last executing test programs: 2m12.285231385s ago: executing program 1 (id=1254): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) clock_adjtime(0x0, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x100000000000, 0x800000000, 0x1ff, 0x4}) 2m12.110412962s ago: executing program 1 (id=1256): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) 2m11.976299386s ago: executing program 1 (id=1259): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x9, 0x2}]}, 0x10) 2m11.753642883s ago: executing program 1 (id=1263): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2m10.577999676s ago: executing program 1 (id=1280): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m9.318159001s ago: executing program 1 (id=1294): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c01000010000100000000000000000064010102000000000000000000000000200100000000000000000000000000024e"], 0x14c}}, 0x0) 2m8.588304976s ago: executing program 32 (id=1294): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c01000010000100000000000000000064010102000000000000000000000000200100000000000000000000000000024e"], 0x14c}}, 0x0) 1m50.577001231s ago: executing program 2 (id=1480): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50) 1m50.453967854s ago: executing program 2 (id=1482): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c4) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff"], 0x310) 1m50.376924111s ago: executing program 2 (id=1484): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061106000000000001f110000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m50.254605432s ago: executing program 2 (id=1486): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 1m50.15082839s ago: executing program 2 (id=1488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x1}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m49.485828311s ago: executing program 2 (id=1500): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x1, &(0x7f0000000500)={0x0, 0x1c, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{}, {0x77359400}}, &(0x7f0000000700)) 1m49.275107338s ago: executing program 33 (id=1500): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x1, &(0x7f0000000500)={0x0, 0x1c, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{}, {0x77359400}}, &(0x7f0000000700)) 56.421479497s ago: executing program 3 (id=2108): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be0402050605fe100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 56.208675298s ago: executing program 3 (id=2113): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 53.148781149s ago: executing program 3 (id=2148): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddb", @ANYRES32, @ANYBLOB="14001a"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 51.878062046s ago: executing program 3 (id=2162): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}]}, 0x18}], 0x1}, 0x0) 51.33466024s ago: executing program 3 (id=2168): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x3a, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) 51.090447638s ago: executing program 3 (id=2172): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 37.319463779s ago: executing program 6 (id=2262): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x28, 0x5, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 36.538603173s ago: executing program 6 (id=2270): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}]}}, 0x0, 0x32}, 0x28) 36.015552577s ago: executing program 6 (id=2274): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 35.731519304s ago: executing program 6 (id=2276): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) 35.299576135s ago: executing program 6 (id=2280): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) 35.05754733s ago: executing program 6 (id=2283): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x11, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 34.898770992s ago: executing program 34 (id=2172): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 33.219697108s ago: executing program 4 (id=2297): rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x40cb091, 0x0, 0x0, 0x0, 0x0, 0x0) 32.272132448s ago: executing program 0 (id=2300): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fremovexattr(r2, &(0x7f0000000400)=@known='trusted.overlay.impure\x00') 32.085054872s ago: executing program 4 (id=2302): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, 'lowerdir'}}]}) 31.810990688s ago: executing program 0 (id=2303): syz_usb_connect(0x5, 0xc9, &(0x7f0000000040)=ANY=[@ANYBLOB="120101029cf8cd08042348028c7c010203010902b70002020c508209049301039df99ab1052406000005240087000d240f01080000000e00800002022109050a10000205c2030725018102540007250180090000090505042000080001020f0905060000040508ca072501000a0700072501830901000904900005205545070905050c4000070705090505011000090013090501002000b108090905020420000100c7020109050000080040c5001b2356600602b89292a60a88491d8ee539ee34badb8506e4cddd"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 31.669423923s ago: executing program 4 (id=2305): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400"], 0xfc}}, 0x0) 31.209509156s ago: executing program 4 (id=2309): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) 30.966951918s ago: executing program 4 (id=2310): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '#'}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0x20}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x12, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 30.588602253s ago: executing program 4 (id=2313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)={0xb, 0x75, 0x1}, 0xb) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @remote, 0xa}, 0x1c, 0x0}}], 0x1, 0x200c4001) 29.44216369s ago: executing program 0 (id=2317): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) 27.526792333s ago: executing program 0 (id=2319): unshare(0x22020600) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 26.693039668s ago: executing program 5 (id=2321): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x58) 25.932973748s ago: executing program 5 (id=2322): write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 23.219494168s ago: executing program 0 (id=2323): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) 22.609811687s ago: executing program 5 (id=2324): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) 21.249218044s ago: executing program 0 (id=2325): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000000}]) 18.755146835s ago: executing program 5 (id=2326): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='blkio'}]}) 17.926684506s ago: executing program 35 (id=2283): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x11, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 16.738403797s ago: executing program 5 (id=2328): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, 0x0, 0x0) 16.366340556s ago: executing program 5 (id=2329): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 13.771041828s ago: executing program 36 (id=2313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)={0xb, 0x75, 0x1}, 0xb) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @remote, 0xa}, 0x1c, 0x0}}], 0x1, 0x200c4001) 5.019026754s ago: executing program 37 (id=2325): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000000}]) 0s ago: executing program 38 (id=2329): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) kernel console output (not intermixed with test programs): d impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.724859][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.946131][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.946148][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.946173][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.947147][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.947159][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.947172][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.135795][ T5813] team0: Port device team_slave_0 added [ 92.142923][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.142934][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.142947][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.145297][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.145311][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.145335][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.276657][ T5813] team0: Port device team_slave_1 added [ 92.286418][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.286433][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.286456][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.357357][ T5796] hsr_slave_0: entered promiscuous mode [ 92.358998][ T5796] hsr_slave_1: entered promiscuous mode [ 92.577757][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.577769][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.577783][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.796041][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.796053][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.796067][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.910249][ T5801] hsr_slave_0: entered promiscuous mode [ 92.911102][ T5801] hsr_slave_1: entered promiscuous mode [ 92.911783][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 92.911870][ T5801] Cannot create hsr debugfs directory [ 92.993952][ T61] Bluetooth: hci0: command tx timeout [ 93.060332][ T5802] hsr_slave_0: entered promiscuous mode [ 93.061145][ T5802] hsr_slave_1: entered promiscuous mode [ 93.061883][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 93.061902][ T5802] Cannot create hsr debugfs directory [ 93.120644][ T5806] hsr_slave_0: entered promiscuous mode [ 93.121461][ T5806] hsr_slave_1: entered promiscuous mode [ 93.122030][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 93.122047][ T5806] Cannot create hsr debugfs directory [ 93.223837][ T61] Bluetooth: hci2: command tx timeout [ 93.303621][ T61] Bluetooth: hci1: command tx timeout [ 93.393450][ T61] Bluetooth: hci3: command tx timeout [ 93.463718][ T61] Bluetooth: hci4: command tx timeout [ 93.796520][ T5813] hsr_slave_0: entered promiscuous mode [ 93.797323][ T5813] hsr_slave_1: entered promiscuous mode [ 93.797894][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 93.797917][ T5813] Cannot create hsr debugfs directory [ 94.851200][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.890154][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.908638][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.961594][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.062980][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.064035][ T61] Bluetooth: hci0: command tx timeout [ 95.100774][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.137686][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.196903][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.303636][ T61] Bluetooth: hci2: command tx timeout [ 95.316998][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.362229][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.383661][ T61] Bluetooth: hci1: command tx timeout [ 95.406122][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.450863][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.463575][ T61] Bluetooth: hci3: command tx timeout [ 95.543526][ T61] Bluetooth: hci4: command tx timeout [ 95.586773][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.638899][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.672281][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.728121][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.859128][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.861717][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.907716][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.939137][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.961887][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.041501][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.087212][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.089877][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.090367][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.136839][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.137455][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.200255][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.230191][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.241353][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.241435][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.281529][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.282094][ T798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.329917][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.361160][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.362867][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.362995][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.401471][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.401608][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.487295][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.492940][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.550437][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.550650][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.618984][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.619123][ T798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.676522][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.726305][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.727151][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.782253][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.782456][ T798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.898247][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.147751][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.231314][ T5796] veth0_vlan: entered promiscuous mode [ 97.289027][ T5796] veth1_vlan: entered promiscuous mode [ 97.296433][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.405652][ T5813] veth0_vlan: entered promiscuous mode [ 97.454613][ T5813] veth1_vlan: entered promiscuous mode [ 97.465536][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.480091][ T5796] veth0_macvtap: entered promiscuous mode [ 97.521349][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.522458][ T5796] veth1_macvtap: entered promiscuous mode [ 97.580861][ T5801] veth0_vlan: entered promiscuous mode [ 97.629212][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.642950][ T5801] veth1_vlan: entered promiscuous mode [ 97.689294][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.694134][ T5813] veth0_macvtap: entered promiscuous mode [ 97.727358][ T5813] veth1_macvtap: entered promiscuous mode [ 97.730537][ T159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.748131][ T159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.752817][ T159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.780398][ T159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.852195][ T5806] veth0_vlan: entered promiscuous mode [ 97.901217][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.917869][ T5801] veth0_macvtap: entered promiscuous mode [ 97.975472][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.995968][ T5806] veth1_vlan: entered promiscuous mode [ 97.998305][ T5801] veth1_macvtap: entered promiscuous mode [ 98.037682][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.061526][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.079236][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.086204][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.102218][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.102241][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.171716][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.254995][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.281909][ T5802] veth0_vlan: entered promiscuous mode [ 98.289097][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.289117][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.385746][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.397112][ T75] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.411598][ T75] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.435160][ T5806] veth0_macvtap: entered promiscuous mode [ 98.458654][ T75] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.482744][ T5802] veth1_vlan: entered promiscuous mode [ 98.512033][ T5806] veth1_macvtap: entered promiscuous mode [ 98.521839][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.521857][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.696594][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.696613][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.733970][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.814421][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.910558][ T5914] gretap0: entered promiscuous mode [ 98.922528][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.923004][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 98.923119][ T5914] gretap0: left promiscuous mode [ 98.949439][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.964973][ T5802] veth0_macvtap: entered promiscuous mode [ 98.966603][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.980546][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.980566][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.018984][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.072464][ T5802] veth1_macvtap: entered promiscuous mode [ 99.118977][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.278384][ T790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.278402][ T790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.310492][ T5916] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 99.392360][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.430718][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.497663][ T159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.500454][ T159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.504213][ T159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.505095][ T159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.650145][ T790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.650166][ T790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.857584][ T37] audit: type=1326 audit(1763406436.540:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.3.9" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x0 [ 100.010389][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.010411][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.120449][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.120468][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.214915][ T5855] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.344477][ T798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.344497][ T798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.401767][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 100.439665][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.439698][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.439737][ T5855] usb 2-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 100.439760][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.493284][ T5855] usb 2-1: config 0 descriptor?? [ 101.028290][ T5855] logitech-hidpp-device 0003:046D:C091.0001: collection stack underflow [ 101.028327][ T5855] logitech-hidpp-device 0003:046D:C091.0001: item 0 2 0 12 parsing failed [ 101.029178][ T5855] logitech-hidpp-device 0003:046D:C091.0001: hidpp_probe:parse failed [ 101.029285][ T5855] logitech-hidpp-device 0003:046D:C091.0001: probe with driver logitech-hidpp-device failed with error -22 [ 101.171640][ T5855] usb 2-1: USB disconnect, device number 2 [ 101.301878][ T37] audit: type=1326 audit(1763406438.007:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5946 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 101.338232][ T37] audit: type=1326 audit(1763406438.007:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5946 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 101.338283][ T37] audit: type=1326 audit(1763406438.048:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5946 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 101.338319][ T37] audit: type=1326 audit(1763406438.048:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5946 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 101.338351][ T37] audit: type=1326 audit(1763406438.048:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5946 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 101.346441][ T5935] syz.0.1 (5935) used greatest stack depth: 17808 bytes left [ 101.380839][ T37] audit: type=1326 audit(1763406438.058:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5946 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 101.437694][ T37] audit: type=1326 audit(1763406438.140:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5946 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 101.447226][ T37] audit: type=1326 audit(1763406438.140:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5946 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 101.452176][ T37] audit: type=1326 audit(1763406438.161:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5946 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 102.239549][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 103.346660][ T5988] process 'syz.3.29' launched './file2' with NULL argv: empty string added [ 103.930220][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.090641][ T5878] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 104.090671][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.090692][ T5878] usb 4-1: Product: syz [ 104.090707][ T5878] usb 4-1: Manufacturer: syz [ 104.090720][ T5878] usb 4-1: SerialNumber: syz [ 104.139363][ T5878] usb 4-1: config 0 descriptor?? [ 104.384352][ T6004] loop2: detected capacity change from 0 to 7 [ 104.422761][ T5796] loop2: [ 104.422797][ T5796] loop2: partition table partially beyond EOD, truncated [ 104.514476][ T6004] loop2: [ 104.515204][ T6004] loop2: partition table partially beyond EOD, truncated [ 105.025802][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.172480][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 105.203949][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.204031][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.204054][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 105.204098][ T5883] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 105.204121][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.292577][ T5883] usb 3-1: config 0 descriptor?? [ 105.597838][ T5878] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 105.724024][ T5878] usb 4-1: USB disconnect, device number 2 [ 105.921927][ T5883] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0002/input/input5 [ 106.117391][ T5883] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 106.141512][ T5883] usb 3-1: USB disconnect, device number 2 [ 106.362588][ T6032] fido_id[6032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 106.553818][ T6040] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 106.951681][ T5878] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 107.091485][ T5462] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 107.096532][ T5462] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 107.199963][ T5462] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 107.326833][ T5878] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 107.827044][ T6068] loop2: detected capacity change from 0 to 7 [ 107.831649][ T6068] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 107.831903][ T6068] loop2: p1 start 48758784 is beyond EOD, truncated [ 107.831924][ T6068] loop2: p2 size 4294901760 extends beyond EOD, truncated [ 107.872777][ T6068] loop2: p3 start 4294962096 is beyond EOD, truncated [ 107.872802][ T6068] loop2: p4 start 1597073524 is beyond EOD, truncated [ 107.872819][ T6068] loop2: p5 start 11010048 is beyond EOD, truncated [ 107.872833][ T6068] loop2: p6 start 3670018 is beyond EOD, truncated [ 107.872848][ T6068] loop2: p7 size 197376 extends beyond EOD, truncated [ 107.908272][ T6068] loop2: p8 start 1680801792 is beyond EOD, truncated [ 108.364875][ T6055] udevd[6055]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 108.377470][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 109.454998][ T5883] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.602959][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.603020][ T5883] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.603043][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.646263][ T5883] usb 4-1: config 0 descriptor?? [ 109.666393][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 109.710557][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.872363][ T5884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.909223][ T5884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.909262][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.909282][ T5884] usb 5-1: Product: syz [ 109.909311][ T5884] usb 5-1: Manufacturer: syz [ 109.909326][ T5884] usb 5-1: SerialNumber: syz [ 110.107276][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 110.109442][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 110.147084][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 110.157470][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 110.162811][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 110.365818][ T5883] pwc: recv_control_msg error -71 req 02 val 2000 [ 110.366289][ T5883] pwc: recv_control_msg error -71 req 02 val 2100 [ 110.366719][ T5883] pwc: recv_control_msg error -71 req 04 val 1500 [ 110.390969][ T5883] pwc: recv_control_msg error -71 req 02 val 2500 [ 110.391546][ T5883] pwc: recv_control_msg error -71 req 02 val 2400 [ 110.392029][ T5883] pwc: recv_control_msg error -71 req 02 val 2600 [ 110.395587][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 110.425289][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 110.433060][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 110.435219][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 110.458254][ T5883] pwc: Registered as video103. [ 110.462066][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 110.492187][ T5883] usb 4-1: USB disconnect, device number 3 [ 110.640797][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 110.640814][ T37] audit: type=1326 audit(1763406447.557:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6131 comm="syz.0.79" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x0 [ 111.149443][ T5884] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 111.149485][ T5884] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 111.149504][ T5884] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 111.582853][ T5884] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 111.678250][ T5884] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 111.765861][ T5884] usb 5-1: USB disconnect, device number 2 [ 111.768916][ T5884] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 111.858020][ T5969] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.035911][ T5969] usb 2-1: Using ep0 maxpacket: 16 [ 112.039259][ T5969] usb 2-1: config 0 has no interfaces? [ 112.042855][ T5969] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 112.042884][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.042904][ T5969] usb 2-1: Product: syz [ 112.042919][ T5969] usb 2-1: Manufacturer: syz [ 112.042934][ T5969] usb 2-1: SerialNumber: syz [ 112.135603][ T5969] usb 2-1: config 0 descriptor?? [ 112.403130][ T5883] usb 2-1: USB disconnect, device number 3 [ 112.783400][ T5883] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 112.955083][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.955110][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.961755][ T5883] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.961785][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.961805][ T5883] usb 2-1: Product: syz [ 112.961819][ T5883] usb 2-1: Manufacturer: syz [ 112.961832][ T5883] usb 2-1: SerialNumber: syz [ 113.070985][ T5969] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.230820][ T5969] usb 1-1: Using ep0 maxpacket: 16 [ 113.256816][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.256849][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.256871][ T5969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 113.256913][ T5969] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 113.256935][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.261002][ T5883] usb 2-1: 0:2 : does not exist [ 113.322305][ T5969] usb 1-1: config 0 descriptor?? [ 113.348065][ T5883] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 113.515165][ T5883] usb 2-1: USB disconnect, device number 4 [ 113.918265][ T5969] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0003/input/input7 [ 114.002208][ T5969] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 114.174892][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.404987][ T5884] usb 1-1: USB disconnect, device number 2 [ 114.571048][ T6194] fido_id[6194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 114.637942][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.692082][ T37] audit: type=1326 audit(1763406452.376:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.2.106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x0 [ 114.789997][ T6211] syz.1.107 uses obsolete (PF_INET,SOCK_PACKET) [ 114.797839][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 114.800919][ T44] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 114.800945][ T44] usb 5-1: config 0 has no interface number 0 [ 114.800991][ T44] usb 5-1: config 0 interface 184 has no altsetting 0 [ 114.806631][ T44] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 114.806660][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.806679][ T44] usb 5-1: Product: syz [ 114.806692][ T44] usb 5-1: Manufacturer: syz [ 114.806706][ T44] usb 5-1: SerialNumber: syz [ 114.824851][ T6211] syzkaller1: entered promiscuous mode [ 114.824875][ T6211] syzkaller1: entered allmulticast mode [ 114.837009][ T44] usb 5-1: config 0 descriptor?? [ 114.884291][ T44] smsc75xx v1.0.0 [ 115.532897][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 115.532937][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 116.131596][ T5969] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.312433][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 116.314799][ T5969] usb 4-1: config 0 has no interfaces? [ 116.319666][ T5969] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 116.319694][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.319714][ T5969] usb 4-1: Product: syz [ 116.319728][ T5969] usb 4-1: Manufacturer: syz [ 116.319742][ T5969] usb 4-1: SerialNumber: syz [ 116.393179][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 116.393211][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 116.393227][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 116.394253][ T44] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 116.450806][ T5969] usb 4-1: config 0 descriptor?? [ 116.462165][ T44] usb 5-1: USB disconnect, device number 3 [ 116.722614][ T44] usb 4-1: USB disconnect, device number 4 [ 116.772633][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.119'. [ 117.131918][ T44] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 