last executing test programs: 3.576884435s ago: executing program 4 (id=20519): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r1, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) 3.363938493s ago: executing program 4 (id=20523): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x23c}}, 0x0) 3.199469902s ago: executing program 4 (id=20526): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) capset(0x0, 0x0) 3.026672446s ago: executing program 4 (id=20530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.971944142s ago: executing program 2 (id=20545): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) 1.33292283s ago: executing program 4 (id=20550): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r5, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.137091809s ago: executing program 4 (id=20553): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x37, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x5a, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 944.197502ms ago: executing program 1 (id=20556): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) 878.746321ms ago: executing program 0 (id=20558): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/145, 0x91}], 0x1, 0x0, 0x0, 0x0) 788.0096ms ago: executing program 2 (id=20559): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) 755.148326ms ago: executing program 1 (id=20560): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="57c8", 0x2}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(&(0x7f00000005c0)={0x80000, 0x0, 0x0, 0x0, {0x37}, &(0x7f0000000200)=""/144, 0x90, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x3}, 0x58) 725.889028ms ago: executing program 3 (id=20561): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 720.685381ms ago: executing program 2 (id=20562): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000040)="a5", 0x1) 676.010747ms ago: executing program 0 (id=20563): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480), 0x0, 0x14) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) 596.833328ms ago: executing program 3 (id=20564): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 558.464104ms ago: executing program 0 (id=20565): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 548.024396ms ago: executing program 2 (id=20566): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) 486.221249ms ago: executing program 1 (id=20567): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) ftruncate(0xffffffffffffffff, 0xf) sendfile(r2, 0xffffffffffffffff, 0x0, 0xe74e) 449.792822ms ago: executing program 2 (id=20568): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[], 0x118) 425.198603ms ago: executing program 3 (id=20569): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 330.580861ms ago: executing program 0 (id=20570): socket$inet6_tcp(0xa, 0x1, 0x0) 324.437284ms ago: executing program 1 (id=20571): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) 309.015984ms ago: executing program 3 (id=20572): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x0}) 234.965941ms ago: executing program 2 (id=20573): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 217.616893ms ago: executing program 0 (id=20574): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0x1, 0x4) 187.079789ms ago: executing program 1 (id=20575): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480), 0x0, 0x14) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) 185.809127ms ago: executing program 3 (id=20576): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @loopback}}) 54.069941ms ago: executing program 0 (id=20577): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x1000, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) io_setup(0x8, &(0x7f0000000100)) 52.356025ms ago: executing program 3 (id=20578): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) 0s ago: executing program 1 (id=20579): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x34}) kernel console output (not intermixed with test programs): 1457.191653][ T2116] usb 1-1: SerialNumber: syz [ 1457.428629][ T2116] usb 1-1: cannot find UAC_HEADER [ 1457.489101][ T2116] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1457.539851][ T2116] usb 1-1: USB disconnect, device number 15 [ 1457.594022][ T3515] udevd[3515]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1458.605633][ T3531] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13334'. [ 1460.070030][ T3557] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13345'. [ 1461.333988][T14782] Bluetooth: hci4: command 0x0406 tx timeout [ 1465.312481][T21651] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1465.490925][T21651] usb 3-1: Using ep0 maxpacket: 16 [ 1465.514769][T21651] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.526619][T21651] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1465.542557][T21651] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1465.551625][T21651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.589664][T21651] usb 3-1: config 0 descriptor?? [ 1465.808525][T21651] usbhid 3-1:0.0: can't add hid device: -71 [ 1465.824038][T21651] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1465.865473][T21651] usb 3-1: USB disconnect, device number 27 [ 1470.233113][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13481'. [ 1476.694247][T14782] Bluetooth: hci3: command 0x0406 tx timeout [ 1477.150276][ T4008] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13558'. [ 1479.840267][ T4064] futex_wake_op: syz.3.13585 tries to shift op by 32; fix this program [ 1481.826545][ T4112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13611'. [ 1482.020221][ T4121] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13613'. [ 1484.171564][ T4154] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13629'. [ 1484.857892][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.866102][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.014667][T27564] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1485.188438][T27564] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.205902][T27564] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1485.217766][T27564] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1485.229547][T27564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.248876][T27564] usb 4-1: Product: syz [ 1485.262669][T27564] usb 4-1: Manufacturer: syz [ 1485.269914][T27564] usb 4-1: SerialNumber: syz [ 1485.500647][T27564] usb 4-1: cannot find UAC_HEADER [ 1485.563578][T27564] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1485.606466][T27564] usb 4-1: USB disconnect, device number 19 [ 1485.650567][ T3932] udevd[3932]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1489.745109][ T4245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13672'. [ 1491.114671][ T4309] netlink: 140 bytes leftover after parsing attributes in process `syz.4.13701'. [ 1491.304267][ T4318] netlink: 92 bytes leftover after parsing attributes in process `syz.4.13706'. [ 1491.924169][ T4342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13715'. [ 1496.628500][ T4397] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13744'. [ 1497.082542][ T5902] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1497.253170][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 1497.267640][ T5902] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.289548][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1497.312512][ T5902] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1497.334045][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.358669][ T5902] usb 4-1: config 0 descriptor?? [ 1497.585262][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 1497.598624][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1497.627138][ T5902] usb 4-1: USB disconnect, device number 20 [ 1505.599262][ T4598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13842'. [ 1511.468821][ T4718] netlink: 140 bytes leftover after parsing attributes in process `syz.0.13894'. [ 1512.384391][ T4741] netlink: 140 bytes leftover after parsing attributes in process `syz.4.13912'. [ 1512.735189][ T4749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13916'. [ 1514.098556][ T4781] netlink: 140 bytes leftover after parsing attributes in process `syz.1.13934'. [ 1515.122590][ T5913] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1515.334162][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.354175][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1515.379116][ T5913] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1515.398998][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.413567][ T5913] usb 2-1: Product: syz [ 1515.421133][ T5913] usb 2-1: Manufacturer: syz [ 1515.432602][ T5913] usb 2-1: SerialNumber: syz [ 1515.688172][ T5913] usb 2-1: cannot find UAC_HEADER [ 1515.754217][ T5913] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1515.775709][ T5913] usb 2-1: USB disconnect, device number 13 [ 1515.839287][ T4821] udevd[4821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1517.664174][T14782] Bluetooth: hci5: command 0x0406 tx timeout [ 1518.342601][ T5913] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1518.502870][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 1518.529019][ T5913] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.550576][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1518.570868][ T5913] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1518.592747][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.609036][ T5913] usb 1-1: config 0 descriptor?? [ 1518.855133][ T5913] usbhid 1-1:0.0: can't add hid device: -71 [ 1518.878220][ T5913] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1518.913347][ T5913] usb 1-1: USB disconnect, device number 16 [ 1520.384083][ T5913] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1520.576361][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 1520.593903][ T5913] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1520.623074][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1520.640013][ T5913] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1520.671338][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.718078][ T5913] usb 2-1: config 0 descriptor?? [ 1520.961035][ T5913] usbhid 2-1:0.0: can't add hid device: -71 [ 1520.978010][ T5913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1521.024850][ T5913] usb 2-1: USB disconnect, device number 14 [ 1524.258732][ T5045] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14057'. [ 1525.188169][ T5066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14056'. [ 1525.489482][ T5073] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14070'. [ 1532.661227][ T5269] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14156'. [ 1534.746177][ T5323] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14183'. [ 1542.198297][ T5475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14258'. [ 1544.619781][ T5518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14277'. [ 1546.296710][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.303110][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.045894][ T5567] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14299'. [ 1550.692608][ T5902] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1550.857801][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.892661][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1550.914388][ T5902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1550.943732][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.951758][ T5902] usb 5-1: Product: syz [ 1550.972423][ T5902] usb 5-1: Manufacturer: syz [ 1550.977057][ T5902] usb 5-1: SerialNumber: syz [ 1551.209600][ T5902] usb 5-1: cannot find UAC_HEADER [ 1551.298266][ T5902] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1551.334687][ T5902] usb 5-1: USB disconnect, device number 20 [ 1551.391983][ T5661] udevd[5661]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1551.664609][ T5673] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14347'. [ 1555.654617][ T5777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14398'. [ 1555.685365][ T5777] netlink: 59 bytes leftover after parsing attributes in process `syz.3.14398'. [ 1555.727144][ T5777] netlink: 59 bytes leftover after parsing attributes in process `syz.3.14398'. [ 1556.200787][ T5793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14404'. [ 1559.639038][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14462'. [ 1576.075615][ T6157] netlink: 92 bytes leftover after parsing attributes in process `syz.2.14576'. [ 1584.115053][ T6361] netlink: 'syz.0.14672': attribute type 4 has an invalid length. [ 1585.561778][ T6408] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14694'. [ 1585.876217][ T6422] netlink: 140 bytes leftover after parsing attributes in process `syz.1.14701'. [ 1586.233176][ T6436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14707'. [ 1587.232074][ T6467] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14721'. [ 1588.657787][ T6487] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14732'. [ 1592.312489][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14742'. [ 1600.156184][ T6599] netlink: 92 bytes leftover after parsing attributes in process `syz.2.14786'. [ 1600.376217][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14787'. [ 1601.045214][ T6625] netlink: 92 bytes leftover after parsing attributes in process `syz.2.14797'. [ 1601.527094][ T5913] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1601.672654][ T5913] usb 4-1: device descriptor read/64, error -71 [ 1601.790464][ T6652] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14811'. [ 1601.833963][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14812'. [ 1601.913865][ T5913] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1602.048481][ T6672] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14818'. [ 1602.063572][ T5913] usb 4-1: device descriptor read/64, error -71 [ 1602.201615][ T5913] usb usb4-port1: attempt power cycle [ 1602.553814][ T6702] netlink: 140 bytes leftover after parsing attributes in process `syz.1.14832'. [ 1602.563411][ T5913] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1602.615331][ T5913] usb 4-1: device descriptor read/8, error -71 [ 1602.852693][ T5913] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1602.886299][ T5913] usb 4-1: device descriptor read/8, error -71 [ 1603.015474][ T5913] usb usb4-port1: unable to enumerate USB device [ 1605.482450][ T5913] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1605.537160][ T6805] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14884'. [ 1605.632427][ T5913] usb 2-1: device descriptor read/64, error -71 [ 1605.884444][ T5913] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1606.032455][ T5913] usb 2-1: device descriptor read/64, error -71 [ 1606.142851][ T5913] usb usb2-port1: attempt power cycle [ 1606.492446][ T5913] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1606.543069][ T5913] usb 2-1: device descriptor read/8, error -71 [ 1606.792442][ T5913] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1606.833013][ T5913] usb 2-1: device descriptor read/8, error -71 [ 1606.952661][ T5913] usb usb2-port1: unable to enumerate USB device [ 1607.742904][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.749533][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.522566][T27564] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1609.672705][T27564] usb 4-1: device descriptor read/64, error -71 [ 1609.932852][T27564] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1610.082414][T27564] usb 4-1: device descriptor read/64, error -71 [ 1610.192829][T27564] usb usb4-port1: attempt power cycle [ 1610.552587][T27564] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1610.613156][T27564] usb 4-1: device descriptor read/8, error -71 [ 1610.852620][T27564] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1610.901501][T27564] usb 4-1: device descriptor read/8, error -71 [ 1611.022776][T27564] usb usb4-port1: unable to enumerate USB device [ 1612.663284][ T6946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1612.672572][ T6946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1612.687047][ T6946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1612.704746][ T6946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1612.716322][ T6946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1613.129768][ T2959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.325052][ T2959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.426794][ T6966] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14959'. [ 1613.616862][ T2959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.910140][ T2959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.152827][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 1614.470337][ T2959] bridge_slave_1: left allmulticast mode [ 1614.477289][ T2959] bridge_slave_1: left promiscuous mode [ 1614.509156][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.589890][ T2959] bridge_slave_0: left allmulticast mode [ 1614.595890][ T2959] bridge_slave_0: left promiscuous mode [ 1614.601657][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.775158][ T5151] Bluetooth: hci1: command tx timeout [ 1615.726756][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.755862][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.774524][ T2959] bond0 (unregistering): Released all slaves [ 1616.048390][ T7033] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14984'. [ 1616.235905][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.250813][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.265934][ T6949] bridge_slave_0: entered allmulticast mode [ 1616.283981][ T6949] bridge_slave_0: entered promiscuous mode [ 1616.317964][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.332633][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.339885][ T6949] bridge_slave_1: entered allmulticast mode [ 1616.368097][ T6949] bridge_slave_1: entered promiscuous mode [ 1616.643981][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.812982][ T2959] hsr_slave_0: left promiscuous mode [ 1616.828594][ T2959] hsr_slave_1: left promiscuous mode [ 1616.843111][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1616.852864][ T5151] Bluetooth: hci1: command tx timeout [ 1616.870941][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1616.887456][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.895215][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1616.947870][ T2959] veth1_macvtap: left promiscuous mode [ 1616.965977][ T2959] veth0_macvtap: left promiscuous mode [ 1616.977603][ T2959] veth1_vlan: left promiscuous mode [ 1616.993021][ T2959] veth0_vlan: left promiscuous mode [ 1618.577366][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 1618.739218][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 1618.942607][ T5151] Bluetooth: hci1: command tx timeout [ 1620.065898][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.401455][ T6949] team0: Port device team_slave_0 added [ 1620.445180][ T7128] netlink: 140 bytes leftover after parsing attributes in process `syz.2.15019'. [ 1620.504818][ T6949] team0: Port device team_slave_1 added [ 1620.811578][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.834516][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.927661][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1621.012464][ T5151] Bluetooth: hci1: command tx timeout [ 1621.023174][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1621.038219][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.168460][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1621.509273][ T6949] hsr_slave_0: entered promiscuous mode [ 1621.540152][ T6949] hsr_slave_1: entered promiscuous mode [ 1623.864428][ T6949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1623.930226][ T6949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1623.981741][ T6949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1624.035102][ T6949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1624.358055][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1624.416535][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1624.448496][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.455693][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.547329][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.554518][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1624.790988][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1624.934364][ T6949] veth0_vlan: entered promiscuous mode [ 1624.977583][ T6949] veth1_vlan: entered promiscuous mode [ 1625.082736][ T6949] veth0_macvtap: entered promiscuous mode [ 1625.117226][ T6949] veth1_macvtap: entered promiscuous mode [ 1625.176886][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.216354][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1625.248881][ T3018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.298988][ T3018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.374176][ T3018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.405420][ T3018] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.607305][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.655801][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.782965][T26626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.799839][T26626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1628.515835][ T6946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1628.530998][ T6946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1628.541066][ T6946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1628.565060][ T6946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1628.573487][ T6946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1629.659765][ T7346] chnl_net:caif_netlink_parms(): no params data found [ 1630.067278][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.086704][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.107142][ T7346] bridge_slave_0: entered allmulticast mode [ 1630.133051][ T7346] bridge_slave_0: entered promiscuous mode [ 1630.163782][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.170960][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.197958][ T7346] bridge_slave_1: entered allmulticast mode [ 1630.236750][ T7346] bridge_slave_1: entered promiscuous mode [ 1630.518405][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.612887][ T6946] Bluetooth: hci0: command tx timeout [ 1630.639656][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.828161][ T3018] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.895570][ T7346] team0: Port device team_slave_0 added [ 1630.935763][ T7346] team0: Port device team_slave_1 added [ 1631.288420][ T3018] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.344410][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.351388][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.442427][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.464609][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.507377][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.612390][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.767284][ T3018] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.011768][ T3018] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.112147][ T7346] hsr_slave_0: entered promiscuous mode [ 1632.139673][ T7346] hsr_slave_1: entered promiscuous mode [ 1632.155953][ T7346] debugfs: 'hsr0' already exists in 'hsr' [ 1632.161724][ T7346] Cannot create hsr debugfs directory [ 1632.566443][ T3018] bridge_slave_1: left allmulticast mode [ 1632.572127][ T3018] bridge_slave_1: left promiscuous mode [ 1632.598582][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.639288][ T3018] bridge_slave_0: left allmulticast mode [ 1632.650673][ T3018] bridge_slave_0: left promiscuous mode [ 1632.666731][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.695283][ T6946] Bluetooth: hci0: command tx timeout [ 1633.504804][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.536381][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1633.558799][ T3018] bond0 (unregistering): Released all slaves [ 1634.204494][ T3018] hsr_slave_0: left promiscuous mode [ 1634.266096][ T3018] hsr_slave_1: left promiscuous mode [ 1634.295655][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.331080][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.368602][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.390500][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.502512][ T3018] veth1_macvtap: left promiscuous mode [ 1634.508096][ T3018] veth0_macvtap: left promiscuous mode [ 1634.523635][ T3018] veth1_vlan: left promiscuous mode [ 1634.549382][ T3018] veth0_vlan: left promiscuous mode [ 1634.772809][ T6946] Bluetooth: hci0: command tx timeout [ 1635.667332][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 1635.761162][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 1636.862716][ T6946] Bluetooth: hci0: command tx timeout [ 1637.229502][ T7346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1637.325658][ T7346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1637.398323][ T7346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1637.491345][ T7346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1637.861936][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1637.936373][ T7346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.957621][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.964826][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.024194][T12720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.031365][T12720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.195945][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1638.325403][ T7346] veth0_vlan: entered promiscuous mode [ 1638.350605][ T7346] veth1_vlan: entered promiscuous mode [ 1638.431216][ T7346] veth0_macvtap: entered promiscuous mode [ 1638.469240][ T7346] veth1_macvtap: entered promiscuous mode [ 1638.556313][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1638.603557][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1638.667369][T12720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.683564][T12720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.725735][T12720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.755464][T12720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.968249][T12720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.994835][T12720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.059210][T12720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.083273][T12720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.299681][ T7538] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15075'. [ 1640.341615][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15154'. [ 1640.389314][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1640.398855][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1640.407248][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1640.422627][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1640.433722][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1641.187678][ T3528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.458521][ T3528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.510254][ T7564] chnl_net:caif_netlink_parms(): no params data found [ 1641.686078][ T3528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.917579][ T3528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.003780][ T7564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.021289][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.041601][ T7564] bridge_slave_0: entered allmulticast mode [ 1642.059590][ T7564] bridge_slave_0: entered promiscuous mode [ 1642.087439][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.099057][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.112567][ T7564] bridge_slave_1: entered allmulticast mode [ 1642.127311][ T7564] bridge_slave_1: entered promiscuous mode [ 1642.412133][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15180'. [ 1642.429244][ T7564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.497359][ T7564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.536203][ T5151] Bluetooth: hci4: command tx timeout [ 1642.704682][ T7564] team0: Port device team_slave_0 added [ 1642.794998][ T7564] team0: Port device team_slave_1 added [ 1642.974588][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.981577][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.042502][ T7564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.138348][ T3528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1644.174693][ T3528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1644.195763][ T3528] bond0 (unregistering): Released all slaves [ 1644.279754][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.297087][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.376595][ T7564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1644.613096][ T5151] Bluetooth: hci4: command tx timeout [ 1644.774780][ T7564] hsr_slave_0: entered promiscuous mode [ 1644.803479][ T7564] hsr_slave_1: entered promiscuous mode [ 1644.813797][ T7564] debugfs: 'hsr0' already exists in 'hsr' [ 1644.826187][ T7564] Cannot create hsr debugfs directory [ 1645.274327][ T3528] hsr_slave_0: left promiscuous mode [ 1645.294584][ T3528] hsr_slave_1: left promiscuous mode [ 