last executing test programs: 11.199920059s ago: executing program 1 (id=10025): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4048814) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 11.04924364s ago: executing program 1 (id=10026): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000006000)={0x0, 0x0, 0x0}, 0x28000) 10.90885613s ago: executing program 1 (id=10027): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.609370805s ago: executing program 2 (id=10033): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 9.467794302s ago: executing program 2 (id=10035): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={0x0, 0x44}}, 0x28000) 9.360774173s ago: executing program 2 (id=10037): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.732200252s ago: executing program 1 (id=10041): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="53cd1aca6e8bd9fbb40916f97078f44876a6e738448f9a395d1ad83a5314bcbb8bb76b1c2e443eec36228f8eeba115001ea3d8120871e006f075bd272de13badeb5ced8cec0f80c373812f3abb2b78a93389a38b1dbf67b5d953f73ef9f876172ec2dcc1fb3f5d3bcc2628fa4c7fefbecab8", 0x72}], 0x1, 0x3, 0xaf6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4) 7.620048272s ago: executing program 2 (id=10048): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x1, 0x4008080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) 6.716222083s ago: executing program 2 (id=10050): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 6.632756302s ago: executing program 2 (id=10051): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40005) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x18000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) madvise(&(0x7f000045c000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000aa3000/0x1000)=nil) 5.592209872s ago: executing program 1 (id=10057): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4048814) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 2.921426131s ago: executing program 1 (id=10065): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000440), 0x0, 0x8014) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.752341507s ago: executing program 3 (id=10068): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00), 0x0, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) 1.564167112s ago: executing program 3 (id=10069): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.437828121s ago: executing program 3 (id=10070): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x1, 0x4008080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) 1.316675403s ago: executing program 3 (id=10071): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x8018) 1.140302774s ago: executing program 3 (id=10072): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40005) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x18000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) madvise(&(0x7f000045c000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.093815378s ago: executing program 3 (id=10074): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="53cd1aca6e8bd9fbb40916f97078f44876a6e738448f9a395d1ad83a5314bcbb8bb76b1c2e443eec36228f8eeba115001ea3d8120871e006f075bd272de13badeb5ced8cec0f80c373812f3abb2b78a93389a38b1dbf67b5d953f73ef9f876172ec2dcc1fb3f5d3bcc2628fa4c7fefbecab8", 0x72}], 0x1, 0x3, 0xaf6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4) 964.149295ms ago: executing program 0 (id=10076): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 868.273005ms ago: executing program 0 (id=10077): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 390.366758ms ago: executing program 0 (id=10078): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 287.174735ms ago: executing program 0 (id=10079): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 104.171393ms ago: executing program 0 (id=10080): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x1000, &(0x7f00000001c0)={[0x2e9000]}, 0x8) 0s ago: executing program 0 (id=10081): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x1, 0x4008080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) kernel console output (not intermixed with test programs): yz.2.4631': attribute type 4 has an invalid length. [ 583.971151][ T794] usb 4-1: config index 0 descriptor too short (expected 88, got 18) [ 583.979815][ T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.990620][T15958] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4631'. [ 584.001045][ T794] usb 4-1: config 0 has no interfaces? [ 584.016159][ T794] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 584.032209][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.057761][ T794] usb 4-1: config 0 descriptor?? [ 584.272192][ T794] usb 4-1: USB disconnect, device number 5 [ 586.956163][ T794] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 587.137562][ T794] usb 1-1: config index 0 descriptor too short (expected 88, got 18) [ 587.145698][ T794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.190800][ T794] usb 1-1: config 0 has no interfaces? [ 587.206168][ T794] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 587.215238][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.266904][ T794] usb 1-1: config 0 descriptor?? [ 587.477212][T15987] netlink: 'syz.3.4644': attribute type 4 has an invalid length. [ 587.501613][ T794] usb 1-1: USB disconnect, device number 2 [ 587.511281][T15987] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4644'. [ 588.972481][T16012] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4660'. [ 592.817811][T16059] netlink: 'syz.3.4682': attribute type 17 has an invalid length. [ 593.342022][T16071] netlink: 'syz.2.4688': attribute type 4 has an invalid length. [ 593.349975][T16071] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4688'. [ 593.405518][T16073] binder: Unknown parameter 'm' [ 593.666177][T16079] mmap: syz.2.4692 (16079) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 594.507472][T16097] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4702'. [ 595.359352][T16115] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4711'. [ 595.848991][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4717'. [ 596.138821][T16139] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4722'. [ 596.272498][T16143] binder: Unknown parameter 'm' [ 596.486893][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4728'. [ 596.747554][T16157] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4732'. [ 596.896714][T16162] binder: Unknown parameter 'm' [ 597.199979][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4740'. [ 597.409893][T16185] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4744'. [ 597.860735][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4751'. [ 598.003630][T16205] netlink: 'syz.0.4754': attribute type 17 has an invalid length. [ 598.516522][T16225] __nla_validate_parse: 1 callbacks suppressed [ 598.516540][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4763'. [ 598.624022][T16230] binder: Unknown parameter 'm' [ 599.362840][T16263] netlink: 'syz.3.4782': attribute type 17 has an invalid length. [ 600.360191][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.372983][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.381366][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.389436][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.397567][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.213719][T11053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.277544][T16286] chnl_net:caif_netlink_parms(): no params data found [ 601.497878][T11053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.600670][T11053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.809064][T11053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.855003][T16286] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.879100][T16286] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.916225][T16286] bridge_slave_0: entered allmulticast mode [ 601.924167][T16286] bridge_slave_0: entered promiscuous mode [ 601.952203][T16286] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.976165][T16286] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.986167][T16286] bridge_slave_1: entered allmulticast mode [ 601.994040][T16286] bridge_slave_1: entered promiscuous mode [ 602.171847][T16286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.239442][T16286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.410957][T16286] team0: Port device team_slave_0 added [ 602.421740][T16286] team0: Port device team_slave_1 added [ 602.437103][T14408] Bluetooth: hci4: command tx timeout [ 602.624831][T16286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.638104][T16286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.673174][T16286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.690003][T16286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.698703][T16286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.725137][T16286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.746341][T11053] bridge_slave_1: left allmulticast mode [ 602.752122][T11053] bridge_slave_1: left promiscuous mode [ 602.763553][T11053] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.774077][T11053] bridge_slave_0: left allmulticast mode [ 602.782613][T11053] bridge_slave_0: left promiscuous mode [ 602.789474][T11053] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.423258][T11053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.444587][T11053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.470130][T11053] bond0 (unregistering): Released all slaves [ 603.650189][T16286] hsr_slave_0: entered promiscuous mode [ 603.667865][T16286] hsr_slave_1: entered promiscuous mode [ 603.674410][T16286] debugfs: 'hsr0' already exists in 'hsr' [ 603.695971][T16286] Cannot create hsr debugfs directory [ 603.793131][T16309] binder: Unknown parameter 'm' [ 603.826012][ T794] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 603.987718][ T794] usb 3-1: config index 0 descriptor too short (expected 88, got 18) [ 603.998716][ T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.020207][ T794] usb 3-1: config 0 has no interfaces? [ 604.033000][ T794] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 604.065073][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.104514][ T794] usb 3-1: config 0 descriptor?? [ 604.109709][T11053] hsr_slave_0: left promiscuous mode [ 604.119306][T11053] hsr_slave_1: left promiscuous mode [ 604.137260][T11053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.154925][T11053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.175323][T11053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.185346][T11053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.278437][T11053] veth1_macvtap: left promiscuous mode [ 604.284519][T11053] veth0_macvtap: left promiscuous mode [ 604.297060][T11053] veth1_vlan: left promiscuous mode [ 604.302455][T11053] veth0_vlan: left promiscuous mode [ 604.336771][ T794] usb 3-1: USB disconnect, device number 3 [ 604.518506][T14408] Bluetooth: hci4: command tx timeout [ 605.418300][T11053] team0 (unregistering): Port device team_slave_1 removed [ 605.507618][T11053] team0 (unregistering): Port device team_slave_0 removed [ 606.396902][T16342] binder: Unknown parameter 'm' [ 606.597753][T14408] Bluetooth: hci4: command tx timeout [ 607.061243][T16286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 607.084377][T16286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 607.127637][T16286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 607.150076][T16286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 607.334371][T16286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.390244][T16286] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.430468][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.437720][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.485126][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.492405][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.042907][T16286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.153234][T16286] veth0_vlan: entered promiscuous mode [ 608.176972][T16286] veth1_vlan: entered promiscuous mode [ 608.252764][T16286] veth0_macvtap: entered promiscuous mode [ 608.266636][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 608.282715][T16286] veth1_macvtap: entered promiscuous mode [ 608.331670][T16286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.369639][T16286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.413869][ T999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.440589][ T999] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.447644][ T5876] usb 3-1: config index 0 descriptor too short (expected 88, got 18) [ 608.466505][ T999] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.467859][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.510763][ T999] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.527129][ T5876] usb 3-1: config 0 has no interfaces? [ 608.532681][ T5876] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 608.573266][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.604035][ T5876] usb 3-1: config 0 descriptor?? [ 608.676163][T14408] Bluetooth: hci4: command tx timeout [ 608.718972][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.746325][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.820666][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.837836][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.847133][ T5876] usb 3-1: USB disconnect, device number 4 [ 610.589144][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4822'. [ 612.787300][T16456] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4828'. [ 612.948529][T16461] netlink: 'syz.3.4831': attribute type 4 has an invalid length. [ 612.966931][T16461] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4831'. [ 613.145964][ T5826] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 613.296948][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 613.337769][ T5826] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 613.346218][ T5826] usb 3-1: config 179 has no interface number 0 [ 613.356058][ T5826] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 613.400872][ T5826] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 613.416481][ T5826] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 613.429088][ T5826] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 