last executing test programs: 2m39.6543447s ago: executing program 1 (id=11108): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5f114b60, 0x11, r6, 0x0) 2m37.355233385s ago: executing program 1 (id=11110): r0 = socket$inet(0x2, 0x3, 0x8d) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000140)) 2m36.692522441s ago: executing program 1 (id=11114): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4) clock_adjtime(0x7, &(0x7f00000001c0)={0x3, 0x2400000, 0x0, 0x1, 0x7, 0x1, 0x0, 0x7, 0xe6, 0x0, 0x9, 0xe4f, 0x2, 0xf, 0x3, 0xe45, 0x6, 0x8, 0x27, 0x8000000000000000, 0x9, 0x1, 0x2, 0x8000000000000000, 0xa}) 2m32.613839743s ago: executing program 1 (id=11119): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default '], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 2m29.55638786s ago: executing program 1 (id=11123): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002abd7000fddbdf2501000000400008803c00008024000100dbffffffffffffffffffffffffffff0500000000000000ffffffffffffffffff1400040002004e2200000000000000000000000008000100", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2m26.869853109s ago: executing program 1 (id=11127): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0}]) shutdown(r2, 0x0) 2m11.219865644s ago: executing program 32 (id=11127): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0}]) shutdown(r2, 0x0) 19.820984868s ago: executing program 2 (id=11330): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 17.157009991s ago: executing program 2 (id=11334): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000002900000043"], 0x10}}], 0x1, 0x20040000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) listen(r4, 0x1000) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 15.881863108s ago: executing program 0 (id=11335): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="500100001000130725bd705fee521071a1a0a5c7232047bc674b7c5000fcdbdf", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 14.509845653s ago: executing program 4 (id=11337): capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x84, 0xffffffff, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 13.649770262s ago: executing program 2 (id=11338): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) 13.09920937s ago: executing program 3 (id=11339): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0xa4}, {0x4c, 0x0, 0x0, 0x10000}, {0x6}]}) 11.495196997s ago: executing program 4 (id=11340): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 11.015613154s ago: executing program 0 (id=11341): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 11.002304145s ago: executing program 3 (id=11342): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40084) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 10.989304439s ago: executing program 2 (id=11343): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) add_key(&(0x7f00000001c0)='rxrpc\x00', 0x0, &(0x7f0000000240)="6f729d2eb78a87e1d20a71e1a3c19a6f0fdf0fdc34475d3ee66e3b6d7965", 0x1e, 0xfffffffffffffffe) 9.28593716s ago: executing program 4 (id=11344): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000040)={0x20002, r3, 0x1}) 9.285398795s ago: executing program 3 (id=11345): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 9.205374215s ago: executing program 2 (id=11346): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 8.27604469s ago: executing program 0 (id=11347): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000002900000043"], 0x10}}], 0x1, 0x20040000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) listen(r4, 0x1000) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 7.996385596s ago: executing program 4 (id=11348): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r1, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rthdr={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x1, 0x5}}}], 0x18}}, {{&(0x7f0000002e40)={0xa, 0x4e23, 0x1000, @empty, 0x5}, 0x1c, &(0x7f0000002e80)}}], 0x2, 0x14) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 5.63588894s ago: executing program 0 (id=11349): capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x84, 0xffffffff, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2942], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.484553181s ago: executing program 3 (id=11350): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="500100001000130725bd705fee521071a1a0a5c7232047bc674b7c5000fcdbdf", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa000000fe32000000e000000100000000000000000000000000000000000000000000000000000000ffffffffffffffff080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000fffffffdffffff7f0000000000000000000000000000000000000000000000000000000028bd7000ff3400000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000217d66d38547aa14"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5.479595936s ago: executing program 4 (id=11351): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x18, r6, 0x7, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.139348326s ago: executing program 0 (id=11352): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0xa4}, {0x4c, 0x0, 0x0, 0x10000}, {0x6}]}) 2.583889601s ago: executing program 2 (id=11353): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x20002, 0xffffffffffffffff, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000140)={r7}) 2.349006211s ago: executing program 3 (id=11354): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x40082) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x7, 0x2, 0x6d, 0x1}, 0x3, 0x6, 0x0, 0xed, 0x0, 0x8}}) 2.348448685s ago: executing program 4 (id=11355): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read(r4, &(0x7f0000000040)=""/122, 0x7a) 522.178349ms ago: executing program 3 (id=11356): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=11357): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="020200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000006465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) kernel console output (not intermixed with test programs): 135][T20517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.516281][T20517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.569224][ T992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.569525][ T992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.569783][ T992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.569824][ T992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.139609][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.139631][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.355283][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.355307][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.237507][T21005] netlink: 'syz.3.6703': attribute type 2 has an invalid length. [ 1079.237533][T21005] netlink: 'syz.3.6703': attribute type 1 has an invalid length. [ 1079.946898][T21022] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6700'. [ 1080.291686][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.927428][T21050] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6722'. [ 1081.802950][T21073] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6734'. [ 1082.735877][T21099] tmpfs: Bad value for 'mpol' [ 1083.062228][T21113] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1092.593250][T18310] Bluetooth: hci2: command 0x0406 tx timeout [ 1094.896789][T21323] tmpfs: Bad value for 'mpol' [ 1096.591772][T21349] netlink: 'syz.3.6864': attribute type 16 has an invalid length. [ 1096.591800][T21349] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.6864'. [ 1098.157317][T21400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6887'. [ 1098.387153][T21409] netlink: 'syz.4.6890': attribute type 1 has an invalid length. [ 1098.387177][T21409] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6890'. [ 1100.273842][T21481] netlink: 'syz.3.6924': attribute type 16 has an invalid length. [ 1100.273867][T21481] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1100.277159][T21483] netlink: 'syz.4.6923': attribute type 1 has an invalid length. [ 1101.448634][T21518] loop5: detected capacity change from 0 to 7 [ 1102.221570][T21518] Dev loop5: unable to read RDB block 7 [ 1102.221650][T21518] loop5: unable to read partition table [ 1102.221912][T21518] loop5: partition table beyond EOD, truncated [ 1102.221956][T21518] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 1102.461517][T21538] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1106.066012][T21621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1108.453778][T21674] netlink: 'syz.3.7013': attribute type 1 has an invalid length. [ 1108.623859][T21678] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1110.114332][T21703] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1110.829662][T21710] @: renamed from vlan0 (while UP) [ 1112.777553][T21739] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1113.283778][T21755] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1114.089910][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7061'. [ 1114.651215][T21780] netlink: 'syz.0.7060': attribute type 1 has an invalid length. [ 1114.651499][T21780] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7060'. [ 1115.204816][T21777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.274158][T21777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.318669][T21777] bond0 (unregistering): Released all slaves [ 1117.271288][T21839] netlink: 'syz.0.7090': attribute type 1 has an invalid length. [ 1117.847354][T21850] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7093'. [ 1118.205847][T18310] Bluetooth: hci4: command 0x0406 tx timeout [ 1118.536460][T21867] netlink: 'syz.4.7102': attribute type 1 has an invalid length. [ 1120.614330][T21900] netlink: 'syz.2.7118': attribute type 1 has an invalid length. [ 1120.918510][T21905] netlink: 'syz.4.7120': attribute type 1 has an invalid length. [ 1120.918535][T21905] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1120.951449][T21908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1121.237775][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.237877][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.960668][T21961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7148'. [ 1123.362828][T21975] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1126.115387][T22062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.459247][T22062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.471402][T22098] netlink: 'syz.0.7213': attribute type 16 has an invalid length. [ 1128.471428][T22098] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.7213'. [ 1128.972286][T22111] @: renamed from vlan0 (while UP) [ 1129.623278][T22125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7226'. [ 1130.978536][T22149] netlink: 'syz.3.7237': attribute type 1 has an invalid length. [ 1130.978560][T22149] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7237'. [ 1133.502144][T22191] netlink: 'syz.4.7256': attribute type 16 has an invalid length. [ 1133.502170][T22191] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.7256'. [ 1135.291365][T22220] netlink: 'syz.1.7268': attribute type 16 has an invalid length. [ 1135.291392][T22220] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1137.131440][T22257] netlink: 'syz.2.7285': attribute type 1 has an invalid length. [ 1137.757568][T22272] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7292'. [ 1140.575202][T22331] overlayfs: missing 'lowerdir' [ 1142.218538][T22351] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7330'. [ 1142.439061][T22355] overlayfs: missing 'lowerdir' [ 1143.084469][T22361] blktrace: Concurrent blktraces are not allowed on sg0 [ 1144.236843][T22378] netlink: 'syz.4.7341': attribute type 16 has an invalid length. [ 1144.236870][T22378] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.7341'. [ 1145.293772][T22394] overlayfs: missing 'lowerdir' [ 1145.708698][T22405] tmpfs: Bad value for 'mpol' [ 1145.758799][T22407] netlink: 'syz.2.7354': attribute type 1 has an invalid length. [ 1146.733990][T22432] tmpfs: Bad value for 'mpol' [ 1148.303890][T22461] @: renamed from vlan0 (while UP) [ 1148.716460][T22467] devpts: Bad value for 'uid' [ 1148.716487][T22467] devpts: Bad value for 'uid' [ 1148.810166][T22471] overlayfs: missing 'workdir' [ 1148.913460][T18310] Bluetooth: hci3: command 0x0406 tx timeout [ 1149.472419][T22488] @: renamed from vlan0 (while UP) [ 1150.054009][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7399'. [ 1151.384811][T22503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.494237][T22503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1151.546950][T22503] bond0 (unregistering): Released all slaves [ 1153.492031][T22563] devpts: Unknown parameter '00000000000000000000' [ 1154.536661][T22580] blktrace: Concurrent blktraces are not allowed on sg0 [ 1155.140874][T22586] devpts: Unknown parameter '00000000000000000000' [ 1156.230027][T22603] netlink: 'syz.4.7443': attribute type 1 has an invalid length. [ 1156.230052][T22603] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7443'. [ 1156.380091][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7444'. [ 1156.835131][T22614] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7447'. [ 1157.015168][T22618] devpts: Unknown parameter '00000000000000000000' [ 1157.691650][T22606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.764070][T22606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.816772][T22606] bond0 (unregistering): Released all slaves [ 1159.315157][T22657] devpts: Unknown parameter '00000000000000000000' [ 1161.615360][T22687] netlink: 'syz.0.7478': attribute type 1 has an invalid length. [ 1161.615394][T22687] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7478'. [ 1162.060519][T22690] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7480'. [ 1162.167310][T22692] wireguard: wg1: Could not create IPv4 socket [ 1164.201125][T22713] binder: 22712:22713 ioctl c0306201 2000000001c0 returned -14 [ 1165.842026][T22737] binder: 22736:22737 ioctl c0306201 2000000001c0 returned -14 [ 1168.224610][T22759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7513'. [ 1168.983694][T22777] binder: 22776:22777 ioctl c0306201 2000000001c0 returned -14 [ 1174.523122][T18310] Bluetooth: hci5: command 0x0406 tx timeout [ 1175.130731][T22882] netlink: 'syz.1.7565': attribute type 1 has an invalid length. [ 1176.493624][T22920] netlink: 'syz.2.7581': attribute type 1 has an invalid length. [ 1177.647275][T22949] netlink: 'syz.1.7596': attribute type 1 has an invalid length. [ 1177.840149][T22954] blktrace: Concurrent blktraces are not allowed on sg0 [ 1179.873724][T22997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7618'. [ 1180.474218][T23013] blktrace: Concurrent blktraces are not allowed on sg0 [ 1180.881574][T23021] netlink: 'syz.0.7629': attribute type 16 has an invalid length. [ 1180.881611][T23021] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.7629'. [ 1182.238429][T23041] tmpfs: Bad value for 'mpol' [ 1182.688453][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.688559][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.695206][T23130] overlay: Unknown parameter 'hash' [ 1186.858551][T23132] tmpfs: Bad value for 'mpol' [ 1188.431611][T23157] tmpfs: Bad value for 'mpol' [ 1189.389613][T23174] wireguard: wg1: Could not create IPv4 socket [ 1190.428240][T23194] netlink: 'syz.1.7712': attribute type 1 has an invalid length. [ 1190.428265][T23194] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7712'. [ 1195.228528][T23229] netlink: 'syz.1.7729': attribute type 16 has an invalid length. [ 1195.228554][T23229] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.7729'. [ 1200.582199][T23284] @: renamed from vlan0 (while UP) [ 1201.367544][T23296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7753'. [ 1204.920184][T23340] wireguard: wg1: Could not create IPv4 socket [ 1205.034014][T23342] netlink: 'syz.0.7774': attribute type 1 has an invalid length. [ 1205.034036][T23342] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7774'. [ 1205.509901][T23355] netlink: 'syz.4.7778': attribute type 16 has an invalid length. [ 