1645.315723][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1645.339953][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1645.379038][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1645.400071][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1645.457554][ T3528] veth1_macvtap: left promiscuous mode [ 1645.473784][ T3528] veth0_macvtap: left promiscuous mode [ 1645.486134][ T3528] veth1_vlan: left promiscuous mode [ 1645.498212][ T3528] veth0_vlan: left promiscuous mode [ 1646.342662][ T3528] team0 (unregistering): Port device team_slave_1 removed [ 1646.426165][ T3528] team0 (unregistering): Port device team_slave_0 removed [ 1646.697706][ T5151] Bluetooth: hci4: command tx timeout [ 1648.773932][ T5151] Bluetooth: hci4: command tx timeout [ 1648.836779][ T7564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1648.888494][ T7564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1648.926830][ T7564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1648.996664][ T7564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1649.069399][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15224'. [ 1649.164255][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15216'. [ 1649.397692][ T7564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.468390][ T7564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.504608][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.511817][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1649.582067][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.589281][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1649.816440][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.966649][ T7564] veth0_vlan: entered promiscuous mode [ 1650.025046][ T7564] veth1_vlan: entered promiscuous mode [ 1650.131743][ T7564] veth0_macvtap: entered promiscuous mode [ 1650.160819][ T7564] veth1_macvtap: entered promiscuous mode [ 1650.238599][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1650.294834][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1650.324653][T12720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.339389][T12720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.376527][T12720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.392755][T12720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.643109][T12720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.672419][T12720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.807103][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.827797][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.855874][ T6946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1653.865167][ T6946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1653.873602][ T6946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1653.882151][ T6946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1653.890210][ T6946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1654.425067][ T7879] chnl_net:caif_netlink_parms(): no params data found [ 1654.857983][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.902807][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.910065][ T7879] bridge_slave_0: entered allmulticast mode [ 1654.946883][ T7879] bridge_slave_0: entered promiscuous mode [ 1654.976655][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.002520][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.030187][ T7879] bridge_slave_1: entered allmulticast mode [ 1655.041906][ T7879] bridge_slave_1: entered promiscuous mode [ 1655.199221][ T7879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.240615][ T7879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1655.448429][ T7879] team0: Port device team_slave_0 added [ 1655.580836][ T3018] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.625989][ T7879] team0: Port device team_slave_1 added [ 1655.776880][ T3018] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.823772][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1655.845939][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.912402][ T7879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1655.936812][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1655.963706][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.972427][ T5151] Bluetooth: hci2: command tx timeout [ 1656.038167][ T7879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.139398][ T3018] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.365088][ T3018] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.445638][ T7879] hsr_slave_0: entered promiscuous mode [ 1656.453463][ T7879] hsr_slave_1: entered promiscuous mode [ 1656.460073][ T7879] debugfs: 'hsr0' already exists in 'hsr' [ 1656.492592][ T7879] Cannot create hsr debugfs directory [ 1657.139449][ T3018] bridge_slave_1: left allmulticast mode [ 1657.182411][ T3018] bridge_slave_1: left promiscuous mode [ 1657.188253][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.210290][ T3018] bridge_slave_0: left allmulticast mode [ 1657.216082][ T3018] bridge_slave_0: left promiscuous mode [ 1657.232264][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.052730][ T5151] Bluetooth: hci2: command tx timeout [ 1658.276000][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.326778][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.384163][ T3018] bond0 (unregistering): Released all slaves [ 1659.356127][ T3018] hsr_slave_0: left promiscuous mode [ 1659.402402][ T3018] hsr_slave_1: left promiscuous mode [ 1659.421711][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.452557][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.503253][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.541257][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.620563][ T3018] veth1_macvtap: left promiscuous mode [ 1659.646527][ T3018] veth0_macvtap: left promiscuous mode [ 1659.666887][ T3018] veth1_vlan: left promiscuous mode [ 1659.672261][ T3018] veth0_vlan: left promiscuous mode [ 1660.143550][ T5151] Bluetooth: hci2: command tx timeout [ 1661.136975][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 1661.216550][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 1661.955587][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15315'. [ 1662.212556][ T5151] Bluetooth: hci2: command tx timeout [ 1662.607953][ T7879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1662.647102][ T7879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1662.676187][ T7879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1662.701906][ T7879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1663.037425][ T7879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1663.113246][ T7879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1663.125185][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15326'. [ 1663.170233][T12720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.177442][T12720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.272739][T12720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.279939][T12720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1663.539249][ T7879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1663.665380][ T7879] veth0_vlan: entered promiscuous mode [ 1663.708916][ T7879] veth1_vlan: entered promiscuous mode [ 1663.807539][ T7879] veth0_macvtap: entered promiscuous mode [ 1663.824603][ T7879] veth1_macvtap: entered promiscuous mode [ 1663.861680][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1663.942224][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1663.981419][ T3018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.030677][ T3018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.078779][ T3018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.102560][ T3018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.260951][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.288126][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.331125][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.340880][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.599047][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15357'. [ 1666.787101][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15375'. [ 1667.950347][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15388'. [ 1669.185736][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.192077][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.742474][ T2116] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1669.902746][ T2116] usb 4-1: Using ep0 maxpacket: 16 [ 1669.914807][ T2116] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.932601][ T2116] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1669.947952][ T2116] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1669.981203][ T2116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.994358][ T2116] usb 4-1: config 0 descriptor?? [ 1670.206786][ T2116] usbhid 4-1:0.0: can't add hid device: -71 [ 1670.223943][ T2116] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1670.255280][ T2116] usb 4-1: USB disconnect, device number 29 [ 1671.552522][ T5902] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1671.712955][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 1671.730221][ T5902] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.752057][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1671.760076][ T5902] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1671.790815][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.826642][ T5902] usb 5-1: config 0 descriptor?? [ 1672.067025][ T5902] usbhid 5-1:0.0: can't add hid device: -71 [ 1672.093511][ T5902] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1672.114900][ T5902] usb 5-1: USB disconnect, device number 21 [ 1675.294547][ T7509] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1675.496403][ T7509] usb 2-1: Using ep0 maxpacket: 16 [ 1675.526728][ T7509] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1675.537866][ T7509] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1675.562432][ T7509] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1675.602670][ T7509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.649262][ T7509] usb 2-1: config 0 descriptor?? [ 1675.723716][ T8464] netlink: 92 bytes leftover after parsing attributes in process `syz.2.15522'. [ 1675.878150][ T7509] usbhid 2-1:0.0: can't add hid device: -71 [ 1675.892615][ T7509] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1675.913958][ T7509] usb 2-1: USB disconnect, device number 19 [ 1678.881491][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15556'. [ 1680.396560][ T6946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1680.405359][ T6946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1680.415675][ T6946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1680.424747][ T6946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1680.432532][ T6946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1680.881867][ T2959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.057562][ T2959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.222273][ T2959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.376478][ T2959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.847534][ T2959] bridge_slave_1: left allmulticast mode [ 1681.877449][ T2959] bridge_slave_1: left promiscuous mode [ 1681.895665][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.954914][ T2959] bridge_slave_0: left allmulticast mode [ 1681.989308][ T2959] bridge_slave_0: left promiscuous mode [ 1682.002558][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.532726][ T5151] Bluetooth: hci3: command tx timeout [ 1683.407513][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1683.443862][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1683.477187][ T2959] bond0 (unregistering): Released all slaves [ 1683.528566][ T8571] chnl_net:caif_netlink_parms(): no params data found [ 1684.318026][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.335846][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.356037][ T8571] bridge_slave_0: entered allmulticast mode [ 1684.383348][ T8571] bridge_slave_0: entered promiscuous mode [ 1684.415406][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.432465][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.439928][ T8571] bridge_slave_1: entered allmulticast mode [ 1684.458205][ T8571] bridge_slave_1: entered promiscuous mode [ 1684.613193][ T5151] Bluetooth: hci3: command tx timeout [ 1684.961236][ T8571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.015734][ T8571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.152675][ T2959] hsr_slave_0: left promiscuous mode [ 1685.171718][ T2959] hsr_slave_1: left promiscuous mode [ 1685.193742][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1685.206683][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1685.255611][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1685.275064][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.360646][ T2959] veth1_macvtap: left promiscuous mode [ 1685.375790][ T2959] veth0_macvtap: left promiscuous mode [ 1685.396604][ T2959] veth1_vlan: left promiscuous mode [ 1685.412231][ T2959] veth0_vlan: left promiscuous mode [ 1686.564756][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 1686.688420][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 1686.697385][ T5151] Bluetooth: hci3: command tx timeout [ 1687.947441][ T8571] team0: Port device team_slave_0 added [ 1688.008374][ T8571] team0: Port device team_slave_1 added [ 1688.206597][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.233454][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.307455][ T8571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.362513][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.369492][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.492391][ T8571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.746995][ T8571] hsr_slave_0: entered promiscuous mode [ 1688.772917][ T5151] Bluetooth: hci3: command tx timeout [ 1688.808875][ T8571] hsr_slave_1: entered promiscuous mode [ 1688.818660][ T8571] debugfs: 'hsr0' already exists in 'hsr' [ 1688.827976][ T8571] Cannot create hsr debugfs directory [ 1690.311495][ T8571] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1690.331741][ T8571] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1690.355901][ T8571] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1690.370760][ T8571] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1690.649317][ T8571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1690.729593][ T8571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1690.756624][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.763833][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.816121][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.823328][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.973305][ T8571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.090809][ T8571] veth0_vlan: entered promiscuous mode [ 1691.143820][ T8571] veth1_vlan: entered promiscuous mode [ 1691.280376][ T8571] veth0_macvtap: entered promiscuous mode [ 1691.326392][ T8571] veth1_macvtap: entered promiscuous mode [ 1691.391175][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1691.456238][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1691.488326][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.532192][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.558639][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.595144][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.838370][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.863894][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.959775][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.986683][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.144935][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15756'. [ 1708.502399][ T5945] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1708.671030][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 1708.678218][ T5945] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.702347][ T5945] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1708.709006][ T5945] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1708.762335][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.783366][ T5945] usb 2-1: config 0 descriptor?? [ 1708.994097][ T5945] usbhid 2-1:0.0: can't add hid device: -71 [ 1709.003915][ T5945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1709.040267][ T5945] usb 2-1: USB disconnect, device number 20 [ 1711.472026][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15819'. [ 1724.723272][ T30] audit: type=1326 audit(1763273220.610:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.4.15937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929bd8f6c9 code=0x7ffc0000 [ 1724.822386][ T30] audit: type=1326 audit(1763273220.610:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.4.15937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f929bd8df10 code=0x7ffc0000 [ 1724.922605][ T30] audit: type=1326 audit(1763273220.610:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.4.15937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f929bd8df10 code=0x7ffc0000 [ 1725.004786][ T30] audit: type=1326 audit(1763273220.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.4.15937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929bd8f6c9 code=0x7ffc0000 [ 1725.074489][ T30] audit: type=1326 audit(1763273220.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.4.15937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f929bd8f6c9 code=0x7ffc0000 [ 1725.137109][ T30] audit: type=1326 audit(1763273220.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.4.15937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929bd8f6c9 code=0x7ffc0000 [ 1725.192398][ T30] audit: type=1326 audit(1763273220.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.4.15937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f929bd8f6c9 code=0x7ffc0000 [ 1725.236819][ T30] audit: type=1326 audit(1763273220.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.4.15937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929bd8f6c9 code=0x7ffc0000 [ 1725.288990][ T30] audit: type=1326 audit(1763273220.650:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.4.15937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f929bd8f6c9 code=0x7ffc0000 [ 1725.339598][ T30] audit: type=1326 audit(1763273220.650:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.4.15937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929bd8f6c9 code=0x7ffc0000 [ 1725.848340][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15948'. [ 1727.116860][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15976'. [ 1730.616160][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.622825][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.817767][ T6946] Bluetooth: hci1: command 0x0406 tx timeout [ 1737.908604][ T9745] netlink: 52 bytes leftover after parsing attributes in process `syz.2.16081'. [ 1739.045129][ T5945] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1739.202438][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 1739.209826][ T5945] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.241041][ T5945] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1739.258858][ T5945] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1739.278295][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.301597][ T5945] usb 3-1: config 0 descriptor?? [ 1739.548728][ T5945] usbhid 3-1:0.0: can't add hid device: -71 [ 1739.564049][ T5945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1739.604379][ T5945] usb 3-1: USB disconnect, device number 28 [ 1739.857632][ T9798] futex_wake_op: syz.4.16104 tries to shift op by 32; fix this program [ 1742.454585][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16128'. [ 1745.672773][ T5945] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1745.862414][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 1745.879972][ T5945] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.911324][ T5945] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1745.918766][ T5945] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1745.945129][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.976432][ T5945] usb 2-1: config 0 descriptor?? [ 1746.187395][ T5945] usbhid 2-1:0.0: can't add hid device: -71 [ 1746.197147][ T5945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1746.233368][ T5945] usb 2-1: USB disconnect, device number 21 [ 1751.051465][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16224'. [ 1752.561882][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16239'. [ 1752.699177][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16241'. [ 1753.179517][ T5151] Bluetooth: hci0: command 0x0406 tx timeout [ 1761.177642][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16367'. [ 1763.416136][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 1763.952380][ T7509] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1764.122399][ T7509] usb 2-1: Using ep0 maxpacket: 16 [ 1764.134887][ T7509] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.146468][ T7509] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1764.166246][ T7509] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1764.196144][ T7509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.223332][ T7509] usb 2-1: config 0 descriptor?? [ 1764.459430][ T7509] usbhid 2-1:0.0: can't add hid device: -71 [ 1764.468673][ T7509] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1764.503203][ T7509] usb 2-1: USB disconnect, device number 22 [ 1770.740116][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16456'. [ 1772.507533][T10596] futex_wake_op: syz.0.16488 tries to shift op by 32; fix this program [ 1778.773279][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 1781.073073][T10746] netlink: 'syz.2.16559': attribute type 16 has an invalid length. [ 1781.116308][T10746] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.16559'. [ 1784.845255][T10811] netlink: 'syz.3.16588': attribute type 16 has an invalid length. [ 1784.856467][T10811] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.16588'. [ 1786.506593][T10846] netlink: 'syz.4.16603': attribute type 25 has an invalid length. [ 1789.779884][T10925] netlink: 'syz.3.16642': attribute type 25 has an invalid length. [ 1792.058750][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.065404][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.500264][T11015] netlink: 'syz.1.16683': attribute type 25 has an invalid length. [ 1795.887538][T11141] netlink: 'syz.3.16745': attribute type 25 has an invalid length. [ 1804.376140][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 1806.964650][T11247] futex_wake_op: syz.2.16791 tries to shift op by 32; fix this program [ 1808.044935][T11267] futex_wake_op: syz.3.16805 tries to shift op by 32; fix this program [ 1809.535721][T11306] netlink: 'syz.4.16823': attribute type 16 has an invalid length. [ 1809.572875][T11306] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.16823'. [ 1816.182338][ T2116] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1816.363804][ T2116] usb 1-1: Using ep0 maxpacket: 16 [ 1816.383595][ T2116] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.398844][ T2116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1816.412318][ T2116] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1816.421387][ T2116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.463019][ T2116] usb 1-1: config 0 descriptor?? [ 1816.674587][ T2116] usbhid 1-1:0.0: can't add hid device: -71 [ 1816.680615][ T2116] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1816.704816][ T2116] usb 1-1: USB disconnect, device number 17 [ 1826.542589][ T7737] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1826.702357][ T7737] usb 1-1: Using ep0 maxpacket: 16 [ 1826.723852][ T7737] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.742390][ T7737] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1826.749043][ T7737] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1826.792412][ T7737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.830918][ T7737] usb 1-1: config 0 descriptor?? [ 1827.050800][ T7737] usbhid 1-1:0.0: can't add hid device: -71 [ 1827.072554][ T7737] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1827.104091][ T7737] usb 1-1: USB disconnect, device number 18 [ 1832.418251][T11860] futex_wake_op: syz.0.17091 tries to shift op by 32; fix this program [ 1842.734103][ T7737] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1842.892690][ T7737] usb 5-1: Using ep0 maxpacket: 16 [ 1842.915544][ T7737] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.926905][ T7737] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1842.942558][ T7737] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1842.951632][ T7737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.983130][ T7737] usb 5-1: config 0 descriptor?? [ 1843.206489][ T7737] usbhid 5-1:0.0: can't add hid device: -71 [ 1843.222385][ T7737] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1843.242759][ T7737] usb 5-1: USB disconnect, device number 22 [ 1843.902603][T12151] netlink: 'syz.4.17228': attribute type 16 has an invalid length. [ 1843.933329][T12151] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.17228'. [ 1845.884833][T12212] netlink: 'syz.4.17259': attribute type 16 has an invalid length. [ 1845.932345][T12212] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.17259'. [ 1853.496837][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.503330][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.107831][T12508] binder: 12507:12508 ioctl c0306201 0 returned -14 [ 1862.386997][T12521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17407'. [ 1864.557337][T12587] netlink: 'syz.0.17437': attribute type 25 has an invalid length. [ 1864.996069][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17441'. [ 1866.586573][T12631] netlink: 'syz.1.17459': attribute type 25 has an invalid length. [ 1867.242339][ T7509] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1867.432501][ T7509] usb 3-1: Using ep0 maxpacket: 16 [ 1867.439457][ T7509] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1867.452267][ T7509] usb 3-1: config 0 has no interface number 0 [ 1867.472305][ T7509] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1867.502352][ T7509] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1867.537755][ T7509] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1867.560580][ T7509] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1867.582306][ T7509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.610683][ T7509] usb 3-1: Product: syz [ 1867.620808][ T7509] usb 3-1: Manufacturer: syz [ 1867.630935][ T7509] usb 3-1: SerialNumber: syz [ 1867.651840][ T7509] usb 3-1: config 0 descriptor?? [ 1867.672421][T12649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1867.679998][T12649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1867.918730][T12649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1867.942717][T12649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1868.161343][ T7509] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1868.194579][ T7509] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1868.239582][ T7509] usb 3-1: USB disconnect, device number 29 [ 1876.944687][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17553'. [ 1878.077389][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17565'. [ 1878.122333][ T2116] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1878.300346][ T2116] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1878.332578][ T2116] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1878.342253][ T2116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.350356][ T2116] usb 4-1: Product: syz [ 1878.357030][ T2116] usb 4-1: Manufacturer: syz [ 1878.362110][ T2116] usb 4-1: SerialNumber: syz [ 1878.853988][ T2116] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1879.455446][T12887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.487435][T12887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.773977][ C0] usblp0: nonzero write bulk status received: -71 [ 1880.785358][ T2116] usb 4-1: USB disconnect, device number 30 [ 1880.798155][T12853] usblp0: removed [ 1882.248934][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17595'. [ 1883.916263][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1883.927267][ T5151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1883.939067][ T5151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1883.947836][ T5151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1883.958000][ T5151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1885.099914][T12720] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.158947][T12985] chnl_net:caif_netlink_parms(): no params data found [ 1885.340183][T12720] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.476434][T12720] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.669062][T12720] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.004010][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.052400][ T5151] Bluetooth: hci5: command tx timeout [ 1886.052738][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.111971][T12985] bridge_slave_0: entered allmulticast mode [ 1886.134237][T12985] bridge_slave_0: entered promiscuous mode [ 1886.163982][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.171643][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.199637][T12985] bridge_slave_1: entered allmulticast mode [ 1886.224078][T12985] bridge_slave_1: entered promiscuous mode [ 1886.355587][T12985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1886.402813][T12985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1886.711200][T12985] team0: Port device team_slave_0 added [ 1886.735129][T12985] team0: Port device team_slave_1 added [ 1886.963494][T12985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1886.970572][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.017765][T12985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.029896][T12720] bridge_slave_1: left allmulticast mode [ 1887.036639][T12720] bridge_slave_1: left promiscuous mode [ 1887.043016][T12720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.054181][T12720] bridge_slave_0: left allmulticast mode [ 1887.059858][T12720] bridge_slave_0: left promiscuous mode [ 1887.068359][T12720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.132397][ T5151] Bluetooth: hci5: command tx timeout [ 1888.342696][T12720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1888.386376][T12720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1888.403123][T12720] bond0 (unregistering): Released all slaves [ 1888.467299][T12985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1888.495544][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1888.573268][T12985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.865705][T12985] hsr_slave_0: entered promiscuous mode [ 1888.886700][T12985] hsr_slave_1: entered promiscuous mode [ 1888.896233][T12985] debugfs: 'hsr0' already exists in 'hsr' [ 1888.901988][T12985] Cannot create hsr debugfs directory [ 1889.826271][T12720] hsr_slave_0: left promiscuous mode [ 1889.838545][T12720] hsr_slave_1: left promiscuous mode [ 1889.883230][T12720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1889.890741][T12720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1889.924075][T12720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1889.931490][T12720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1889.968209][T12720] veth1_macvtap: left promiscuous mode [ 1889.976543][T12720] veth0_macvtap: left promiscuous mode [ 1889.992558][T12720] veth1_vlan: left promiscuous mode [ 1889.997973][T12720] veth0_vlan: left promiscuous mode [ 1890.218387][ T5151] Bluetooth: hci5: command tx timeout [ 1890.660433][T12720] team0 (unregistering): Port device team_slave_1 removed [ 1890.744925][T12720] team0 (unregistering): Port device team_slave_0 removed [ 1892.302648][ T5151] Bluetooth: hci5: command tx timeout [ 1892.844566][T12985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1893.037730][T12985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1893.086350][T12985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1893.139442][T12985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1893.478805][T12985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1893.552271][T12985] 8021q: adding VLAN 0 to HW filter on device team0 [ 1893.596426][T26626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.603727][T26626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1893.704715][T12720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.711932][T12720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1893.854314][T12985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1893.959409][T12985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1894.106056][T12985] veth0_vlan: entered promiscuous mode [ 1894.152028][T12985] veth1_vlan: entered promiscuous mode [ 1894.284631][T12985] veth0_macvtap: entered promiscuous mode [ 1894.308566][T12985] veth1_macvtap: entered promiscuous mode [ 1894.376295][T12985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1894.438144][T12985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1894.479610][T26626] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.519910][T26626] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.625341][T26626] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.653963][T26626] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.864394][T12720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1894.888791][T12720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.001597][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.009556][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1902.425568][T13346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17761'. [ 1906.523602][T13445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17808'. [ 1910.963941][T13564] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17865'. [ 1912.902527][T27564] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1913.072304][T27564] usb 2-1: Using ep0 maxpacket: 16 [ 1913.072304][ T7737] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1913.074094][T27564] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.109273][T27564] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1913.117959][T27564] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1913.140505][T27564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.177079][T27564] usb 2-1: config 0 descriptor?? [ 1913.262291][ T7737] usb 3-1: Using ep0 maxpacket: 16 [ 1913.276480][ T7737] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1913.305103][ T7737] usb 3-1: config 0 has no interface number 0 [ 1913.334967][ T7737] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1913.379075][ T7737] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1913.404413][T27564] usbhid 2-1:0.0: can't add hid device: -71 [ 1913.408237][ T7737] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1913.412124][T27564] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1913.433985][ T7737] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1913.450488][ T7737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.482412][ T7737] usb 3-1: Product: syz [ 1913.490772][ T7737] usb 3-1: Manufacturer: syz [ 1913.508549][ T7737] usb 3-1: SerialNumber: syz [ 1913.529952][T27564] usb 2-1: USB disconnect, device number 23 [ 1913.549732][ T7737] usb 3-1: config 0 descriptor?? [ 1913.569655][T13633] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1913.587045][T13633] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1913.820924][T13633] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1913.841068][T13633] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1914.098751][ T7737] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1914.130768][ T7737] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1914.181053][ T7737] usb 3-1: USB disconnect, device number 30 [ 1914.942750][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.950263][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1923.723189][T13885] netlink: 'syz.1.18014': attribute type 16 has an invalid length. [ 1923.762340][T13885] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.18014'. [ 1926.481896][T13922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18037'. [ 1927.640085][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18049'. [ 1927.702317][ T7509] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1927.862291][ T7509] usb 1-1: Using ep0 maxpacket: 16 [ 1927.890493][ T7509] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.912504][ T7509] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1927.930433][ T7509] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1927.950598][ T7509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.986422][ T7509] usb 1-1: config 0 descriptor?? [ 1928.224587][ T7509] usbhid 1-1:0.0: can't add hid device: -71 [ 1928.231047][ T7509] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1928.286078][ T7509] usb 1-1: USB disconnect, device number 19 [ 1931.454808][T14037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1931.465575][T14037] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1931.474870][T14037] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1931.486046][T14037] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1931.494974][T14037] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1932.187052][ T3528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.404576][ T3528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.630184][ T3528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.888244][ T3528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.279291][T14038] chnl_net:caif_netlink_parms(): no params data found [ 1933.291452][T14063] netlink: 'syz.2.18101': attribute type 16 has an invalid length. [ 1933.304748][T14063] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.18101'. [ 1933.340578][ T3528] bridge_slave_1: left allmulticast mode [ 1933.346865][ T3528] bridge_slave_1: left promiscuous mode [ 1933.355189][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.399106][ T3528] bridge_slave_0: left allmulticast mode [ 1933.415730][ T3528] bridge_slave_0: left promiscuous mode [ 1933.421983][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.573679][ T5151] Bluetooth: hci0: command tx timeout [ 1934.425049][ T3528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1934.448042][ T3528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1934.474385][ T3528] bond0 (unregistering): Released all slaves [ 1935.268323][T14038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.292605][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.323241][T14038] bridge_slave_0: entered allmulticast mode [ 1935.331883][T14038] bridge_slave_0: entered promiscuous mode [ 1935.375008][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.402391][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.414631][T14038] bridge_slave_1: entered allmulticast mode [ 1935.443209][T14038] bridge_slave_1: entered promiscuous mode [ 1935.536970][ T3528] hsr_slave_0: left promiscuous mode [ 1935.564645][ T3528] hsr_slave_1: left promiscuous mode [ 1935.571992][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1935.621534][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1935.652429][ T5151] Bluetooth: hci0: command tx timeout [ 1935.668794][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1935.692302][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1935.769843][ T3528] veth1_macvtap: left promiscuous mode [ 1935.802844][ T3528] veth0_macvtap: left promiscuous mode [ 1935.809706][ T3528] veth1_vlan: left promiscuous mode [ 1935.822872][ T3528] veth0_vlan: left promiscuous mode [ 1936.697652][T14105] netlink: 'syz.1.18114': attribute type 16 has an invalid length. [ 1936.708531][T14105] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.18114'. [ 1936.998206][ T3528] team0 (unregistering): Port device team_slave_1 removed [ 1937.078829][ T3528] team0 (unregistering): Port device team_slave_0 removed [ 1937.591021][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1937.619784][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1937.733364][T14038] team0: Port device team_slave_0 added [ 1937.733499][ T5151] Bluetooth: hci0: command tx timeout [ 1937.750708][T14038] team0: Port device team_slave_1 added [ 1937.878272][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1937.888236][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.000458][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1938.093872][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1938.121541][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.181824][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.526187][T14038] hsr_slave_0: entered promiscuous mode [ 1938.563390][T14038] hsr_slave_1: entered promiscuous mode [ 1938.581563][T14038] debugfs: 'hsr0' already exists in 'hsr' [ 1938.609301][T14038] Cannot create hsr debugfs directory [ 1939.587815][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18141'. [ 1939.812846][ T5151] Bluetooth: hci0: command tx timeout [ 1940.383223][T14038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1940.446862][T14038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1940.516226][T14038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1940.556753][T14038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1940.969749][T14038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1941.053595][T14038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1941.095457][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1941.103493][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1941.176646][T26626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1941.184736][T26626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1941.329829][T14038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1941.492088][T14038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1941.648871][T14038] veth0_vlan: entered promiscuous mode [ 1941.684301][T14038] veth1_vlan: entered promiscuous mode [ 1941.811737][T14038] veth0_macvtap: entered promiscuous mode [ 1941.854943][T14038] veth1_macvtap: entered promiscuous mode [ 1941.947639][T14038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1941.993906][T14038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1942.092830][T26626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.129212][T26626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.170130][T26626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.237777][T26626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.438174][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1942.472792][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1942.532155][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1942.572328][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1943.682631][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18177'. [ 1944.282059][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18184'. [ 1946.232328][ T5902] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1946.422452][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 1946.435754][ T5902] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1946.472335][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1946.479538][ T5902] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1946.538467][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.565675][ T5902] usb 3-1: config 0 descriptor?? [ 1946.814495][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 1946.821437][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1946.853987][ T5902] usb 3-1: USB disconnect, device number 31 [ 1948.922434][ T2116] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1949.115818][ T2116] usb 1-1: Using ep0 maxpacket: 16 [ 1949.136153][ T2116] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1949.156430][ T2116] usb 1-1: config 0 has no interface number 0 [ 1949.187428][ T2116] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1949.222515][ T2116] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1949.254425][ T2116] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1949.274751][ T2116] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1949.292467][ T2116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.311036][ T2116] usb 1-1: Product: syz [ 1949.316218][ T2116] usb 1-1: Manufacturer: syz [ 1949.332237][ T2116] usb 1-1: SerialNumber: syz [ 1949.346075][ T2116] usb 1-1: config 0 descriptor?? [ 1949.367449][T14367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1949.382758][T14367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1949.603131][ T2116] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1949.662545][ T2116] usb 1-1: USB disconnect, device number 20 [ 1950.655249][T14037] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1950.668790][T14037] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1950.678473][T14037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1950.703163][T14037] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1950.732854][T14037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1950.986351][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.256035][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.459446][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.724268][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.044626][T14390] chnl_net:caif_netlink_parms(): no params data found [ 1952.377550][ T13] bridge_slave_1: left allmulticast mode [ 1952.402328][ T13] bridge_slave_1: left promiscuous mode [ 1952.432548][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.503376][ T13] bridge_slave_0: left allmulticast mode [ 1952.532515][ T13] bridge_slave_0: left promiscuous mode [ 1952.538627][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.773794][T14037] Bluetooth: hci1: command tx timeout [ 1954.277491][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1954.326628][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1954.373846][ T13] bond0 (unregistering): Released all slaves [ 1954.691096][T14390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.722395][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.730251][T14390] bridge_slave_0: entered allmulticast mode [ 1954.749174][T14390] bridge_slave_0: entered promiscuous mode [ 1954.808688][T14390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.826127][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.846549][T14390] bridge_slave_1: entered allmulticast mode [ 1954.862530][T14037] Bluetooth: hci1: command tx timeout [ 1954.874506][T14390] bridge_slave_1: entered promiscuous mode [ 1955.102050][T14390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1955.245634][ T13] hsr_slave_0: left promiscuous mode [ 1955.274807][ T13] hsr_slave_1: left promiscuous mode [ 1955.293301][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1955.301706][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1955.360945][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1955.383504][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1955.431217][ T13] veth1_macvtap: left promiscuous mode [ 1955.453151][ T13] veth0_macvtap: left promiscuous mode [ 1955.459516][ T13] veth1_vlan: left promiscuous mode [ 1955.492647][ T13] veth0_vlan: left promiscuous mode [ 1955.836448][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18242'. [ 1956.742412][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1956.872519][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1956.938260][T14037] Bluetooth: hci1: command tx timeout [ 1957.875474][T14390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1958.079704][T14390] team0: Port device team_slave_0 added [ 1958.131068][T14390] team0: Port device team_slave_1 added [ 1958.384052][T14390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1958.391572][T14390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1958.451461][T14390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1958.509326][T14390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1958.528015][T14390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1958.608990][T14390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1958.942875][T14390] hsr_slave_0: entered promiscuous mode [ 1958.971649][T14390] hsr_slave_1: entered promiscuous mode [ 1959.020495][T14037] Bluetooth: hci1: command tx timeout [ 1961.259287][T14390] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1961.343667][T14390] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1961.465909][T14390] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1961.509441][T14390] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1961.970168][T14390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1962.057176][T14390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1962.089161][T26626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.096822][T26626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1962.149000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.157908][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1962.713318][T14390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1962.965857][T14390] veth0_vlan: entered promiscuous mode [ 1963.025542][T14390] veth1_vlan: entered promiscuous mode [ 1963.129699][T14390] veth0_macvtap: entered promiscuous mode [ 1963.193671][T14390] veth1_macvtap: entered promiscuous mode [ 1963.274013][T14390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1963.316551][T14390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1963.373634][ T3528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.397836][ T3528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.456617][ T3528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.487029][ T3528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.702364][T12720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.755253][T12720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.867025][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.923426][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1966.368525][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1966.385364][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1966.406435][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1966.445623][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1966.470070][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1966.767268][ T2959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.091433][ T2959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.231047][ T2959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.366211][ T2959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.849952][T14698] chnl_net:caif_netlink_parms(): no params data found [ 1968.096370][ T2959] bridge_slave_1: left allmulticast mode [ 1968.118200][ T2959] bridge_slave_1: left promiscuous mode [ 1968.134125][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.164538][ T2959] bridge_slave_0: left allmulticast mode [ 1968.170669][ T2959] bridge_slave_0: left promiscuous mode [ 1968.178805][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.532489][T14037] Bluetooth: hci2: command tx timeout [ 1969.695725][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1969.724331][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1969.757294][ T2959] bond0 (unregistering): Released all slaves [ 1970.027519][T14698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.057272][T14698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.072427][T14698] bridge_slave_0: entered allmulticast mode [ 1970.101284][T14698] bridge_slave_0: entered promiscuous mode [ 1970.286888][T14698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.313123][T14698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.331678][T14698] bridge_slave_1: entered allmulticast mode [ 1970.357968][T14698] bridge_slave_1: entered promiscuous mode [ 1970.594433][T14698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1970.613862][T14037] Bluetooth: hci2: command tx timeout [ 1970.835637][T14698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1971.142832][ T2959] hsr_slave_0: left promiscuous mode [ 1971.190170][ T2959] hsr_slave_1: left promiscuous mode [ 1971.207805][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1971.236622][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1971.278329][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1971.308398][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1971.368211][ T2959] veth1_macvtap: left promiscuous mode [ 1971.405932][ T2959] veth0_macvtap: left promiscuous mode [ 1971.426644][ T2959] veth1_vlan: left promiscuous mode [ 1971.442466][ T2959] veth0_vlan: left promiscuous mode [ 1972.705150][T14037] Bluetooth: hci2: command tx timeout [ 1972.980489][T27564] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1973.051169][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 1973.157805][T27564] usb 5-1: Using ep0 maxpacket: 16 [ 1973.192943][T27564] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1973.214748][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 1973.222811][T27564] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1973.242492][T27564] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1973.272524][T27564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.325213][T27564] usb 5-1: config 0 descriptor?? [ 1973.549216][T27564] usbhid 5-1:0.0: can't add hid device: -71 [ 1973.565915][T27564] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1973.606275][T27564] usb 5-1: USB disconnect, device number 23 [ 1974.437849][T14698] team0: Port device team_slave_0 added [ 1974.473964][T14698] team0: Port device team_slave_1 added [ 1974.666477][T14698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1974.687495][T14698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.769490][T14698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1974.774754][T14037] Bluetooth: hci2: command tx timeout [ 1974.799558][T14698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1974.862382][T14698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.942345][T14698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1975.221085][T14698] hsr_slave_0: entered promiscuous mode [ 1975.260786][T14698] hsr_slave_1: entered promiscuous mode [ 1975.292816][T14698] debugfs: 'hsr0' already exists in 'hsr' [ 1975.310344][T14698] Cannot create hsr debugfs directory [ 1975.902698][ T2116] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1976.078575][ T2116] usb 3-1: Using ep0 maxpacket: 16 [ 1976.101821][ T2116] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1976.145778][ T2116] usb 3-1: config 0 has no interface number 0 [ 1976.170896][ T2116] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1976.200969][ T2116] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1976.242652][ T2116] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1976.263769][ T2116] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1976.282745][ T2116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.293715][ T2116] usb 3-1: Product: syz [ 1976.298360][ T2116] usb 3-1: Manufacturer: syz [ 1976.317469][ T2116] usb 3-1: SerialNumber: syz [ 1976.346029][ T2116] usb 3-1: config 0 descriptor?? [ 1976.377438][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.386325][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.389718][T14836] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1976.431074][T14836] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1976.584944][T14698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1976.635439][T14698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1976.666577][ T2116] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1976.678144][T14698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1976.709870][ T2116] usb 3-1: USB disconnect, device number 32 [ 1976.746568][T14698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1977.075350][T14698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1977.148126][T14698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1977.194862][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.202306][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1977.236380][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.243870][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1977.453477][T14698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1977.610917][T14698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1977.793421][T14698] veth0_vlan: entered promiscuous mode [ 1977.832074][T14698] veth1_vlan: entered promiscuous mode [ 1977.953158][T14698] veth0_macvtap: entered promiscuous mode [ 1977.992442][T14698] veth1_macvtap: entered promiscuous mode [ 1978.065304][T14698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1978.097540][T14698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1978.157376][T26626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.182106][T26626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.191306][T26626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.242247][T26626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.482433][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1978.490849][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1978.605753][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1978.644321][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1983.285440][T15029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18432'. [ 1984.490509][T15053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18444'. [ 1988.168040][T15143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18485'. [ 1988.267951][T15145] netlink: 'syz.2.18486': attribute type 16 has an invalid length. [ 1988.289250][T15145] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.18486'. [ 1989.046829][T15171] netlink: 'syz.0.18500': attribute type 16 has an invalid length. [ 1989.056001][T15171] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.18500'. [ 1991.039589][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18534'. [ 1991.659430][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18548'. [ 2006.862387][T12597] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 2007.045680][T12597] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2007.082305][T12597] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2007.089439][T12597] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 2007.122401][T12597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.145621][T12597] usb 2-1: config 0 descriptor?? [ 2007.362982][T12597] usbhid 2-1:0.0: can't add hid device: -71 [ 2007.369230][T12597] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2007.414987][T12597] usb 2-1: USB disconnect, device