117.349808][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.349835][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.354770][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.354801][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.354821][ T44] usb 4-1: Product: syz [ 117.354835][ T44] usb 4-1: Manufacturer: syz [ 117.354849][ T44] usb 4-1: SerialNumber: syz [ 117.664112][ T44] usb 4-1: 0:2 : does not exist [ 117.682054][ T44] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 117.724329][ T44] usb 4-1: USB disconnect, device number 5 [ 117.985677][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.261834][ T5969] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.421684][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 118.424417][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 118.424451][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.424473][ T5969] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.424497][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14129, setting to 64 [ 118.424540][ T5969] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 118.424564][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.438832][ T5969] usb 3-1: config 0 descriptor?? [ 118.699348][ T1246] usb 3-1: USB disconnect, device number 3 [ 118.883374][ T6276] sock: sock_set_timeout: `syz.1.136' (pid 6276) tries to set negative timeout [ 120.643389][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 120.908911][ T5969] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.104167][ T5969] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 121.104197][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.104216][ T5969] usb 3-1: Product: syz [ 121.104229][ T5969] usb 3-1: Manufacturer: syz [ 121.104242][ T5969] usb 3-1: SerialNumber: syz [ 121.122967][ T5969] usb 3-1: config 0 descriptor?? [ 121.164351][ T5969] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 121.331456][ T44] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.502080][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 121.504547][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.504580][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.504619][ T44] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 121.504642][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.567121][ T44] usb 1-1: config 0 descriptor?? [ 122.225661][ T44] usb 1-1: language id specifier not provided by device, defaulting to English [ 122.440114][ T44] letsketch 0003:6161:4D15.0004: Device info: ☲ [ 122.662102][ T44] letsketch 0003:6161:4D15.0004: Device info: Ÿᒠ[ 122.898636][ T1246] usb 3-1: USB disconnect, device number 4 [ 122.907741][ T44] letsketch 0003:6161:4D15.0004: Device info: Ð’ [ 123.277015][ T6401] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.396830][ T44] usb 1-1: Max retries (5) exceeded reading string descriptor 2 [ 123.396924][ T44] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71 [ 123.435508][ T44] usb 1-1: USB disconnect, device number 3 [ 123.454146][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.629839][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 123.629870][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.629889][ T31] usb 2-1: Product: syz [ 123.629903][ T31] usb 2-1: Manufacturer: syz [ 123.629917][ T31] usb 2-1: SerialNumber: syz [ 124.333115][ T37] audit: type=1326 audit(1763406461.429:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6425 comm="syz.3.200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x0 [ 125.440709][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.210'. [ 125.829996][ T6452] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 127.061281][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 127.061339][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 127.061359][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 127.250092][ T31] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 127.275410][ T31] usb 2-1: USB disconnect, device number 5 [ 127.634297][ T6489] netlink: 64 bytes leftover after parsing attributes in process `syz.1.225'. [ 128.366172][ T5969] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.526082][ T5969] usb 1-1: Using ep0 maxpacket: 8 [ 128.528735][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 128.528769][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.528791][ T5969] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.528814][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14129, setting to 64 [ 128.528856][ T5969] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 128.528879][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.613189][ T5969] usb 1-1: config 0 descriptor?? [ 128.846173][ T5969] usb 1-1: USB disconnect, device number 4 [ 131.701050][ T37] audit: type=1326 audit(1763406468.331:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6601 comm="syz.0.274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x0 [ 132.259229][ T6572] kexec: Could not allocate control_code_buffer [ 132.864108][ T5969] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 133.052208][ T5969] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.052238][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.052256][ T5969] usb 2-1: Product: syz [ 133.052269][ T5969] usb 2-1: Manufacturer: syz [ 133.052283][ T5969] usb 2-1: SerialNumber: syz [ 133.103408][ T5969] usb 2-1: config 0 descriptor?? [ 133.329854][ T5969] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 133.804537][ T6645] binder: Unknown parameter 'subj_user' [ 134.100861][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.101653][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.865668][ T37] audit: type=1326 audit(1763406471.305:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6672 comm="syz.0.306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x0 [ 134.868675][ T5969] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 134.937852][ T5969] usb 2-1: USB disconnect, device number 6 [ 136.206282][ T37] audit: type=1326 audit(1763406472.563:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6699 comm="syz.4.317" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ded84f6c9 code=0x0 [ 136.457444][ T6707] Zero length message leads to an empty skb [ 137.995365][ T6756] syz.2.342 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 138.054962][ T997] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.225520][ T997] usb 4-1: Using ep0 maxpacket: 32 [ 138.233794][ T997] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 138.233823][ T997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.233844][ T997] usb 4-1: Product: syz [ 138.233859][ T997] usb 4-1: Manufacturer: syz [ 138.233873][ T997] usb 4-1: SerialNumber: syz [ 138.274842][ T997] usb 4-1: config 0 descriptor?? [ 138.725505][ T997] airspy 4-1:0.0: Board ID: 00 [ 138.725528][ T997] airspy 4-1:0.0: Firmware version: [ 138.801556][ T37] audit: type=1326 audit(1763406474.993:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.1.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58b03f6c9 code=0x0 [ 139.041735][ T6776] ======================================================= [ 139.041735][ T6776] WARNING: The mand mount option has been deprecated and [ 139.041735][ T6776] and is ignored by this kernel. Remove the mand [ 139.041735][ T6776] option from the mount to silence this warning. [ 139.041735][ T6776] ======================================================= [ 139.161978][ T6776] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 139.309343][ T6776] evm: overlay not supported [ 139.856597][ T997] airspy 4-1:0.0: Registered as swradio24 [ 139.856619][ T997] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 140.072223][ T5869] usb 4-1: USB disconnect, device number 6 [ 140.708239][ T6808] netlink: 104 bytes leftover after parsing attributes in process `syz.4.363'. [ 141.241860][ T5969] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.425772][ T5969] usb 3-1: Using ep0 maxpacket: 16 [ 141.456666][ T5969] usb 3-1: config 0 has no interfaces? [ 141.515831][ T5969] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 141.515863][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.515884][ T5969] usb 3-1: Product: syz [ 141.515897][ T5969] usb 3-1: Manufacturer: syz [ 141.515912][ T5969] usb 3-1: SerialNumber: syz [ 141.581451][ T5969] usb 3-1: config 0 descriptor?? [ 142.198784][ T5869] usb 3-1: USB disconnect, device number 5 [ 143.235110][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.381'. [ 143.519029][ T6851] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 144.000842][ T6874] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 144.000876][ T6874] overlayfs: failed to set xattr on upper [ 144.000884][ T6874] overlayfs: ...falling back to redirect_dir=nofollow. [ 144.000893][ T6874] overlayfs: ...falling back to metacopy=off. [ 144.000901][ T6874] overlayfs: ...falling back to index=off. [ 144.000908][ T6874] overlayfs: ...falling back to uuid=null. [ 144.365211][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 146.884236][ T6930] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 146.884265][ T6930] overlayfs: failed to set xattr on upper [ 146.884273][ T6930] overlayfs: ...falling back to redirect_dir=nofollow. [ 146.884281][ T6930] overlayfs: ...falling back to index=off. [ 146.884287][ T6930] overlayfs: ...falling back to uuid=null. [ 146.884293][ T6930] overlayfs: ...falling back to xino=off. [ 146.884513][ T6930] overlayfs: conflicting lowerdir path [ 148.896871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.459725][ T997] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.598221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.651516][ T997] usb 5-1: Using ep0 maxpacket: 16 [ 149.655564][ T997] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 149.655590][ T997] usb 5-1: config 1 has no interface number 1 [ 149.655637][ T997] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.655659][ T997] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 149.655699][ T997] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.659499][ T997] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.659529][ T997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.659550][ T997] usb 5-1: Product: syz [ 149.659564][ T997] usb 5-1: Manufacturer: syz [ 149.659579][ T997] usb 5-1: SerialNumber: syz [ 149.726105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.898373][ T6988] netlink: 'syz.3.439': attribute type 5 has an invalid length. [ 150.021086][ T997] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 150.098294][ T6991] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 150.099064][ T997] usb 5-1: USB disconnect, device number 4 [ 150.274587][ T37] audit: type=1326 audit(1763406491.764:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6997 comm="syz.1.443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58b03f6c9 code=0x0 [ 150.290381][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.354079][ T7000] capability: warning: `syz.0.444' uses deprecated v2 capabilities in a way that may be insecure [ 150.589525][ T37] audit: type=1326 audit(1763406492.054:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 150.593585][ T37] audit: type=1326 audit(1763406492.064:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 150.595163][ T37] audit: type=1326 audit(1763406492.064:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 150.595210][ T37] audit: type=1326 audit(1763406492.064:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 150.595247][ T37] audit: type=1326 audit(1763406492.064:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 150.596025][ T37] audit: type=1326 audit(1763406492.064:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 150.600574][ T37] audit: type=1326 audit(1763406492.064:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 150.675400][ T37] audit: type=1326 audit(1763406492.120:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 150.675443][ T37] audit: type=1326 audit(1763406492.148:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 150.707163][ C1] Unknown status report in ack skb [ 151.237936][ T7029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.359894][ T7075] io-wq is not configured for unbound workers [ 153.311008][ T5883] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 153.387243][ T5883] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.942347][ T7167] loop2: detected capacity change from 0 to 7 [ 154.958625][ T7167] loop2: [ 154.958659][ T7167] loop2: partition table partially beyond EOD, truncated [ 155.827569][ T7189] random: crng reseeded on system resumption [ 156.364829][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 156.373167][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 156.665300][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 156.665318][ T37] audit: type=1326 audit(1763406497.759:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7215 comm="syz.1.541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58b03f6c9 code=0x0 [ 156.940567][ T7228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.240902][ T7203] syz.3.536 (7203) used greatest stack depth: 16696 bytes left [ 157.622564][ T7249] trusted_key: encrypted_key: insufficient parameters specified [ 158.065994][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 158.067056][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 158.253461][ T37] audit: type=1326 audit(1763406499.222:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7274 comm="syz.1.568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58b03f6c9 code=0x0 [ 159.169877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.171067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.172255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.173482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.174698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.175915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.177106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.815042][ T37] audit: type=1326 audit(1763406500.714:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7301 comm="syz.1.579" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd58b03f6c9 code=0x0 [ 160.036993][ T7315] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 160.094053][ T7315] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.150375][ T7315] bond0: (slave team0): Enslaving as an active interface with an up link [ 160.279302][ T7318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.713456][ T7352] binder: Bad value for 'max' [ 162.027668][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 162.032388][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 162.218147][ T5878] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.378012][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 162.380880][ T5878] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 162.383982][ T5878] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 162.384011][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.384031][ T5878] usb 3-1: Product: syz [ 162.384046][ T5878] usb 3-1: Manufacturer: syz [ 162.384060][ T5878] usb 3-1: SerialNumber: syz [ 162.444598][ T5878] usb 3-1: config 0 descriptor?? [ 162.445477][ T7361] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.458817][ T5878] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.842744][ T5878] usb 3-1: USB disconnect, device number 6 [ 163.096080][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.906316][ T37] audit: type=1326 audit(1763406504.551:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x7ffc0000 [ 163.906367][ T37] audit: type=1326 audit(1763406504.551:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x7ffc0000 [ 163.936957][ T37] audit: type=1326 audit(1763406504.589:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa86c48f6c9 code=0x7ffc0000 [ 163.937489][ T37] audit: type=1326 