1205.509937][T23355] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.7778'. [ 1211.977820][T23450] netlink: 'syz.3.7834': attribute type 1 has an invalid length. [ 1211.977845][T23450] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1213.884611][T23475] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7846'. [ 1215.685774][T23503] netlink: 'syz.3.7858': attribute type 16 has an invalid length. [ 1215.685798][T23503] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.7858'. [ 1215.957206][T23510] netlink: 'syz.3.7859': attribute type 1 has an invalid length. [ 1215.957232][T23510] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7859'. [ 1216.664040][T23529] netlink: 'syz.4.7870': attribute type 16 has an invalid length. [ 1216.664059][T23529] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.7870'. [ 1220.548997][T23589] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7900'. [ 1225.817991][T23637] overlay: Unknown parameter 'hash' [ 1226.378989][T23646] tmpfs: Bad value for 'mpol' [ 1229.058168][T23675] tmpfs: Bad value for 'mpol' [ 1229.301583][T23677] netlink: 'syz.3.7942': attribute type 16 has an invalid length. [ 1229.301607][T23677] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.7942'. [ 1235.852532][T23706] tmpfs: Bad value for 'mpol' [ 1236.868631][T23736] blktrace: Concurrent blktraces are not allowed on sg0 [ 1238.648240][T23752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7974'. [ 1239.237498][T23758] overlay: Unknown parameter 'hash' [ 1239.474793][T23760] netlink: 'syz.1.7980': attribute type 16 has an invalid length. [ 1239.474819][T23760] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.7980'. [ 1242.254141][T23812] tmpfs: Bad value for 'mpol' [ 1242.980172][T23827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8010'. [ 1243.335045][T23831] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8012'. [ 1244.127811][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.127893][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.503875][T23827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.654748][T23827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.733298][T23827] bond0 (unregistering): Released all slaves [ 1245.927718][T23862] overlay: Unknown parameter 'hash' [ 1251.524968][T23929] wireguard: wg1: Could not create IPv4 socket [ 1251.763803][T23933] netlink: 'syz.3.8062': attribute type 16 has an invalid length. [ 1251.763829][T23933] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.8062'. [ 1253.264649][T23949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8069'. [ 1254.796248][T23960] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8073'. [ 1254.796273][T23960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8073'. [ 1255.732118][T23968] netlink: 'syz.0.8074': attribute type 1 has an invalid length. [ 1256.977221][T24000] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8090'. [ 1257.303986][T24003] netlink: 'syz.3.8091': attribute type 1 has an invalid length. [ 1258.690774][T24022] netlink: 388 bytes leftover after parsing attributes in process `syz.4.8099'. [ 1260.074710][T24043] dns_resolver: Unsupported content type (6) [ 1262.740521][T24068] tmpfs: Bad value for 'nr_blocks' [ 1263.613694][T24076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8125'. [ 1264.880363][T24090] blktrace: Concurrent blktraces are not allowed on sg0 [ 1265.436766][T24111] tmpfs: Bad value for 'nr_blocks' [ 1265.732256][T24123] blktrace: Concurrent blktraces are not allowed on sg0 [ 1265.843534][T24125] netlink: 'syz.4.8148': attribute type 16 has an invalid length. [ 1265.843558][T24125] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.8148'. [ 1265.962294][T24130] 9pnet_virtio: no channels available for device syz [ 1266.095526][T24137] tmpfs: Bad value for 'nr_blocks' [ 1267.105840][T24154] netlink: 388 bytes leftover after parsing attributes in process `syz.2.8162'. [ 1267.596015][T18705] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1267.753652][T18705] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.753730][T18705] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1267.753756][T18705] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1267.753785][T18705] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1267.753827][T18705] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1267.753849][T18705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.831853][T24158] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1267.867018][T18705] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1267.871710][T18705] usb 5-1: invalid MIDI out EP 0 [ 1268.221552][T24165] udevd[24165]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1268.311965][T18705] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1268.337546][T18705] usb 5-1: USB disconnect, device number 7 [ 1268.663161][T11724] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1268.825767][T11724] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.825834][T11724] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1268.825863][T11724] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1268.825890][T11724] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1268.825934][T11724] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1268.825958][T11724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.832805][T24168] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1268.887151][T11724] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1268.888361][T11724] usb 3-1: invalid MIDI out EP 0 [ 1269.204918][T24099] udevd[24099]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1269.294813][T11724] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1269.342957][T11724] usb 3-1: USB disconnect, device number 5 [ 1270.283421][T24188] overlay: Unknown parameter 'hash' [ 1270.588445][T24197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8183'. [ 1271.339085][T24210] wireguard: wg1: Could not create IPv4 socket [ 1271.826039][T24219] overlay: Unknown parameter 'hash' [ 1272.461448][T24237] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8201'. [ 1272.461474][T24237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8201'. [ 1272.788735][T24244] netlink: 'syz.0.8205': attribute type 16 has an invalid length. [ 1272.788759][T24244] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.8205'. [ 1272.866037][T24252] netlink: 388 bytes leftover after parsing attributes in process `syz.4.8208'. [ 1275.565068][T24287] overlay: Unknown parameter 'hash' [ 1278.046381][T24310] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8235'. [ 1278.367258][T24313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8236'. [ 1279.156904][T24323] tmpfs: Bad value for 'nr_blocks' [ 1281.174589][T24333] netlink: 'syz.1.8246': attribute type 1 has an invalid length. [ 1282.509139][T24360] 9pnet_virtio: no channels available for device syz [ 1282.789864][T24362] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8259'. [ 1282.789890][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8259'. [ 1283.520430][T24372] dns_resolver: Unsupported content type (6) [ 1284.247537][T24388] 9pnet_virtio: no channels available for device syz [ 1286.290124][T24431] dns_resolver: Unsupported content type (6) [ 1286.740081][T24437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8293'. [ 1286.859547][T24439] 9pnet_virtio: no channels available for device syz [ 1287.067007][T24441] netlink: 'syz.3.8294': attribute type 1 has an invalid length. [ 1287.067030][T24441] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8294'. [ 1288.115033][T24437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.204045][T24437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.252523][T24437] bond0 (unregistering): Released all slaves [ 1288.587585][T24459] overlay: Unknown parameter 'hash' [ 1289.060486][T24466] netlink: 'syz.1.8306': attribute type 1 has an invalid length. [ 1289.060510][T24466] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8306'. [ 1289.793442][T18702] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1289.977213][T18702] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1289.977248][T18702] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1289.977292][T18702] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1289.977316][T18702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.264621][T18702] usb 3-1: usb_control_msg returned -32 [ 1290.264674][T18702] usbtmc 3-1:16.0: can't read capabilities [ 1290.574204][T24492] netlink: 'syz.1.8318': attribute type 1 has an invalid length. [ 1290.574230][T24492] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8318'. [ 1290.637366][T24494] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 1292.614062][ T5881] usb 3-1: USB disconnect, device number 6 [ 1294.244570][T18310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1294.274367][T18310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1294.284376][T18310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1294.289924][T18310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1294.295933][T18310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1295.848068][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8341'. [ 1295.920013][T20441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.365405][T18310] Bluetooth: hci0: command tx timeout [ 1296.517770][T20441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.065350][T20441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.109618][T24538] chnl_net:caif_netlink_parms(): no params data found [ 1297.519707][T20441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.226473][T24538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.226615][T24538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.226870][T24538] bridge_slave_0: entered allmulticast mode [ 1298.229782][T24538] bridge_slave_0: entered promiscuous mode [ 1298.270768][T24538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.271047][T24538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.271266][T24538] bridge_slave_1: entered allmulticast mode [ 1298.280462][T24538] bridge_slave_1: entered promiscuous mode [ 1298.433061][T18310] Bluetooth: hci0: command tx timeout [ 1298.845034][T24538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.885028][T24538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.415567][T24538] team0: Port device team_slave_0 added [ 1299.508505][T24538] team0: Port device team_slave_1 added [ 1299.674942][T20441] bridge_slave_1: left allmulticast mode [ 1299.675107][T20441] bridge_slave_1: left promiscuous mode [ 1299.675377][T20441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.766114][T20441] bridge_slave_0: left allmulticast mode [ 1299.766145][T20441] bridge_slave_0: left promiscuous mode [ 1299.766434][T20441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.513183][T18310] Bluetooth: hci0: command tx timeout [ 1301.401825][T20441] bond1 (unregistering): Released all slaves [ 1301.429192][T20441] bond2 (unregistering): Released all slaves [ 1301.459621][T20441] bond3 (unregistering): Released all slaves [ 1301.498724][T20441] bond4 (unregistering): Released all slaves [ 1301.789139][T24538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.789157][T24538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.789188][T24538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.814067][T24538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.814087][T24538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.814120][T24538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.593357][T18310] Bluetooth: hci0: command tx timeout [ 1302.731391][T24538] hsr_slave_0: entered promiscuous mode [ 1302.732788][T24538] hsr_slave_1: entered promiscuous mode [ 1302.746391][T24538] debugfs: 'hsr0' already exists in 'hsr' [ 1302.746419][T24538] Cannot create hsr debugfs directory [ 1302.893159][ T5882] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1302.983938][T24620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8370'. [ 1303.048473][ T5882] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1303.048508][ T5882] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1303.048554][ T5882] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1303.048577][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.346749][ T5882] usb 1-1: usb_control_msg returned -32 [ 1303.346800][ T5882] usbtmc 1-1:16.0: can't read capabilities [ 1304.256210][T20441] hsr_slave_0: left promiscuous mode [ 1304.277396][T20441] hsr_slave_1: left promiscuous mode [ 1304.279279][T20441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.279305][T20441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.407839][T20441] veth1_macvtap: left promiscuous mode [ 1304.407955][T20441] veth0_macvtap: left promiscuous mode [ 1304.408219][T20441] veth1_vlan: left promiscuous mode [ 1304.408430][T20441] veth0_vlan: left promiscuous mode [ 1305.559610][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.559678][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.685978][ T5882] usb 1-1: USB disconnect, device number 5 [ 1308.374497][T20441] team0 (unregistering): Port device team_slave_1 removed [ 1308.853807][T20441] team0 (unregistering): Port device team_slave_0 removed [ 1313.815074][T24706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8406'. [ 1314.049829][T24706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8406'. [ 1315.641383][T24754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8422'. [ 1315.957079][T24759] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8424'. [ 1316.400779][T24538] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1316.499674][T24538] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1316.663360][T24538] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1316.772034][T24538] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1317.339636][T24538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.409154][T24538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.435310][T24572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.435502][T24572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.495245][T20441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.495390][T20441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.507790][T24538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.720536][T24538] veth0_vlan: entered promiscuous mode [ 1319.761107][T24538] veth1_vlan: entered promiscuous mode [ 1319.893528][T24538] veth0_macvtap: entered promiscuous mode [ 1319.918420][T24538] veth1_macvtap: entered promiscuous mode [ 1319.950614][T24538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.006525][T24538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.057436][T20441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.057692][T20441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.057898][T20441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.057939][T20441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.602445][T20441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.602474][T20441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.751884][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.751905][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.821479][T24834] netlink: 'syz.3.8440': attribute type 12 has an invalid length. [ 1321.193615][T24842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8443'. [ 1321.366397][T24846] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8444'. [ 1324.247741][T24897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8462'. [ 1325.348671][T24909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8469'. [ 1325.563112][T24913] netlink: 'syz.1.8471': attribute type 12 has an invalid length. [ 1325.900667][T24917] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8474'. [ 1326.604291][T24934] fuseblk: Bad value for 'fd' [ 1327.136591][T24952] 9pnet_virtio: no channels available for device syz [ 1327.973216][T24968] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8497'. [ 1328.536847][T24974] overlay: Unknown parameter 'hash' [ 1330.552237][T25013] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8517'. [ 