number 24 [ 2009.175145][ T5151] Bluetooth: hci5: command 0x0406 tx timeout [ 2010.084700][T15643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18727'. [ 2014.033009][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2014.054879][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2014.067814][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2014.079270][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2014.093783][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2014.697540][T15741] chnl_net:caif_netlink_parms(): no params data found [ 2014.915157][ T2959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.185396][ T2959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.538001][ T2959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.686555][T15741] bridge0: port 1(bridge_slave_0) entered blocking state [ 2015.705024][T15741] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.732785][T15741] bridge_slave_0: entered allmulticast mode [ 2015.741031][T15741] bridge_slave_0: entered promiscuous mode [ 2015.835260][ T2959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.877328][T15741] bridge0: port 2(bridge_slave_1) entered blocking state [ 2015.895815][T15741] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.923785][T15741] bridge_slave_1: entered allmulticast mode [ 2015.944462][T15741] bridge_slave_1: entered promiscuous mode [ 2016.126071][T15741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2016.142292][ T5151] Bluetooth: hci4: command tx timeout [ 2016.162999][T15741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2016.396224][T15741] team0: Port device team_slave_0 added [ 2016.467423][T15741] team0: Port device team_slave_1 added [ 2016.659238][T15741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2016.688924][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2016.752452][T15741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2016.832493][ T2959] bridge_slave_1: left allmulticast mode [ 2016.838882][ T2959] bridge_slave_1: left promiscuous mode [ 2016.873829][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2016.898299][ T2959] bridge_slave_0: left allmulticast mode [ 2016.912312][ T2959] bridge_slave_0: left promiscuous mode [ 2016.930549][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.010056][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2018.046518][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2018.061487][ T2959] bond0 (unregistering): Released all slaves [ 2018.086772][T15741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2018.103750][T15741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2018.156203][T15741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2018.214142][ T5151] Bluetooth: hci4: command tx timeout [ 2018.448404][T15741] hsr_slave_0: entered promiscuous mode [ 2018.463133][T15741] hsr_slave_1: entered promiscuous mode [ 2018.480232][T15741] debugfs: 'hsr0' already exists in 'hsr' [ 2018.489473][T15741] Cannot create hsr debugfs directory [ 2018.948749][ T2959] hsr_slave_0: left promiscuous mode [ 2018.964126][ T2959] hsr_slave_1: left promiscuous mode [ 2018.984214][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2019.019466][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2019.065357][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2019.092519][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2019.190040][ T2959] veth1_macvtap: left promiscuous mode [ 2019.203948][ T2959] veth0_macvtap: left promiscuous mode [ 2019.219955][ T2959] veth1_vlan: left promiscuous mode [ 2019.242554][ T2959] veth0_vlan: left promiscuous mode [ 2020.296052][ T5151] Bluetooth: hci4: command tx timeout [ 2020.370820][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 2020.498026][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 2021.477080][T15837] netlink: 388 bytes leftover after parsing attributes in process `syz.1.18807'. [ 2022.373798][ T5151] Bluetooth: hci4: command tx timeout [ 2022.959413][T15741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2023.004663][T15741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2023.073831][T15741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2023.125886][T15741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2023.470992][T15741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2023.558497][T15741] 8021q: adding VLAN 0 to HW filter on device team0 [ 2023.605521][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 2023.613618][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2023.676722][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 2023.685165][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2023.864961][T15741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2023.983391][T15741] veth0_vlan: entered promiscuous mode [ 2024.047994][T15741] veth1_vlan: entered promiscuous mode [ 2024.183763][T15741] veth0_macvtap: entered promiscuous mode [ 2024.226928][T15741] veth1_macvtap: entered promiscuous mode [ 2024.297233][T15741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2024.348980][T15741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2024.382555][ T3528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.438354][ T3528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.462470][ T3528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.496300][ T3528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.778431][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.811769][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.941292][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.978889][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2025.688337][T15982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18856'. [ 2028.183313][T16028] netlink: 388 bytes leftover after parsing attributes in process `syz.0.18866'. [ 2029.018602][T16056] netlink: 388 bytes leftover after parsing attributes in process `syz.0.18885'. [ 2029.752344][T27564] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2029.913716][T27564] usb 1-1: Using ep0 maxpacket: 8 [ 2029.940679][T27564] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2029.951298][T27564] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2029.971955][T27564] usb 1-1: can't read configurations, error -71 [ 2032.150264][T16154] netlink: 388 bytes leftover after parsing attributes in process `syz.1.18929'. [ 2036.437788][T16230] netlink: 92 bytes leftover after parsing attributes in process `syz.0.18965'. [ 2036.452451][T16230] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18965'. [ 2037.820629][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.828307][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.588686][T16311] netlink: 92 bytes leftover after parsing attributes in process `syz.3.18989'. [ 2039.612270][T16311] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18989'. [ 2039.823118][T16322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19009'. [ 2040.874854][T16344] netlink: 92 bytes leftover after parsing attributes in process `syz.4.19020'. [ 2040.942405][T16344] netlink: 56 bytes leftover after parsing attributes in process `syz.4.19020'. [ 2046.299543][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19074'. [ 2047.548823][T16478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19085'. [ 2048.180774][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19090'. [ 2050.064092][T16513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19102'. [ 2052.081779][T16536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19108'. [ 2053.924583][T16555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19122'. [ 2055.253670][T14037] Bluetooth: hci0: command 0x0406 tx timeout [ 2055.712269][T16579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19133'. [ 2058.219441][T16640] netlink: 268 bytes leftover after parsing attributes in process `syz.2.19160'. [ 2059.276808][T16689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19187'. [ 2062.020583][T16793] netlink: 'syz.4.19236': attribute type 11 has an invalid length. [ 2062.052459][T16793] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.19236'. [ 2062.571535][ T7737] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2062.732210][ T7737] usb 3-1: Using ep0 maxpacket: 16 [ 2062.749710][ T7737] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2062.766533][ T7737] usb 3-1: config 0 has no interface number 0 [ 2062.783525][ T7737] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2062.804302][ T7737] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2062.824735][ T7737] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2062.844712][ T7737] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2062.854301][ T7737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.872576][ T7737] usb 3-1: Product: syz [ 2062.882365][ T7737] usb 3-1: Manufacturer: syz [ 2062.900451][ T7737] usb 3-1: SerialNumber: syz [ 2062.921364][ T7737] usb 3-1: config 0 descriptor?? [ 2062.945386][T16804] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2062.962980][T16804] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2063.061093][T16822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19249'. [ 2063.185112][ T7737] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 2063.247279][ T7737] usb 3-1: USB disconnect, device number 33 [ 2063.601229][T16848] netlink: 92 bytes leftover after parsing attributes in process `syz.3.19261'. [ 2063.614476][T16848] netlink: 56 bytes leftover after parsing attributes in process `syz.3.19261'. [ 2065.230927][T16912] netlink: 'syz.3.19293': attribute type 11 has an invalid length. [ 2065.268414][T16912] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.19293'. [ 2068.401997][T17006] netlink: 268 bytes leftover after parsing attributes in process `syz.1.19334'. [ 2068.718309][T17021] netlink: 'syz.0.19341': attribute type 11 has an invalid length. [ 2068.740531][T17021] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.19341'. [ 2071.157242][T17067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19364'. [ 2074.024642][T17156] netlink: 'syz.3.19407': attribute type 11 has an invalid length. [ 2074.056286][T17156] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.19407'. [ 2075.735406][T14037] Bluetooth: hci1: command 0x0406 tx timeout [ 2076.447294][T17190] netlink: 268 bytes leftover after parsing attributes in process `syz.0.19423'. [ 2077.336043][T17194] x_tables: unsorted underflow at hook 2 [ 2079.159854][T17245] netlink: 268 bytes leftover after parsing attributes in process `syz.1.19451'. [ 2082.982428][T27564] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2083.152265][T27564] usb 2-1: Using ep0 maxpacket: 16 [ 2083.169738][T27564] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2083.182605][T27564] usb 2-1: config 0 has no interface number 0 [ 2083.202213][T27564] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2083.234220][T27564] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2083.258301][T27564] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2083.274846][T27564] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2083.292183][T27564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.302403][T27564] usb 2-1: Product: syz [ 2083.306597][T27564] usb 2-1: Manufacturer: syz [ 2083.322170][T27564] usb 2-1: SerialNumber: syz [ 2083.340745][T27564] usb 2-1: config 0 descriptor?? [ 2083.358126][T17292] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2083.372300][T17292] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2083.605232][T27564] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 2083.647829][T27564] usb 2-1: USB disconnect, device number 25 [ 2091.095874][T14037] Bluetooth: hci2: command 0x0406 tx timeout [ 2092.733736][ T7737] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2092.806968][T17470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19557'. [ 2092.924337][ T7737] usb 2-1: Using ep0 maxpacket: 16 [ 2092.938878][ T7737] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2092.952196][ T7737] usb 2-1: config 0 has no interface number 0 [ 2092.958354][ T7737] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2092.987005][ T7737] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2093.012444][ T7737] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2093.022056][ T7737] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2093.040153][ T7737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.058627][ T7737] usb 2-1: Product: syz [ 2093.068782][ T7737] usb 2-1: Manufacturer: syz [ 2093.081138][ T7737] usb 2-1: SerialNumber: syz [ 2093.104880][ T7737] usb 2-1: config 0 descriptor?? [ 2093.112624][T17464] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2093.120096][T17464] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2093.364038][ T7737] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 2093.404452][ T7737] usb 2-1: USB disconnect, device number 26 [ 2094.929074][T17516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19579'. [ 2097.323597][T17570] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19604'. [ 2097.342243][T17570] netlink: 59 bytes leftover after parsing attributes in process `syz.0.19604'. [ 2097.351311][T17570] netlink: 59 bytes leftover after parsing attributes in process `syz.0.19604'. [ 2098.002273][T27564] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2098.163469][T27564] usb 3-1: Using ep0 maxpacket: 16 [ 2098.180961][T27564] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2098.195956][T27564] usb 3-1: config 0 has no interface number 0 [ 2098.212374][T27564] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2098.232227][T27564] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2098.252175][T27564] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2098.265833][T27564] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2098.282241][T27564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.300557][T27564] usb 3-1: Product: syz [ 2098.305219][T27564] usb 3-1: Manufacturer: syz [ 2098.310185][T27564] usb 3-1: SerialNumber: syz [ 2098.337009][T27564] usb 3-1: config 0 descriptor?? [ 2098.352869][T17578] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2098.360578][T17578] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2098.583958][T27564] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 2098.634450][T27564] usb 3-1: USB disconnect, device number 34 [ 2099.260904][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.269178][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.428320][T17707] netlink: 92 bytes leftover after parsing attributes in process `syz.4.19669'. [ 2104.476631][T17707] netlink: 56 bytes leftover after parsing attributes in process `syz.4.19669'. [ 