613.441809][ T5826] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 613.466247][ T5826] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 613.479105][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.501797][T16458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 613.721964][ T5876] usb 3-1: USB disconnect, device number 5 [ 613.722053][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 613.737335][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 616.863016][T16544] binder: Unknown parameter 'm' [ 617.970114][T16587] binder: Unknown parameter 'm' [ 618.374078][T16599] netlink: 'syz.0.4895': attribute type 4 has an invalid length. [ 618.381955][T16599] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4895'. [ 620.326858][T16612] netlink: 'syz.1.4901': attribute type 17 has an invalid length. [ 621.466204][T16642] netlink: 'syz.0.4906': attribute type 4 has an invalid length. [ 621.474164][T16642] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4906'. [ 621.897510][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 621.909065][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 621.927237][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 621.935412][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 621.943515][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 622.368368][T16651] chnl_net:caif_netlink_parms(): no params data found [ 622.567910][T16651] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.582573][T16651] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.596283][T16651] bridge_slave_0: entered allmulticast mode [ 622.608028][T16651] bridge_slave_0: entered promiscuous mode [ 622.617712][T16651] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.626222][T16651] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.633818][T16651] bridge_slave_1: entered allmulticast mode [ 622.642194][T16651] bridge_slave_1: entered promiscuous mode [ 622.734684][T16651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.763751][T16651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.969967][T16651] team0: Port device team_slave_0 added [ 622.989022][T16651] team0: Port device team_slave_1 added [ 623.066238][T16676] netlink: 'syz.0.4926': attribute type 17 has an invalid length. [ 623.096709][T16651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.114558][T16651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.172497][T16651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.267198][T16651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.279370][T16651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.308411][T16651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.520354][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.577670][T16651] hsr_slave_0: entered promiscuous mode [ 623.594872][T16651] hsr_slave_1: entered promiscuous mode [ 623.614929][T16651] debugfs: 'hsr0' already exists in 'hsr' [ 623.620990][T16651] Cannot create hsr debugfs directory [ 623.669551][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.817717][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.943905][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.036259][T14408] Bluetooth: hci2: command tx timeout [ 624.366743][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.373129][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.517310][ T49] bridge_slave_1: left allmulticast mode [ 624.523889][ T49] bridge_slave_1: left promiscuous mode [ 624.547445][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.561715][ T49] bridge_slave_0: left allmulticast mode [ 624.569621][ T49] bridge_slave_0: left promiscuous mode [ 624.575416][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.697981][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.719095][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.740932][ T49] bond0 (unregistering): Released all slaves [ 626.116017][T14408] Bluetooth: hci2: command tx timeout [ 626.473334][ T49] hsr_slave_0: left promiscuous mode [ 626.505951][ T49] hsr_slave_1: left promiscuous mode [ 626.528284][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.552270][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.588602][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.615028][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.683108][ T49] veth1_macvtap: left promiscuous mode [ 626.694688][ T49] veth0_macvtap: left promiscuous mode [ 626.705252][ T49] veth1_vlan: left promiscuous mode [ 626.734735][ T49] veth0_vlan: left promiscuous mode [ 626.926292][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4961'. [ 627.614330][ T49] team0 (unregistering): Port device team_slave_1 removed [ 627.658546][ T49] team0 (unregistering): Port device team_slave_0 removed [ 628.195987][T14408] Bluetooth: hci2: command tx timeout [ 628.252384][T16651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 628.312988][T16651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 628.350422][T16651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 628.364279][T16651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 628.587882][T16651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.643742][T16651] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.725775][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.733042][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.814118][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.821381][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.520712][T16651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.681294][T16651] veth0_vlan: entered promiscuous mode [ 629.718957][T16651] veth1_vlan: entered promiscuous mode [ 629.801932][T16651] veth0_macvtap: entered promiscuous mode [ 629.838980][T16651] veth1_macvtap: entered promiscuous mode [ 629.889254][T16651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.925714][T16651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.966737][ T3525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.975609][ T3525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.057179][ T3525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.074336][ T3525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.276080][T14408] Bluetooth: hci2: command tx timeout [ 630.284648][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.356039][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.447519][T11053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.456858][T11053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.682016][T16887] binder: Unknown parameter 'm' [ 631.186604][T16900] netlink: 'syz.0.5000': attribute type 17 has an invalid length. [ 631.732239][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 631.756318][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 631.765140][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 631.817307][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 631.826025][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 632.548869][T16913] chnl_net:caif_netlink_parms(): no params data found [ 632.998079][T16913] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.006362][T16913] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.013854][T16913] bridge_slave_0: entered allmulticast mode [ 633.038513][T16913] bridge_slave_0: entered promiscuous mode [ 633.048452][T16913] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.055823][T16913] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.081907][T16913] bridge_slave_1: entered allmulticast mode [ 633.090596][T16913] bridge_slave_1: entered promiscuous mode [ 633.135213][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5009'. [ 633.297911][T16913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.344845][T16928] netlink: 'syz.3.5010': attribute type 17 has an invalid length. [ 633.407219][T16913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.585698][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.727115][T16913] team0: Port device team_slave_0 added [ 633.771232][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.803379][T16913] team0: Port device team_slave_1 added [ 633.878864][ T5835] Bluetooth: hci3: command tx timeout [ 634.067942][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.147116][T16913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.154096][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.233538][T16913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.289106][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.377090][T16913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.384064][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.437913][T16913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.684311][T16913] hsr_slave_0: entered promiscuous mode [ 634.691801][T16913] hsr_slave_1: entered promiscuous mode [ 635.096301][ T60] bridge_slave_1: left allmulticast mode [ 635.101989][ T60] bridge_slave_1: left promiscuous mode [ 635.128084][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.191375][ T60] bridge_slave_0: left allmulticast mode [ 635.218401][ T60] bridge_slave_0: left promiscuous mode [ 635.224228][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.956049][ T5835] Bluetooth: hci3: command tx timeout [ 636.346474][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.371017][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.408132][ T60] bond0 (unregistering): Released all slaves [ 636.959541][ T60] hsr_slave_0: left promiscuous mode [ 636.986194][ T60] hsr_slave_1: left promiscuous mode [ 636.992580][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.016030][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.046906][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.054322][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.123591][ T60] veth1_macvtap: left promiscuous mode [ 637.146547][ T60] veth0_macvtap: left promiscuous mode [ 637.152351][ T60] veth1_vlan: left promiscuous mode [ 637.186060][ T60] veth0_vlan: left promiscuous mode [ 637.380907][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5021'. [ 638.036086][ T5835] Bluetooth: hci3: command tx timeout [ 638.214472][ T60] team0 (unregistering): Port device team_slave_1 removed [ 638.288886][ T60] team0 (unregistering): Port device team_slave_0 removed [ 638.948090][T16989] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5027'. [ 639.592604][T17014] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5035'. [ 639.620602][T16913] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 639.673517][T16913] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 639.686950][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5036'. [ 639.705515][T16913] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 639.751758][T16913] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 639.975774][T16913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.031200][T16913] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.074860][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.082106][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.116001][ T5835] Bluetooth: hci3: command tx timeout [ 640.140818][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.148050][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.298540][T17048] netlink: 'syz.3.5045': attribute type 4 has an invalid length. [ 640.341477][T17048] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5045'. [ 640.497871][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5048'. [ 640.663214][T16913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.795649][T16913] veth0_vlan: entered promiscuous mode [ 640.827937][T16913] veth1_vlan: entered promiscuous mode [ 640.903698][T16913] veth0_macvtap: entered promiscuous mode [ 640.932870][T16913] veth1_macvtap: entered promiscuous mode [ 640.987289][T16913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.033141][T16913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.077147][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.093416][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.152220][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.192784][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.362672][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.388973][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.539660][T11053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.575121][T11053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.800576][T17120] netlink: 'syz.1.5070': attribute type 17 has an invalid length. [ 644.055472][ T793] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 644.224226][ T793] usb 3-1: config index 0 descriptor too short (expected 88, got 18) [ 644.244951][ T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.265448][ T793] usb 3-1: config 0 has no interfaces? [ 644.275591][ T793] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 644.295946][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.314509][ T793] usb 3-1: config 0 descriptor?? [ 644.325990][ T30] audit: type=1326 audit(1763355892.913:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.1.5096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69c898f6c9 code=0x0 [ 644.368327][T17194] netlink: 'syz.3.5097': attribute type 17 has an invalid length. [ 644.580152][ T793] usb 3-1: USB disconnect, device number 6 [ 645.186065][T17215] netlink: 'syz.3.5106': attribute type 4 has an invalid length. [ 645.193918][T17215] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5106'. [ 645.843994][T17236] netlink: 'syz.2.5117': attribute type 4 has an invalid length. [ 645.885954][T17236] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5117'. [ 645.926022][ T793] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 646.078731][ T793] usb 1-1: config index 0 descriptor too short (expected 88, got 18) [ 646.098059][ T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.117219][ T793] usb 1-1: config 0 has no interfaces? [ 646.127966][ T793] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 646.146099][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.175422][ T793] usb 1-1: config 0 descriptor?? [ 646.404080][ T5883] usb 1-1: USB disconnect, device number 3 [ 647.885977][T17258] netlink: 'syz.0.5129': attribute type 17 has an invalid length. [ 648.377531][ T30] audit: type=1326 