1330.831663][T25021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8521'. [ 1331.165892][T25025] netlink: 'syz.1.8524': attribute type 12 has an invalid length. [ 1333.193668][T25049] dns_resolver: Unsupported content type (6) [ 1333.586887][T25053] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8536'. [ 1335.449423][T25064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8539'. [ 1336.025370][T25075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8546'. [ 1336.144616][T25079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8549'. [ 1336.695320][T25095] wireguard: wg1: Could not create IPv4 socket [ 1336.760820][T25098] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8557'. [ 1337.119268][T25106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8561'. [ 1338.000338][T25123] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8570'. [ 1338.542842][T25135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8575'. [ 1341.814658][T25160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8589'. [ 1344.550131][T25196] tmpfs: Bad value for 'nr_blocks' [ 1349.490728][T25246] fuseblk: Bad value for 'fd' [ 1350.284945][T25269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8638'. [ 1350.774012][T25281] netlink: 'syz.4.8644': attribute type 12 has an invalid length. [ 1351.105018][T25291] dns_resolver: Unsupported content type (6) [ 1351.604615][T25305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8654'. [ 1352.185509][T25316] netlink: 388 bytes leftover after parsing attributes in process `syz.0.8659'. [ 1352.326859][T25318] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8660'. [ 1352.707407][T25329] 9pnet_virtio: no channels available for device syz [ 1353.219017][T25339] netlink: 'syz.3.8670': attribute type 12 has an invalid length. [ 1354.139778][T25361] wireguard: wg1: Could not create IPv4 socket [ 1354.883879][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8690'. [ 1354.887868][T25387] wireguard: wg1: Could not create IPv4 socket [ 1355.160750][T25392] dns_resolver: Unsupported content type (6) [ 1355.543058][ T5882] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1355.673098][ T5882] usb 5-1: device descriptor read/64, error -71 [ 1355.703806][T25416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8705'. [ 1355.743922][T25414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8704'. [ 1355.913052][ T5882] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1356.043102][ T5882] usb 5-1: device descriptor read/64, error -71 [ 1356.141644][T25424] fuseblk: Bad value for 'fd' [ 1356.153573][ T5882] usb usb5-port1: attempt power cycle [ 1356.503381][ T5882] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1356.523760][ T5882] usb 5-1: device descriptor read/8, error -71 [ 1356.773125][ T5882] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1356.794067][ T5882] usb 5-1: device descriptor read/8, error -71 [ 1356.903937][ T5882] usb usb5-port1: unable to enumerate USB device [ 1357.258242][T25432] netlink: 'syz.2.8713': attribute type 12 has an invalid length. [ 1357.467728][T25436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8716'. [ 1359.383100][T18702] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1359.437307][T25483] wireguard: wg1: Could not create IPv4 socket [ 1359.513116][T18702] usb 3-1: device descriptor read/64, error -71 [ 1359.753084][T18702] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1359.818467][T25496] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8743'. [ 1359.893131][T18702] usb 3-1: device descriptor read/64, error -71 [ 1359.925224][T25500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8746'. [ 1360.005743][T18702] usb usb3-port1: attempt power cycle [ 1360.345272][T18702] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1360.368451][T18702] usb 3-1: device descriptor read/8, error -71 [ 1360.613096][T18702] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1360.660793][T18702] usb 3-1: device descriptor read/8, error -71 [ 1360.763412][T18702] usb usb3-port1: unable to enumerate USB device [ 1360.801521][T25529] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8756'. [ 1360.863988][T25530] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8757'. [ 1361.510537][T25539] dns_resolver: Unsupported content type (6) [ 1366.143085][ T5882] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1366.273446][ T5882] usb 1-1: device descriptor read/64, error -71 [ 1366.513885][ T5882] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1366.643107][ T5882] usb 1-1: device descriptor read/64, error -71 [ 1366.755471][ T5882] usb usb1-port1: attempt power cycle [ 1366.997747][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.997836][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.103085][ T5882] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1367.124383][ T5882] usb 1-1: device descriptor read/8, error -71 [ 1367.363079][ T5882] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1367.384241][ T5882] usb 1-1: device descriptor read/8, error -71 [ 1367.475182][T25586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8784'. [ 1367.493610][ T5882] usb usb1-port1: unable to enumerate USB device [ 1369.914086][T25604] netlink: 'syz.3.8789': attribute type 12 has an invalid length. [ 1374.781604][T25681] 9pnet_virtio: no channels available for device syz [ 1376.503089][T11724] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1376.643845][T11724] usb 3-1: device descriptor read/64, error -71 [ 1376.812320][T25704] 9pnet_virtio: no channels available for device syz [ 1376.883081][T11724] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1377.022229][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1377.023023][T11724] usb 3-1: device descriptor read/64, error -71 [ 1377.037802][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1377.040185][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1377.050146][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1377.054559][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1377.139327][T11724] usb usb3-port1: attempt power cycle [ 1377.483124][T11724] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1377.510653][T11724] usb 3-1: device descriptor read/8, error -71 [ 1377.783079][T11724] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1377.815468][T11724] usb 3-1: device descriptor read/8, error -71 [ 1377.923776][T11724] usb usb3-port1: unable to enumerate USB device [ 1378.626870][T20441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.939942][T20441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.153435][T18310] Bluetooth: hci1: command tx timeout [ 1379.238912][T20441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.332427][T25707] chnl_net:caif_netlink_parms(): no params data found [ 1379.680093][T20441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.517344][T25707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.517533][T25707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.517783][T25707] bridge_slave_0: entered allmulticast mode [ 1380.521190][T25707] bridge_slave_0: entered promiscuous mode [ 1380.531182][T25707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.531332][T25707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.531572][T25707] bridge_slave_1: entered allmulticast mode [ 1380.538504][T25707] bridge_slave_1: entered promiscuous mode [ 1381.055378][T25707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.087905][T25707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.233271][T18310] Bluetooth: hci1: command tx timeout [ 1381.506245][T20441] bridge_slave_1: left allmulticast mode [ 1381.506275][T20441] bridge_slave_1: left promiscuous mode [ 1381.506536][T20441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.646454][T20441] bridge_slave_0: left allmulticast mode [ 1381.646488][T20441] bridge_slave_0: left promiscuous mode [ 1381.646761][T20441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.173071][T24530] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1382.325559][T24530] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.325621][T24530] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1382.325647][T24530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.313187][T18310] Bluetooth: hci1: command tx timeout [ 1383.700776][T20441] bond0 (unregistering): Released all slaves [ 1383.791612][T25707] team0: Port device team_slave_0 added [ 1383.836181][T25707] team0: Port device team_slave_1 added [ 1384.484042][T25707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1384.484059][T25707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.484088][T25707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.487268][T25707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.487284][T25707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.487313][T25707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.979921][T11724] usb 5-1: USB disconnect, device number 12 [ 1385.393818][T18310] Bluetooth: hci1: command tx timeout [ 1385.581339][T25707] hsr_slave_0: entered promiscuous mode [ 1385.582706][T25707] hsr_slave_1: entered promiscuous mode [ 1385.867274][T20441] hsr_slave_0: left promiscuous mode [ 1385.915707][T20441] hsr_slave_1: left promiscuous mode [ 1385.916662][T20441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.916686][T20441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.161821][T20441] veth1_macvtap: left promiscuous mode [ 1386.161945][T20441] veth0_macvtap: left promiscuous mode [ 1386.162211][T20441] veth1_vlan: left promiscuous mode [ 1386.162292][T20441] veth0_vlan: left promiscuous mode [ 1387.357670][T25788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8864'. [ 1387.793287][ T31] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1387.945644][ T31] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.945710][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1387.945744][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.174695][T20441] team0 (unregistering): Port device team_slave_1 removed [ 1390.609759][ T31] usb 2-1: USB disconnect, device number 8 [ 1390.641258][T25800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8874'. [ 1390.654042][T20441] team0 (unregistering): Port device team_slave_0 removed [ 1393.183124][ T5882] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1393.362587][ T5882] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.362655][ T5882] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1393.362683][ T5882] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1393.362711][ T5882] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1393.362755][ T5882] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1393.362778][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.381979][T25816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1393.396896][ T5882] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1393.398650][ T5882] usb 3-1: invalid MIDI out EP 0 [ 1393.680619][T25352] udevd[25352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.705051][ T5882] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1393.765461][ T5882] usb 3-1: USB disconnect, device number 15 [ 1394.574833][T25829] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8887'. [ 1394.844633][ C0] vkms_vblank_simulate: vblank timer overrun [ 1394.983163][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1395.143212][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1395.159493][ T10] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 1395.159522][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.159543][ T10] usb 1-1: config 0 has no interface number 0 [ 1395.162799][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1395.162826][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.162845][ T10] usb 1-1: Product: syz [ 1395.162858][ T10] usb 1-1: Manufacturer: syz [ 1395.162871][ T10] usb 1-1: SerialNumber: syz [ 1395.229498][ T10] usb 1-1: config 0 descriptor?? [ 1395.274273][ T10] net1080 1-1:0.147: probe with driver net1080 failed with error -22 [ 1395.463737][ T10] usb 1-1: USB disconnect, device number 10 [ 1395.948441][T25859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8897'. [ 1397.737110][T25707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1397.807654][T25892] wireguard: wg1: Could not create IPv4 socket [ 1397.833411][T25707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1397.981320][T25707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1398.088723][T25707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1398.655281][T25707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.772402][T25707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.850156][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.850314][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.885984][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.889681][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.234616][T25931] 9pnet_virtio: no channels available for device syz [ 1400.313400][T25960] overlay: Unknown parameter 'hash' [ 1400.638021][T25707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.863830][T25707] veth0_vlan: entered promiscuous mode [ 1400.882101][T25707] veth1_vlan: entered promiscuous mode [ 1401.105868][T25707] veth0_macvtap: entered promiscuous mode [ 1401.177799][T25707] veth1_macvtap: entered promiscuous mode [ 1401.342430][T25707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.379090][T25707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.484168][ T162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.486043][ T162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.491425][ T162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.550825][ T162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.709970][T26000] overlay: Unknown parameter 'hash' [ 1402.513079][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.513114][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.943159][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.943180][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.303509][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1403.463017][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1403.465339][ T10] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 1403.465364][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.465384][ T10] usb 2-1: config 0 has no interface number 0 [ 1403.472360][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1403.472389][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.472410][ T10] usb 2-1: Product: syz [ 1403.472423][ T10] usb 2-1: Manufacturer: syz [ 1403.472438][ T10] usb 2-1: SerialNumber: syz [ 1403.578817][ T10] usb 2-1: config 0 descriptor?? [ 1403.620707][ T10] net1080 2-1:0.147: probe with driver net1080 failed with error -22 [ 1403.747190][T26062] netlink: 'syz.0.8964': attribute type 12 has an invalid length. [ 1403.825407][ T31] usb 2-1: USB disconnect, device number 9 [ 1404.978908][T26091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8978'. [ 1405.116781][T26091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8978'. [ 1405.213854][T26099] netlink: 'syz.4.8981': attribute type 12 has an invalid length. [ 1405.489084][T26108] tmpfs: Bad value for 'nr_blocks' [ 1406.114883][T26128] netlink: 'syz.4.8996': attribute type 12 has an invalid length. [ 1408.244482][T26164] wireguard: wg1: Could not create IPv4 socket [ 1408.786522][T26177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9019'. [ 1413.113609][T26243] fuseblk: Bad value for 'fd' [ 1413.197017][T26245] netlink: 'syz.3.9053': attribute type 12 has an invalid length. [ 1413.398556][T26251] overlay: Unknown parameter 'hash' [ 1413.583563][T11724] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1413.735536][T11724] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.735599][T11724] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1413.735627][T11724] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1413.735655][T11724] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1413.735698][T11724] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1413.735730][T11724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.742396][T26249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1413.822157][T11724] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1413.843424][T11724] usb 