audit(1763406504.589:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x7ffc0000 [ 163.939637][ T37] audit: type=1326 audit(1763406504.589:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fa86c48f6c9 code=0x7ffc0000 [ 163.940148][ T37] audit: type=1326 audit(1763406504.589:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x7ffc0000 [ 163.942256][ T37] audit: type=1326 audit(1763406504.589:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x7ffc0000 [ 163.942539][ T37] audit: type=1326 audit(1763406504.589:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fa86c48f6c9 code=0x7ffc0000 [ 163.942808][ T37] audit: type=1326 audit(1763406504.589:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x7ffc0000 [ 163.943259][ T37] audit: type=1326 audit(1763406504.589:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x7ffc0000 [ 164.136727][ T5878] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 164.265689][ T7420] fuseblk: Bad value for 'source' [ 164.296594][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 164.310100][ T5878] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 164.310158][ T5878] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.310204][ T5878] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.310228][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.418893][ T5878] usbtmc 4-1:16.0: bulk endpoints not found [ 164.621996][ T7427] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 164.839146][ T44] usb 4-1: USB disconnect, device number 7 [ 167.052410][ T7507] warning: `syz.4.668' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 167.977504][ T7527] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.977536][ T7527] overlayfs: failed to set xattr on upper [ 167.977545][ T7527] overlayfs: ...falling back to redirect_dir=nofollow. [ 167.977553][ T7527] overlayfs: ...falling back to index=off. [ 167.977561][ T7527] overlayfs: ...falling back to uuid=null. [ 167.977579][ T7527] overlayfs: maximum fs stacking depth exceeded [ 168.547321][ T7537] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 169.114338][ T7537] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.399807][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 169.399824][ T37] audit: type=1326 audit(1763406765.708:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7482 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf5b39b789 code=0x7fc00000 [ 170.933981][ T7611] cgroup: Unknown subsys name 'fsmagic' [ 171.719764][ T37] audit: type=1326 audit(1763406767.885:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ded84f6c9 code=0x0 [ 172.735233][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.763630][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.848663][ T37] audit: type=1326 audit(1763406769.883:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7697 comm="syz.2.752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x0 [ 174.307663][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.357254][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.731962][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.917839][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.917880][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.917902][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.917946][ T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.917975][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.934594][ T44] usb 1-1: config 0 descriptor?? [ 175.426602][ T44] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 175.868049][ T790] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.880172][ T790] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.935691][ T790] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.935740][ T790] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.305824][ T7760] netlink: 2012 bytes leftover after parsing attributes in process `syz.4.777'. [ 176.305848][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.777'. [ 176.832678][ T7724] usb 1-1: string descriptor 0 read error: -71 [ 177.007162][ T7781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.787'. [ 177.113355][ T37] audit: type=1326 audit(1763406772.942:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7783 comm="syz.2.788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x0 [ 177.754349][ T7574] usb 1-1: USB disconnect, device number 5 [ 178.797130][ T37] audit: type=1326 audit(1763406774.527:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 178.830301][ T37] audit: type=1326 audit(1763406774.555:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 178.830359][ T37] audit: type=1326 audit(1763406774.555:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 178.830401][ T37] audit: type=1326 audit(1763406774.555:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 178.830440][ T37] audit: type=1326 audit(1763406774.555:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 178.870208][ T37] audit: type=1326 audit(1763406774.593:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 178.870263][ T37] audit: type=1326 audit(1763406774.593:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 178.872599][ T37] audit: type=1326 audit(1763406774.593:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 178.872647][ T37] audit: type=1326 audit(1763406774.593:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5b3ff6c9 code=0x7ffc0000 [ 179.663027][ T7866] netlink: 160 bytes leftover after parsing attributes in process `syz.4.824'. [ 179.767756][ T7868] tmpfs: Unknown parameter 'noinode32' [ 180.157252][ T7890] loop2: detected capacity change from 0 to 7 [ 180.162939][ T7890] loop2: [ 180.162976][ T7890] loop2: partition table partially beyond EOD, truncated [ 180.690124][ T7915] netlink: 'syz.4.849': attribute type 2 has an invalid length. [ 180.929332][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 181.760208][ T7951] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 181.760230][ T7951] netlink: 'syz.1.866': attribute type 4 has an invalid length. [ 181.760243][ T7951] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.866'. [ 181.971262][ T7957] netlink: 'syz.1.867': attribute type 10 has an invalid length. [ 182.089118][ T7961] binder: 7960:7961 ioctl 4018620d 0 returned -22 [ 182.192370][ T7957] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 182.712407][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 182.712424][ T37] audit: type=1326 audit(1763407034.199:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7979 comm="syz.2.879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x0 [ 182.879662][ T37] audit: type=1326 audit(1763407034.350:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7952 comm="syz.3.865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf5b3ff6c9 code=0x0 [ 183.186812][ T1246] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 183.350391][ T1246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.350427][ T1246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.350467][ T1246] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 183.350490][ T1246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.368350][ T1246] usb 3-1: config 0 descriptor?? [ 184.185930][ T1246] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 184.192548][ T1246] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 184.192965][ T1246] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 184.193348][ T1246] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 184.193773][ T1246] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 184.194203][ T1246] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 184.194763][ T1246] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 184.486324][ T1246] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 184.550228][ T1246] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 184.662495][ T8030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 185.555230][ T1246] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 185.560367][ T1246] usb 3-1: USB disconnect, device number 7 [ 186.342468][ T8046] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.576079][ T8050] trusted_key: syz.1.910 sent an empty control message without MSG_MORE. [ 187.604452][ T8087] mmap: syz.4.924 (8087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.804120][ T8091] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 187.811955][ T8091] cramfs: wrong magic [ 188.780923][ T1246] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 188.960847][ T1246] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 188.960875][ T1246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.992685][ T1246] usb 3-1: config 0 descriptor?? [ 189.115888][ T8144] netlink: 'syz.3.948': attribute type 4 has an invalid length. [ 189.176875][ T8147] netlink: 'syz.3.948': attribute type 4 has an invalid length. [ 189.207178][ T7572] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 189.367809][ T7572] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 189.370997][ T7572] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.371156][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.371182][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.371205][ T7572] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.372730][ T7572] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.372778][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.372803][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.372824][ T7572] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.376452][ T7572] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.376511][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.376538][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.376560][ T7572] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.500585][ T7572] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.500646][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.500672][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.500693][ T7572] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.504582][ T7572] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.504642][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.504667][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.504690][ T7572] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.554006][ T1246] logitech 0003:046D:C293.0008: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.2-1/input0 [ 189.554069][ T1246] logitech 0003:046D:C293.0008: no inputs found [ 189.580154][ T7572] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.580212][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.580237][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.580257][ T7572] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.616106][ T7572] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.616622][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.616652][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.616673][ T7572] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.672053][ T7572] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.672114][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.672141][ T7572] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.672163][ T7572] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.676657][ T7572] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 189.676688][ T7572] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 189.676709][ T7572] usb 1-1: Product: syz [ 189.676724][ T7572] usb 1-1: Manufacturer: syz [ 189.676738][ T7572] usb 1-1: SerialNumber: syz [ 189.747350][ T7572] usb 1-1: config 0 descriptor?? [ 189.764277][ T7572] yurex 1-1:0.0: Could not submitting URB [ 189.764521][ T7572] yurex 1-1:0.0: probe with driver yurex failed with error -5 [ 190.223163][ T7574] usb 1-1: USB disconnect, device number 6 [ 190.301027][ T9] usb 3-1: USB disconnect, device number 8 [ 191.146475][ T37] audit: type=1326 audit(1763407042.108:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8198 comm="syz.2.971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x0 [ 191.253496][ T8197] can: request_module (can-proto-0) failed. [ 192.312198][ T8247] binder: Unknown parameter 'context' [ 192.771172][ T5116] Bluetooth: hci4: command 0x0405 tx timeout [ 193.943829][ T8287] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 195.289268][ T8302] binfmt_misc: register: failed to install interpreter file ./file0 [ 195.877670][ T37] audit: type=1326 audit(1763407046.546:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.2.1033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86c48f6c9 code=0x0 [ 197.041430][ T43] wlan0: Trigger new scan to find an IBSS to join [ 197.077337][ T8383] netlink: 'syz.0.1051': attribute type 10 has an invalid length. [ 197.077361][ T8383] netlink: 'syz.0.1051': attribute type 11 has an invalid length. [ 197.077374][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 197.680736][ T8403] IPv6: addrconf: prefix option has invalid lifetime [ 198.361771][ T8416] binder: Bad value for 'stats' [ 199.305632][ T8445] netlink: 'syz.0.1077': attribute type 10 has an invalid length. [ 199.385013][ T8445] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 199.585278][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.585360][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.812996][ T1246] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 199.983541][ T1246] usb 1-1: Using ep0 maxpacket: 32 [ 199.986063][ T1246] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 199.986088][ T1246] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 199.986109][ T1246] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 199.986162][ T1246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.986183][ T1246] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.986207][ T1246] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 199.986249][ T1246] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 199.986270][ T1246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.015638][ T1246] usb 1-1: config 0 descriptor?? [ 200.308386][ T1246] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 200.323580][ T1246] usb 1-1: USB disconnect, device number 7 [ 200.352401][ T1246] usblp0: removed [ 200.816212][ T1246] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 200.985590][ T1246] usb 1-1: Using ep0 maxpacket: 32 [ 200.990139][ T1246] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 200.990166][ T1246] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 200.990187][ T1246] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 200.990238][ T1246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.990261][ T1246] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.990285][ T1246] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.990326][ T1246] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 200.990348][ T1246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.019541][ T1246] usb 1-1: config 0 descriptor?? [ 201.296553][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.314692][ T1246] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 201.327429][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.519876][ T8520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1107'. [ 201.891063][ T7574] usb 1-1: USB disconnect, device number 8 [ 201.928083][ T7574] usblp0: removed [ 202.322281][ T8495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.355640][ T8495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.404148][ T43] wlan0: Trigger new scan to find an IBSS to join [ 202.553886][ T8537] binder: 8536:8537 ioctl c0306201 2000000001c0 returned -14 [ 203.405596][ T6777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.636982][ T798] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.640590][ T798] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.640681][ T798] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.640716][ T798] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.189874][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1155'. [ 207.133931][ T8652] netlink: 'syz.2.1164': attribute type 13 has an invalid length. [ 207.213069][ T8652] erspan0: refused to change device tx_queue_len [ 207.317658][ T8657] syzkaller1: entered promiscuous mode [ 207.317686][ T8657] syzkaller1: entered allmulticast mode [ 207.414538][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 207.414563][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1169'. [ 207.612914][ T8668] usb usb8: usbfs: process 8668 (syz.3.1171) did not claim interface 0 before use [ 207.932039][ T8676] binder: 8675:8676 ioctl c0306201 0 returned -14 [ 208.393849][ T8666] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.393995][ T8666] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 208.510353][ T8666] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 208.598561][ T8666] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.598718][ T8666] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 208.727059][ T8666] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 208.804395][ T8666] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.804519][ T8666] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 208.893964][ T8666] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 208.974657][ T8666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.974787][ T8666] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 209.093974][ T8666] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 209.180356][ T8666] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.180463][ T8666] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 209.305714][ T8666] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 209.983194][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.406942][ T8742] 9pnet_fd: Insufficient options for proto=fd [ 210.687788][ T8755] binder: BINDER_SET_CONTEXT_MGR already set [ 210.687803][ T8755] binder: 8753:8755 ioctl 4018620d 200000000040 returned -16 [ 210.749334][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.760932][ T8758] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'. [ 211.005125][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.175821][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.356829][ T61] Bluetooth: hci4: command 0x0405 tx timeout [ 211.598810][ T8789] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 211.786182][ T8793] tc_dump_action: action bad kind [ 212.059366][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 212.199878][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.549518][ T37] audit: type=1800 audit(1763407063.185:89): pid=8830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1247" name=20 dev="tmpfs" ino=1421 res=0 errno=0 [ 212.561642][ T37] audit: type=1804 audit(1763407063.194:90): pid=8830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1247" name=20 dev="tmpfs" ino=1421 res=1 errno=0 [ 212.714513][ T8834] netlink: 'syz.1.1249': attribute type 16 has an invalid length. [ 212.714537][ T8834] netlink: 'syz.1.1249': attribute type 17 has an invalid length. [ 212.798194][ T8834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.966474][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.222519][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.392828][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.563760][ T61] Bluetooth: hci4: command 0x0405 tx timeout [ 213.571823][ T8865] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1264'. [ 214.416150][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 214.977627][ T8905] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1284'. [ 215.115723][ T8910] __vm_enough_memory: pid: 8910, comm: syz.0.1286, bytes: 21200215773184 not enough memory for the allocation [ 215.183629][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.315678][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.439381][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.610588][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 215.780693][ T61] Bluetooth: hci4: command 0x0405 tx timeout [ 218.028708][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.039176][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.041397][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.042516][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.043223][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.925261][ T8943] chnl_net:caif_netlink_parms(): no params data found [ 219.837404][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.837587][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.837811][ T8943] bridge_slave_0: entered allmulticast mode [ 219.840562][ T8943] bridge_slave_0: entered promiscuous mode [ 219.871931][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.872131][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.872388][ T8943] bridge_slave_1: entered allmulticast mode [ 219.895965][ T8943] bridge_slave_1: entered promiscuous mode [ 220.119020][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.123323][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.273393][ T8983] binder: 8981:8983 ioctl c0046209 0 returned -22 [ 220.304112][ T5116] Bluetooth: hci1: command tx timeout [ 220.406008][ T8943] team0: Port device team_slave_0 added [ 220.421944][ T8943] team0: Port device team_slave_1 added [ 220.635194][ T8992] Invalid ELF header type: 2 != 1 [ 220.655587][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.655603][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.655628][ T8943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.658031][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.658045][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.658070][ T8943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.300694][ T8986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.310884][ T8986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.311223][ T8986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.326292][ T8986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 221.326589][ T8986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.326706][ T8986] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 221.330228][ T8943] hsr_slave_0: entered promiscuous mode [ 221.358974][ T8943] hsr_slave_1: entered promiscuous mode [ 221.359990][ T8943] debugfs: 'hsr0' already exists in 'hsr' [ 221.360012][ T8943] Cannot create hsr debugfs directory [ 221.443280][ T9013] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.771143][ T8986] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 222.602573][ T5116] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.939343][ T8943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.455390][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.455443][ T5116] Bluetooth: hci3: command 0x0c1a tx timeout [ 223.540444][ T61] Bluetooth: hci4: command 0x0405 tx timeout [ 223.540497][ T5116] Bluetooth: hci1: command 0x040f tx timeout [ 223.651001][ T8943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.850891][ T8943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.052871][ T8943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.225490][ T37] audit: type=1326 audit(1763407075.143:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x7ffc0000 [ 224.226070][ T37] audit: type=1326 audit(1763407075.143:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x7ffc0000 [ 224.226190][ T37] audit: type=1326 audit(1763407075.143:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f66b65cf6c9 code=0x7ffc0000 [ 224.226373][ T37] audit: type=1326 audit(1763407075.143:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x7ffc0000 [ 224.227139][ T37] audit: type=1326 audit(1763407075.143:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x7ffc0000 [ 224.627831][ T9114] tipc: Started in network mode [ 224.627853][ T9114] tipc: Node identity 4, cluster identity 4711 [ 224.627866][ T9114] tipc: Node number set to 4 [ 224.846947][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.945932][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.008022][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.008204][ T6777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.038632][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.050612][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.758906][ T5116] Bluetooth: hci1: command 0x040f tx timeout [ 226.165548][ T8943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.371113][ T9157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 226.733071][ T9167] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1395'. [ 227.173343][ T9181] syz.0.1400 (9181): attempted to duplicate a private mapping with mremap. This is not supported. [ 227.526642][ T8943] veth0_vlan: entered promiscuous mode [ 227.635531][ T8943] veth1_vlan: entered promiscuous mode [ 227.781668][ T8943] veth0_macvtap: entered promiscuous mode [ 227.824231][ T8943] veth1_macvtap: entered promiscuous mode [ 227.854396][ T9197] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1408'. [ 227.956395][ T8943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.969755][ T8943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.974927][ T5116] Bluetooth: hci1: command 0x040f tx timeout [ 228.050860][ T159] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.051494][ T159] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.051793][ T159] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.051831][ T159] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.558726][ T6777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.558744][ T6777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.670906][ T9209] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1414'. [ 228.670988][ T9209] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1414'. [ 228.671104][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1414'. [ 228.717368][ T798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.717388][ T798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.114632][ T9217] qnx4: no qnx4 filesystem (no root dir). [ 229.117115][ T5855] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.274994][ T5855] usb 5-1: Using ep0 maxpacket: 32 [ 229.279195][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.279227][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.279265][ T5855] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 229.279288][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.336267][ T5855] usb 5-1: config 0 descriptor?? [ 229.361735][ T5855] hub 5-1:0.0: USB hub found [ 229.584704][ T5855] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 229.605487][ T5855] usbhid 5-1:0.0: can't add hid device: -71 [ 229.605596][ T5855] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.676344][ T5855] usb 5-1: USB disconnect, device number 5 [ 230.187972][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 230.188020][ T9235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.191940][ T5116] Bluetooth: hci1: command 0x040f tx timeout [ 230.677475][ T9244] overlayfs: upper fs does not support file handles, falling back to index=off. [ 231.534889][ T9259] 9pnet_fd: Insufficient options for proto=fd [ 232.277304][ T37] audit: type=1800 audit(1763407082.695:96): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1447" name="file0" dev="fuse" ino=2 res=0 errno=0 [ 232.409155][ T5116] Bluetooth: hci1: command 0x040f tx timeout [ 233.235945][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1458'. [ 233.440324][ T9309] sit0: entered promiscuous mode [ 233.472253][ T9309] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1460'. [ 236.306307][ T9401] qnx4: no qnx4 filesystem (no root dir). [ 236.560472][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.583839][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.588510][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.596020][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.597534][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.504179][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 237.596671][ T9410] chnl_net:caif_netlink_parms(): no params data found [ 237.784886][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.435136][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.435371][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.435604][ T9410] bridge_slave_0: entered allmulticast mode [ 238.486139][ T9410] bridge_slave_0: entered promiscuous mode [ 238.501374][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.501505][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.502087][ T9410] bridge_slave_1: entered allmulticast mode [ 238.540312][ T9410] bridge_slave_1: entered promiscuous mode [ 238.625778][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880325fb000: rx timeout, send abort [ 238.629696][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880325fb000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 238.804715][ T5116] Bluetooth: hci0: command tx timeout [ 238.829600][ T43] bridge_slave_1: left allmulticast mode [ 238.829824][ T43] bridge_slave_1: left promiscuous mode [ 238.849071][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.872320][ T9490] qnx4: no qnx4 filesystem (no root dir). [ 238.966922][ T43] bridge_slave_0: left allmulticast mode [ 238.966949][ T43] bridge_slave_0: left promiscuous mode [ 238.969260][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.343069][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1553'. [ 240.937176][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.012378][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.021622][ T5116] Bluetooth: hci0: command tx timeout [ 241.075534][ T43] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 241.120572][ T43] bond0 (unregistering): Released all slaves [ 241.264340][ T9410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.280374][ T9410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.434322][ T9521] qnx4: no qnx4 filesystem (no root dir). [ 242.392885][ T9410] team0: Port device team_slave_0 added [ 242.463859][ T9410] team0: Port device team_slave_1 added [ 243.261407][ T5116] Bluetooth: hci0: command tx timeout [ 244.002670][ T9410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.002686][ T9410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.002710][ T9410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.105741][ T9410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.105758][ T9410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.105783][ T9410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.763954][ T43] hsr_slave_0: left promiscuous mode [ 244.806196][ T43] hsr_slave_1: left promiscuous mode [ 244.807454][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.875351][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.455823][ T5116] Bluetooth: hci0: command tx timeout [ 246.306579][ T9674] 9pnet_virtio: no channels available for device ./file0 [ 247.673548][ T43] team0 (unregistering): Port device team_slave_1 removed [ 247.918476][ T43] team0 (unregistering): Port device team_slave_0 removed [ 250.535434][ T9594] : renamed from bond_slave_0 (while UP) [ 250.579485][ T9410] hsr_slave_0: entered promiscuous mode [ 250.580889][ T9410] hsr_slave_1: entered promiscuous mode [ 251.397767][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1650'. [ 251.397791][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1650'. [ 251.704478][ T9708] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 251.725248][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1654'. [ 252.604423][ T9766] netlink: 57 bytes leftover after parsing attributes in process `syz.5.1661'. [ 252.696583][ T9768] tmpfs: Bad value for 'mpol' [ 252.781516][ T9410] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 252.977184][ T9410] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.040957][ T9410] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.095075][ T9410] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.301005][ T9798] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1672'. [ 253.450411][ T9805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.597487][ T9410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.630802][ T9410] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.650327][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.655413][ T9812] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 253.684174][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.711871][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.751924][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.913986][ T9820] 9pnet_fd: p9_fd_create_unix (9820): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 254.798591][ T9410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.771015][ T9410] veth0_vlan: entered promiscuous mode [ 255.843466][ T9410] veth1_vlan: entered promiscuous mode [ 256.043680][ T9410] veth0_macvtap: entered promiscuous mode [ 256.049714][ T9410] veth1_macvtap: entered promiscuous mode [ 256.188241][ T9410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.240563][ T9410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.253691][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 256.287597][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.287839][ T69] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.287876][ T69] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.287909][ T69] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.415955][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.415988][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.416032][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 256.416056][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.422990][ T9] usb 6-1: config 0 descriptor?? [ 256.876669][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.876690][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.932364][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 256.932499][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 256.973397][ T9] usb 6-1: USB disconnect, device number 2 [ 257.090197][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.090216][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.121769][ T9921] netlink: 'syz.4.1709': attribute type 4 has an invalid length. [ 257.121791][ T9921] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1709'. [ 260.761784][T10026] overlayfs: missing 'lowerdir' [ 260.786214][T10029] capability: warning: `syz.0.1754' uses 32-bit capabilities (legacy support in use) [ 261.130319][T10042] bridge0: port 3(bond0) entered blocking state [ 261.130558][T10042] bridge0: port 3(bond0) entered disabled state [ 261.130880][T10042] bond0: entered allmulticast mode [ 261.130897][T10042] : entered allmulticast mode [ 261.130917][T10042] bond_slave_1: entered allmulticast mode [ 261.130936][T10042] team0: entered allmulticast mode [ 261.130948][T10042] team_slave_0: entered allmulticast mode [ 261.130965][T10042] team_slave_1: entered allmulticast mode [ 261.206020][T10042] bond0: entered promiscuous mode [ 261.206043][T10042] : entered promiscuous mode [ 261.206243][T10042] bond_slave_1: entered promiscuous mode [ 261.206435][T10042] team0: entered promiscuous mode [ 261.206449][T10042] team_slave_0: entered promiscuous mode [ 261.206664][T10042] team_slave_1: entered promiscuous mode [ 261.208180][T10042] bridge0: port 3(bond0) entered blocking state [ 261.261443][T10042] bridge0: port 3(bond0) entered forwarding state [ 261.986400][T10074] hpfs: Bad magic ... probably not HPFS [ 263.405784][ T7574] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 263.582931][ T7574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.582951][ T7574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.582988][ T7574] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.583000][ T7574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.656478][ T7574] usb 7-1: config 0 descriptor?? [ 264.124580][ T7574] usbhid 7-1:0.0: can't add hid device: -71 [ 264.124687][ T7574] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 264.221822][ T7574] usb 7-1: USB disconnect, device number 2 [ 264.887502][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 265.047448][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 265.050446][ T44] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 265.050471][ T44] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 265.050492][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 265.050544][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.050565][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 265.050587][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.050606][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.050644][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 265.050685][ T44] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 265.050706][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.055972][ T44] usb 5-1: config 0 descriptor?? [ 265.060037][T10162] No source specified [ 265.080101][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.080170][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.315688][ T44] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 265.345358][ T44] usb 5-1: USB disconnect, device number 6 [ 265.373294][ T44] usblp0: removed [ 265.943100][T10182] binder: 10181:10182 ioctl c0306201 200000000080 returned -14 [ 266.261137][T10190] overlayfs: failed to resolve './file0': -2 [ 267.774646][T10246] !@ÿ: renamed from xfrm0 (while UP) [ 267.926701][ T44] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 268.075452][ T37] audit: type=1326 audit(1763407116.290:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x7ffc0000 [ 268.075876][ T37] audit: type=1326 audit(1763407116.290:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x7ffc0000 [ 268.076227][ T37] audit: type=1326 audit(1763407116.290:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f66b65cf6c9 code=0x7ffc0000 [ 268.076423][ T37] audit: type=1326 audit(1763407116.290:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x7ffc0000 [ 268.077399][ T37] audit: type=1326 audit(1763407116.290:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b65cf6c9 code=0x7ffc0000 [ 268.195827][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 268.198423][ T44] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 268.198450][ T44] usb 7-1: config 0 has no interface number 0 [ 268.198498][ T44] usb 7-1: config 0 interface 217 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.201957][ T44] usb 7-1: New USB device found, idVendor=1532, idProduct=d2a2, bcdDevice=f7.ed [ 268.201986][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.202006][ T44] usb 7-1: Product: syz [ 268.202020][ T44] usb 7-1: Manufacturer: syz [ 268.202034][ T44] usb 7-1: SerialNumber: syz [ 268.292824][ T44] usb 7-1: config 0 descriptor?? [ 268.657452][ T44] usb 7-1: USB disconnect, device number 3 [ 268.992546][T10289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.391594][T10349] binder: 10348:10349 ioctl c0306201 200000000040 returned -22 [ 271.071545][ T5116] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 271.890595][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 277.315772][T10548] vcan1: entered allmulticast mode [ 277.489421][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1959'. [ 278.293655][T10583] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 282.357112][T10669] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 282.357389][T10669] Error validating options; rc = [-22] [ 282.757548][ T37] audit: type=1326 audit(1763407130.053:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded84f6c9 code=0x7ffc0000 [ 282.757924][ T37] audit: type=1326 audit(1763407130.053:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded84f6c9 code=0x7ffc0000 [ 282.759253][ T37] audit: type=1326 audit(1763407130.053:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f2ded84f6c9 code=0x7ffc0000 [ 282.767126][ T37] audit: type=1326 audit(1763407130.062:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded84f6c9 code=0x7ffc0000 [ 282.767485][ T37] audit: type=1326 audit(1763407130.062:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded84f6c9 code=0x7ffc0000 [ 283.037224][T10672] sp0: Synchronizing with TNC [ 283.044202][T10671] [U] è [ 283.194154][T10689] tipc: Can't bind to reserved service type 0 [ 283.270939][T10694] netlink: 'syz.4.2020': attribute type 6 has an invalid length. [ 283.532209][ T37] audit: type=1326 audit(1763407130.785:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10697 comm="syz.6.2022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a09d8f6c9 code=0x0 [ 284.053263][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2028'. [ 285.192229][T10763] program syz.4.2053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.767065][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 287.479288][T10824] overlayfs: failed to resolve './file1': -2 [ 287.708362][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 287.708384][T10832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2087'. [ 288.284399][ T5855] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 288.449666][ T5855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.449725][ T5855] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 288.449767][ T5855] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.449789][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.541446][ T5855] usb 1-1: config 0 descriptor?? [ 288.561928][ T5855] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 288.913876][T10882] netlink: 'syz.3.2108': attribute type 4 has an invalid length. [ 288.913898][T10882] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2108'. [ 289.149999][T10891] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2093'. [ 289.265346][ T5855] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 289.475362][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.475386][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.475409][ T5855] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 289.475421][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.521199][ T5855] usb 4-1: config 0 descriptor?? [ 289.992572][ T5855] usbhid 4-1:0.0: can't add hid device: -71 [ 289.992699][ T5855] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 290.016385][ T5855] usb 4-1: USB disconnect, device number 8 [ 291.178914][T10918] ALSA: seq fatal error: cannot create timer (-16) [ 291.378434][ T8518] usb 1-1: USB disconnect, device number 9 [ 292.398859][ T997] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 292.549866][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2148'. [ 292.575638][ T997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 292.575691][ T997] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 292.575715][ T997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.613882][ T997] usb 6-1: config 0 descriptor?? [ 293.081154][ T5855] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 293.135598][ T997] logitech 0003:046D:C626.0009: unbalanced delimiter at end of report description [ 293.136426][ T997] logitech 0003:046D:C626.0009: parse failed [ 293.136539][ T997] logitech 0003:046D:C626.0009: probe with driver logitech failed with error -22 [ 293.259667][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.259701][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.259738][ T5855] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 293.259760][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.355776][ T8532] usb 6-1: USB disconnect, device number 3 [ 293.454032][ T5855] usb 1-1: config 0 descriptor?? [ 293.915452][ T5855] usbhid 1-1:0.0: can't add hid device: -71 [ 293.915580][ T5855] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 293.973959][ T5855] usb 1-1: USB disconnect, device number 10 [ 294.709981][T11036] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2182'. [ 295.862074][T11060] netlink: 'syz.6.2194': attribute type 27 has an invalid length. [ 296.935389][ T37] audit: type=1326 audit(1763407143.356:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11063 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81a5cf6c9 code=0x7ffc0000 [ 296.935676][ T37] audit: type=1326 audit(1763407143.356:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11063 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81a5cf6c9 code=0x7ffc0000 [ 296.938931][ T37] audit: type=1326 audit(1763407143.356:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11063 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fb81a5cf6c9 code=0x7ffc0000 [ 296.939193][ T37] audit: type=1326 audit(1763407143.356:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11063 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81a5cf6c9 code=0x7ffc0000 [ 296.946781][ T37] audit: type=1326 audit(1763407143.365:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11063 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81a5cf6c9 code=0x7ffc0000 [ 299.111696][T11034] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.306052][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2187'. [ 299.311685][T11060] lo: entered promiscuous mode [ 299.311709][T11060] lo: entered allmulticast mode [ 299.313359][T11060] tunl0: entered promiscuous mode [ 299.313379][T11060] tunl0: entered allmulticast mode [ 299.314210][T11060] gre0: entered promiscuous mode [ 299.314228][T11060] gre0: entered allmulticast mode [ 299.314984][T11060] gretap0: entered promiscuous mode [ 299.315002][T11060] gretap0: entered allmulticast mode [ 299.330937][T11060] erspan0: entered promiscuous mode [ 299.330960][T11060] erspan0: entered allmulticast mode [ 299.332613][T11060] ip_vti0: entered promiscuous mode [ 299.332633][T11060] ip_vti0: entered allmulticast mode [ 299.333493][T11060] ip6_vti0: entered promiscuous mode [ 299.333512][T11060] ip6_vti0: entered allmulticast mode [ 299.334242][T11060] sit0: entered promiscuous mode [ 299.334260][T11060] sit0: entered allmulticast mode [ 299.334947][T11060] ip6tnl0: entered promiscuous mode [ 299.334965][T11060] ip6tnl0: entered allmulticast mode [ 299.335668][T11060] ip6gre0: entered promiscuous mode [ 299.335685][T11060] ip6gre0: entered allmulticast mode [ 299.336381][T11060] syz_tun: entered promiscuous mode [ 299.336398][T11060] syz_tun: entered allmulticast mode [ 299.337645][T11060] ip6gretap0: entered promiscuous mode [ 299.337664][T11060] ip6gretap0: entered allmulticast mode [ 299.352185][T11060] bridge0: entered promiscuous mode [ 299.352210][T11060] bridge0: entered allmulticast mode [ 299.354089][T11060] vcan0: entered promiscuous mode [ 299.354109][T11060] vcan0: entered allmulticast mode [ 299.354887][T11060] bond0: entered promiscuous mode [ 299.354902][T11060] bond_slave_0: entered promiscuous mode [ 299.355124][T11060] bond_slave_1: entered promiscuous mode [ 299.355386][T11060] bond0: entered allmulticast mode [ 299.355400][T11060] bond_slave_0: entered allmulticast mode [ 299.355415][T11060] bond_slave_1: entered allmulticast mode [ 299.358443][T11060] team0: entered promiscuous mode [ 299.358467][T11060] team_slave_0: entered promiscuous mode [ 299.358687][T11060] team_slave_1: entered promiscuous mode [ 299.358896][T11060] team0: entered allmulticast mode [ 299.358909][T11060] team_slave_0: entered allmulticast mode [ 299.358925][T11060] team_slave_1: entered allmulticast mode [ 299.366403][T11060] dummy0: entered promiscuous mode [ 299.366428][T11060] dummy0: entered