audit(1763355896.983:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.1.5136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69c898f6c9 code=0x0 [ 648.534901][T17277] netlink: 'syz.1.5139': attribute type 17 has an invalid length. [ 648.943872][ T30] audit: type=1326 audit(1763355897.533:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.2.5147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f363978f6c9 code=0x0 [ 649.092247][T17301] netlink: 'syz.2.5149': attribute type 17 has an invalid length. [ 650.928145][ T793] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 651.098589][ T793] usb 4-1: config index 0 descriptor too short (expected 88, got 18) [ 651.106937][ T793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.136089][ T793] usb 4-1: config 0 has no interfaces? [ 651.141630][ T793] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 651.165977][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.192832][ T793] usb 4-1: config 0 descriptor?? [ 651.422381][ T5883] usb 4-1: USB disconnect, device number 6 [ 653.285930][ T5883] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 653.458386][ T5883] usb 4-1: config index 0 descriptor too short (expected 88, got 18) [ 653.466789][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.483542][ T5883] usb 4-1: config 0 has no interfaces? [ 653.493713][ T5883] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 653.513760][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.542278][ T5883] usb 4-1: config 0 descriptor?? [ 653.761389][ T5883] usb 4-1: USB disconnect, device number 7 [ 657.689169][ T30] audit: type=1326 audit(1763355906.293:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17454 comm="syz.1.5225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69c898f6c9 code=0x0 [ 657.887820][T17465] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5230'. [ 658.044443][T17473] 9p: Unknown access argument a: -22 [ 658.144143][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5235'. [ 658.171143][T17479] netlink: 'syz.0.5237': attribute type 4 has an invalid length. [ 658.179070][T17479] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5237'. [ 658.366986][T17489] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5241'. [ 658.807992][T17517] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5253'. [ 658.818034][ T5890] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 658.981963][ T5890] usb 2-1: config index 0 descriptor too short (expected 28504, got 18) [ 658.995950][ T5890] usb 2-1: config 15 has too many interfaces: 240, using maximum allowed: 32 [ 659.015068][ T5890] usb 2-1: config 15 has an invalid descriptor of length 34, skipping remainder of the config [ 659.032664][ T5890] usb 2-1: config 15 has 0 interfaces, different from the descriptor's value: 240 [ 659.052603][ T5890] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 659.072060][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.310534][ T5890] usb 2-1: string descriptor 0 read error: -71 [ 659.326389][ T5890] usb 2-1: USB disconnect, device number 4 [ 659.358137][T17537] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5263'. [ 659.903711][T17555] 9p: Unknown access argument a: -22 [ 660.070874][T17561] netlink: 'syz.1.5274': attribute type 4 has an invalid length. [ 660.087046][T17561] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5274'. [ 660.499201][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5283'. [ 660.626088][ T793] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 660.780773][ T793] usb 1-1: config index 0 descriptor too short (expected 28504, got 18) [ 660.789705][ T793] usb 1-1: config 15 has too many interfaces: 240, using maximum allowed: 32 [ 660.819306][ T793] usb 1-1: config 15 has an invalid descriptor of length 34, skipping remainder of the config [ 660.850376][ T793] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 240 [ 660.875961][ T793] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 660.885154][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.971474][ T30] audit: type=1326 audit(1763355909.573:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17589 comm="syz.3.5289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84e98f6c9 code=0x0 [ 661.116020][ T793] usb 1-1: string descriptor 0 read error: -71 [ 661.159934][ T793] usb 1-1: USB disconnect, device number 4 [ 661.206810][T17598] netlink: 'syz.3.5292': attribute type 17 has an invalid length. [ 661.277081][T17600] 9p: Unknown access argument a: -22 [ 661.718164][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5300'. [ 662.625586][ T30] audit: type=1326 audit(1763355911.223:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.5314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaf738f6c9 code=0x0 [ 664.443765][T17676] netlink: 'syz.2.5330': attribute type 17 has an invalid length. [ 665.244582][T17695] netlink: 'syz.3.5339': attribute type 17 has an invalid length. [ 665.800517][T17707] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5345'. [ 668.925910][ T5914] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 669.137403][ T5914] usb 1-1: config index 0 descriptor too short (expected 88, got 18) [ 669.145621][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.168205][ T5914] usb 1-1: config 0 has no interfaces? [ 669.173733][ T5914] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 669.203363][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.234837][ T5914] usb 1-1: config 0 descriptor?? [ 669.451257][ T5914] usb 1-1: USB disconnect, device number 5 [ 669.651411][T17750] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5363'. [ 672.227355][T17768] netlink: 'syz.1.5373': attribute type 17 has an invalid length. [ 672.791489][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5372'. [ 675.247886][T17784] netlink: 'syz.2.5380': attribute type 4 has an invalid length. [ 675.267122][T17784] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5380'. [ 675.706472][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 675.870518][ T5914] usb 2-1: config index 0 descriptor too short (expected 88, got 18) [ 675.889118][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.895175][T17807] netlink: 'syz.0.5390': attribute type 17 has an invalid length. [ 675.905877][ T5914] usb 2-1: config 0 has no interfaces? [ 675.918977][ T5914] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 675.932552][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.948777][ T5914] usb 2-1: config 0 descriptor?? [ 676.184781][ T5890] usb 2-1: USB disconnect, device number 5 [ 676.539596][T17839] netlink: 'syz.3.5405': attribute type 4 has an invalid length. [ 676.570835][T17839] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5405'. [ 677.121110][T17868] netlink: 'syz.1.5419': attribute type 4 has an invalid length. [ 677.129153][T17868] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5419'. [ 677.575559][T17890] 9p: Unknown access argument a: -22 [ 677.993123][T17911] netlink: 'syz.0.5440': attribute type 17 has an invalid length. [ 678.230566][T17919] 9p: Unknown access argument a: -22 [ 679.679842][T17937] netlink: 'syz.3.5452': attribute type 17 has an invalid length. [ 681.097335][T17947] batadv_slave_1: entered promiscuous mode [ 681.125808][T17947] batadv_slave_1: left promiscuous mode [ 681.382861][T17957] 9p: Unknown access argument a: -22 [ 681.497791][T17961] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5463'. [ 684.483660][T17993] netlink: 'syz.2.5479': attribute type 17 has an invalid length. [ 685.805035][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.811549][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.425247][T18051] netlink: 'syz.0.5506': attribute type 17 has an invalid length. [ 688.729745][T18060] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5510'. [ 689.533999][T18088] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5521'. [ 691.026558][T18132] netlink: 'syz.3.5542': attribute type 4 has an invalid length. [ 691.077762][T18132] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5542'. [ 691.279474][T18138] netlink: 'syz.1.5545': attribute type 17 has an invalid length. [ 691.704132][T18153] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5555'. [ 692.526278][T18170] 9p: Unknown access argument a: -22 [ 692.914457][T18177] overlayfs: missing 'lowerdir' [ 692.996881][T14408] Bluetooth: hci0: command 0x0406 tx timeout [ 693.517084][T18189] netlink: 'syz.0.5569': attribute type 17 has an invalid length. [ 693.873824][ T30] audit: type=1326 audit(1763355942.473:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.0.5573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaf738f6c9 code=0x0 [ 695.199734][T18234] 9p: Unknown access argument a: -22 [ 699.090870][T18281] 9p: Unknown access argument a: -22 [ 699.772083][T18307] overlayfs: missing 'workdir' [ 700.698740][T18335] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5639'. [ 701.266865][T18354] netlink: 'syz.0.5649': attribute type 17 has an invalid length. [ 701.830717][T18372] netlink: 'syz.0.5659': attribute type 17 has an invalid length. [ 701.942725][T18376] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 701.961626][T18376] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 702.122698][T18386] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5664'. [ 702.380212][T18395] netlink: 'syz.2.5669': attribute type 17 has an invalid length. [ 702.495289][T18402] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 702.517976][T18402] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 702.959223][ T30] audit: type=1326 audit(1763355951.563:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18419 comm="syz.3.5680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84e98f6c9 code=0x0 [ 705.574640][ T30] audit: type=1326 audit(1763355954.173:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18451 comm="syz.1.5691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69c898f6c9 code=0x0 [ 705.752729][T18455] netlink: 'syz.2.5693': attribute type 17 has an invalid length. [ 706.598814][ T30] audit: type=1326 audit(1763355955.203:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18470 comm="syz.1.5705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69c898f6c9 code=0x0 [ 709.024977][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5721'. [ 709.054444][T18506] bridge_slave_1: left allmulticast mode [ 709.074589][T18506] bridge_slave_1: left promiscuous mode [ 709.105389][T18506] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.206247][T18506] bridge_slave_0: left allmulticast mode [ 709.218573][T18506] bridge_slave_0: left promiscuous mode [ 709.243591][T18506] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.401683][T18511] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5723'. [ 712.830735][T18554] capability: warning: `syz.3.5743' uses deprecated v2 capabilities in a way that may be insecure [ 713.114210][T18558] netlink: 'syz.3.5745': attribute type 17 has an invalid length. [ 713.976278][T18576] netlink: 'syz.1.5754': attribute type 17 has an invalid length. [ 717.236675][T18613] 9p: Unknown access argument a: -22 [ 720.518291][T18686] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5806'. [ 720.952682][ T30] audit: type=1326 audit(1763355969.553:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.2.5810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f363978f6c9 code=0x0 [ 721.511539][T18712] overlayfs: failed to resolve './file1': -2 [ 721.821449][T18718] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5822'. [ 723.254003][T18760] netlink: 'syz.0.5840': attribute type 17 has an invalid length. [ 723.720004][T14408] Bluetooth: hci4: command 0x0406 tx timeout [ 723.953893][T18771] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5846'. [ 727.487846][ T30] audit: type=1326 audit(1763355976.093:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.3.5882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84e98f6c9 code=0x0 [ 727.691309][T18850] netlink: 'syz.3.5883': attribute type 17 has an invalid length. [ 728.714361][ T30] audit: type=1326 audit(1763355977.313:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18863 comm="syz.3.5891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84e98f6c9 code=0x0 [ 731.075173][T18888] netlink: 'syz.1.5901': attribute type 17 has an invalid length. [ 732.786603][T18912] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5912'. [ 733.032844][T18916] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5914'. [ 733.196613][T18922] netlink: 'syz.2.5917': attribute type 11 has an invalid length. [ 733.204666][T18922] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5917'. [ 733.722756][T18939] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5924'. [ 737.700723][ T30] audit: type=1326 audit(1763355986.303:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19019 comm="syz.3.5965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84e98f6c9 code=0x0 [ 738.302340][T19032] netlink: 'syz.3.5970': attribute type 17 has an invalid length. [ 739.089913][T19053] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5981'. [ 739.701010][T19070] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5988'. [ 741.847025][T19113] 9p: Unknown access argument a: -22 [ 741.892240][T19115] netlink: 'syz.1.6010': attribute type 11 has an invalid length. [ 741.924451][T19115] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6010'. [ 744.197328][T14408] Bluetooth: hci2: command 0x0406 tx timeout [ 744.258487][T19145] netlink: 'syz.3.6027': attribute type 11 has an invalid length. [ 744.266502][T19145] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6027'. [ 745.054898][T19168] netlink: 'syz.3.6036': attribute type 11 has an invalid length. [ 745.069901][T19168] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6036'. [ 747.249603][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.255988][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.942974][T19200] netlink: 'syz.2.6051': attribute type 11 has an invalid length. [ 748.006126][T19200] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6051'. [ 748.632152][T19225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6062'. [ 749.408801][T19239] netlink: 'syz.3.6069': attribute type 11 has an invalid length. [ 749.425908][T19239] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6069'. [ 751.587386][T19254] netlink: 268 bytes leftover after parsing attributes in