2-1: invalid MIDI out EP 0 [ 1414.017427][T11724] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1414.059354][T11724] usb 2-1: USB disconnect, device number 10 [ 1414.090255][T26256] udevd[26256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1418.239122][T26314] macvtap0: entered promiscuous mode [ 1418.241552][T26314] macvtap0: left promiscuous mode [ 1419.073278][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1419.225574][ T31] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.225642][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1419.225667][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1419.225710][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1419.225733][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.244570][ T31] usbtmc 4-1:16.0: bulk endpoints not found [ 1420.276261][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 1421.896963][T23914] usb 4-1: USB disconnect, device number 9 [ 1422.576180][T26382] netlink: 388 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1428.440576][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.440647][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1436.285633][T26613] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9223'. [ 1436.285657][T26613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9223'. [ 1436.368724][T26616] fuseblk: Bad value for 'fd' [ 1437.923081][T11724] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1438.105091][T11724] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1438.105124][T11724] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1438.105146][T11724] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1438.105186][T11724] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1438.105208][T11724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.137378][T11724] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 1438.871511][T26664] JFS: discard option not supported on device [ 1438.902053][T26664] Mount JFS Failure: -5 [ 1440.652152][T26694] netlink: 'syz.3.9255': attribute type 12 has an invalid length. [ 1440.824840][T23914] usb 1-1: USB disconnect, device number 11 [ 1441.317354][T26706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9266'. [ 1442.593016][ T31] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1442.746635][ T31] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.746692][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1442.746717][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1442.746743][ T31] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1442.746783][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1442.746804][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.822485][T26732] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1442.846288][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1442.847378][ T31] usb 2-1: invalid MIDI out EP 0 [ 1442.992246][ T31] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1443.029999][ T31] usb 2-1: USB disconnect, device number 11 [ 1443.095144][T26738] udevd[26738]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1445.071687][T26749] fuseblk: Bad value for 'fd' [ 1447.300566][T26773] fuseblk: Bad value for 'fd' [ 1448.418433][T26793] capability: warning: `syz.4.9306' uses deprecated v2 capabilities in a way that may be insecure [ 1449.542129][T26810] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9312'. [ 1451.023060][T24530] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1451.183415][T24530] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.183476][T24530] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1451.183505][T24530] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1451.183532][T24530] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1451.183574][T24530] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1451.183598][T24530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.263926][T26814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1451.288670][T24530] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1451.289825][T24530] usb 4-1: invalid MIDI out EP 0 [ 1451.379988][T24530] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1451.493149][T23914] usb 4-1: USB disconnect, device number 10 [ 1451.597660][T26824] udevd[26824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1452.085311][T26836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9323'. [ 1453.024422][T26850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9330'. [ 1453.208834][T26853] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1453.812383][T26868] wireguard: wg1: Could not create IPv4 socket [ 1453.833160][T11724] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1453.995316][T11724] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.995380][T11724] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1453.995410][T11724] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1453.995439][T11724] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1453.995485][T11724] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1453.995511][T11724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.008104][T26864] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1454.020576][T11724] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1454.021880][T11724] usb 4-1: invalid MIDI out EP 0 [ 1454.479186][T11724] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1454.500112][T11724] usb 4-1: USB disconnect, device number 11 [ 1456.055370][T26901] tmpfs: Bad value for 'nr_blocks' [ 1456.770728][T26917] overlayfs: missing 'lowerdir' [ 1457.806233][T26948] wireguard: wg1: Could not create IPv4 socket [ 1460.162214][T26973] 9pnet_fd: Insufficient options for proto=fd [ 1463.318144][T27040] tmpfs: Bad value for 'nr_blocks' [ 1463.422104][T27042] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1463.647609][T27048] overlayfs: missing 'lowerdir' [ 1463.913231][T27053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9421'. [ 1464.768577][T27073] overlayfs: missing 'lowerdir' [ 1465.585441][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1465.588795][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1465.589955][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1465.591212][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1465.592348][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1465.785959][T27083] netlink: 536 bytes leftover after parsing attributes in process `syz.3.9432'. [ 1466.998481][T24572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.531251][T24572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.723322][T18310] Bluetooth: hci2: command tx timeout [ 1468.100000][T27101] 9pnet_fd: Insufficient options for proto=fd [ 1468.107934][T24572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.527869][T24572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.732271][T27080] chnl_net:caif_netlink_parms(): no params data found [ 1469.783542][T27080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.783712][T27080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.783899][T27080] bridge_slave_0: entered allmulticast mode [ 1469.793092][T18310] Bluetooth: hci2: command tx timeout [ 1469.805980][T27080] bridge_slave_0: entered promiscuous mode [ 1469.829799][T27080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.829921][T27080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.830456][T27080] bridge_slave_1: entered allmulticast mode [ 1469.853481][T27080] bridge_slave_1: entered promiscuous mode [ 1469.859455][T24572] bridge_slave_1: left allmulticast mode [ 1469.859484][T24572] bridge_slave_1: left promiscuous mode [ 1469.859752][T24572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.979384][T24572] bridge_slave_0: left allmulticast mode [ 1469.979415][T24572] bridge_slave_0: left promiscuous mode [ 1469.979700][T24572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.103734][T27119] 9pnet_fd: Insufficient options for proto=fd [ 1471.873261][T18310] Bluetooth: hci2: command tx timeout [ 1471.930743][T24572] bond0 (unregistering): Released all slaves [ 1471.961045][T24572] bond1 (unregistering): Released all slaves [ 1471.984810][T24572] bond2 (unregistering): Released all slaves [ 1472.011073][T24572] bond3 (unregistering): Released all slaves [ 1472.779454][T27153] 9pnet_virtio: no channels available for device syz [ 1472.998267][T27080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.022347][T27080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.953238][T18310] Bluetooth: hci2: command tx timeout [ 1474.021707][T27080] team0: Port device team_slave_0 added [ 1474.263146][T24572] hsr_slave_0: left promiscuous mode [ 1474.310103][T24572] hsr_slave_1: left promiscuous mode [ 1474.311079][T24572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.311105][T24572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.364044][T24572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.364074][T24572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.487270][T24572] veth1_macvtap: left promiscuous mode [ 1474.487391][T24572] veth0_macvtap: left promiscuous mode [ 1474.487657][T24572] veth1_vlan: left promiscuous mode [ 1474.487843][T24572] veth0_vlan: left promiscuous mode [ 1476.763636][T27221] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1476.763661][T27221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1477.196298][T27235] 9pnet_fd: Insufficient options for proto=fd [ 1477.273028][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1477.422983][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1477.425328][ T31] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 1477.425355][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.425376][ T31] usb 1-1: config 0 has no interface number 0 [ 1477.448720][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1477.448752][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.448773][ T31] usb 1-1: Product: syz [ 1477.448787][ T31] usb 1-1: Manufacturer: syz [ 1477.448802][ T31] usb 1-1: SerialNumber: syz [ 1477.475393][ T31] usb 1-1: config 0 descriptor?? [ 1477.543858][ T31] net1080 1-1:0.147: probe with driver net1080 failed with error -22 [ 1477.698708][ T31] usb 1-1: USB disconnect, device number 12 [ 1477.797516][T27247] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9503'. [ 1478.165090][T24572] team0 (unregistering): Port device team_slave_1 removed [ 1478.383886][T24572] team0 (unregistering): Port device team_slave_0 removed [ 1481.126173][T27080] team0: Port device team_slave_1 added [ 1481.546870][T27080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.546887][T27080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.546914][T27080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.557264][T27080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.557286][T27080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.557319][T27080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.618507][T27268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9513'. [ 1482.244928][T27080] hsr_slave_0: entered promiscuous mode [ 1482.246537][T27080] hsr_slave_1: entered promiscuous mode [ 1482.248885][T27080] debugfs: 'hsr0' already exists in 'hsr' [ 1482.248924][T27080] Cannot create hsr debugfs directory [ 1483.884744][T27306] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9524'. [ 1485.592546][T27080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1485.671384][T27080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1485.706161][T27080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1485.804968][T27080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1486.304696][T27080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.367353][T27080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.419681][T20441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.419833][T20441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.429816][T20441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.468944][T20441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.742796][T27355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9534'. [ 1487.529271][T27080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.692995][T27080] veth0_vlan: entered promiscuous mode [ 1487.738618][T27080] veth1_vlan: entered promiscuous mode [ 1487.794896][T27080] veth0_macvtap: entered promiscuous mode [ 1487.834414][T27080] veth1_macvtap: entered promiscuous mode [ 1487.888818][T27080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1487.932275][T27080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1487.999290][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.999610][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.000139][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.000568][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.590473][T24573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.590497][T24573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.805112][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.805132][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.877699][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.877804][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.433336][T11724] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1490.585867][T11724] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.585932][T11724] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1490.585961][T11724] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1490.585989][T11724] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1490.586078][T11724] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1490.586101][T11724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.658959][T27415] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1490.751664][T11724] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1490.752801][T11724] usb 5-1: invalid MIDI out EP 0 [ 1491.113846][T11724] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1491.135369][T11724] usb 5-1: USB disconnect, device number 13 [ 1491.394600][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1491.406234][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1491.411801][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1491.415199][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1491.416641][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1492.539964][T27426] chnl_net:caif_netlink_parms(): no params data found [ 1493.473315][T18310] Bluetooth: hci4: command tx timeout [ 1493.566274][T27457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9563'. [ 1494.111720][T27426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.111860][T27426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.112099][T27426] bridge_slave_0: entered allmulticast mode [ 1494.135394][T27426] bridge_slave_0: entered promiscuous mode [ 1494.448606][T24572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.551186][T27426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.551359][T27426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.551602][T27426] bridge_slave_1: entered allmulticast mode [ 1494.571390][T27426] bridge_slave_1: entered promiscuous mode [ 1494.970587][T27473] binder: 27471:27473 ioctl c0306201 0 returned -14 [ 1495.251430][T24572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.380044][T27426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.406801][T27426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.554274][T18310] Bluetooth: hci4: command tx timeout [ 1496.027207][T24572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.187706][T27426] team0: Port device team_slave_0 added [ 1496.205403][T27426] team0: Port device team_slave_1 added [ 1496.566359][T24572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.792289][T27426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.792306][T27426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.792333][T27426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.800392][T27426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.800410][T27426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.800441][T27426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.230877][T27426] hsr_slave_0: entered promiscuous mode [ 1497.248517][T27426] hsr_slave_1: entered promiscuous mode [ 1497.249662][T27426] debugfs: 'hsr0' already exists in 'hsr' [ 1497.249687][T27426] Cannot create hsr debugfs directory [ 1497.638109][T18310] Bluetooth: hci4: command tx timeout [ 1498.078717][T24572] bridge_slave_1: left allmulticast mode [ 1498.078751][T24572] bridge_slave_1: left promiscuous mode [ 1498.079005][T24572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.138553][T24572] bridge_slave_0: left allmulticast mode [ 1498.138587][T24572] bridge_slave_0: left promiscuous mode [ 1498.142297][T24572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.713009][T18310] Bluetooth: hci4: command tx timeout [ 1500.745697][T24572] bond1 (unregistering): Released all slaves [ 1500.853698][T24572] bond2 (unregistering): Released all slaves [ 1500.888826][T24572] bond3 (unregistering): Released all slaves [ 1500.926865][T24572] bond4 (unregistering): Released all slaves [ 1501.029593][T24572] bond5 (unregistering): Released all slaves [ 1501.058221][T24572] bond0 (unregistering): Released all slaves [ 1501.085465][T24572] bond6 (unregistering): Released all slaves [ 1501.109412][T24572] bond7 (unregistering): Released all slaves [ 1501.140152][T24572] bond8 (unregistering): Released all slaves [ 1502.194063][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 1504.265854][T24572] hsr_slave_0: left promiscuous mode [ 1504.414065][T24572] hsr_slave_1: left promiscuous mode [ 1504.415089][T24572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1504.415114][T24572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.657615][T27596] overlayfs: missing 'lowerdir' [ 1504.662758][T24572] veth1_macvtap: left promiscuous mode [ 1504.693023][T24572] veth0_macvtap: left promiscuous mode [ 1504.693237][T24572] veth1_vlan: left promiscuous mode [ 1504.693298][T24572] veth0_vlan: left promiscuous mode [ 1507.476202][T27638] netlink: 388 bytes leftover after parsing attributes in process `syz.4.9634'. [ 1509.020873][T24572] team0 (unregistering): Port device team_slave_1 removed [ 1509.443870][T24572] team0 (unregistering): Port device team_slave_0 removed [ 1510.376874][T27666] JFS: discard option not supported on device [ 1510.377483][T27666] Mount JFS Failure: -5 [ 1513.487545][T27609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9618'. [ 1513.505732][T27609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9618'. [ 1514.120129][T27426] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1514.214459][T27426] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1514.356736][T27426] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1514.430017][T27426] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1514.465139][T27692] overlayfs: missing 'lowerdir' [ 1514.973431][T27426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1515.050078][T27426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.090976][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.123222][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1515.137517][T24573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.147994][T24573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.375040][T27714] 9pnet_fd: Insufficient options for proto=fd [ 1516.233498][T27426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1516.384345][T27426] veth0_vlan: entered promiscuous mode [ 1516.416072][T27426] veth1_vlan: entered promiscuous mode [ 1516.512562][T27426] veth0_macvtap: entered promiscuous mode [ 1516.527140][T27426] veth1_macvtap: entered promiscuous mode [ 1516.591731][T27426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1516.616670][T27426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1516.663068][T24572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.668276][T24572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.668324][T24572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.668371][T24572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.154108][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.154131][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.260028][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.260050][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.725556][T27739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9666'. [ 1518.192737][T27743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9669'. [ 1518.270994][T27743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9669'. [ 1519.841179][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1519.861305][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1519.872746][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1519.903277][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1519.917170][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1520.243070][T18705] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1520.403070][T18705] usb 4-1: Using ep0 maxpacket: 32 [ 1520.405516][T18705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.405542][T18705] usb 4-1: config 0 has no interfaces? [ 1520.405573][T18705] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1520.405596][T18705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.456840][T18705] usb 4-1: config 0 descriptor?? [ 1520.676807][T18705] usb 4-1: USB disconnect, device number 12 [ 1521.878476][T27784] bond1: entered promiscuous mode [ 1521.953400][T18310] Bluetooth: hci5: command tx timeout [ 1522.137818][ T162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.240694][T27765] chnl_net:caif_netlink_parms(): no params data found [ 1522.861361][ T162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.969249][T27794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9689'. [ 1523.247607][ T162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.434769][T27794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9689'. [ 1523.738920][ T162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.919675][T27765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.919871][T27765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.920128][T27765] bridge_slave_0: entered allmulticast mode [ 1523.946246][T27765] bridge_slave_0: entered promiscuous mode [ 1523.961822][T27765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.976189][T27765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.976559][T27765] bridge_slave_1: entered allmulticast mode [ 1524.000669][T27765] bridge_slave_1: entered promiscuous mode [ 1524.033237][T18310] Bluetooth: hci5: command tx timeout [ 1524.315502][T27765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.320168][T27765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.860183][T27765] team0: Port device team_slave_0 added [ 1524.871979][T27765] team0: Port device team_slave_1 added [ 1525.023869][T27815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9696'. [ 1525.447423][T27765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.447441][T27765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.447469][T27765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.524273][T27765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.524291][T27765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.524322][T27765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.615585][ T162] bridge_slave_1: left allmulticast mode [ 1525.615621][ T162] bridge_slave_1: left promiscuous mode [ 1525.615921][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.724600][ T162] bridge_slave_0: left allmulticast mode [ 1525.724628][ T162] bridge_slave_0: left promiscuous mode [ 1525.724846][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.113468][T18310] Bluetooth: hci5: command tx timeout [ 1527.283166][T18705] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1527.453717][T18705] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.453773][T18705] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1527.453800][T18705] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1527.453825][T18705] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1527.453866][T18705] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1527.453888][T18705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.477832][T27859] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1527.515829][T18705] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1527.517130][T18705] usb 5-1: invalid MIDI out EP 0 [ 1527.801718][T18705] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1527.831526][T18705] usb 5-1: USB disconnect, device number 14 [ 1527.846570][T27769] udevd[27769]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1528.193434][T18310] Bluetooth: hci5: command tx timeout [ 1528.202656][ T162] bond1 (unregistering): Released all slaves [ 1528.250536][ T162] bond0 (unregistering): Released all slaves [ 1528.285151][ T162] bond2 (unregistering): Released all slaves [ 1528.312456][ T162] bond3 (unregistering): Released all slaves [ 1528.347608][ T162] bond4 (unregistering): Released all slaves [ 1528.378556][ T162] bond5 (unregistering): Released all slaves [ 1528.405773][ T162] bond6 (unregistering): Released all slaves [ 1528.435178][ T162] bond7 (unregistering): Released all slaves [ 1528.462601][ T162] bond8 (unregistering): Released all slaves [ 1528.546696][ T162] bond9 (unregistering): Released all slaves [ 1528.612758][ T162] bond10 (unregistering): Released all slaves [ 1528.721640][ T162] bond11 (unregistering): Released all slaves [ 1528.804673][ T162] bond12 (unregistering): Released all slaves [ 1528.865244][ T162] bond13 (unregistering): Released all slaves [ 1529.103202][ T5882] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1529.227433][T27765] hsr_slave_0: entered promiscuous mode [ 1529.250182][T27765] hsr_slave_1: entered promiscuous mode [ 1529.251288][T27765] debugfs: 'hsr0' already exists in 'hsr' [ 1529.251314][T27765] Cannot create hsr debugfs directory [ 1529.300730][ T5882] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.300791][ T5882] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1529.300818][ T5882] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1529.300845][ T5882] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1529.300887][ T5882] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1529.300910][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.333787][T27869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1529.361380][ T5882] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1529.362582][ T5882] usb 5-1: invalid MIDI out EP 0 [ 1529.740515][ T5882] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1529.760237][ T5882] usb 5-1: USB disconnect, device number 15 [ 1531.465758][ T162] hsr_slave_0: left promiscuous mode [ 1531.529670][ T162] hsr_slave_1: left promiscuous mode [ 1531.530644][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1531.530670][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.670678][T27897] overlayfs: missing 'lowerdir' [ 1531.822802][ T162] veth1_macvtap: left promiscuous mode [ 1531.824380][ T162] veth0_macvtap: left promiscuous mode [ 1531.824631][ T162] veth1_vlan: left promiscuous mode [ 1531.824709][ T162] veth0_vlan: left promiscuous mode [ 1533.501613][T27929] JFS: discard option not supported on device [ 1533.502066][T27929] Mount JFS Failure: -5 [ 1534.746029][T27950] JFS: discard option not supported on device [ 1534.746723][T27950] Mount JFS Failure: -5 [ 1535.625605][T27981] trusted_key: encrypted_key: master key parameter '' is invalid [ 1535.649113][ T162] team0 (unregistering): Port device team_slave_1 removed [ 1535.815670][ T5882] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1535.970166][ T5882] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.970232][ T5882] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1535.970262][ T5882] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1535.970289][ T5882] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1535.970343][ T5882] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1535.970365][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.979127][T27979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1535.989744][ T5882] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1535.991109][ T5882] usb 4-1: invalid MIDI out EP 0 [ 1536.006759][ T162] team0 (unregistering): Port device team_slave_0 removed [ 1536.331728][ T5882] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1536.342037][ T5882] usb 4-1: USB disconnect, device number 13 [ 1538.217448][T28003] overlayfs: missing 'lowerdir' [ 1539.780311][T28031] trusted_key: encrypted_key: insufficient parameters specified [ 1539.920449][T28001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9778'. [ 1540.196436][T28041] overlayfs: missing 'lowerdir' [ 1540.443397][T18702] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1540.605645][T18702] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.605729][T18702] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1540.605759][T18702] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1540.605787][T18702] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1540.605830][T18702] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1540.605855][T18702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.681494][T28040] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1540.713279][T18702] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1540.714334][T18702] usb 2-1: invalid MIDI out EP 0 [ 1540.869248][T18702] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1540.916102][T18702] usb 2-1: USB disconnect, device number 12 [ 1540.940585][T27864] udevd[27864]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1541.476782][T28063] program syz.4.9802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1542.005409][T28072] trusted_key: encrypted_key: insufficient parameters specified [ 1542.033904][T28075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9806'. [ 1542.568751][T27765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1542.664464][T27765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1542.743638][T27765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1542.824907][T27765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1543.319359][T27765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.434967][T27765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.456430][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.456603][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.527979][T24572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.528139][T24572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.595794][T27765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.793999][T27765] veth0_vlan: entered promiscuous mode [ 1544.836878][T27765] veth1_vlan: entered promiscuous mode [ 1544.925524][T27765] veth0_macvtap: entered promiscuous mode [ 1544.930900][T27765] veth1_macvtap: entered promiscuous mode [ 1544.977542][T27765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1544.990855][T27765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1545.018322][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.018597][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.051834][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.059694][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.568110][T20441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.568132][T20441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.671097][T24572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.671119][T24572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.256927][T28190] Mount JFS Failure: -5 [ 1548.361433][T28219] bond5: entered promiscuous mode [ 1548.380612][T28223] netlink: 'syz.0.9852': attribute type 12 has an invalid length. [ 1548.715783][T28230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9853'. [ 1550.163983][T28230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.384895][T28230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.476700][T28230] bond0 (unregistering): Released all slaves [ 1551.075393][T28264] bond0: entered promiscuous mode [ 1551.318630][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.318707][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1553.536080][T28280] JFS: discard option not supported on device [ 1553.536559][T28280] Mount JFS Failure: -5 [ 1556.712097][T28355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9905'. [ 1557.196868][T28361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9908'. [ 1557.197153][T28361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9908'. [ 1557.378188][T28365] Mount JFS Failure: -5 [ 1558.272680][T28392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9922'. [ 1558.273264][T28392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9922'. [ 1558.432068][T28396] macvtap0: entered promiscuous mode [ 1558.440898][T28396] macvtap0: left promiscuous mode [ 1559.003730][T28414] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9933'. [ 1559.003756][T28414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9933'. [ 1559.114750][T28416] binder: 28415:28416 ioctl c0306201 0 returned -14 [ 1560.415917][T28444] binder: 28443:28444 ioctl c0306201 0 returned -14 [ 1560.903044][T18705] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1561.069699][T18705] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.069761][T18705] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1561.069790][T18705] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1561.069817][T18705] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1561.069859][T18705] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1561.069883][T18705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.104838][T28446] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1561.163087][T18705] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1561.164291][T18705] usb 3-1: invalid MIDI out EP 0 [ 1561.420332][T27832] udevd[27832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.466545][T18705] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1561.501595][T18705] usb 3-1: USB disconnect, device number 16 [ 1564.049317][T28479] program syz.1.9965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1564.066180][T28475] bond6: entered promiscuous mode [ 1566.871255][T28505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9977'. [ 1568.393713][T28505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1568.564629][T28505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.627221][T28505] bond0 (unregistering): Released all slaves [ 1568.912305][T28525] bond1: entered promiscuous mode [ 1568.913207][T28523] netlink: 'syz.2.9987': attribute type 12 has an invalid length. [ 1568.950006][T28528] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1570.636092][T28565] bond1: entered promiscuous mode [ 1571.263112][T28582] 9pnet_fd: Insufficient options for proto=fd [ 1573.192337][T28612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10030'. [ 1573.616822][T28616] macvtap0: entered promiscuous mode [ 1573.619338][T28616] macvtap0: left promiscuous mode [ 1574.526412][T28638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10041'. [ 1575.600143][T28654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10050'. [ 1575.684793][T28654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10050'. [ 1577.115107][T28678] netlink: 'syz.3.10060': attribute type 12 has an invalid length. [ 1577.364171][T28682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10062'. [ 1577.429291][T28682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10062'. [ 1580.367428][T28735] macvtap0: entered promiscuous mode [ 1580.369434][T28735] macvtap0: left promiscuous mode [ 1581.467768][T28754] overlayfs: failed to resolve './file0': -2 [ 1582.714445][T28771] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10103'. [ 1583.458084][T28782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10109'. [ 1583.764801][T28786] Mount JFS Failure: -5 [ 1584.065180][T28792] macvtap0: entered promiscuous mode [ 1584.067096][T28792] macvtap0: left promiscuous mode [ 1584.617663][T28802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10119'. [ 1584.646350][T28805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10120'. [ 1584.999732][T28814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10111'. [ 1585.229239][T28814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10111'. [ 1585.297150][T28822] 9pnet_fd: Insufficient options for proto=fd [ 1585.562999][T23914] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1585.703039][T23914] usb 3-1: device descriptor read/64, error -71 [ 1585.943018][T23914] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1586.093139][T23914] usb 3-1: device descriptor read/64, error -71 [ 1586.098008][T28844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10136'. [ 1586.206736][T23914] usb usb3-port1: attempt power cycle [ 1586.582954][T23914] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1586.618009][T23914] usb 3-1: device descriptor read/8, error -71 [ 1586.856576][T23914] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1586.885642][T23914] usb 3-1: device descriptor read/8, error -71 [ 1586.993509][T23914] usb usb3-port1: unable to enumerate USB device [ 1589.248319][T18310] Bluetooth: hci2: command 0x0406 tx timeout [ 1590.481815][T28879] JFS: discard option not supported on device [ 1590.482697][T28879] Mount JFS Failure: -5 [ 1591.032196][T28897] program syz.4.10154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1591.855779][T28919] veth0_to_batadv: entered allmulticast mode [ 1593.282980][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1593.422957][ T10] usb 5-1: device descriptor read/64, error -71 [ 1593.663036][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1593.793028][ T10] usb 5-1: device descriptor read/64, error -71 [ 1593.903613][ T10] usb usb5-port1: attempt power cycle [ 1594.265665][ T10] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1594.294211][ T10] usb 5-1: device descriptor read/8, error -71 [ 1594.543123][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1594.569172][ T10] usb 5-1: device descriptor read/8, error -71 [ 1594.673546][ T10] usb usb5-port1: unable to enumerate USB device [ 1595.292997][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1595.298766][T28953] JFS: discard option not supported on device [ 1595.300050][T28953] Mount JFS Failure: -5 [ 1595.446003][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1595.450094][ T10] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 1595.450123][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.450144][ T10] usb 1-1: config 0 has no interface number 0 [ 1595.453891][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1595.453924][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.453947][ T10] usb 1-1: Product: syz [ 1595.453976][ T10] usb 1-1: Manufacturer: syz [ 1595.453991][ T10] usb 1-1: SerialNumber: syz [ 1595.467610][ T10] usb 1-1: config 0 descriptor?? [ 1595.515579][ T10] net1080 1-1:0.147: probe with driver net1080 failed with error -22 [ 1595.686488][ T10] usb 1-1: USB disconnect, device number 13 [ 1597.254142][T28983] Mount JFS Failure: -5 [ 1597.530842][T28993] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1597.995634][T29006] veth0_to_batadv: entered allmulticast mode [ 1598.234627][T29012] JFS: discard option not supported on device [ 1598.235076][T29012] Mount JFS Failure: -5 [ 1598.375941][T29017] program syz.0.10219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1598.405570][T29015] Mount JFS Failure: -5 [ 1599.507034][T29037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10231'. [ 1599.575885][T29037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10231'. [ 1600.853911][T29059] veth0_to_batadv: entered allmulticast mode [ 1603.724292][T29099] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10260'. [ 1603.775927][T29101] veth0_to_batadv: entered allmulticast mode [ 1607.863673][T29159] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1609.613776][T29178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10292'. [ 1609.697285][T29184] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1609.733743][T29178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10292'. [ 1610.856307][T29207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10310'. [ 1611.399096][T29220] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1612.541595][T29234] Mount JFS Failure: -5 [ 1612.768792][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.768877][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.049186][T29240] netlink: 'syz.2.10323': attribute type 12 has an invalid length. [ 1614.832971][T18310] Bluetooth: hci4: command 0x0406 tx timeout [ 1614.910862][T29279] binder: 29276:29279 ioctl c0306201 0 returned -14 [ 1615.302980][T23914] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1615.455439][T23914] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.455512][T23914] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1615.455534][T23914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.477558][T23914] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1615.661093][T23914] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1615.702150][T29284] udevd[29284]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1615.730747][T23914] usb 5-1: USB disconnect, device number 20 [ 1616.353018][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 1616.353037][ T38] audit: type=1326 audit(1763511961.905:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29307 comm="syz.4.10354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d99a3f6c9 code=0x0 [ 1617.771086][T29335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10366'. [ 1619.100833][T29335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1619.157069][T29335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1619.198632][T29335] bond0 (unregistering): Released all slaves [ 1620.077814][T29386] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10375'. [ 1620.077838][T29386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10375'. [ 1620.627304][T29405] program syz.0.10394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1621.107446][T29415] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10398'. [ 1621.107471][T29415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10398'. [ 1621.319249][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10404'. [ 1621.642977][T18702] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1621.802911][T18702] usb 1-1: Using ep0 maxpacket: 16 [ 1621.805565][T18702] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 1621.805613][T18702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.805635][T18702] usb 1-1: config 0 has no interface number 0 [ 1621.808771][T18702] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1621.808801][T18702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.808822][T18702] usb 1-1: Product: syz [ 1621.808838][T18702] usb 1-1: Manufacturer: syz [ 1621.808853][T18702] usb 1-1: SerialNumber: syz [ 1621.845433][T18702] usb 1-1: config 0 descriptor?? [ 1621.871186][T18702] net1080 1-1:0.147: probe with driver net1080 failed with error -22 [ 1622.057905][T23914] usb 1-1: USB disconnect, device number 14 [ 1622.428579][T29446] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10412'. [ 1622.428605][T29446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10412'. [ 1622.894959][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10415'. [ 1623.968703][ T38] audit: type=1326 audit(1763511969.525:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29463 comm="syz.3.10422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7092f6c9 code=0x0 [ 1624.857861][T29476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10427'. [ 1626.343857][T29476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.463797][T29476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1626.567017][T29476] bond0 (unregistering): Released all slaves [ 1632.099789][T29537] 9pnet_fd: Insufficient options for proto=fd [ 1632.989672][T29555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10465'. [ 1635.080242][T29590] program syz.3.10484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1636.271007][T29606] overlayfs: missing 'lowerdir' [ 1636.405173][T29608] binder: 29607:29608 ioctl c0306201 0 returned -14 [ 1637.534241][T27731] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1637.564757][T29630] overlayfs: missing 'lowerdir' [ 1637.700743][T27731] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.700802][T27731] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1637.700828][T27731] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1637.700850][T27731] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1637.700889][T27731] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1637.700909][T27731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.729740][T27731] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1637.730965][T27731] usb 3-1: invalid MIDI out EP 0 [ 1637.856551][T29632] binder: 29631:29632 ioctl c0306201 0 returned -14 [ 1638.107610][T29536] udevd[29536]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1638.172209][T27731] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1638.235999][T27731] usb 3-1: USB disconnect, device number 21 [ 1638.682728][T29649] 9pnet_fd: Insufficient options for proto=fd [ 1639.442934][T18702] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1639.595658][T18702] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.595739][T18702] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1639.595781][T18702] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1639.595805][T18702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.685911][T18702] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1639.759805][T18702] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1639.814015][T18702] usb 3-1: USB disconnect, device number 22 [ 1639.830855][T29536] udevd[29536]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1640.442204][T29672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10523'. [ 1641.342919][ T5881] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1641.440305][T29692] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10532'. [ 1641.513036][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 1641.515456][ T5881] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 1641.515481][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.515500][ T5881] usb 1-1: config 0 has no interface number 0 [ 1641.528696][ T5881] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1641.528735][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.528760][ T5881] usb 1-1: Product: syz [ 1641.528778][ T5881] usb 1-1: Manufacturer: syz [ 1641.528795][ T5881] usb 1-1: SerialNumber: syz [ 1641.595563][ T5881] usb 1-1: config 0 descriptor?? [ 1641.605514][ T5881] net1080 1-1:0.147: probe with driver net1080 failed with error -22 [ 1641.816485][T18702] usb 1-1: USB disconnect, device number 15 [ 1642.434456][T18310] Bluetooth: hci5: command 0x0405 tx timeout [ 1644.519085][T29738] program syz.1.10556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1645.272763][T29750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10561'. [ 1645.272873][T29750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10561'. [ 1645.476167][T29750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10561'. [ 1645.476193][T29750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10561'. [ 1645.553386][ T5827] Bluetooth: hci5: command 0x0405 tx timeout [ 1645.732963][ T5881] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1645.908077][ T5881] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.908151][ T5881] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1645.908194][ T5881] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1645.908218][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.007354][ T5881] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1646.207041][ T5881] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1646.233001][ T5881] usb 2-1: USB disconnect, device number 13 [ 1646.830125][T29765] netlink: 'syz.2.10565': attribute type 12 has an invalid length. [ 1647.781082][T29806] binder: 29804:29806 ioctl c0306201 0 returned -14 [ 1648.508049][T29833] binder: 29832:29833 ioctl c0306201 0 returned -14 [ 1648.937187][T29848] binder: 29847:29848 ioctl c0306201 0 returned -14 [ 1649.603044][ T38] audit: type=1326 audit(1763511995.155:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29861 comm="syz.4.10614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d99a3f6c9 code=0x0 [ 1652.787447][T29889] netlink: 'syz.0.10627': attribute type 12 has an invalid length. [ 1653.644071][T29897] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10634'. [ 1657.642912][T29951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10657'. [ 1659.402350][T29978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10668'. [ 1659.539197][T29980] binder: 29979:29980 ioctl c0306201 0 returned -14 [ 1662.466517][T30016] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10680'. [ 1662.771755][T30025] overlayfs: missing 'lowerdir' [ 1663.388721][T30048] netlink: 'syz.4.10701': attribute type 12 has an invalid length. [ 1664.915297][T30093] netlink: 'syz.2.10722': attribute type 4 has an invalid length. [ 1664.915324][T30093] netlink: 'syz.2.10722': attribute type 5 has an invalid length. [ 1664.915339][T30093] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.10722'. [ 1666.759622][T30118] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 1666.759697][T30118] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 1666.759757][T30118] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1667.518970][T30132] netlink: 'syz.4.10742': attribute type 4 has an invalid length. [ 1667.518995][T30132] netlink: 'syz.4.10742': attribute type 5 has an invalid length. [ 1667.519009][T30132] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.10742'. [ 1674.204661][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.204731][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.064947][T30263] netlink: 'syz.4.10803': attribute type 12 has an invalid length. [ 1676.593131][ T5881] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1676.753578][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 1676.755887][ T5881] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 1676.755913][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.755933][ T5881] usb 5-1: config 0 has no interface number 0 [ 1676.758978][ T5881] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1676.759005][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.759027][ T5881] usb 5-1: Product: syz [ 1676.759042][ T5881] usb 5-1: Manufacturer: syz [ 1676.759057][ T5881] usb 5-1: SerialNumber: syz [ 1676.826675][ T5881] usb 5-1: config 0 descriptor?? [ 1676.846591][ T5881] net1080 5-1:0.147: probe with driver net1080 failed with error -22 [ 1677.034666][ T5881] usb 5-1: USB disconnect, device number 21 [ 1677.964918][T30284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10808'. [ 1677.964942][T30284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10808'. [ 1678.171230][T30284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10808'. [ 1678.171256][T30284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10808'. [ 1678.314952][T30291] netlink: 'syz.3.10816': attribute type 12 has an invalid length. [ 1679.172996][ T5882] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1679.207963][T30307] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1679.334529][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 1679.337401][ T5882] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 1679.337427][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.337447][ T5882] usb 3-1: config 0 has no interface number 0 [ 1679.340551][ T5882] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1679.340578][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.340598][ T5882] usb 3-1: Product: syz [ 1679.340612][ T5882] usb 3-1: Manufacturer: syz [ 1679.340628][ T5882] usb 3-1: SerialNumber: syz [ 1679.361146][ T5882] usb 3-1: config 0 descriptor?? [ 1679.398863][ T5882] net1080 3-1:0.147: probe with driver net1080 failed with error -22 [ 1679.581577][ T5882] usb 3-1: USB disconnect, device number 23 [ 1680.785044][T30355] 9pnet_fd: Insufficient options for proto=fd [ 1685.111094][T30415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10873'. [ 1687.115645][T30446] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10888'. [ 1690.429599][T30470] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10900'. [ 1697.132886][T27731] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1697.293515][T27731] usb 3-1: Using ep0 maxpacket: 16 [ 1697.295890][T27731] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 1697.295917][T27731] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.295938][T27731] usb 3-1: config 0 has no interface number 0 [ 1697.300501][T27731] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1697.300529][T27731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.300551][T27731] usb 3-1: Product: syz [ 1697.300566][T27731] usb 3-1: Manufacturer: syz [ 1697.300581][T27731] usb 3-1: SerialNumber: syz [ 1697.370537][T27731] usb 3-1: config 0 descriptor?? [ 1697.390900][T27731] net1080 3-1:0.147: probe with driver net1080 failed with error -22 [ 1697.609233][T23914] usb 3-1: USB disconnect, device number 24 [ 1698.373688][T30573] netlink: 'syz.1.10949': attribute type 4 has an invalid length. [ 1698.373712][T30573] netlink: 'syz.1.10949': attribute type 5 has an invalid length. [ 1698.373727][T30573] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.10949'. [ 1700.522342][T30590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10957'. [ 1703.062915][T18702] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1703.223510][T18702] usb 2-1: Using ep0 maxpacket: 16 [ 1703.226983][T18702] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 1703.227012][T18702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.227031][T18702] usb 2-1: config 0 has no interface number 0 [ 1703.231494][T18702] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1703.231524][T18702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.231545][T18702] usb 2-1: Product: syz [ 1703.231559][T18702] usb 2-1: Manufacturer: syz [ 1703.231574][T18702] usb 2-1: SerialNumber: syz [ 1703.285531][T18702] usb 2-1: config 0 descriptor?? [ 1703.311185][T18702] net1080 2-1:0.147: probe with driver net1080 failed with error -22 [ 1703.517565][T18702] usb 2-1: USB disconnect, device number 14 [ 1706.451440][T30662] netlink: 'syz.0.10993': attribute type 12 has an invalid length. [ 1709.585526][T30720] overlayfs: missing 'lowerdir' [ 1713.824196][T30766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11035'. [ 1714.196875][T30772] binder: 30771:30772 ioctl c0306201 0 returned -14 [ 1714.620330][T30780] 9pnet_fd: Insufficient options for proto=fd [ 1715.753375][ T38] audit: type=1326 audit(1763512061.305:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30791 comm="syz.1.11055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e26cff6c9 code=0x0 [ 1716.296675][T30798] binder: 30797:30798 ioctl c0306201 0 returned -14 [ 1718.593902][T30814] 9pnet_fd: Insufficient options for proto=fd [ 1719.620182][T30826] binder: 30825:30826 ioctl c0306201 0 returned -14 [ 1724.822654][T30863] binder: 30862:30863 ioctl c0306201 0 returned -14 [ 1730.217638][T30882] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11095'. [ 1735.643615][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.643686][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.975790][T30918] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11109'. [ 1748.754666][T30969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11128'. [ 1748.754948][T30969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11128'. [ 1755.649182][T30991] netlink: 'syz.4.11135': attribute type 12 has an invalid length. [ 1757.591755][T30999] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11142'. [ 1757.592010][T30999] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11142'. [ 1764.743460][T31024] netlink: 'syz.0.11152': attribute type 12 has an invalid length. [ 1772.053503][ T38] audit: type=1326 audit(1763512117.595:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31047 comm="syz.0.11163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bf36af6c9 code=0x0 [ 1772.373923][T31052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11164'. [ 1774.959880][T31071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1775.122911][T31071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1775.183033][T31071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1775.184338][T31071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1775.185131][T31071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1777.315518][T31071] Bluetooth: hci3: command tx timeout [ 1779.137933][T31092] overlayfs: missing 'lowerdir' [ 1779.392862][T31071] Bluetooth: hci3: command tx timeout [ 1781.596853][T31071] Bluetooth: hci3: command tx timeout [ 1783.646361][T31071] Bluetooth: hci3: command tx timeout [ 1787.663512][T31068] chnl_net:caif_netlink_parms(): no params data found [ 1793.462807][ T5882] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1797.087295][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.087366][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.690845][T31068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.691014][T31068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.691278][T31068] bridge_slave_0: entered allmulticast mode [ 1797.713650][T31068] bridge_slave_0: entered promiscuous mode [ 1797.730791][T31068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.753296][T31068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.753562][T31068] bridge_slave_1: entered allmulticast mode [ 1797.782281][T31068] bridge_slave_1: entered promiscuous mode [ 1806.392630][T31200] Mount JFS Failure: -5 [ 1807.782616][T31068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.576200][T31068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1810.365798][ T38] audit: type=1326 audit(1763512155.905:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31219 comm="syz.4.11230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d99a3f6c9 code=0x0 [ 1811.476177][T31068] team0: Port device team_slave_0 added [ 1811.479665][T31068] team0: Port device team_slave_1 added [ 1815.396748][T31238] Mount JFS Failure: -5 [ 1818.143730][T31068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1818.143748][T31068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1818.143776][T31068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1818.146246][T31068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1818.146259][T31068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1818.146288][T31068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1818.876808][T31255] netlink: 'syz.2.11242': attribute type 4 has an invalid length. [ 1818.876831][T31255] netlink: 'syz.2.11242': attribute type 5 has an invalid length. [ 1818.876844][T31255] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.11242'. [ 1818.923020][ T38] audit: type=1326 audit(1763512164.465:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31252 comm="syz.4.11243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d99a3f6c9 code=0x0 [ 1822.155177][T31262] overlayfs: failed to resolve './file0': -2 [ 1829.838786][T31289] netlink: 'syz.3.11258': attribute type 4 has an invalid length. [ 1829.838811][T31289] netlink: 'syz.3.11258': attribute type 5 has an invalid length. [ 1829.838826][T31289] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.11258'. [ 1831.466245][T31293] overlayfs: failed to resolve './file0': -2 [ 1833.163560][ T38] audit: type=1326 audit(1763512178.725:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31297 comm="syz.2.11261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a3dbcf6c9 code=0x0 [ 1834.058286][T18310] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1834.504311][T18310] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1834.544636][T18310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1834.547566][T18310] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1834.548398][T18310] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1835.738949][T31313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11268'. [ 1836.816402][T31320] netlink: 'syz.2.11271': attribute type 4 has an invalid length. [ 1836.816425][T31320] netlink: 'syz.2.11271': attribute type 5 has an invalid length. [ 1836.816438][T31320] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.11271'. [ 1837.603074][T18310] Bluetooth: hci6: command tx timeout [ 1839.127889][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.336922][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.368175][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.401118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.452778][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.484029][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.518150][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.548427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.581767][ C1] vkms_vblank_simulate: vblank timer overrun [ 1839.632888][T18310] Bluetooth: hci6: command tx timeout [ 1840.041708][T31333] overlayfs: failed to resolve './file1': -2 [ 1840.317587][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.616530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.645351][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.702348][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.770147][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.838915][ C1] vkms_vblank_simulate: vblank timer overrun [ 1840.971159][ C1] vkms_vblank_simulate: vblank timer overrun [ 1841.404283][ C1] vkms_vblank_simulate: vblank timer overrun [ 1841.434874][ C1] vkms_vblank_simulate: vblank timer overrun [ 1841.643021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1841.722773][T18310] Bluetooth: hci6: command tx timeout [ 1842.752967][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.785720][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.816363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.853555][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.876578][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.969144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.999555][ C1] vkms_vblank_simulate: vblank timer overrun [ 1843.262080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1843.294327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1843.350475][ C1] vkms_vblank_simulate: vblank timer overrun [ 1843.380843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1844.102881][T18310] Bluetooth: hci6: command tx timeout [ 1847.612875][ T5881] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1847.804235][T31357] netlink: 'syz.3.11284': attribute type 4 has an invalid length. [ 1847.804258][T31357] netlink: 'syz.3.11284': attribute type 5 has an invalid length. [ 1847.804272][T31357] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.11284'. [ 1852.077657][T31369] overlayfs: failed to resolve './file1': -2 [ 1853.895955][T31303] chnl_net:caif_netlink_parms(): no params data found [ 1858.614747][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.614823][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.414548][T31409] overlayfs: failed to resolve './file1': -2 [ 1865.672276][T31303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.672409][T31303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.672652][T31303] bridge_slave_0: entered allmulticast mode [ 1865.714397][T31303] bridge_slave_0: entered promiscuous mode [ 1865.766921][T31303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.767034][T31303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.767549][T31303] bridge_slave_1: entered allmulticast mode [ 1865.805411][T31303] bridge_slave_1: entered promiscuous mode [ 1870.465117][ T38] audit: type=1326 audit(1763512215.935:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31452 comm="syz.4.11323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d99a3f6c9 