allmulticast mode [ 299.367259][T11060] nlmon0: entered promiscuous mode [ 299.367276][T11060] nlmon0: entered allmulticast mode [ 299.845124][T11060] caif0: entered promiscuous mode [ 299.845143][T11060] caif0: entered allmulticast mode [ 299.845169][T11060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.373525][T11132] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2227'. [ 302.113908][T11146] netlink: 'syz.6.2232': attribute type 1 has an invalid length. [ 306.000130][ T790] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 307.208864][T11213] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 307.607851][T11034] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.073385][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2265'. [ 308.088976][T11219] netlink: 'syz.0.2263': attribute type 13 has an invalid length. [ 308.508996][T11219] erspan0: refused to change device tx_queue_len [ 310.279011][T11258] fuse: Bad value for 'fd' [ 310.354701][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2283'. [ 312.131347][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.152187][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.153744][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.158899][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.160330][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.481580][T11289] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 313.268739][T11304] openvswitch: netlink: IP tunnel dst address not specified [ 313.295471][T11306] cgroup: No subsys list or none specified [ 313.845151][ T5116] Bluetooth: hci3: command 0x0c1a tx timeout [ 313.869215][T11318] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2305'. [ 314.062506][T11292] chnl_net:caif_netlink_parms(): no params data found [ 314.143618][ T7573] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 314.336970][ T7573] usb 1-1: Using ep0 maxpacket: 8 [ 314.442342][ T5116] Bluetooth: hci5: command tx timeout [ 315.021832][ T7573] usb 1-1: unable to get BOS descriptor or descriptor too short [ 315.025301][ T7573] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 315.025338][ T7573] usb 1-1: can't read configurations, error -71 [ 316.755162][ T5116] Bluetooth: hci5: command tx timeout [ 318.961602][ T5116] Bluetooth: hci5: command tx timeout [ 319.257815][T11360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 321.178883][ T61] Bluetooth: hci5: command tx timeout [ 321.935238][T11360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 322.026479][T11360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 322.026635][T11360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 322.026774][T11360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 322.026908][T11360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 322.027040][T11360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 322.027175][T11360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 322.027319][T11360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 322.027458][T11360] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 322.277726][T11292] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.277873][T11292] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.278142][T11292] bridge_slave_0: entered allmulticast mode [ 322.295102][T11292] bridge_slave_0: entered promiscuous mode [ 330.187126][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.195521][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.217871][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.223055][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 330.224068][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 330.274758][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2329'. [ 330.274797][T11382] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2329'. [ 330.564663][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.564755][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.459857][ T5116] Bluetooth: hci6: command tx timeout [ 334.838582][ T5116] Bluetooth: hci6: command tx timeout [ 335.121529][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.162511][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.174585][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.356118][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.366233][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.050219][ T5799] Bluetooth: hci6: command tx timeout [ 337.551211][ T5799] Bluetooth: hci0: command tx timeout [ 339.256914][ T5799] Bluetooth: hci6: command tx timeout [ 339.768409][ T5799] Bluetooth: hci0: command tx timeout [ 341.336232][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.349110][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.350903][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.352006][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.352728][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.398254][T11034] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.529250][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 341.996244][ T5116] Bluetooth: hci0: command tx timeout [ 343.605882][ T5116] Bluetooth: hci2: command tx timeout [ 344.202578][ T5116] Bluetooth: hci0: command tx timeout [ 345.887102][ T5116] Bluetooth: hci2: command tx timeout [ 348.047736][ T5116] Bluetooth: hci2: command tx timeout [ 348.231737][ T5799] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 348.365740][ T5799] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 348.370643][ T5799] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 348.387805][ T5799] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 348.396552][ T5799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.448326][T11292] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.448539][T11292] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.448797][T11292] bridge_slave_1: entered allmulticast mode [ 349.515578][T11292] bridge_slave_1: entered promiscuous mode [ 349.577689][T11382] geneve2: entered promiscuous mode [ 349.577715][T11382] geneve2: entered allmulticast mode [ 350.257032][ T5799] Bluetooth: hci2: command tx timeout [ 350.598860][ T5799] Bluetooth: hci7: command tx timeout [ 352.815242][ T5799] Bluetooth: hci7: command tx timeout [ 355.034674][ T5799] Bluetooth: hci7: command tx timeout [ 357.249492][ T5799] Bluetooth: hci7: command tx timeout [ 378.506093][ T790] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 381.454964][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.471061][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.472751][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.473955][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.474767][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.696007][ T5799] Bluetooth: hci1: command tx timeout [ 385.902293][ T5799] Bluetooth: hci1: command tx timeout [ 388.129246][ T5799] Bluetooth: hci1: command tx timeout [ 388.980923][ T159] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.335641][ T5799] Bluetooth: hci1: command tx timeout [ 396.056475][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.056546][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.341642][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 398.378676][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 398.382432][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 398.398559][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 398.403205][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.675181][ T5799] Bluetooth: hci3: command tx timeout [ 402.876004][ T5799] Bluetooth: hci3: command tx timeout [ 403.749074][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 403.802018][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 403.805561][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 403.806767][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 403.807614][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.109191][ T5116] Bluetooth: hci3: command tx timeout [ 406.027970][ T5116] Bluetooth: hci5: command tx timeout [ 407.731491][ T5116] Bluetooth: hci3: command tx timeout [ 408.243037][ T5116] Bluetooth: hci5: command tx timeout [ 410.460173][ T5116] Bluetooth: hci5: command tx timeout [ 412.679498][ T5116] Bluetooth: hci5: command tx timeout [ 413.969463][ T790] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 415.339287][ T5799] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 415.357697][ T5799] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 415.359063][ T5799] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 415.360668][ T5799] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 415.361441][ T5799] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 418.441089][ T5116] Bluetooth: hci8: command tx timeout [ 420.338605][ T5799] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 420.378107][ T5799] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 420.435276][ T5799] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 420.455565][ T5799] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 420.456297][ T5799] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 420.700299][ T5116] Bluetooth: hci8: command tx timeout [ 422.654657][ T5799] Bluetooth: hci9: command tx timeout [ 422.910571][ T5799] Bluetooth: hci8: command tx timeout [ 424.871402][ T5799] Bluetooth: hci9: command tx timeout [ 425.128341][ T5799] Bluetooth: hci8: command tx timeout [ 426.224169][T11034] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.140650][ T5799] Bluetooth: hci9: command tx timeout [ 429.732190][ T5799] Bluetooth: hci9: command tx timeout [ 443.462063][ T5116] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 443.488447][ T5116] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 443.500383][ T5116] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 443.517599][ T5116] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 443.519786][ T5116] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 445.766475][ T5116] Bluetooth: hci10: command tx timeout [ 446.896849][ C1] sched: DL replenish lagged too much [ 447.980524][ T5116] Bluetooth: hci10: command tx timeout [ 451.547485][ T5116] Bluetooth: hci10: command tx timeout [ 451.548412][T10915] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 454.644561][ T5116] Bluetooth: hci10: command tx timeout [ 461.551788][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.551864][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.926749][ T5799] Bluetooth: hci6: command 0x0406 tx timeout [ 466.119292][T11452] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 466.142289][T11452] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 466.167346][T11452] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 466.168562][T11452] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 466.169359][T11452] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 468.606163][T11452] Bluetooth: hci11: command tx timeout [ 469.116945][ T5799] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 469.154511][ T5799] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 469.155860][ T5799] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 469.159921][ T5799] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 469.162231][ T5799] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 469.228153][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 470.748613][ T5799] Bluetooth: hci11: command tx timeout [ 472.965793][ T5116] Bluetooth: hci11: command tx timeout [ 473.051253][ T5116] Bluetooth: hci12: command tx timeout [ 473.425806][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.445866][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.447398][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.449188][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.450037][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.745943][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 475.279089][ T5799] Bluetooth: hci11: command tx timeout [ 475.279122][ T5799] Bluetooth: hci12: command tx timeout [ 475.694563][ T5116] Bluetooth: hci3: command tx timeout [ 475.980747][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 476.000614][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 476.002068][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 476.017613][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 476.018473][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 477.499006][T11452] Bluetooth: hci12: command tx timeout [ 477.922269][ T5799] Bluetooth: hci3: command tx timeout [ 478.359414][ T5799] Bluetooth: hci5: command tx timeout [ 479.809327][ T5799] Bluetooth: hci12: command tx timeout [ 480.128801][ T5799] Bluetooth: hci7: command 0x0406 tx timeout [ 480.132235][ T5799] Bluetooth: hci3: command tx timeout [ 480.565769][ T5116] Bluetooth: hci5: command tx timeout [ 482.346248][T11452] Bluetooth: hci3: command tx timeout [ 482.772310][T11452] Bluetooth: hci5: command tx timeout [ 484.989312][T11452] Bluetooth: hci5: command tx timeout [ 489.510067][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 502.723853][T11439] chnl_net:caif_netlink_parms(): no params data found [ 506.169636][T11463] chnl_net:caif_netlink_parms(): no params data found [ 506.185933][T11451] chnl_net:caif_netlink_parms(): no params data found [ 508.263834][T11460] chnl_net:caif_netlink_parms(): no params data found [ 508.746606][T11458] chnl_net:caif_netlink_parms(): no params data found [ 511.574496][ T5799] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 511.607045][ T5799] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 511.610006][ T5799] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 511.630830][ T5799] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 511.637593][ T5799] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 513.093919][ T5116] Bluetooth: hci1: command 0x0406 tx timeout [ 513.897242][ T5116] Bluetooth: hci13: command tx timeout [ 516.115153][T11452] Bluetooth: hci13: command tx timeout [ 516.116351][ T38] INFO: task syz.4.2313:11335 blocked for more than 143 seconds. [ 516.116385][ T38] Not tainted syzkaller #0 [ 516.116395][ T38] Blocked by coredump. [ 516.116402][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.116411][ T38] task:syz.4.2313 state:D stack:23840 pid:11335 tgid:11334 ppid:5802 task_flags:0x40044c flags:0x00080001 [ 516.116472][ T38] Call Trace: [ 516.116483][ T38] [ 516.116496][ T38] __schedule+0x16f3/0x4c20 [ 516.116540][ T38] ? rcu_read_lock_sched_held+0x89/0x100 [ 516.116572][ T38] ? __pfx___schedule+0x10/0x10 [ 516.116612][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.116640][ T38] rt_mutex_schedule+0x77/0xf0 [ 516.116660][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 516.116681][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 516.116717][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 516.116739][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 516.116762][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 516.116782][ T38] ? __lock_acquire+0xab9/0xd20 [ 516.116816][ T38] ? rcu_barrier+0x4c/0x570 [ 516.116850][ T38] ? rcu_barrier+0x4c/0x570 [ 516.116867][ T38] mutex_lock_nested+0x16a/0x1d0 [ 516.116886][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 516.116908][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 516.116933][ T38] rcu_barrier+0x4c/0x570 [ 516.116956][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 516.116980][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 516.117003][ T38] netdev_run_todo+0x327/0xea0 [ 516.117031][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 516.117067][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 516.117090][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.117126][ T38] ? netdev_state_change+0x1ca/0x220 [ 516.117148][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 