process `syz.1.6076'. [ 751.799327][T19256] batadv_slave_1: entered promiscuous mode [ 751.827211][T19255] batadv_slave_1: left promiscuous mode [ 752.344977][T19273] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6084'. [ 752.605934][ T5826] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 752.757792][ T5826] usb 1-1: config index 0 descriptor too short (expected 88, got 18) [ 752.766314][ T5826] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.787950][ T5826] usb 1-1: config 0 has no interfaces? [ 752.793487][ T5826] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 752.822915][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.846593][ T5826] usb 1-1: config 0 descriptor?? [ 753.120062][ T5876] usb 1-1: USB disconnect, device number 6 [ 753.917445][T19290] netlink: 'syz.0.6092': attribute type 11 has an invalid length. [ 753.925309][T19290] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6092'. [ 754.071930][ T30] audit: type=1326 audit(1763356002.673:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19294 comm="syz.0.6093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaf738f6c9 code=0x0 [ 754.436254][T14408] Bluetooth: hci3: command 0x0406 tx timeout [ 754.834345][T19316] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6103'. [ 755.592151][T19330] 9p: Unknown access argument a: -22 [ 758.232257][T19348] netlink: 'syz.0.6119': attribute type 17 has an invalid length. [ 758.365586][ T30] audit: type=1326 audit(1763356006.963:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19351 comm="syz.0.6121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaf738f6c9 code=0x0 [ 758.978638][T19358] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6123'. [ 759.701357][ T30] audit: type=1326 audit(1763356008.303:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.2.6132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f363978f6c9 code=0x0 [ 761.148507][ T30] audit: type=1326 audit(1763356009.753:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19394 comm="syz.0.6141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaf738f6c9 code=0x0 [ 761.564826][T19404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6145'. [ 762.419271][ T30] audit: type=1326 audit(1763356011.023:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19413 comm="syz.0.6152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaf738f6c9 code=0x0 [ 762.690497][T19421] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6154'. [ 763.108453][T19433] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6158'. [ 763.114598][T19432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6159'. [ 763.567732][T19446] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6165'. [ 764.079578][T19462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6172'. [ 764.488298][T19471] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6177'. [ 765.085977][ T5890] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 765.239580][ T5890] usb 3-1: device descriptor read/64, error -71 [ 765.505914][ T5890] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 765.656091][ T5890] usb 3-1: device descriptor read/64, error -71 [ 765.766423][ T5890] usb usb3-port1: attempt power cycle [ 766.126323][ T5890] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 766.156683][ T5890] usb 3-1: device descriptor read/8, error -71 [ 766.405885][ T5890] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 766.412548][T19499] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6189'. [ 766.446784][ T5890] usb 3-1: device descriptor read/8, error -71 [ 766.579299][ T5890] usb usb3-port1: unable to enumerate USB device [ 768.328058][T19518] netlink: 'syz.2.6199': attribute type 11 has an invalid length. [ 768.365881][T19518] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6199'. [ 768.749355][T19522] 9p: Unknown access argument a: -22 [ 769.105866][ T793] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 769.236961][ T793] usb 3-1: device descriptor read/64, error -71 [ 769.495882][ T793] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 769.646199][ T793] usb 3-1: device descriptor read/64, error -71 [ 769.709823][ T30] audit: type=1326 audit(1763356018.313:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19540 comm="syz.1.6209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69c898f6c9 code=0x0 [ 769.759629][ T793] usb usb3-port1: attempt power cycle [ 770.048572][T19547] 9p: Unknown access argument a: -22 [ 770.119399][ T793] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 770.166217][ T793] usb 3-1: device descriptor read/8, error -71 [ 770.416002][ T793] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 770.440601][ T793] usb 3-1: device descriptor read/8, error -71 [ 770.458754][ T30] audit: type=1326 audit(1763356019.063:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.1.6218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69c898f6c9 code=0x0 [ 770.556862][ T793] usb usb3-port1: unable to enumerate USB device [ 770.905663][T19565] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6214'. [ 771.263797][T19577] netlink: 'syz.1.6227': attribute type 17 has an invalid length. [ 771.989971][T19588] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6232'. [ 772.163426][T19592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6234'. [ 773.616531][T19627] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6251'. [ 775.848714][T19678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6278'. [ 776.576231][T19696] netlink: 'syz.1.6287': attribute type 17 has an invalid length. [ 777.263477][T19716] netlink: 'syz.2.6297': attribute type 17 has an invalid length. [ 780.304548][T19786] 9p: Unknown access argument a: -22 [ 780.536960][T19794] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6336'. [ 781.918265][T19849] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6360'. [ 783.345412][T19887] 9p: Unknown access argument a: -22 [ 783.948478][T19901] netlink: 'syz.3.6388': attribute type 11 has an invalid length. [ 783.984790][T19901] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6388'. [ 785.927121][T19962] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6416'. [ 786.746485][T19976] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6425'. [ 787.219474][T19986] 9p: Unknown access argument a: -22 [ 787.542621][T19996] netlink: 'syz.2.6432': attribute type 11 has an invalid length. [ 787.554002][T19996] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6432'. [ 787.666478][T20000] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6435'. [ 787.876083][ T5883] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 788.016372][ T5883] usb 4-1: device descriptor read/64, error -71 [ 788.257890][ T5883] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 788.395891][ T5883] usb 4-1: device descriptor read/64, error -71 [ 788.506974][ T5883] usb usb4-port1: attempt power cycle [ 788.865970][ T5883] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 788.907308][ T5883] usb 4-1: device descriptor read/8, error -71 [ 789.155949][ T5883] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 789.186569][ T5883] usb 4-1: device descriptor read/8, error -71 [ 789.306381][ T5883] usb usb4-port1: unable to enumerate USB device [ 791.525878][ T5826] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 791.677125][ T5826] usb 2-1: no configurations [ 791.684118][ T5826] usb 2-1: can't read configurations, error -22 [ 791.842102][ T5826] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 792.007731][ T5826] usb 2-1: no configurations [ 792.015869][ T5826] usb 2-1: can't read configurations, error -22 [ 792.038112][ T5826] usb usb2-port1: attempt power cycle [ 792.395875][ T5826] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 792.452302][ T5826] usb 2-1: no configurations [ 792.457412][ T5826] usb 2-1: can't read configurations, error -22 [ 792.595950][ T5826] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 792.637302][ T5826] usb 2-1: no configurations [ 792.641968][ T5826] usb 2-1: can't read configurations, error -22 [ 792.656570][ T5826] usb usb2-port1: unable to enumerate USB device [ 795.065970][ T793] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 795.226723][ T793] usb 3-1: no configurations [ 795.231396][ T793] usb 3-1: can't read configurations, error -22 [ 795.365919][ T793] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 795.527809][ T793] usb 3-1: no configurations [ 795.533023][ T793] usb 3-1: can't read configurations, error -22 [ 795.546262][ T793] usb usb3-port1: attempt power cycle [ 795.907218][ T793] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 795.937162][ T793] usb 3-1: no configurations [ 795.941799][ T793] usb 3-1: can't read configurations, error -22 [ 796.079974][ T793] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 796.117580][ T793] usb 3-1: no configurations [ 796.122417][ T793] usb 3-1: can't read configurations, error -22 [ 796.130550][ T793] usb usb3-port1: unable to enumerate USB device [ 796.995257][T20226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6535'. [ 798.353925][T20297] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6578'. [ 798.366200][ T5876] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 798.556697][ T5876] usb 1-1: no configurations [ 798.561483][ T5876] usb 1-1: can't read configurations, error -22 [ 798.715976][ T5876] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 798.896658][ T5876] usb 1-1: no configurations [ 798.901388][ T5876] usb 1-1: can't read configurations, error -22 [ 798.918620][ T5876] usb usb1-port1: attempt power cycle [ 799.266794][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 799.287648][ T5876] usb 1-1: no configurations [ 799.292296][ T5876] usb 1-1: can't read configurations, error -22 [ 799.364383][T20327] 9p: Unknown access argument a: -22 [ 799.435902][ T5876] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 799.508092][ T5876] usb 1-1: no configurations [ 799.512734][ T5876] usb 1-1: can't read configurations, error -22 [ 799.529174][ T5876] usb usb1-port1: unable to enumerate USB device [ 799.905715][T20339] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6599'. [ 801.674560][T20380] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6618'. [ 802.419489][T20405] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6631'. [ 803.823329][T20437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6646'. [ 805.444179][T20477] overlayfs: missing 'lowerdir' [ 806.389358][T20504] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6679'. [ 807.578070][T20510] netlink: 'syz.0.6682': attribute type 11 has an invalid length. [ 807.597383][T20510] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6682'. [ 807.998716][T20517] 9p: Unknown access argument a: -22 [ 808.440614][T20525] netlink: 'syz.0.6691': attribute type 11 has an invalid length. [ 808.456023][T20525] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6691'. [ 808.683701][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.690122][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.865732][T20538] 9p: Unknown access argument a: -22 [ 809.103893][T20546] netlink: 'syz.3.6700': attribute type 11 has an invalid length. [ 809.127481][T20546] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6700'. [ 809.533940][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6703'. [ 812.351177][T20632] overlayfs: missing 'lowerdir' [ 812.786673][T20646] 9p: Unknown access argument a: -22 [ 813.985463][ T5883] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 814.160337][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 814.178123][ T5883] usb 3-1: can't read configurations, error -61 [ 814.325916][ T5883] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 814.488113][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 814.496008][ T5883] usb 3-1: can't read configurations, error -61 [ 814.516771][ T5883] usb usb3-port1: attempt power cycle [ 814.865903][ T5883] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 814.923935][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 814.945722][ T5883] usb 3-1: can't read configurations, error -61 [ 815.115897][ T5883] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 815.169869][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 815.177871][ T5883] usb 3-1: can't read configurations, error -61 [ 815.202551][ T5883] usb usb3-port1: unable to enumerate USB device [ 815.753942][T20755] 9p: Unknown access argument a: -22 [ 816.044802][T20767] overlayfs: missing 'lowerdir' [ 816.220699][T20774] 9p: Unknown access argument a: -22 [ 818.872892][T20878] overlayfs: missing 'lowerdir' [ 820.141592][T20912] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6870'. [ 822.251443][T20952] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6889'. [ 823.846341][T20966] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6898'. [ 827.796084][ T5876] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 827.977267][ T5876] usb 4-1: config 0 has no interfaces? [ 827.982799][ T5876] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 828.012263][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.028582][ T5876] usb 4-1: config 0 descriptor?? [ 828.259289][ T5876] usb 4-1: USB disconnect, device number 12 [ 829.653544][T21053] overlayfs: missing 'lowerdir' [ 830.666048][ T5914] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 830.848036][ T5914] usb 3-1: config 0 has no interfaces? [ 830.856380][ T5914] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 830.887026][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.914083][ T5914] usb 3-1: config 0 descriptor?? [ 830.956788][T21089] overlayfs: missing 'lowerdir' [ 831.132764][ T5914] usb 3-1: USB disconnect, device number 23 [ 831.607254][T21111] overlayfs: missing 'lowerdir' [ 831.979807][T21124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 831.988611][T21124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 831.996819][T21124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 832.018475][T21124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 832.036874][T21124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 832.287026][T21134] 9p: Unknown access argument a: -22 [ 832.449283][T21120] chnl_net:caif_netlink_parms(): no params data found [ 832.747639][T21150] netlink: 'syz.2.6980': attribute type 11 has an invalid length. [ 