code=0x0 [ 1872.206838][T31303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1872.268221][T31303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.526970][T31303] team0: Port device team_slave_0 added [ 1877.530858][T31303] team0: Port device team_slave_1 added [ 1882.212984][T31491] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11335'. [ 1882.273294][ T38] audit: type=1326 audit(1763512227.815:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31490 comm="syz.3.11339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7092f6c9 code=0x0 [ 1887.245258][T31515] netlink: 'syz.4.11348': attribute type 4 has an invalid length. [ 1887.245293][T31515] netlink: 'syz.4.11348': attribute type 5 has an invalid length. [ 1887.245307][T31515] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.11348'. [ 1890.520420][T31520] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11350'. [ 1891.513821][ T38] audit: type=1326 audit(1763512237.075:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31525 comm="syz.0.11352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bf36af6c9 code=0x0 [ 1892.566511][T31071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1892.587950][T31071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1892.589216][T31071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1892.590897][T31071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1892.591685][T31071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1893.715782][ T39] INFO: task syz.1.11127:30965 blocked for more than 143 seconds. [ 1893.715821][ T39] Not tainted syzkaller #0 [ 1893.715832][ T39] Blocked by coredump. [ 1893.715838][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1893.715848][ T39] task:syz.1.11127 state:D stack:25160 pid:30965 tgid:30965 ppid:27426 task_flags:0x40004c flags:0x00080000 [ 1893.715928][ T39] Call Trace: [ 1893.715939][ T39] [ 1893.715953][ T39] __schedule+0x16f3/0x4c20 [ 1893.716017][ T39] ? __lock_acquire+0xab9/0xd20 [ 1893.716045][ T39] ? __pfx___schedule+0x10/0x10 [ 1893.716090][ T39] ? schedule+0x91/0x360 [ 1893.716121][ T39] schedule+0x165/0x360 [ 1893.716150][ T39] schedule_timeout+0x9a/0x270 [ 1893.716177][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 1893.716217][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1893.716245][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1893.716272][ T39] ? wait_for_completion+0x267/0x5d0 [ 1893.716302][ T39] wait_for_completion+0x2bf/0x5d0 [ 1893.716344][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 1893.716387][ T39] exit_aio+0x2f1/0x3b0 [ 1893.716423][ T39] ? __pfx_exit_aio+0x10/0x10 [ 1893.716462][ T39] ? uprobe_clear_state+0x288/0x2a0 [ 1893.716492][ T39] ? mm_update_next_owner+0xa7/0x870 [ 1893.716527][ T39] __mmput+0x68/0x3d0 [ 1893.716552][ T39] exit_mm+0x1da/0x2c0 [ 1893.716584][ T39] ? __pfx_exit_mm+0x10/0x10 [ 1893.716624][ T39] ? rcu_is_watching+0x15/0xb0 [ 1893.716648][ T39] do_exit+0x648/0x2300 [ 1893.716675][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 1893.716706][ T39] ? rt_mutex_slowunlock+0x668/0x8a0 [ 1893.716733][ T39] ? __pfx_do_exit+0x10/0x10 [ 1893.716762][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1893.716789][ T39] ? __rcu_read_unlock+0x84/0xe0 [ 1893.716816][ T39] ? rt_spin_unlock+0x161/0x200 [ 1893.716843][ T39] do_group_exit+0x21c/0x2d0 [ 1893.716867][ T39] __x64_sys_exit_group+0x3f/0x40 [ 1893.716887][ T39] x64_sys_call+0x21f7/0x2200 [ 1893.716907][ T39] do_syscall_64+0xfa/0xfa0 [ 1893.716935][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1893.716963][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.716983][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1893.717008][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.717027][ T39] RIP: 0033:0x7f8e26cff6c9 [ 1893.717049][ T39] RSP: 002b:00007ffe344a8308 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1893.717070][ T39] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e26cff6c9 [ 1893.717085][ T39] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1893.717097][ T39] RBP: 00007ffe344a836c R08: 0000000c344a83ff R09: 00000000000927c0 [ 1893.717111][ T39] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000113 [ 1893.717124][ T39] R13: 00000000000927c0 R14: 00000000001aa010 R15: 00007ffe344a83c0 [ 1893.717157][ T39] [ 1893.717180][ T39] [ 1893.717180][ T39] Showing all locks held in the system: [ 1893.717196][ T39] 3 locks held by rcuc/1/28: [ 1893.717209][ T39] 1 lock held by khungtaskd/39: [ 1893.717220][ T39] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1893.717274][ T39] 2 locks held by kworker/u8:5/75: [ 1893.717321][ T39] 4 locks held by udevd/5168: [ 1893.717333][ T39] 2 locks held by getty/5558: [ 1893.717344][ T39] #0: ffff88823bf748a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1893.717509][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1893.717598][ T39] 5 locks held by syz-executor/5787: [ 1893.717612][ T39] 3 locks held by kworker/0:5/5965: [ 1893.717624][ T39] 4 locks held by kworker/u8:1/20441: [ 1893.717639][ T39] 9 locks held by syz-executor/25707: [ 1893.717652][ T39] 1 lock held by syz-executor/27080: [ 1893.717667][ T39] 6 locks held by syz-executor/27765: [ 1893.717681][ T39] 2 locks held by kworker/u8:4/30883: [ 1893.717691][ T39] #0: ffff88801e346138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1893.717748][ T39] #1: ffffc9000cedfba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1893.717803][ T39] 1 lock held by syz-executor/31068: [ 1893.717814][ T39] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1893.717865][ T39] 4 locks held by kworker/u9:0/31071: [ 1893.717878][ T39] #0: ffff888038506938 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1893.717936][ T39] #1: ffffc9000b0e7ba0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1893.717990][ T39] #2: ffff88803b4780a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1893.718043][ T39] #3: ffffffff8e9cbcb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1893.718098][ T39] 4 locks held by syz-executor/31303: [ 1893.718110][ T39] #0: ffff88807cf20e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1893.718163][ T39] #1: ffff88807cf200a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1893.718220][ T39] #2: ffffffff8e9cbcb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1893.718267][ T39] #3: ffff8880754d1358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1893.718331][ T39] 2 locks held by kworker/u8:11/31395: [ 1893.718345][ T39] 4 locks held by syz.4.11355/31529: [ 1893.718358][ T39] 1 lock held by syz-executor/31531: [ 1893.718371][ T39] [ 1893.718376][ T39] ============================================= [ 1893.718376][ T39] [ 1893.718386][ T39] NMI backtrace for cpu 1 [ 1893.718409][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1893.718432][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1893.718444][ T39] Call Trace: [ 1893.718452][ T39] [ 1893.718461][ T39] dump_stack_lvl+0x189/0x250 [ 1893.718498][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1893.718530][ T39] ? __pfx__printk+0x10/0x10 [ 1893.718586][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1893.718624][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1893.718652][ T39] ? __pfx__printk+0x10/0x10 [ 1893.718684][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1893.718710][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1893.718740][ T39] watchdog+0xf60/0xfa0 [ 1893.718777][ T39] ? watchdog+0x1e2/0xfa0 [ 1893.718813][ T39] kthread+0x711/0x8a0 [ 1893.718861][ T39] ? __pfx_watchdog+0x10/0x10 [ 1893.718889][ T39] ? __pfx_kthread+0x10/0x10 [ 1893.718918][ T39] ? rt_spin_unlock+0x150/0x200 [ 1893.718948][ T39] ? rt_spin_unlock+0x161/0x200 [ 1893.718971][ T39] ? __pfx_kthread+0x10/0x10 [ 1893.719002][ T39] ret_from_fork+0x4bc/0x870 [ 1893.719030][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1893.719063][ T39] ? __switch_to_asm+0x39/0x70 [ 1893.719083][ T39] ? __switch_to_asm+0x33/0x70 [ 1893.719102][ T39] ? __pfx_kthread+0x10/0x10 [ 1893.719134][ T39] ret_from_fork_asm+0x1a/0x30 [ 1893.719174][ T39] [ 1893.719182][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1893.719208][ C0] NMI backtrace for cpu 0 [ 1893.719229][ C0] CPU: 0 UID: 0 PID: 27765 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1893.719249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1893.719260][ C0] RIP: 0010:__lock_acquire+0x893/0xd20 [ 1893.719286][ C0] Code: 83 3d 94 67 3a 0d 00 0f 85 36 02 00 00 48 83 7c 24 28 00 0f 84 bc 01 00 00 41 8b 46 f8 25 ff 1f 00 00 48 0f a3 05 ad 4a 0e 11 <0f> 83 5a 01 00 00 48 69 c0 c8 00 00 00 48 8d 80 10 33 4b 92 e9 87 [ 1893.719302][ C0] RSP: 0018:ffffc900054168a8 EFLAGS: 00000003 [ 1893.719317][ C0] RAX: 000000000000000b RBX: 0000000000000005 RCX: 0000000063772f0f [ 1893.719328][ C0] RDX: 000000003ba821b5 RSI: 000000006ccc3ae9 RDI: ffff888030b35a00 [ 1893.719346][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81736c15 [ 1893.719357][ C0] R10: ffffc90005416af8 R11: ffffffff81aacc60 R12: 000000004b405581 [ 1893.719370][ C0] R13: ffff888030b36560 R14: ffff888030b36628 R15: ba8a94cc63772f0f [ 1893.719384][ C0] FS: 000055557dc99500(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 1893.719399][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1893.719412][ C0] CR2: 000055557dcb45c8 CR3: 0000000028f88000 CR4: 00000000003526f0 [ 1893.719427][ C0] Call Trace: [ 1893.719433][ C0] [ 1893.719443][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1893.719466][ C0] lock_acquire+0x120/0x360 [ 1893.719489][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1893.719516][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1893.719538][ C0] ? __local_bh_enable_ip+0x1a0/0x2e0 [ 1893.719559][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1893.719582][ C0] unwind_next_frame+0xc2/0x2390 [ 1893.719605][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1893.719631][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1893.719654][ C0] ? handle_softirqs+0x22f/0x710 [ 1893.719677][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 1893.719779][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1893.719798][ C0] arch_stack_walk+0x11c/0x150 [ 1893.719822][ C0] ? __local_bh_enable_ip+0x1a0/0x2e0 [ 1893.719844][ C0] stack_trace_save+0x9c/0xe0 [ 1893.719861][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1893.719878][ C0] ? kmem_cache_free+0x19a/0x910 [ 1893.719902][ C0] ? __lock_acquire+0xab9/0xd20 [ 1893.719924][ C0] kasan_save_track+0x3e/0x80 [ 1893.719944][ C0] ? kasan_save_track+0x3e/0x80 [ 1893.719962][ C0] ? __kasan_save_free_info+0x46/0x50 [ 1893.719978][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1893.719998][ C0] ? kmem_cache_free+0x19a/0x910 [ 1893.720019][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 1893.720042][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 1893.720064][ C0] ? nft_do_chain+0x40c/0x1920 [ 1893.720119][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 1893.720173][ C0] ? nf_hook_slow+0xc5/0x220 [ 1893.720208][ C0] ? NF_HOOK+0x206/0x3a0 [ 1893.720241][ C0] ? NF_HOOK+0x30c/0x3a0 [ 1893.720255][ C0] ? __netif_receive_skb+0x143/0x380 [ 1893.720313][ C0] ? process_backlog+0x31e/0x900 [ 1893.720328][ C0] ? __napi_poll+0xb6/0x540 [ 1893.720354][ C0] ? net_rx_action+0x5f7/0xda0 [ 1893.720368][ C0] ? handle_softirqs+0x22f/0x710 [ 1893.720387][ C0] ? __local_bh_enable_ip+0x1a0/0x2e0 [ 1893.720423][ C0] __kasan_save_free_info+0x46/0x50 [ 1893.720439][ C0] __kasan_slab_free+0x5c/0x80 [ 1893.720461][ C0] kmem_cache_free+0x19a/0x910 [ 1893.720482][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 1893.720508][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 1893.720534][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1893.720559][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1893.720602][ C0] nft_synproxy_do_eval+0x345/0x570 [ 1893.720626][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1893.720651][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1893.720683][ C0] nft_do_chain+0x40c/0x1920 [ 1893.720706][ C0] ? nft_do_chain+0x16a1/0x1920 [ 1893.720730][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1893.720751][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 1893.720773][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1893.720812][ C0] nft_do_chain_inet+0x25d/0x340 [ 1893.720835][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1893.720857][ C0] ? __lock_acquire+0xab9/0xd20 [ 1893.720883][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1893.720899][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1893.720922][ C0] nf_hook_slow+0xc5/0x220 [ 1893.720942][ C0] NF_HOOK+0x206/0x3a0 [ 1893.720958][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1893.720975][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1893.720989][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1893.721004][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1893.721021][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1893.721039][ C0] ? skb_dst+0x4f/0xd0 [ 1893.721054][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1893.721072][ C0] NF_HOOK+0x30c/0x3a0 [ 1893.721088][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1893.721104][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1893.721118][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1893.721134][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1893.721155][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1893.721188][ C0] __netif_receive_skb+0x143/0x380 [ 1893.721215][ C0] ? process_backlog+0x27b/0x900 [ 1893.721229][ C0] process_backlog+0x31e/0x900 [ 1893.721249][ C0] __napi_poll+0xb6/0x540 [ 1893.721275][ C0] net_rx_action+0x5f7/0xda0 [ 1893.721296][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1893.721313][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1893.721339][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1893.721365][ C0] handle_softirqs+0x22f/0x710 [ 1893.721388][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1893.721412][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 1893.721431][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1893.721454][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1893.721473][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1893.721497][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1893.721518][ C0] ? rt_write_unlock+0x73/0x230 [ 1893.721539][ C0] ? rt_write_unlock+0x191/0x230 [ 1893.721559][ C0] ? __tcp_close+0x765/0x1010 [ 1893.721593][ C0] __tcp_close+0x839/0x1010 [ 1893.721610][ C0] ? lock_sock_nested+0x5f/0x130 [ 1893.721670][ C0] tcp_close+0x28/0x110 [ 1893.721684][ C0] inet_release+0x144/0x190 [ 1893.721730][ C0] sock_close+0xc3/0x240 [ 1893.721778][ C0] ? __pfx_sock_close+0x10/0x10 [ 1893.721801][ C0] __fput+0x45b/0xa80 [ 1893.721822][ C0] fput_close_sync+0x119/0x200 [ 1893.721838][ C0] ? dnotify_flush+0x1e8/0x5c0 [ 1893.721855][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 1893.721875][ C0] __x64_sys_close+0x7f/0x110 [ 1893.721892][ C0] do_syscall_64+0xfa/0xfa0 [ 1893.721916][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1893.721939][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.721956][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1893.721975][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.721990][ C0] RIP: 0033:0x7f0bf36ae32a [ 1893.722004][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 1893.722019][ C0] RSP: 002b:00007ffddc848960 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1893.722036][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0bf36ae32a [ 1893.722047][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1893.722056][ C0] RBP: 00007ffddc8489bc R08: 0000000000000000 R09: 00007ffddc8486c7 [ 1893.722067][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000011e [ 1893.722077][ C0] R13: 00000000000927c0 R14: 00000000001cdd05 R15: 00007ffddc848a10 [ 1893.722097][ C0] [ 1895.552415][T31071] Bluetooth: hci3: command tx timeout [ 1897.645044][T31071] Bluetooth: hci3: command tx timeout [ 1899.713139][T31071] Bluetooth: hci3: command tx timeout [ 1901.802805][T31071] Bluetooth: hci3: command tx timeout