516.117171][ T38] tun_chr_close+0x13f/0x1c0 [ 516.117196][ T38] __fput+0x45b/0xa80 [ 516.117230][ T38] task_work_run+0x1d4/0x260 [ 516.117253][ T38] ? __pfx_task_work_run+0x10/0x10 [ 516.117272][ T38] ? do_exit+0x6b0/0x2300 [ 516.117298][ T38] ? do_exit+0x6b0/0x2300 [ 516.117330][ T38] do_exit+0x6b5/0x2300 [ 516.117356][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.117395][ T38] ? __pfx_do_exit+0x10/0x10 [ 516.117418][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 516.117440][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 516.117476][ T38] do_group_exit+0x21c/0x2d0 [ 516.117494][ T38] ? rt_spin_unlock+0x161/0x200 [ 516.117519][ T38] get_signal+0x125d/0x1310 [ 516.117566][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 516.117588][ T38] ? __pfx_smack_file_ioctl+0x10/0x10 [ 516.117616][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 516.117634][ T38] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 516.117680][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 516.117708][ T38] exit_to_user_mode_loop+0x72/0x130 [ 516.117734][ T38] do_syscall_64+0x2bd/0xfa0 [ 516.117759][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.117784][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.117804][ T38] ? clear_bhb_loop+0x60/0xb0 [ 516.117827][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.117846][ T38] RIP: 0033:0x7f2ded84f6c9 [ 516.117874][ T38] RSP: 002b:00007f2debaae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.117893][ T38] RAX: fffffffffffffffc RBX: 00007f2dedaa5fa0 RCX: 00007f2ded84f6c9 [ 516.117912][ T38] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 516.117925][ T38] RBP: 00007f2ded8d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.117937][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.117949][ T38] R13: 00007f2dedaa6038 R14: 00007f2dedaa5fa0 R15: 00007ffcd7f8c438 [ 516.117983][ T38] [ 516.118014][ T38] [ 516.118014][ T38] Showing all locks held in the system: [ 516.118027][ T38] 7 locks held by kworker/u8:1/13: [ 516.118039][ T38] 4 locks held by ksoftirqd/0/15: [ 516.118057][ T38] 4 locks held by rcuc/1/28: [ 516.118068][ T38] 1 lock held by khungtaskd/38: [ 516.118078][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 516.118128][ T38] 3 locks held by kworker/u8:3/57: [ 516.118139][ T38] #0: ffff88802f9ad938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 516.118186][ T38] #1: ffffc9000123fba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 516.118234][ T38] #2: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 516.118284][ T38] 6 locks held by kworker/u8:6/159: [ 516.118295][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 516.118341][ T38] #1: ffffc90003aa7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 516.118387][ T38] #2: ffffffff8e8566a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 516.118431][ T38] #3: ffff88803671f0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 516.118475][ T38] #4: ffff888035be0300 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 516.118523][ T38] #5: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.118570][ T38] 3 locks held by kworker/0:2/997: [ 516.118581][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 516.118628][ T38] #1: ffffc90004707ba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 516.118674][ T38] #2: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.118733][ T38] 2 locks held by getty/5562: [ 516.118744][ T38] #0: ffff88823bf3e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 516.118791][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 516.118850][ T38] 3 locks held by kworker/u8:11/10915: [ 516.118861][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 516.118913][ T38] #1: ffffc90006c9fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 516.118959][ T38] #2: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 516.119007][ T38] 4 locks held by syz.3.2172/11034: [ 516.119018][ T38] #0: ffffffff8e8c9d60 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 516.119072][ T38] #1: ffff88805d0380d8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x240/0x3a0 [ 516.119115][ T38] #2: ffff88805cb6e300 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x24f/0x3a0 [ 516.119163][ T38] #3: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119205][ T38] 1 lock held by syz.6.2283/11260: [ 516.119216][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119258][ T38] 1 lock held by syz-executor/11292: [ 516.119268][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119313][ T38] 1 lock held by syz.4.2313/11335: [ 516.119323][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119367][ T38] 1 lock held by syz.0.2325/11368: [ 516.119378][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119422][ T38] 1 lock held by syz.5.2329/11382: [ 516.119433][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119476][ T38] 2 locks held by syz-executor/11381: [ 516.119487][ T38] #0: ffffffff8e8566a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.119529][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119573][ T38] 2 locks held by syz-executor/11389: [ 516.119583][ T38] #0: ffffffff8e8566a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.119625][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119669][ T38] 2 locks held by syz-executor/11393: [ 516.119679][ T38] #0: ffffffff8e8566a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.119721][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119764][ T38] 2 locks held by syz-executor/11396: [ 516.119775][ T38] #0: ffffffff8e8566a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.119816][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119860][ T38] 2 locks held by syz-executor/11402: [ 516.119870][ T38] #0: ffffffff8e8566a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.119912][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.119956][ T38] 2 locks held by syz-executor/11427: [ 516.119967][ T38] #0: ffffffff8e8566a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.120009][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.120059][ T38] 2 locks held by syz-executor/11433: [ 516.120070][ T38] #0: ffffffff8e8566a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.120112][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 516.120157][ T38] 4 locks held by syz-executor/11439: [ 516.120168][ T38] #0: ffff88806718ce88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 516.120213][ T38] #1: ffff88806718c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 516.120262][ T38] #2: ffffffff8e9cba78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 516.120305][ T38] #3: ffff888034cf9b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 516.120360][ T38] 2 locks held by syz-executor/11451: [ 516.120371][ T38] #0: ffffffff8dfed500 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 516.120419][ T38] #1: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 516.120462][ T38] 2 locks held by syz-executor/11458: [ 516.120473][ T38] #0: ffffffff8dfed500 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 516.120520][ T38] #1: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 516.120562][ T38] 2 locks held by syz-executor/11460: [ 516.120573][ T38] #0: ffffffff8dfed500 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 516.120621][ T38] #1: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 516.120663][ T38] 2 locks held by syz-executor/11463: [ 516.120674][ T38] #0: ffffffff8dfed500 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 516.120721][ T38] #1: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 516.120765][ T38] 1 lock held by syz-executor/11482: [ 516.120776][ T38] #0: ffffffff8e8635b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 516.120825][ T38] [ 516.120830][ T38] ============================================= [ 516.120830][ T38] [ 516.120839][ T38] NMI backtrace for cpu 0 [ 516.120872][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 516.120920][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.120946][ T38] Call Trace: [ 516.120961][ T38] [ 516.120979][ T38] dump_stack_lvl+0x189/0x250 [ 516.121050][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.121077][ T38] ? __pfx__printk+0x10/0x10 [ 516.121111][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 516.121136][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 516.121160][ T38] ? __pfx__printk+0x10/0x10 [ 516.121186][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 516.121208][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 516.121233][ T38] watchdog+0xf60/0xfa0 [ 516.121264][ T38] ? watchdog+0x1e2/0xfa0 [ 516.121295][ T38] kthread+0x711/0x8a0 [ 516.121324][ T38] ? __pfx_watchdog+0x10/0x10 [ 516.121349][ T38] ? __pfx_kthread+0x10/0x10 [ 516.121372][ T38] ? rt_spin_unlock+0x150/0x200 [ 516.121397][ T38] ? rt_spin_unlock+0x161/0x200 [ 516.121416][ T38] ? __pfx_kthread+0x10/0x10 [ 516.121443][ T38] ret_from_fork+0x4bc/0x870 [ 516.121467][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 516.121496][ T38] ? __switch_to_asm+0x39/0x70 [ 516.121513][ T38] ? __switch_to_asm+0x33/0x70 [ 516.121530][ T38] ? __pfx_kthread+0x10/0x10 [ 516.121558][ T38] ret_from_fork_asm+0x1a/0x30 [ 516.121592][ T38] [ 516.121600][ T38] Sending NMI from CPU 0 to CPUs 1: [ 516.121626][ C1] NMI backtrace for cpu 1 [ 516.121646][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 516.121665][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.121676][ C1] Workqueue: bat_events batadv_tt_purge [ 516.121699][ C1] RIP: 0010:unwind_next_frame+0x651/0x2390 [ 516.121742][ C1] Code: 3b 48 85 ff 0f 84 5b 10 00 00 48 83 c7 10 e9 73 01 00 00 83 fb 04 0f 84 7b 01 00 00 83 fb 05 0f 85 36 0c 00 00 48 8b 44 24 58 <80> 3c 28 00 74 11 4c 89 ff e8 91 fb ac 00 48 8b 34 24 48 8b 54 24 [ 516.121756][ C1] RSP: 0018:ffffc90000126598 EFLAGS: 00000246 [ 516.121770][ C1] RAX: 1ffff92000024cd4 RBX: 0000000000000005 RCX: ffffffff8ef0f6c4 [ 516.121782][ C1] RDX: ffffffff8f699d80 RSI: ffffffff8f699d84 RDI: ffffffff8b3ddd80 [ 516.121800][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff81736c15 [ 516.121811][ C1] R10: ffffc900001266b8 R11: ffffffff81aaccb0 R12: ffffffff8f699d85 [ 516.121823][ C1] R13: ffffc900001266b8 R14: ffffc90000126668 R15: ffffc900001266a0 [ 516.121836][ C1] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 516.121850][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.121861][ C1] CR2: 000055d608d43dd8 CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 516.121877][ C1] Call Trace: [ 516.121882][ C1] [ 516.121893][ C1] ? unwind_next_frame+0xa5/0x2390 [ 516.121913][ C1] ? kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 516.121936][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.121954][ C1] arch_stack_walk+0x11c/0x150 [ 516.121977][ C1] ? kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 516.121999][ C1] stack_trace_save+0x9c/0xe0 [ 516.122016][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 516.122036][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 516.122068][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 516.122109][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.122132][ C1] kasan_save_track+0x3e/0x80 [ 516.122150][ C1] ? kasan_save_track+0x3e/0x80 [ 516.122168][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 516.122186][ C1] ? kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 516.122231][ C1] ? __slab_alloc+0xc6/0x1f0 [ 516.122246][ C1] __kasan_slab_alloc+0x6c/0x80 [ 516.122266][ C1] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 516.122285][ C1] ? kmalloc_reserve+0xbd/0x290 [ 516.122301][ C1] ? __alloc_skb+0x112/0x2d0 [ 516.122316][ C1] ? rcu_is_watching+0x15/0xb0 [ 516.122334][ C1] kmalloc_reserve+0xbd/0x290 [ 516.122352][ C1] __alloc_skb+0x142/0x2d0 [ 516.122370][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 516.122396][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 516.122415][ C1] ? nft_fib_reduce+0x130/0x640 [ 516.122434][ C1] ? synproxy_pernet+0x45/0x270 [ 516.122458][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 516.122483][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 516.122506][ C1] ? nf_ip_checksum+0x13c/0x510 [ 516.122528][ C1] nft_synproxy_do_eval+0x345/0x570 [ 516.122553][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 516.122583][ C1] nft_do_chain+0x40c/0x1920 [ 516.122602][ C1] ? rcu_is_watching+0x15/0xb0 [ 516.122618][ C1] ? __lock_acquire+0xab9/0xd20 [ 516.122642][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 516.122674][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 516.122693][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 516.122719][ C1] nft_do_chain_inet+0x25d/0x340 [ 516.122741][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 516.122760][ C1] ? __lock_acquire+0xab9/0xd20 [ 516.122785][ C1] ? NF_HOOK+0x9a/0x3a0 [ 516.122805][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 516.122827][ C1] nf_hook_slow+0xc5/0x220 [ 516.122846][ C1] NF_HOOK+0x206/0x3a0 [ 516.122862][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 516.122878][ C1] ? NF_HOOK+0x9a/0x3a0 [ 516.122893][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 516.122906][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 516.122924][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 516.122941][ C1] ? skb_dst+0x4f/0xd0 [ 516.122956][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 516.122973][ C1] NF_HOOK+0x30c/0x3a0 [ 516.122989][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 516.123004][ C1] ? NF_HOOK+0x9a/0x3a0 [ 516.123019][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 516.123035][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 516.123056][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 516.123070][ C1] __netif_receive_skb+0x143/0x380 [ 516.123096][ C1] ? process_backlog+0x27b/0x900 [ 516.123110][ C1] process_backlog+0x31e/0x900 [ 516.123131][ C1] __napi_poll+0xb6/0x540 [ 516.123155][ C1] net_rx_action+0x5f7/0xda0 [ 516.123178][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 516.123195][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 516.123220][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 516.123244][ C1] handle_softirqs+0x22f/0x710 [ 516.123267][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 516.123291][ C1] __local_bh_enable_ip+0x1a0/0x2e0 [ 516.123308][ C1] ? reacquire_held_locks+0x127/0x1d0 [ 516.123330][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 516.123348][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 516.123367][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 516.123387][ C1] ? rt_spin_unlock+0x150/0x200 [ 516.123406][ C1] ? rt_spin_unlock+0x161/0x200 [ 516.123425][ C1] ? batadv_tt_purge+0x97/0xa10 [ 516.123444][ C1] batadv_tt_purge+0x475/0xa10 [ 516.123466][ C1] ? batadv_tt_purge+0x97/0xa10 [ 516.123485][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 516.123504][ C1] process_scheduled_works+0xae1/0x17b0 [ 516.123537][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.123565][ C1] worker_thread+0x8a0/0xda0 [ 516.123596][ C1] kthread+0x711/0x8a0 [ 516.123619][ C1] ? __pfx_worker_thread+0x10/0x10 [ 516.123637][ C1] ? __pfx_kthread+0x10/0x10 [ 516.123657][ C1] ? rt_spin_unlock+0x150/0x200 [ 516.123677][ C1] ? rt_spin_unlock+0x161/0x200 [ 516.123693][ C1] ? __pfx_kthread+0x10/0x10 [ 516.123715][ C1] ret_from_fork+0x4bc/0x870 [ 516.123734][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 516.123756][ C1] ? __switch_to_asm+0x39/0x70 [ 516.123771][ C1] ? __switch_to_asm+0x33/0x70 [ 516.123785][ C1] ? __pfx_kthread+0x10/0x10 [ 516.123812][ C1] ret_from_fork_asm+0x1a/0x30 [ 516.123837][ C1] [ 518.331430][T11452] Bluetooth: hci13: command tx timeout [ 520.548526][T11452] Bluetooth: hci13: command tx timeout [ 525.750499][ T57] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)