832.755612][T21150] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6980'. [ 832.992136][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.047527][T21120] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.076882][T21120] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.097131][T21120] bridge_slave_0: entered allmulticast mode [ 833.105103][T21120] bridge_slave_0: entered promiscuous mode [ 833.205520][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.232511][T21120] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.242505][T21120] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.258590][T21120] bridge_slave_1: entered allmulticast mode [ 833.287916][T21120] bridge_slave_1: entered promiscuous mode [ 833.341435][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.422316][T21156] 9p: Unknown access argument a: -22 [ 833.555858][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.619968][T21120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.643360][T21120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.792349][T21120] team0: Port device team_slave_0 added [ 833.809677][T21120] team0: Port device team_slave_1 added [ 833.920005][T21120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.929542][T21120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.995847][T21120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.008990][T21120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.025879][T21120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.082659][T21120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.116697][ T5835] Bluetooth: hci1: command tx timeout [ 834.358239][T21120] hsr_slave_0: entered promiscuous mode [ 834.377353][T21120] hsr_slave_1: entered promiscuous mode [ 834.397902][T21120] debugfs: 'hsr0' already exists in 'hsr' [ 834.404021][T21120] Cannot create hsr debugfs directory [ 834.746780][T21175] netlink: 'syz.3.6993': attribute type 11 has an invalid length. [ 834.754860][T21175] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6993'. [ 834.978531][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.026658][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.048029][ T49] bond0 (unregistering): Released all slaves [ 835.710821][ T49] hsr_slave_0: left promiscuous mode [ 835.751415][ T49] hsr_slave_1: left promiscuous mode [ 835.769513][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.796499][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.844719][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.872249][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.946780][ T49] veth1_macvtap: left promiscuous mode [ 835.952358][ T49] veth0_macvtap: left promiscuous mode [ 835.976484][ T49] veth1_vlan: left promiscuous mode [ 835.981909][ T49] veth0_vlan: left promiscuous mode [ 836.195933][ T5835] Bluetooth: hci1: command tx timeout [ 836.664161][ T49] team0 (unregistering): Port device team_slave_1 removed [ 836.717041][ T49] team0 (unregistering): Port device team_slave_0 removed [ 837.900570][T21120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 837.950102][T21120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 837.984564][T21120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 838.033006][T21120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 838.276468][ T5835] Bluetooth: hci1: command tx timeout [ 838.297386][T21120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.324841][T21120] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.343168][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.350429][T11053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.367524][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.374777][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.940897][T21120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.082807][T21281] 9p: Bad value for 'rfdno' [ 839.091232][T21120] veth0_vlan: entered promiscuous mode [ 839.144337][T21120] veth1_vlan: entered promiscuous mode [ 839.258527][T21120] veth0_macvtap: entered promiscuous mode [ 839.286954][T21120] veth1_macvtap: entered promiscuous mode [ 839.351024][T21120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.403077][T21120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.463129][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.476287][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.506044][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.514804][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.734344][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.765846][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.849293][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.881179][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.881592][T21301] overlayfs: failed to resolve './file1': -2 [ 840.259282][T21317] netlink: 'syz.3.7031': attribute type 11 has an invalid length. [ 840.267286][T21317] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.7031'. [ 840.362568][ T5835] Bluetooth: hci1: command tx timeout [ 844.776397][T21124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 844.785687][T21124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 844.805302][T21124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 844.813442][T21124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 844.821861][T21124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 845.123124][T21432] chnl_net:caif_netlink_parms(): no params data found [ 845.560414][ T3525] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.618882][T21432] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.645953][T21432] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.674639][T21432] bridge_slave_0: entered allmulticast mode [ 845.705109][T21432] bridge_slave_0: entered promiscuous mode [ 845.777826][ T3525] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.836107][T21432] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.843312][T21432] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.880164][T21432] bridge_slave_1: entered allmulticast mode [ 845.907938][T21432] bridge_slave_1: entered promiscuous mode [ 846.008166][ T3525] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.210907][T21432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.287901][ T3525] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.354234][T21432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.459488][T21432] team0: Port device team_slave_0 added [ 846.479456][T21432] team0: Port device team_slave_1 added [ 846.560130][T21432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.585963][T21432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.655797][T21432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.679073][T21432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.686721][T21432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.745968][T21432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.916349][ T5835] Bluetooth: hci0: command tx timeout [ 846.987700][T21432] hsr_slave_0: entered promiscuous mode [ 846.994480][T21432] hsr_slave_1: entered promiscuous mode [ 847.001504][T21432] debugfs: 'hsr0' already exists in 'hsr' [ 847.007321][T21432] Cannot create hsr debugfs directory [ 847.051052][T21446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7080'. [ 847.068249][ T3525] bridge_slave_1: left allmulticast mode [ 847.073936][ T3525] bridge_slave_1: left promiscuous mode [ 847.080043][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.128565][ T3525] bridge_slave_0: left allmulticast mode [ 847.147462][ T3525] bridge_slave_0: left promiscuous mode [ 847.153271][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.261411][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.306385][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.341482][ T3525] bond0 (unregistering): Released all slaves [ 848.950188][ T3525] hsr_slave_0: left promiscuous mode [ 848.970569][ T3525] hsr_slave_1: left promiscuous mode [ 848.981499][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.996408][ T5835] Bluetooth: hci0: command tx timeout [ 848.998051][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.040565][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.081759][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.169578][ T3525] veth1_macvtap: left promiscuous mode [ 849.175164][ T3525] veth0_macvtap: left promiscuous mode [ 849.196017][ T3525] veth1_vlan: left promiscuous mode [ 849.201503][ T3525] veth0_vlan: left promiscuous mode [ 850.443662][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 850.565182][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 851.082122][ T5835] Bluetooth: hci0: command tx timeout [ 851.559769][T21538] overlayfs: missing 'lowerdir' [ 851.718462][T21542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7114'. [ 852.433709][T21432] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 852.452467][T21432] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 852.480835][T21432] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 852.529734][T21432] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 852.780437][T21432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.803980][T21576] overlayfs: missing 'lowerdir' [ 852.894011][T21432] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.930118][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.937378][T11053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.981253][T11053] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.988595][T11053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.167023][ T5835] Bluetooth: hci0: command tx timeout [ 853.652153][T21432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.780501][T21432] veth0_vlan: entered promiscuous mode [ 853.824365][T21432] veth1_vlan: entered promiscuous mode [ 853.929541][T21432] veth0_macvtap: entered promiscuous mode [ 853.948911][T21432] veth1_macvtap: entered promiscuous mode [ 853.993807][T21432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.021231][T21432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.063924][ T33] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.094164][ T33] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.155065][ T33] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.184799][ T33] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.355929][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.363793][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.476493][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.484349][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.804382][T21626] overlayfs: missing 'lowerdir' [ 856.928730][T21689] netlink: 'syz.2.7137': attribute type 11 has an invalid length. [ 856.953472][T21124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 856.963107][T21124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 856.972005][T21124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 856.984245][T21689] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.7137'. [ 856.998544][T21124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 857.007085][T21124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 857.573207][T21690] chnl_net:caif_netlink_parms(): no params data found [ 857.930102][T21690] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.939146][T21690] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.951211][T21690] bridge_slave_0: entered allmulticast mode [ 857.959987][T21690] bridge_slave_0: entered promiscuous mode [ 858.043768][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.098685][T21690] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.123409][T21690] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.136260][T21690] bridge_slave_1: entered allmulticast mode [ 858.154156][T21690] bridge_slave_1: entered promiscuous mode [ 858.240853][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.451838][T21690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.522205][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.573442][T21690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.669295][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.791568][T21690] team0: Port device team_slave_0 added [ 858.811217][T21690] team0: Port device team_slave_1 added [ 858.887320][T21755] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 858.906053][T21755] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 858.948957][T21755] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 858.972046][T21690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.985783][T21690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.016545][T21690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.076084][ T5835] Bluetooth: hci4: command tx timeout [ 859.099733][T21690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.106918][T21690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.203641][T21690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.410863][ T33] bridge_slave_1: left allmulticast mode [ 859.427329][ T33] bridge_slave_1: left promiscuous mode [ 859.456133][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.508599][ T33] bridge_slave_0: left allmulticast mode [ 859.514286][ T33] bridge_slave_0: left promiscuous mode [ 859.547102][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.391473][T21810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7194'. [ 860.580792][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.609879][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.620423][ T33] bond0 (unregistering): Released all slaves [ 860.687372][T21690] hsr_slave_0: entered promiscuous mode [ 860.712419][T21690] hsr_slave_1: entered promiscuous mode [ 860.736035][T21690] debugfs: 'hsr0' already exists in 'hsr' [ 860.751973][T21690] Cannot create hsr debugfs directory [ 861.156329][ T5835] Bluetooth: hci4: command tx timeout [ 861.257340][ T33] hsr_slave_0: left promiscuous mode [ 861.277867][ T33] hsr_slave_1: left promiscuous mode [ 861.284046][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.305829][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.326724][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.334145][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.384741][ T33] veth1_macvtap: left promiscuous mode [ 861.395882][ T33] veth0_macvtap: left promiscuous mode [ 861.401624][ T33] veth1_vlan: left promiscuous mode [ 