2106.102339][T27564] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2106.262209][T27564] usb 2-1: Using ep0 maxpacket: 16 [ 2106.274553][T27564] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2106.294625][T27564] usb 2-1: config 0 has no interface number 0 [ 2106.300766][T27564] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2106.331291][T27564] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2106.351775][T27564] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2106.364262][T27564] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2106.373798][T27564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.381808][T27564] usb 2-1: Product: syz [ 2106.412230][T27564] usb 2-1: Manufacturer: syz [ 2106.427253][T27564] usb 2-1: SerialNumber: syz [ 2106.443633][T27564] usb 2-1: config 0 descriptor?? [ 2106.463096][T17738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2106.470701][T17738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2106.688937][T27564] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 2106.721138][T27564] usb 2-1: USB disconnect, device number 27 [ 2110.928915][ T2116] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2111.093966][ T2116] usb 3-1: Using ep0 maxpacket: 16 [ 2111.101135][ T2116] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2111.110401][ T2116] usb 3-1: config 0 has no interface number 0 [ 2111.122726][ T2116] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2111.143928][ T2116] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2111.180798][ T2116] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2111.221654][ T2116] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2111.231526][ T2116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.262645][ T2116] usb 3-1: Product: syz [ 2111.268942][ T2116] usb 3-1: Manufacturer: syz [ 2111.295847][ T2116] usb 3-1: SerialNumber: syz [ 2111.318228][ T2116] usb 3-1: config 0 descriptor?? [ 2111.324095][T17827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2111.331388][T17827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2111.565418][ T2116] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 2111.613305][ T2116] usb 3-1: USB disconnect, device number 35 [ 2122.468838][T17971] netlink: 92 bytes leftover after parsing attributes in process `syz.3.19792'. [ 2122.502309][T17971] netlink: 56 bytes leftover after parsing attributes in process `syz.3.19792'. [ 2122.869484][T17979] netlink: 128 bytes leftover after parsing attributes in process `syz.3.19796'. [ 2127.791625][T18038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19821'. [ 2128.332606][T18050] fuseblk: Bad value for 'fd' [ 2129.057211][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19839'. [ 2129.272310][ T5902] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2129.465736][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 2129.473681][ T5902] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 2129.496872][ T5902] usb 5-1: config 0 has no interface number 0 [ 2129.513075][ T5902] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2129.532517][ T5902] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2129.552780][ T5902] usb 5-1: config 0 interface 41 has no altsetting 0 [ 2129.583362][ T5902] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2129.605710][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.619361][ T5902] usb 5-1: Product: syz [ 2129.624843][ T5902] usb 5-1: Manufacturer: syz [ 2129.630222][ T5902] usb 5-1: SerialNumber: syz [ 2129.642260][ T5902] usb 5-1: config 0 descriptor?? [ 2129.648106][T18067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2129.667661][T18067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2129.894670][ T5902] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 2129.950738][ T5902] usb 5-1: USB disconnect, device number 24 [ 2130.063848][T18099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19850'. [ 2133.287375][T18208] netlink: 92 bytes leftover after parsing attributes in process `syz.2.19903'. [ 2133.313010][T18208] netlink: 56 bytes leftover after parsing attributes in process `syz.2.19903'. [ 2134.394240][T18253] netlink: 268 bytes leftover after parsing attributes in process `syz.0.19923'. [ 2135.696650][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19954'. [ 2137.173295][T14037] Bluetooth: hci4: command 0x0406 tx timeout [ 2139.457826][T18402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19999'. [ 2142.107885][T18442] netlink: 'syz.1.20017': attribute type 11 has an invalid length. [ 2142.152216][T18442] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.20017'. [ 2143.408761][T18471] netlink: 'syz.1.20030': attribute type 11 has an invalid length. [ 2143.428042][T18471] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.20030'. [ 2144.487641][T18504] netlink: 'syz.2.20042': attribute type 11 has an invalid length. [ 2144.501049][T18505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20044'. [ 2144.502194][T18504] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.20042'. [ 2145.677631][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20064'. [ 2145.722295][T18541] bridge_slave_1: left allmulticast mode [ 2145.727977][T18541] bridge_slave_1: left promiscuous mode [ 2145.772518][T18541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2145.843249][T18541] bridge_slave_0: left allmulticast mode [ 2145.848942][T18541] bridge_slave_0: left promiscuous mode [ 2145.862660][T18541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.970241][T18740] netlink: 268 bytes leftover after parsing attributes in process `syz.4.20158'. [ 2154.592365][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20172'. [ 2154.970148][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20177'. [ 2154.979469][T18776] bridge_slave_1: left allmulticast mode [ 2154.985256][T18776] bridge_slave_1: left promiscuous mode [ 2154.993415][T18776] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.041611][T18776] bridge_slave_0: left allmulticast mode [ 2155.062171][T18776] bridge_slave_0: left promiscuous mode [ 2155.097636][T18776] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.749758][T18796] netlink: 388 bytes leftover after parsing attributes in process `syz.4.20186'. [ 2160.696361][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.703119][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.100459][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20256'. [ 2163.366909][T18975] netlink: 268 bytes leftover after parsing attributes in process `syz.3.20271'. [ 2163.691137][T18985] netlink: 388 bytes leftover after parsing attributes in process `syz.0.20277'. [ 2164.645859][T19011] netlink: 'syz.4.20288': attribute type 11 has an invalid length. [ 2164.662324][T19011] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.20288'. [ 2166.291510][T19033] netlink: 'syz.4.20299': attribute type 11 has an invalid length. [ 2166.317951][T19033] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.20299'. [ 2167.205858][T19065] netlink: 'syz.3.20314': attribute type 11 has an invalid length. [ 2167.240218][T19065] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.20314'. [ 2167.413939][T19071] netlink: 92 bytes leftover after parsing attributes in process `syz.3.20317'. [ 2167.434184][T19071] netlink: 56 bytes leftover after parsing attributes in process `syz.3.20317'. [ 2168.795143][T19117] fuseblk: Bad value for 'fd' [ 2170.445663][T19174] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20367'. [ 2172.046303][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20388'. [ 2175.134554][T19304] fuseblk: Unknown parameter '0x0000000000000009' [ 2175.429128][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20432'. [ 2177.322718][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20466'. [ 2180.301838][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20498'. [ 2183.269275][T19496] netlink: 'syz.1.20520': attribute type 11 has an invalid length. [ 2183.288094][T19496] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.20520'. [ 2185.442908][T19552] netlink: 'syz.3.20549': attribute type 11 has an invalid length. [ 2185.464133][T19552] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.20549'. [ 2186.757006][T19617] ------------[ cut here ]------------ [ 2186.762607][T19617] WARNING: CPU: 1 PID: 19617 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 2186.770905][T19617] Modules linked in: [ 2186.775271][T19617] CPU: 1 UID: 0 PID: 19617 Comm: syz.0.20577 Not tainted syzkaller #0 PREEMPT(full) [ 2186.784862][T19617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2186.795157][T19617] RIP: 0010:path_noexec+0x1af/0x200 [ 2186.800404][T19617] Code: 02 31 ff 48 89 de e8 70 8e 87 ff d1 eb eb 07 e8 87 89 87 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 89 87 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 2186.820501][T19617] RSP: 0018:ffffc9000e79fbd8 EFLAGS: 00010287 [ 2186.826676][T19617] RAX: ffffffff82387a6e RBX: ffff88805fc433c0 RCX: 0000000000080000 [ 2186.834887][T19617] RDX: ffffc9001de90000 RSI: 000000000000006b RDI: 000000000000006c [ 2186.843755][T19617] RBP: 0000000000080000 R08: ffff8880262b1e40 R09: 0000000000000003 [ 2186.851759][T19617] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 2186.861120][T19617] R13: 1ffff92001cf3f90 R14: 0000000000000000 R15: dffffc0000000000 [ 2186.869516][T19617] FS: 00007fc740ab96c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 2186.878681][T19617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2186.885463][T19617] CR2: 00000000000000da CR3: 000000006a15e000 CR4: 00000000003526f0 [ 2186.893592][T19617] Call Trace: [ 2186.897241][T19617] [ 2186.900195][T19617] do_mmap+0xa43/0x10d0 [ 2186.904691][T19617] ? __pfx_do_mmap+0x10/0x10 [ 2186.909312][T19617] ? down_write_killable+0x178/0x230 [ 2186.914980][T19617] ? __pfx_down_write_killable+0x10/0x10 [ 2186.920635][T19617] ? common_file_perm+0x1b5/0x230 [ 2186.926653][T19617] vm_mmap_pgoff+0x2a6/0x4d0 [ 2186.931490][T19617] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2186.936843][T19617] ? __fget_files+0x2a/0x420 [ 2186.942498][T19617] ? __fget_files+0x2a/0x420 [ 2186.947220][T19617] ? __fget_files+0x2a/0x420 [ 2186.952689][T19617] ksys_mmap_pgoff+0x51f/0x760 [ 2186.957507][T19617] do_syscall_64+0xfa/0xfa0 [ 2186.962276][T19617] ? lockdep_hardirqs_on+0x9c/0x150 [ 2186.967563][T19617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.973881][T19617] ? clear_bhb_loop+0x60/0xb0 [ 2186.978948][T19617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.984996][T19617] RIP: 0033:0x7fc73fb8f6c9 [ 2186.989448][T19617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2187.009166][T19617] RSP: 002b:00007fc740ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2187.017867][T19617] RAX: ffffffffffffffda RBX: 00007fc73fde5fa0 RCX: 00007fc73fb8f6c9 [ 2187.025951][T19617] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 2187.033980][T19617] RBP: 00007fc73fc11f91 R08: 0000000000000005 R09: 0000000000000000 [ 2187.043093][T19617] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 2187.051110][T19617] R13: 00007fc73fde6038 R14: 00007fc73fde5fa0 R15: 00007fc73ff0fa28 [ 2187.059864][T19617] [ 2187.062987][T19617] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2187.070288][T19617] CPU: 1 UID: 0 PID: 19617 Comm: syz.0.20577 Not tainted syzkaller #0 PREEMPT(full) [ 2187.079849][T19617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2187.089920][T19617] Call Trace: [ 2187.093252][T19617] [ 2187.096197][T19617] dump_stack_lvl+0x99/0x250 [ 2187.100865][T19617] ? __asan_memcpy+0x40/0x70 [ 2187.105512][T19617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2187.110825][T19617] ? __pfx__printk+0x10/0x10 [ 2187.115557][T19617] vpanic+0x237/0x6d0 [ 2187.119829][T19617] ? __pfx_vpanic+0x10/0x10 [ 2187.124377][T19617] panic+0xb9/0xc0 [ 2187.128129][T19617] ? __pfx_panic+0x10/0x10 [ 2187.132647][T19617] __warn+0x31b/0x4b0 [ 2187.136700][T19617] ? path_noexec+0x1af/0x200 [ 2187.141308][T19617] ? path_noexec+0x1af/0x200 [ 2187.146086][T19617] report_bug+0x2be/0x4f0 [ 2187.150512][T19617] ? path_noexec+0x1af/0x200 [ 2187.155099][T19617] ? path_noexec+0x1af/0x200 [ 2187.159686][T19617] ? path_noexec+0x1b1/0x200 [ 2187.164270][T19617] handle_bug+0x84/0x160 [ 2187.168509][T19617] exc_invalid_op+0x1a/0x50 [ 2187.173001][T19617] asm_exc_invalid_op+0x1a/0x20 [ 2187.178120][T19617] RIP: 0010:path_noexec+0x1af/0x200 [ 2187.183312][T19617] Code: 02 31 ff 48 89 de e8 70 8e 87 ff d1 eb eb 07 e8 87 89 87 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 89 87 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 2187.202920][T19617] RSP: 0018:ffffc9000e79fbd8 EFLAGS: 00010287 [ 2187.208976][T19617] RAX: ffffffff82387a6e RBX: ffff88805fc433c0 RCX: 0000000000080000 [ 2187.216936][T19617] RDX: ffffc9001de90000 RSI: 000000000000006b RDI: 000000000000006c [ 2187.224908][T19617] RBP: 0000000000080000 R08: ffff8880262b1e40 R09: 0000000000000003 [ 2187.232867][T19617] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 2187.240827][T19617] R13: 1ffff92001cf3f90 R14: 0000000000000000 R15: dffffc0000000000 [ 2187.248796][T19617] ? path_noexec+0x1ae/0x200 [ 2187.253394][T19617] ? path_noexec+0x1ae/0x200 [ 2187.258164][T19617] do_mmap+0xa43/0x10d0 [ 2187.262344][T19617] ? __pfx_do_mmap+0x10/0x10 [ 2187.266977][T19617] ? down_write_killable+0x178/0x230 [ 2187.272349][T19617] ? __pfx_down_write_killable+0x10/0x10 [ 2187.278264][T19617] ? common_file_perm+0x1b5/0x230 [ 2187.283378][T19617] vm_mmap_pgoff+0x2a6/0x4d0 [ 2187.287970][T19617] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2187.293073][T19617] ? __fget_files+0x2a/0x420 [ 2187.297661][T19617] ? __fget_files+0x2a/0x420 [ 2187.302359][T19617] ? __fget_files+0x2a/0x420 [ 2187.306941][T19617] ksys_mmap_pgoff+0x51f/0x760 [ 2187.311934][T19617] do_syscall_64+0xfa/0xfa0 [ 2187.316444][T19617] ? lockdep_hardirqs_on+0x9c/0x150 [ 2187.321663][T19617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.327747][T19617] ? clear_bhb_loop+0x60/0xb0 [ 2187.332469][T19617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.338388][T19617] RIP: 0033:0x7fc73fb8f6c9 [ 2187.342833][T19617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2187.362444][T19617] RSP: 002b:00007fc740ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2187.370943][T19617] RAX: ffffffffffffffda RBX: 00007fc73fde5fa0 RCX: 00007fc73fb8f6c9 [ 2187.379012][T19617] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 2187.386978][T19617] RBP: 00007fc73fc11f91 R08: 0000000000000005 R09: 0000000000000000 [ 2187.394940][T19617] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 2187.402911][T19617] R13: 00007fc73fde6038 R14: 00007fc73fde5fa0 R15: 00007fc73ff0fa28 [ 2187.410907][T19617] [ 2187.414064][T19617] Kernel Offset: disabled [ 2187.418386][T19617] Rebooting in 86400 seconds..