descriptor?? [ 371.340135][ T5915] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 371.490608][T11212] chnl_net:caif_netlink_parms(): no params data found [ 371.553212][ T793] usb 1-1: USB disconnect, device number 10 [ 371.977406][T11212] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.003295][T11212] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.020847][T11212] bridge_slave_0: entered allmulticast mode [ 372.032736][T11212] bridge_slave_0: entered promiscuous mode [ 372.059319][T11212] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.072519][T11212] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.095489][T11212] bridge_slave_1: entered allmulticast mode [ 372.120215][T11212] bridge_slave_1: entered promiscuous mode [ 372.290714][T11212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.427981][T11212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.606762][T11212] team0: Port device team_slave_0 added [ 372.626974][T11212] team0: Port device team_slave_1 added [ 372.789457][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.845951][T11212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.863903][T11212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.943185][T11212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.033565][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.078371][T11212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.102043][T11212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.103045][ T5834] Bluetooth: hci2: command tx timeout [ 373.149277][T11212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.320690][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.554290][T11212] hsr_slave_0: entered promiscuous mode [ 373.569441][T11212] hsr_slave_1: entered promiscuous mode [ 373.585413][T11212] debugfs: 'hsr0' already exists in 'hsr' [ 373.591179][T11212] Cannot create hsr debugfs directory [ 373.624563][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.228903][ T13] bridge_slave_1: left allmulticast mode [ 374.253181][ T13] bridge_slave_1: left promiscuous mode [ 374.259107][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.297846][ T13] bridge_slave_0: left allmulticast mode [ 374.322949][ T13] bridge_slave_0: left promiscuous mode [ 374.329820][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.177149][ T5834] Bluetooth: hci2: command tx timeout [ 375.289762][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.326408][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.352505][ T13] bond0 (unregistering): Released all slaves [ 375.374315][ T794] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 375.546739][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.576596][ T794] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 375.608034][ T794] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 375.616547][ T794] usb 4-1: Manufacturer: syz [ 375.631638][ T794] usb 4-1: config 0 descriptor?? [ 375.666130][ T794] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 375.840282][ T13] hsr_slave_0: left promiscuous mode [ 375.850363][ T13] hsr_slave_1: left promiscuous mode [ 375.866551][ T794] usb 4-1: USB disconnect, device number 17 [ 375.868032][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.934805][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.954214][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.961675][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.007761][ T13] veth1_macvtap: left promiscuous mode [ 376.030734][ T13] veth0_macvtap: left promiscuous mode [ 376.044501][ T13] veth1_vlan: left promiscuous mode [ 376.051591][ T13] veth0_vlan: left promiscuous mode [ 377.007658][ T13] team0 (unregistering): Port device team_slave_1 removed [ 377.050898][ T13] team0 (unregistering): Port device team_slave_0 removed [ 377.244729][ T5834] Bluetooth: hci2: command tx timeout [ 377.453498][T11314] kthread_run failed with err -4 [ 378.089761][T11212] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.122060][T11212] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 378.147423][T11212] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 378.175106][T11212] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 378.225837][ T5818] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 378.296703][T11322] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 378.302965][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.1.2498 Not tainted syzkaller #0 PREEMPT(full) [ 378.312361][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.322433][T11322] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 378.327767][T11322] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 378.347400][T11322] RSP: 0018:ffffc900175cfd08 EFLAGS: 00010207 [ 378.353517][T11322] RAX: 1ffff1100c70e8bb RBX: ffff8880638745b0 RCX: 0000000000000000 [ 378.361511][T11322] RDX: 0000000000000000 RSI: ffffffff8da8b2a1 RDI: 00000000ffffffff [ 378.365574][T11212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.369498][T11322] RBP: 000000000000002e R08: ffffffff8fbf6d77 R09: 1ffffffff1f7edae [ 378.384147][T11322] R10: dffffc0000000000 R11: fffffbfff1f7edaf R12: 000000000000007c [ 378.392149][T11322] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 378.400141][T11322] FS: 00007f62285d46c0(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000 [ 378.409089][T11322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.415703][T11322] CR2: 00007fc849e8e43c CR3: 00000000789fc000 CR4: 00000000003526f0 [ 378.415738][T11212] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.423787][T11322] Call Trace: [ 378.423806][T11322] [ 378.423817][T11322] create_new_namespaces+0x47a/0x540 [ 378.423845][T11322] unshare_nsproxy_namespaces+0x11c/0x170 [ 378.423868][T11322] ksys_unshare+0x4c8/0x8c0 [ 378.423897][T11322] ? __pfx_ksys_unshare+0x10/0x10 [ 378.423929][T11322] __x64_sys_unshare+0x38/0x50 [ 378.423961][T11322] do_syscall_64+0xfa/0xfa0 [ 378.423985][T11322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.424006][T11322] ? clear_bhb_loop+0x60/0xb0 [ 378.424028][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.424048][T11322] RIP: 0033:0x7f622778f6c9 [ 378.424072][T11322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.424089][T11322] RSP: 002b:00007f62285d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 378.424111][T11322] RAX: ffffffffffffffda RBX: 00007f62279e5fa0 RCX: 00007f622778f6c9 [ 378.424126][T11322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062020680 [ 378.424139][T11322] RBP: 00007f6227811f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 378.424151][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.424163][T11322] R13: 00007f62279e6038 R14: 00007f62279e5fa0 R15: 00007ffe43334308 [ 378.424187][T11322] [ 378.424199][T11322] Modules linked in: [ 378.424989][T11322] ---[ end trace 0000000000000000 ]--- [ 378.464811][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.577766][T10683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.585186][T11322] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 378.593131][T11322] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 378.680679][T11322] RSP: 0018:ffffc900175cfd08 EFLAGS: 00010207 [ 378.690661][T11322] RAX: 1ffff1100c70e8bb RBX: ffff8880638745b0 RCX: 0000000000000000 [ 378.698915][T11322] RDX: 0000000000000000 RSI: ffffffff8da8b2a1 RDI: 00000000ffffffff [ 378.708530][T11322] RBP: 000000000000002e R08: ffffffff8fbf6d77 R09: 1ffffffff1f7edae [ 378.716742][T11322] R10: dffffc0000000000 R11: fffffbfff1f7edaf R12: 000000000000007c [ 378.744656][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.751808][T10683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.819258][T11322] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 378.974731][T11322] FS: 00007f62285d46c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 379.091369][T11322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.143322][T11322] CR2: 00007ffea3f1bd34 CR3: 00000000789fc000 CR4: 00000000003526f0 [ 379.172984][T11322] Kernel panic - not syncing: Fatal exception [ 379.179450][T11322] Kernel Offset: disabled [ 379.183781][T11322] Rebooting in 86400 seconds..