861.426105][ T33] veth0_vlan: left promiscuous mode [ 862.329411][ T33] team0 (unregistering): Port device team_slave_1 removed [ 862.381592][ T33] team0 (unregistering): Port device team_slave_0 removed [ 862.459699][T21869] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7224'. [ 863.235973][ T5835] Bluetooth: hci4: command tx timeout [ 864.192478][T21690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 864.230574][T21690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 864.285671][T21690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 864.330631][T21690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 864.612088][T21690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.689492][T21690] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.738700][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.745909][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.799835][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.807079][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.088167][T21935] overlayfs: missing 'lowerdir' [ 865.317448][ T5835] Bluetooth: hci4: command tx timeout [ 865.359306][T21690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.534932][T21690] veth0_vlan: entered promiscuous mode [ 865.574212][T21690] veth1_vlan: entered promiscuous mode [ 865.668896][T21690] veth0_macvtap: entered promiscuous mode [ 865.707667][T21690] veth1_macvtap: entered promiscuous mode [ 865.751856][T21690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.763754][T21954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7244'. [ 865.793431][T21690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.858632][ T3525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.868329][ T3525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.898112][ T3525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.918824][ T3525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.089294][T11053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.121175][T11053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.211717][T11053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.245289][T11053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.431790][T21970] overlayfs: missing 'lowerdir' [ 866.814965][T21980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7253'. [ 867.128611][T21995] overlayfs: missing 'lowerdir' [ 868.159340][T22030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7276'. [ 868.622374][T22038] overlayfs: missing 'workdir' [ 869.024569][T22048] netlink: 'syz.3.7286': attribute type 11 has an invalid length. [ 869.036013][T22048] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.7286'. [ 870.125644][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.132172][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.202564][T22070] netlink: 'syz.1.7296': attribute type 11 has an invalid length. [ 870.210603][T22070] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.7296'. [ 872.179282][T22080] overlayfs: missing 'lowerdir' [ 878.126000][ T5826] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 878.287978][ T5826] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 878.312714][ T5826] usb 4-1: config 0 interface 0 has no altsetting 0 [ 878.325872][ T5826] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 878.335049][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.369070][ T5826] usb 4-1: config 0 descriptor?? [ 878.380122][T22206] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 878.606950][ T5826] usbhid 4-1:0.0: can't add hid device: -71 [ 878.613143][ T5826] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 878.641202][ T5826] usb 4-1: USB disconnect, device number 13 [ 878.901452][T22226] netlink: 'syz.1.7371': attribute type 11 has an invalid length. [ 878.909508][T22226] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.7371'. [ 881.851867][T22277] 9p: Unknown access argument a: -22 [ 881.966053][T22281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7398'. [ 882.666945][T22300] overlayfs: missing 'lowerdir' [ 885.119336][T22370] 9p: Bad value for 'rfdno' [ 885.807635][T22394] 9p: Unknown access argument a: -22 [ 888.150687][T21124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 888.159693][T21124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 888.168000][T21124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 888.182165][T21124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 888.200578][T21124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 888.879110][T22504] chnl_net:caif_netlink_parms(): no params data found [ 888.941816][ T3525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.189075][ T3525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.448881][ T3525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.481486][T22504] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.496174][T22504] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.510080][T22504] bridge_slave_0: entered allmulticast mode [ 889.530253][T22504] bridge_slave_0: entered promiscuous mode [ 889.571839][ T3525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.605264][T22504] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.623144][T22504] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.638785][T22504] bridge_slave_1: entered allmulticast mode [ 889.657372][T22504] bridge_slave_1: entered promiscuous mode [ 889.748985][T22504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.769224][T22504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.893259][T22504] team0: Port device team_slave_0 added [ 889.919688][T22504] team0: Port device team_slave_1 added [ 890.075665][T22504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.099991][T22504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.169977][T22504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.194550][T22504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.226196][T22504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.275968][ T5835] Bluetooth: hci2: command tx timeout [ 890.285821][T22504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.346526][ T3525] bridge_slave_1: left allmulticast mode [ 890.352213][ T3525] bridge_slave_1: left promiscuous mode [ 890.378249][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.408971][ T3525] bridge_slave_0: left allmulticast mode [ 890.414652][ T3525] bridge_slave_0: left promiscuous mode [ 890.448802][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.263919][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.286589][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.308486][ T3525] bond0 (unregistering): Released all slaves [ 891.454162][T22504] hsr_slave_0: entered promiscuous mode [ 891.477349][T22504] hsr_slave_1: entered promiscuous mode [ 891.483903][T22504] debugfs: 'hsr0' already exists in 'hsr' [ 891.505777][T22504] Cannot create hsr debugfs directory [ 891.980889][ T3525] hsr_slave_0: left promiscuous mode [ 892.025442][ T3525] hsr_slave_1: left promiscuous mode [ 892.031975][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.052077][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.073324][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.101447][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.177211][ T3525] veth1_macvtap: left promiscuous mode [ 892.188765][ T3525] veth0_macvtap: left promiscuous mode [ 892.205032][ T3525] veth1_vlan: left promiscuous mode [ 892.214869][ T3525] veth0_vlan: left promiscuous mode [ 892.357446][ T5835] Bluetooth: hci2: command tx timeout [ 893.404695][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 893.495833][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 894.440755][ T5835] Bluetooth: hci2: command tx timeout [ 895.338993][T22504] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 895.367294][T22504] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 895.390020][T22504] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 895.434605][T22504] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 895.691571][T22504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.759362][T22504] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.791249][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.798514][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.893964][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.901208][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.468687][T22504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.516277][ T5835] Bluetooth: hci2: command tx timeout [ 896.594405][T22504] veth0_vlan: entered promiscuous mode [ 896.644569][T22504] veth1_vlan: entered promiscuous mode [ 896.733641][T22504] veth0_macvtap: entered promiscuous mode [ 896.753758][T22504] veth1_macvtap: entered promiscuous mode [ 896.824925][T22504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.853992][T22504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.897885][T11053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.922413][T11053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.958623][T11053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.985924][T11053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.133196][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.190246][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.264368][T11053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.282608][T11053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.707461][T22751] overlayfs: missing 'lowerdir' [ 912.164949][T23046] overlayfs: missing 'lowerdir' [ 914.167698][T23109] overlayfs: missing 'lowerdir' [ 918.440288][T23248] overlayfs: missing 'lowerdir' [ 931.562133][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.571217][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 944.343140][T23798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8062'. [ 945.258653][T23827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8080'. [ 947.007808][T23899] tmpfs: Bad value for 'nr_blocks' [ 949.975908][ T30] audit: type=1326 audit(1763356198.573:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23958 comm="syz.0.8147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8beb98f6c9 code=0x0 [ 952.841383][ T30] audit: type=1326 audit(1763356201.443:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24032 comm="syz.1.8183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33af8f6c9 code=0x0 [ 953.581609][T24055] /dev/sg0: Can't lookup blockdev [ 954.141520][ T30] audit: type=1326 audit(1763356202.723:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24074 comm="syz.2.8203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce438f6c9 code=0x0 [ 954.421289][T24084] 9p: Bad value for 'rfdno' [ 958.084641][T24154] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8240'. [ 958.975654][ T30] audit: type=1326 audit(1763356207.563:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24180 comm="syz.3.8254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa31d78f6c9 code=0x0 [ 959.236120][T21124] Bluetooth: hci1: command 0x0406 tx timeout [ 960.842260][T24211] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8269'. [ 961.681734][ T30] audit: type=1326 audit(1763356210.283:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.1.8279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33af8f6c9 code=0x0 [ 963.378864][ T30] audit: type=1326 audit(1763356211.983:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24274 comm="syz.0.8298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8beb98f6c9 code=0x0 [ 965.015760][ T30] audit: type=1326 audit(1763356213.613:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.2.8308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce438f6c9 code=0x0 [ 969.476027][T21124] Bluetooth: hci0: command 0x0406 tx timeout [ 970.713328][ T30] audit: type=1326 audit(1763356219.313:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24473 comm="syz.3.8389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa31d78f6c9 code=0x0 [ 972.931384][T24577] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8438'. [ 974.802996][T24597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8448'. [ 977.604815][ T30] audit: type=1326 audit(1763356226.203:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.3.8489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa31d78f6c9 code=0x0 [ 979.005580][ T30] audit: type=1326 audit(1763356227.603:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.3.8506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa31d78f6c9 code=0x0 [ 979.146489][T24716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8508'. [ 979.722807][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 981.874106][ T30] audit: type=1326 audit(1763356230.473:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24806 comm="syz.2.8552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce438f6c9 code=0x0 [ 981.907030][T24805] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8551'. [ 983.295300][T24852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8564'. [ 984.811750][T24927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8612'. [ 993.009877][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.017644][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.239912][ T30] audit: type=1326 audit(1763356247.843:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25162 comm="syz.2.8725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce438f6c9 code=0x0 [ 1003.578999][T25331] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8800'. [ 1008.562836][ T30] audit: type=1326 audit(1763356257.163:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25425 comm="syz.2.8845" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce438f6c9 code=0x0 [ 1010.436018][T21124] Bluetooth: hci2: command 0x0406 tx timeout [ 1021.643623][ T30] audit: type=1326 audit(1763356270.243:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25689 comm="syz.0.8972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8beb98f6c9 code=0x0 [ 1022.675462][ T30] audit: type=1326 audit(1763356271.273:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25728 comm="syz.2.8988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce438f6c9 code=0x0 [ 1023.134433][ T30] audit: type=1326 audit(1763356271.733:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.1.9001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33af8f6c9 code=0x0 [ 1037.510337][ T30] audit: type=1326 audit(1763356286.113:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26093 comm="syz.2.9164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce438f6c9 code=0x0 [ 1041.203680][T26208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9221'. [ 1042.130914][T26254] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9242'. [ 1044.602036][T21124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1044.612367][T21124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1044.620974][T21124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1044.629328][T21124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1044.637105][T21124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1045.106289][T26367] chnl_net:caif_netlink_parms(): no params data found [ 1045.244254][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.433133][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.519567][T26367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.546346][T26367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.559746][T26367] bridge_slave_0: entered allmulticast mode [ 1045.576417][T26367] bridge_slave_0: entered promiscuous mode [ 1045.627903][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.676163][T26367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.693707][T26367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.705969][T26367] bridge_slave_1: entered allmulticast mode [ 1045.724350][T26367] bridge_slave_1: entered promiscuous mode [ 1045.770659][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.926735][T26367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.944861][T26367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.050056][T26367] team0: Port device team_slave_0 added [ 1046.109558][T26367] team0: Port device team_slave_1 added [ 1046.234438][T26367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.250823][T26367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.306242][T26367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.331771][T26367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.345797][T26367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.413040][T26367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.642279][T26367] hsr_slave_0: entered promiscuous mode [ 1046.666972][T26367] hsr_slave_1: entered promiscuous mode [ 1046.681468][T21124] Bluetooth: hci3: command tx timeout [ 1046.690704][ T49] bridge_slave_1: left allmulticast mode [ 1046.715773][ T49] bridge_slave_1: left promiscuous mode [ 1046.739113][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.787682][ T49] bridge_slave_0: left allmulticast mode [ 1046.813736][ T49] bridge_slave_0: left promiscuous mode [ 1046.824130][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.892076][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.916936][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.938485][ T49] bond0 (unregistering): Released all slaves [ 1048.496199][ T49] hsr_slave_0: left promiscuous mode [ 1048.505606][ T49] hsr_slave_1: left promiscuous mode [ 1048.525926][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.533337][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.568208][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.585705][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.633128][ T49] veth1_macvtap: left promiscuous mode [ 1048.655812][ T49] veth0_macvtap: left promiscuous mode [ 1048.675984][ T49] veth1_vlan: left promiscuous mode [ 1048.681474][ T49] veth0_vlan: left promiscuous mode [ 1048.761702][T21124] Bluetooth: hci3: command tx timeout [ 1049.773175][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1049.867866][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1050.835853][T21124] Bluetooth: hci3: command tx timeout [ 1051.583021][T26367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1051.651313][T26367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1051.674265][T26367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1051.729425][T26367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1051.968826][T26367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.031206][T26367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.078920][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.086141][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.148104][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.155328][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.722789][T26367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.851535][T26367] veth0_vlan: entered promiscuous mode [ 1052.879134][T26367] veth1_vlan: entered promiscuous mode [ 1052.916539][T21124] Bluetooth: hci3: command tx timeout [ 1052.961826][T26367] veth0_macvtap: entered promiscuous mode [ 1052.973461][T26367] veth1_macvtap: entered promiscuous mode [ 1053.004833][T26367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.046228][T26367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.074066][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.126010][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.148488][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.183423][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.383907][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.406115][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.494649][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.518176][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.442733][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.449269][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.832343][ T30] audit: type=1326 audit(1763356307.433:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26733 comm="syz.1.9421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33af8f6c9 code=0x0 [ 1059.304445][ T30] audit: type=1326 audit(1763356307.903:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.9433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce438f6c9 code=0x0 [ 1059.650323][ T30] audit: type=1326 audit(1763356308.253:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26783 comm="syz.1.9445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33af8f6c9 code=0x0 [ 1060.369968][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1060.397927][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1060.406671][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1060.416689][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1060.426284][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1060.615054][T26827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9465'. [ 1060.941074][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.990971][T26819] chnl_net:caif_netlink_parms(): no params data found [ 1061.044700][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.172389][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.340507][T26819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.356213][T26819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.373906][T26819] bridge_slave_0: entered allmulticast mode [ 1061.387833][T26819] bridge_slave_0: entered promiscuous mode [ 1061.439980][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.491078][T26819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.508698][T26819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.535987][T26819] bridge_slave_1: entered allmulticast mode [ 1061.543950][T26819] bridge_slave_1: entered promiscuous mode [ 1061.651615][T26819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.698999][T26819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.793750][T26819] team0: Port device team_slave_0 added [ 1061.869324][T26819] team0: Port device team_slave_1 added [ 1061.946184][ T30] audit: type=1326 audit(1763356310.543:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26860 comm="syz.1.9479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33af8f6c9 code=0x0 [ 1062.039280][T26819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.047737][T26819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.105841][T26819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.139519][T26819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.165774][T26819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.214828][T26819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.266286][ T49] bridge_slave_1: left allmulticast mode [ 1062.271972][ T49] bridge_slave_1: left promiscuous mode [ 1062.320018][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.365019][ T49] bridge_slave_0: left allmulticast mode [ 1062.387680][ T49] bridge_slave_0: left promiscuous mode [ 1062.393501][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.516016][T21124] Bluetooth: hci0: command tx timeout [ 1063.238422][T26901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9491'. [ 1063.368764][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.389630][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.402187][ T49] bond0 (unregistering): Released all slaves [ 1063.407456][ T30] audit: type=1326 audit(1763356312.013:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26906 comm="syz.3.9494" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72478f6c9 code=0x0 [ 1063.523707][T26819] hsr_slave_0: entered promiscuous mode [ 1063.541146][T26819] hsr_slave_1: entered promiscuous mode [ 1063.561427][T26819] debugfs: 'hsr0' already exists in 'hsr' [ 1063.581732][T26819] Cannot create hsr debugfs directory [ 1063.964534][ T49] hsr_slave_0: left promiscuous mode [ 1063.981788][ T49] hsr_slave_1: left promiscuous mode [ 1063.994236][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.012195][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.020809][ T30] audit: type=1326 audit(1763356312.623:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26922 comm="syz.1.9503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33af8f6c9 code=0x0 [ 1064.044307][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.056824][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.132098][ T49] veth1_macvtap: left promiscuous mode [ 1064.149235][ T49] veth0_macvtap: left promiscuous mode [ 1064.155194][ T49] veth1_vlan: left promiscuous mode [ 1064.163640][ T49] veth0_vlan: left promiscuous mode [ 1064.596112][T21124] Bluetooth: hci0: command tx timeout [ 1065.143251][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1065.241736][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1066.511412][ T30] audit: type=1326 audit(1763356315.113:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26975 comm="syz.3.9526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72478f6c9 code=0x0 [ 1066.678008][T21124] Bluetooth: hci0: command tx timeout [ 1067.140717][T26992] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9531'. [ 1067.284589][T26819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1067.339995][T26819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1067.380488][T26819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1067.398459][T26819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1067.606659][ T30] audit: type=1326 audit(1763356316.213:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27003 comm="syz.3.9534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72478f6c9 code=0x0 [ 1067.717529][T26819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.790564][T26819] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.828422][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.835609][T11053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.869249][T11053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.876491][T11053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.469190][T26819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.477148][ T30] audit: type=1326 audit(1763356317.083:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.3.9542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72478f6c9 code=0x0 [ 1068.562080][T26819] veth0_vlan: entered promiscuous mode [ 1068.615210][T26819] veth1_vlan: entered promiscuous mode [ 1068.762677][T21124] Bluetooth: hci0: command tx timeout [ 1068.769721][T26819] veth0_macvtap: entered promiscuous mode [ 1068.798489][T26819] veth1_macvtap: entered promiscuous mode [ 1068.864662][T26819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.911493][T26819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.951715][ T999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.974768][ T999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.027235][ T999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.046663][ T999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.191362][T11053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.215719][T11053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.284754][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.302894][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.335761][ T30] audit: type=1326 audit(1763356317.933:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27066 comm="syz.1.9551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33af8f6c9 code=0x0 [ 1069.851494][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1069.861570][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1069.869745][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1069.890062][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1069.904161][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1070.791887][T27078] chnl_net:caif_netlink_parms(): no params data found [ 1070.906150][ T999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.077662][ T999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.239794][ T999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.447751][ T999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.571559][T27078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.585873][T27078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.593135][T27078] bridge_slave_0: entered allmulticast mode [ 1071.628333][T27078] bridge_slave_0: entered promiscuous mode [ 1071.639505][T27078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.661965][T27078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.679802][T27078] bridge_slave_1: entered allmulticast mode [ 1071.698697][T27078] bridge_slave_1: entered promiscuous mode [ 1071.871148][T27078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.928193][T27078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.956511][T21124] Bluetooth: hci1: command tx timeout [ 1072.121348][T27078] team0: Port device team_slave_0 added [ 1072.140200][T27078] team0: Port device team_slave_1 added [ 1072.154192][ T999] bridge_slave_1: left allmulticast mode [ 1072.164343][ T999] bridge_slave_1: left promiscuous mode [ 1072.173972][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.225579][ T999] bridge_slave_0: left allmulticast mode [ 1072.243700][ T999] bridge_slave_0: left promiscuous mode [ 1072.250086][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.279000][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.295753][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.311292][ T999] bond0 (unregistering): Released all slaves [ 1073.448069][T27078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.465315][T27078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.529349][T27078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.650822][T27078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.665861][T27078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.724188][T27078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.996301][T27078] hsr_slave_0: entered promiscuous mode [ 1074.004560][T27078] hsr_slave_1: entered promiscuous mode [ 1074.023490][ T30] audit: type=1326 audit(1763356322.623:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27161 comm="syz.3.9575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72478f6c9 code=0x0 [ 1074.050922][T27078] debugfs: 'hsr0' already exists in 'hsr' [ 1074.065764][T21124] Bluetooth: hci1: command tx timeout [ 1074.072290][T27078] Cannot create hsr debugfs directory [ 1074.109887][ T999] hsr_slave_0: left promiscuous mode [ 1074.138472][ T999] hsr_slave_1: left promiscuous mode [ 1074.152983][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.185703][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.209594][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.236129][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.273472][ T999] veth1_macvtap: left promiscuous mode [ 1074.302103][ T999] veth0_macvtap: left promiscuous mode [ 1074.321099][ T999] veth1_vlan: left promiscuous mode [ 1074.346078][ T999] veth0_vlan: left promiscuous mode [ 1075.574780][ T999] team0 (unregistering): Port device team_slave_1 removed [ 1075.665447][ T999] team0 (unregistering): Port device team_slave_0 removed [ 1076.115877][T21124] Bluetooth: hci1: command tx timeout [ 1077.858077][T27078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1077.879840][T27078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1077.919671][T27078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1077.964237][T27078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1078.196151][T21124] Bluetooth: hci1: command tx timeout [ 1078.263601][T27078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.343658][T27078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.383232][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.390493][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.442225][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.449454][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.861599][T27078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.974524][T27078] veth0_vlan: entered promiscuous mode [ 1079.020777][T27078] veth1_vlan: entered promiscuous mode [ 1079.109575][T27078] veth0_macvtap: entered promiscuous mode [ 1079.140301][T27078] veth1_macvtap: entered promiscuous mode [ 1079.166755][T27078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.185145][T27078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.223463][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.256606][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.295716][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.304463][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.531111][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.554725][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.624650][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.656045][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.209016][ T30] audit: type=1326 audit(1763356328.813:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.2.9608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce438f6c9 code=0x0 [ 1080.399311][T27297] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9609'. [ 1081.836367][T27334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9621'. [ 1082.600818][ T30] audit: type=1326 audit(1763356331.193:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.3.9617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72478f6c9 code=0x0 [ 1084.405881][T27390] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9642'. [ 1085.462715][T27412] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9652'. [ 1086.165888][T27430] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9662'. [ 1087.300209][T27450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9672'. [ 1091.591949][T27533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9712'. [ 1092.924267][T27580] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9734'. [ 1094.819954][T27620] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9754'. [ 1095.006307][ T30] audit: type=1326 audit(1763356343.613:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27625 comm="syz.0.9757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe32d58f6c9 code=0x0 [ 1095.902162][T27646] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9766'. [ 1096.978469][T27662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9775'. [ 1098.354199][T27717] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9802'. [ 1100.764257][T27795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9840'. [ 1101.657346][T27816] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9850'. [ 1104.738589][T27875] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9878'. [ 1108.230207][T27921] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9900'. [ 1108.831139][T27939] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9909'. [ 1115.885123][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.891680][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.108381][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1122.118191][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1122.137799][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1122.170017][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1122.188931][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1122.828270][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.888250][T28234] chnl_net:caif_netlink_parms(): no params data found [ 1122.969880][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.139429][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.259621][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.423305][T28234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.433510][T28234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.445977][T28234] bridge_slave_0: entered allmulticast mode [ 1123.464199][T28234] bridge_slave_0: entered promiscuous mode [ 1123.491405][T28234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.516325][T28234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.523615][T28234] bridge_slave_1: entered allmulticast mode [ 1123.549214][T28234] bridge_slave_1: entered promiscuous mode [ 1123.768169][T28234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.800385][T28234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.905569][T28234] team0: Port device team_slave_0 added [ 1123.922529][T28234] team0: Port device team_slave_1 added [ 1123.951924][ T33] bridge_slave_1: left allmulticast mode [ 1123.966888][ T33] bridge_slave_1: left promiscuous mode [ 1123.984163][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.038218][ T33] bridge_slave_0: left allmulticast mode [ 1124.054155][ T33] bridge_slave_0: left promiscuous mode [ 1124.060474][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.275954][T21124] Bluetooth: hci4: command tx timeout [ 1125.026932][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.059342][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.086742][ T33] bond0 (unregistering): Released all slaves [ 1125.332258][T28234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.356126][T28234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.414845][T28234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.543207][T28234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.565743][T28234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.625677][T28234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.738537][ T33] hsr_slave_0: left promiscuous mode [ 1125.775987][ T33] hsr_slave_1: left promiscuous mode [ 1125.782477][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.800190][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.846606][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.854026][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.923313][ T33] veth1_macvtap: left promiscuous mode [ 1125.960177][ T33] veth0_macvtap: left promiscuous mode [ 1125.976668][ T33] veth1_vlan: left promiscuous mode [ 1125.982050][ T33] veth0_vlan: left promiscuous mode [ 1126.355756][T21124] Bluetooth: hci4: command tx timeout [ 1127.097605][ T33] team0 (unregistering): Port device team_slave_1 removed [ 1127.191584][ T33] team0 (unregistering): Port device team_slave_0 removed [ 1127.740943][T28234] hsr_slave_0: entered promiscuous mode [ 1127.747933][T28234] hsr_slave_1: entered promiscuous mode [ 1127.754520][T28234] debugfs: 'hsr0' already exists in 'hsr' [ 1127.763007][T28234] Cannot create hsr debugfs directory [ 1128.306941][T28295] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 1128.313257][T28295] CPU: 1 UID: 0 PID: 28295 Comm: syz.1.10065 Not tainted syzkaller #0 PREEMPT(full) [ 1128.322808][T28295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.332863][T28295] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 1128.338178][T28295] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 1128.357791][T28295] RSP: 0018:ffffc900108c7998 EFLAGS: 00010207 [ 1128.363888][T28295] RAX: 1ffff1100ae3bdb2 RBX: ffff8880571ded68 RCX: 0000000000080000 [ 1128.371878][T28295] RDX: ffffc9001e9bc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1128.379846][T28295] RBP: 000000000000002e R08: ffff888062c6c01f R09: 1ffff1100c58d803 [ 1128.387815][T28295] R10: dffffc0000000000 R11: ffffed100c58d804 R12: 00000000000002a9 [ 1128.395773][T28295] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 1128.403728][T28295] FS: 00007f22e55ee6c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 1128.412644][T28295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1128.419211][T28295] CR2: 00007f28c96cfe9c CR3: 0000000078c8e000 CR4: 00000000003526f0 [ 1128.427165][T28295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1128.435118][T28295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1128.443070][T28295] Call Trace: [ 1128.446344][T28295] [ 1128.449262][T28295] create_new_namespaces+0x47a/0x540 [ 1128.454533][T28295] ? copy_namespaces+0x5c/0x4b0 [ 1128.459364][T28295] copy_namespaces+0x438/0x4b0 [ 1128.464112][T28295] copy_process+0x168f/0x3930 [ 1128.468772][T28295] ? copy_process+0x915/0x3930 [ 1128.473521][T28295] ? __pfx_copy_process+0x10/0x10 [ 1128.478529][T28295] ? futex_private_hash_put+0x13b/0x170 [ 1128.484067][T28295] kernel_clone+0x21e/0x850 [ 1128.488578][T28295] ? __pfx_futex_wake+0x10/0x10 [ 1128.493429][T28295] ? __pfx_kernel_clone+0x10/0x10 [ 1128.498448][T28295] ? __sys_sendmmsg+0x400/0x430 [ 1128.503290][T28295] ? do_futex+0x395/0x420 [ 1128.507616][T28295] __x64_sys_clone+0x18b/0x1e0 [ 1128.512365][T28295] ? __pfx___x64_sys_clone+0x10/0x10 [ 1128.517645][T28295] ? rcu_is_watching+0x15/0xb0 [ 1128.522397][T28295] ? do_syscall_64+0xbe/0xfa0 [ 1128.527056][T28295] do_syscall_64+0xfa/0xfa0 [ 1128.531544][T28295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.537590][T28295] ? clear_bhb_loop+0x60/0xb0 [ 1128.542246][T28295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.548119][T28295] RIP: 0033:0x7f22e738f6c9 [ 1128.552525][T28295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.572119][T28295] RSP: 002b:00007f22e55edfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1128.580517][T28295] RAX: ffffffffffffffda RBX: 00007f22e75e5fa0 RCX: 00007f22e738f6c9 [ 1128.588473][T28295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800000 [ 1128.596424][T28295] RBP: 00007f22e7411f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1128.604374][T28295] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1128.612327][T28295] R13: 00007f22e75e6038 R14: 00007f22e75e5fa0 R15: 00007ffcc8279598 [ 1128.620286][T28295] [ 1128.623299][T28295] Modules linked in: [ 1128.629341][T28295] ---[ end trace 0000000000000000 ]--- [ 1128.641577][T21124] Bluetooth: hci4: command tx timeout [ 1128.695636][T28295] RIP: 0010:nsproxy_free+0x40a/0x7c0 [ 1128.742909][T28295] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 90 c2 99 00 4d 8b 36 4d 85 f6 0f 84 df 00 00 00 4d 8d be 78 01 00 00 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 66 c2 99 00 4d 8b 27 31 ff 4c [ 1128.773512][T28295] RSP: 0018:ffffc900108c7998 EFLAGS: 00010207 [ 1128.791453][T28295] RAX: 1ffff1100ae3bdb2 RBX: ffff8880571ded68 RCX: 0000000000080000 [ 1128.804280][T28295] RDX: ffffc9001e9bc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1128.814091][T28295] RBP: 000000000000002e R08: ffff888062c6c01f R09: 1ffff1100c58d803 [ 1128.822478][T28295] R10: dffffc0000000000 R11: ffffed100c58d804 R12: 00000000000002a9 [ 1128.831387][T28295] R13: dffffc0000000000 R14: fffffffffffffffc R15: 0000000000000174 [ 1128.847742][T28295] FS: 00007f22e55ee6c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 1128.858634][T28295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1128.865413][T28295] CR2: 0000564e4ac7a950 CR3: 0000000078c8e000 CR4: 00000000003526f0 [ 1128.874008][T28295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1128.887656][T28295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1128.904841][T28295] Kernel panic - not syncing: Fatal exception [ 1128.911193][T28295] Kernel Offset: disabled [ 1128.915527][T28295] Rebooting in 86400 seconds..